last executing test programs:

1h22m8.588318401s ago: executing program 0 (id=222):
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x3})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xffffffffffffffff)
ioctl$KVM_ARM_VCPU_INIT(r3, 0x4020aeae, &(0x7f0000000100)={0x5, 0x18})
ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000140)=@arm64_fw={0x6030000000540002, 0x0})
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x8040ae9f, &(0x7f00000000c0)=@arm64)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4000ae84, 0x0)
write$eventfd(0xffffffffffffffff, &(0x7f00000001c0)=0x3, 0xfdef)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil)
r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r7, 0x3, 0xa0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
ioctl$KVM_SET_ONE_REG(r9, 0x4010aeac, &(0x7f0000000080)=@arm64_sys={0x6030000000138057, &(0x7f0000000040)=0x20000000007e28})
syz_kvm_setup_cpu$arm64(r5, r9, &(0x7f0000000000/0x400000)=nil, &(0x7f0000000280)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)

1h21m54.320000591s ago: executing program 1 (id=223):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000b80)={0x0, 0x0, 0x44}, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f00000000c0)={0x1, 0x4, 0x0, 0xffffffffffffffff, 0x1e})
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000080)={0x7001, 0x37d03030d7a92616})
openat$kvm(0x0, 0x0, 0x0, 0x0)
openat$kvm(0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000000)=@arm64_core={0x6030000000100022, &(0x7f0000000040)=0x10000})

1h21m53.098124s ago: executing program 0 (id=224):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x101000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
r6 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r5, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0)
r7 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
r10 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r9, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r10, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r9, 0x0)
r11 = eventfd2(0x0, 0x0)
close(r11)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01)
write$eventfd(r11, &(0x7f0000000180)=0x80000000, 0xffffffffffffff0e)
r12 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x600300, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x0, 0x8, 0x10, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x88201, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fb707cd24b7eebb20700000000000000000000000100", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000011000/0x3000)=nil, 0x930, 0x0, 0x11, r9, 0x0)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0xa00f2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r12, 0x40305839, 0x3)
mmap$KVM_VCPU(&(0x7f00006e2000/0x2000)=nil, 0x930, 0x0, 0x30, 0xffffffffffffffff, 0x0)
ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000100)={0x5, 0x18})
ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000000)=@arm64_core={0x6030000000100030, &(0x7f0000000040)=0x8000000000000005})

1h21m45.728751622s ago: executing program 1 (id=225):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_SET_DEVICE_ATTR_vm(r1, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)={0xef000000, 0x1000, 0x2}})
r3 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r5, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x12, r5, 0x0)
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000002000/0x400000)=nil)
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r6 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000140)={0x0, &(0x7f0000000200)=[@smc={0x1e, 0x40, {0x86000000, [0x10001, 0xfff, 0x7, 0x7, 0x9]}}], 0x40}, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

1h21m43.286763402s ago: executing program 0 (id=226):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1b)
ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000000)={0x5, <r1=>0xffffffffffffffff, 0x1})
r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r0, 0xc040aed4, &(0x7f0000000040)={0x8, 0x3c2})
ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000080)={0x70000, 0x10000})
ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f00000000c0)={0xf000, 0x1000})
ioctl$KVM_CAP_DIRTY_LOG_RING(r0, 0x4068aea3, &(0x7f0000000100))
ioctl$KVM_CAP_ARM_INJECT_SERROR_ESR(r0, 0x4068aea3, &(0x7f0000000180))
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000000200)={0x1dafa323382f3add, 0x9000, 0x1})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x29)
ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, &(0x7f0000000280)={0x2710, 0x5, 0x70000, 0x2000, &(0x7f0000ffb000/0x2000)=nil, 0x0, r2})
ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r4, 0x4068aea3, &(0x7f0000000340)={0xe4, 0x0, 0x3})
ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000400)=@attr_riscv64=@attr_ctrl={0x0, 0x1, 0x1, &(0x7f00000003c0)})
r5 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000600)={0x0, &(0x7f0000000440)=[@eret={0xe6, 0x18, 0x9}, @its_send_cmd={0xaa, 0x28, {0x8, 0x0, 0x3, 0x6, 0x80000001, 0x1, 0x4}}, @eret={0xe6, 0x18}, @code={0xa, 0xe4, {"000080f200fd84d20000b0f2e10080d2020080d2c30180d2640080d2020000d4c07f8bd20020b8f2c10180d2a20080d2830180d2840180d2020000d440839cd200a0b8f2e10080d2020080d2630080d2440080d2020000d4a01c93d200e0b0f2c10080d2c20080d2630180d2440080d2020000d420738dd20060b0f2c10180d2020180d2830080d2040180d2020000d4007008d5e0e787d200c0b0f2a10180d2e20080d2a30080d2040180d2020000d41f000072800e80d200c0b8f2010080d2c20180d2830080d2640180d2020000d4"}}, @hvc={0x32, 0x40, {0xc400000d, [0x8001, 0xffffffffffffffff, 0x6, 0x80000000, 0x4]}}, @irq_setup={0x46, 0x18, {0x2, 0x6}}], 0x194}, &(0x7f0000000640)=[@featur1={0x1, 0x80}], 0x1)
ioctl$KVM_CAP_HALT_POLL(r0, 0x4068aea3, &(0x7f0000000680)={0xb6, 0x0, 0x10000})
ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r4, 0x4068aea3, &(0x7f0000000700)={0xe4, 0x0, 0x3887})
r6 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000d00)={0x0, &(0x7f0000000780)=[@its_send_cmd={0xaa, 0x28, {0xf, 0x0, 0x0, 0xd, 0x1, 0x8e2b}}, @svc={0x122, 0x40, {0x86000000, [0x80000000, 0x1, 0x8, 0x0, 0x4]}}, @code={0xa, 0xb4, {"609388d200e0b8f2210180d2220180d2c30080d2240180d2020000d4c03285d20000b0f2810080d2020180d2a30180d2240180d2020000d4c0bb89d200c0b8f2e10080d2a20180d2e30080d2a40180d2020000d400308cd20000b8f2810080d2c20180d2230180d2840180d2020000d4000000ac20d48bd20040b8f2c10080d2c20180d2630180d2040080d2020000d4007008d5008008d5000040c80020800d"}}, @hvc={0x32, 0x40, {0x2007efc, [0x2, 0x2, 0xd, 0xcbf, 0x4]}}, @irq_setup={0x46, 0x18, {0x0, 0xa1}}, @hvc={0x32, 0x40, {0x84000050, [0x8000000000000000, 0x7, 0xfffffffffffffffd, 0x100, 0x62c23a48]}}, @hvc={0x32, 0x40, {0x84000004, [0x3, 0x0, 0x10001, 0x1, 0x5]}}, @smc={0x1e, 0x40, {0x1000, [0x1000, 0x6, 0x417, 0x250, 0x3]}}, @eret={0xe6, 0x18, 0xfffffffffffffffb}, @msr={0x14, 0x20, {0x603000000013e537, 0x8000000000000000}}, @hvc={0x32, 0x40, {0x84000013, [0xf3, 0x2, 0x7, 0xad, 0x100]}}, @hvc={0x32, 0x40, {0xc4000007, [0x81, 0x7, 0x0, 0x9, 0x3ff]}}, @irq_setup={0x46, 0x18, {0x2, 0x2d5}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x0, 0x5, 0xc, 0x9, 0xe38c, 0x3}}, @smc={0x1e, 0x40, {0x1000, [0x8, 0x7, 0x4, 0x200, 0x8]}}, @hvc={0x32, 0x40, {0x80007fff, [0x7fffffff, 0x2, 0xd85, 0x2, 0x2]}}, @its_setup={0x82, 0x28, {0x4, 0x3, 0x127}}, @msr={0x14, 0x20, {0x603000000013e711, 0x8}}, @its_send_cmd={0xaa, 0x28, {0xa, 0x1, 0x0, 0x3, 0x8, 0x3}}, @its_send_cmd={0xaa, 0x28, {0xb, 0x1, 0x3, 0x10, 0x2, 0x9, 0x3}}, @its_setup={0x82, 0x28, {0x4, 0x1, 0x12b}}, @mrs={0xbe, 0x18, {0x603000000013c021}}, @mrs={0xbe, 0x18, {0x603000000013e65b}}, @svc={0x122, 0x40, {0x80000002, [0x7fff, 0x2, 0xfffffffffffffffc, 0x80, 0x100000001]}}, @its_setup={0x82, 0x28, {0x0, 0x0, 0x1a2}}, @msr={0x14, 0x20, {0x603000000013f602, 0x7fffffffffffffff}}, @eret={0xe6, 0x18, 0x9}, @svc={0x122, 0x40, {0x80000000, [0x9, 0x39552d82, 0x3, 0xff, 0xd]}}], 0x57c}, &(0x7f0000000d40)=[@featur2], 0x1)
syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000001140)={0x0, &(0x7f0000000d80)=[@msr={0x14, 0x20, {0x603000000013c648, 0x100}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x1, 0x2, 0x0, 0x74e0, 0x5, 0x3}}, @its_setup={0x82, 0x28, {0x3, 0x2, 0x338}}, @code={0xa, 0x54, {"0028c01a000440f8007008d50000df0c007008d5007008d5007008d50000406c60509dd20080b0f2a10180d2820180d2a30180d2c40180d2020000d40000709e"}}, @uexit={0x0, 0x18, 0x8}, @mrs={0xbe, 0x18, {0x603000000013e601}}, @svc={0x122, 0x40, {0x40000000, [0x56, 0xaa0, 0x9, 0xdf, 0x5]}}, @its_send_cmd={0xaa, 0x28, {0x5, 0x0, 0x0, 0x7, 0xe9, 0x6, 0x2}}, @smc={0x1e, 0x40, {0xc4000012, [0x2, 0x4, 0x6, 0x6, 0x7533]}}, @code={0xa, 0xb4, {"a06585d20020b0f2c10180d2620080d2230080d2a40080d2020000d4e0e39cd20000b8f2810180d2020080d2630080d2840180d2020000d4000008d520d09bd20020b0f2e10080d2e20080d2430180d2a40180d2020000d40000802d407c92d20020b8f2010180d2620180d2630180d2c40180d2020000d4000008d51f0000ea000008d540bf98d200e0b8f2810080d2220080d2c30080d2240180d2020000d4"}}, @svc={0x122, 0x40, {0x84000002, [0x2, 0x450b, 0x2, 0xe, 0x4]}}, @mrs={0xbe, 0x18, {0x603000000013de96}}, @eret={0xe6, 0x18, 0xf}, @its_setup={0x82, 0x28, {0x3, 0x2, 0x24}}, @its_setup={0x82, 0x28, {0x0, 0x1, 0x48}}, @uexit={0x0, 0x18, 0x3}, @its_send_cmd={0xaa, 0x28, {0xe, 0x1, 0x3, 0x4, 0x7, 0x1}}, @svc={0x122, 0x40, {0x4000000, [0x2, 0xed9, 0x2, 0x9]}}, @mrs={0xbe, 0x18, {0x603000000013df7d}}], 0x3a8}, &(0x7f0000001180), 0x1)
ioctl$KVM_GET_DEVICE_ATTR(r1, 0x4018aee2, &(0x7f0000001200)=@attr_arm64={0x0, 0x5, 0x0, &(0x7f00000011c0)=0x8000})
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000001240)={0x7, <r7=>0xffffffffffffffff})
ioctl$KVM_IRQ_LINE_STATUS(r4, 0xc008ae67, &(0x7f0000001280)={0xffffd93e, 0x5})
ioctl$KVM_ARM_VCPU_INIT(r6, 0x4020aeae, &(0x7f00000012c0)={0x5, 0xcde75feee2b23faf})
ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000001340)=@attr_other={0x0, 0x1, 0x47, &(0x7f0000001300)})
ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f00000013c0)=@arm64_bitmap={0x6030000000160002, &(0x7f0000001380)=0x6})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_ARM_SET_COUNTER_OFFSET(r4, 0x4010aeb5, &(0x7f0000001400)={0x9, 0xfff})
ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, &(0x7f0000001480)=@riscv64_f={0x802000000500000f, &(0x7f0000001440)=0x5})
syz_kvm_setup_syzos_vm$arm64(r0, &(0x7f0000bff000/0x400000)=nil)
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000001500)=@attr_arm64={0x0, 0x1, 0x1, &(0x7f00000014c0)=0x4})

1h21m36.956890355s ago: executing program 1 (id=227):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0xeffffffd, 0x801)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000001340)={0x3, 0x0, 0x2, r2, 0x3})
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x3, 0x0, 0x2, r2, 0xb})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000100)={0x7, <r7=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f00000002c0)=@attr_arm64={0x0, 0x4, 0x0, 0x0})
r8 = eventfd2(0x3ff, 0x0)
ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000000)={r8, 0x8, 0x2, r8})
ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000180)={r8, 0xf9, 0x0, r8})
ioctl$KVM_HAS_DEVICE_ATTR_vm(r4, 0x4018aee3, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, 0x0})
ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04)

1h21m36.555456398s ago: executing program 0 (id=228):
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x3})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xffffffffffffffff)
ioctl$KVM_ARM_VCPU_INIT(r3, 0x4020aeae, &(0x7f0000000100)={0x5, 0x18})
ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000140)=@arm64_fw={0x6030000000540002, 0x0})
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x8040ae9f, &(0x7f00000000c0)=@arm64)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4000ae84, 0x0)
write$eventfd(0xffffffffffffffff, &(0x7f00000001c0)=0x3, 0xfdef)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil)
r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r7, 0x3, 0xa0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
ioctl$KVM_SET_ONE_REG(r9, 0x4010aeac, &(0x7f0000000080)=@arm64_sys={0x6030000000138057, &(0x7f0000000040)=0x20000000007e28})
syz_kvm_setup_cpu$arm64(r5, r9, &(0x7f0000000000/0x400000)=nil, &(0x7f0000000280)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)

1h21m29.605264498s ago: executing program 1 (id=229):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xb)
ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000000)={0x7, 0x0, [{0x6, 0x2, 0x1, 0x0, @irqchip={0x10, 0x4}}, {0x9, 0x1, 0x1, 0x0, @adapter={0x1d, 0x7, 0x3, 0x8, 0x7}}, {0x200, 0x1, 0x1, 0x0, @irqchip={0x2, 0x8}}, {0x2, 0x0, 0x1, 0x0, @irqchip={0x10000, 0x58e}}, {0x4, 0x4, 0x0, 0x0, @msi={0xc, 0x4, 0x2, 0x3}}, {0x4, 0x5, 0x1, 0x0, @sint={0x7, 0x200}}, {0x3, 0x2, 0x1, 0x0, @adapter={0x45a, 0x81, 0x4, 0xff, 0x1}}]})
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f00000001c0)=@riscv64_config={0x8030000000100002, &(0x7f0000000180)=0x8}) (async)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
ioctl$KVM_SET_SREGS(r2, 0x4000ae84, &(0x7f0000000200)={{0x5000, 0x1000, 0xc, 0x4e, 0xff, 0x7, 0x7, 0x3, 0x80, 0x9, 0x3, 0x8}, {0x41000, 0xeeee8000, 0x1f, 0x22, 0xa, 0x6b, 0x9, 0xd, 0x89, 0xe, 0x7, 0xd}, {0xeeef0000, 0xb000, 0xc, 0x8, 0x6a, 0x8, 0x7, 0x9, 0x8, 0x7f, 0x8, 0x4}, {0xc000, 0x7000, 0x9, 0x3, 0x9b, 0x3, 0x65, 0x5, 0x5, 0x2, 0x7, 0x2}, {0x80a0000, 0x41000, 0xf, 0x2, 0x6, 0x9, 0x1, 0x3, 0xe, 0x6, 0x1, 0x9}, {0x100000, 0xb000, 0x4, 0x7f, 0x8, 0x8, 0x1, 0xff, 0x36, 0x8, 0xc, 0x40}, {0xf000, 0x1000, 0x10, 0x8, 0x7, 0x9, 0x5, 0x6, 0x9, 0x5, 0x3, 0x7}, {0x2, 0x80a0000, 0xb, 0x5, 0xa, 0x9, 0x4, 0x6, 0x7, 0x1, 0x6, 0xff}, {0x7000}, {0x58000, 0x7000}, 0x2, 0x0, 0x50000, 0x4, 0xf, 0x1, 0x200000, [0x4, 0x8, 0x8, 0x2]}) (async)
ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000340)={0x3, 0x0, [{0x822, 0x0, 0x1, 0x0, @msi={0x8, 0x7, 0x3, 0x81}}, {0x7, 0x5, 0x0, 0x0, @msi={0x8001, 0x3, 0x20, 0x1}}, {0x3, 0x5, 0x1, 0x0, @sint={0x9, 0x8}}]}) (async)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1b)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x2, 0x2, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) (async)
ioctl$KVM_SET_GUEST_DEBUG_arm64(r2, 0x4208ae9b, &(0x7f0000000440)={0x3, 0x0, {[0x9, 0x16, 0x5, 0x3, 0x0, 0x5, 0xc, 0x8, 0x7fffffffffffffff, 0x5, 0x5, 0x7fff, 0x6, 0x5, 0xe13a, 0x4], [0x8e2, 0x2, 0x1da, 0xfff, 0x800, 0x6, 0x7, 0xd, 0x6, 0x3, 0x4, 0xb5, 0x7, 0x200, 0x3, 0x9], [0x1d16271c, 0x3, 0xf, 0x6, 0x3ff, 0x9, 0x6, 0x10, 0xfffffffffffffff8, 0x7, 0x4, 0xccc, 0x2, 0xffffffffffffffff, 0x6, 0xa], [0x2, 0xf, 0x54db, 0x3, 0x6, 0x5aab336b, 0x9, 0x10000, 0x0, 0x401, 0x6, 0x1, 0xff, 0x6, 0x3150, 0x5]}})
ioctl$KVM_CAP_ARM_SYSTEM_SUSPEND(r0, 0x4068aea3, &(0x7f0000000680))
ioctl$KVM_SET_DEVICE_ATTR_vm(r0, 0x4018aee1, &(0x7f0000000740)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000700)={0x80000000, 0x401, 0x1}}) (async)
r4 = eventfd2(0xb, 0x80000)
write$eventfd(r4, &(0x7f0000000780)=0x68c, 0x8) (async)
ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000800)=@riscv64_timer={0x8030000004000001, &(0x7f00000007c0)=0x5}) (async)
ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f0000000840)=0x1) (async)
ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f00000008c0)=@riscv64_aia_csr={0x8030000003010000, &(0x7f0000000880)=0x1})
r5 = ioctl$KVM_CREATE_GUEST_MEMFD(r0, 0xc040aed4, &(0x7f0000000900)={0x2, 0x9})
ioctl$KVM_SET_USER_MEMORY_REGION2(r3, 0x40a0ae49, &(0x7f0000000940)={0x2710, 0x1, 0x100000, 0x2000, &(0x7f0000ffc000/0x2000)=nil, 0x6, r5}) (async)
ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r2, 0x4018aee3, &(0x7f0000000a00)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0x1}) (async)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x80000, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x13)
ioctl$KVM_CAP_ARM_USER_IRQ(r7, 0x4068aea3, &(0x7f0000000a80)) (async)
r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x35)
ioctl$KVM_RESET_DIRTY_RINGS(r8, 0xaec7) (async)
ioctl$KVM_CAP_HALT_POLL(r7, 0x4068aea3, &(0x7f0000000b00)={0xb6, 0x0, 0x4}) (async)
r9 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x1)
ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000b80)={0x1, 0xffffffffffffffff, 0x1}) (async)
ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000bc0)={0xa0, "c5ff98f5bb9f34390de0851cc8ead4903e1591a182be8864617e9e9ba35314d2cec5f5bf520f0da19cfe1b2f6a7e943a3fa916429023446099d142c7ff77faa7d2d62d98889c5bd87755ea3e39700d42fc48db96e5943d8bb558c28f69eba3aa71ced11820b84c3587f95087f8961b04858285ac49c82413a305c9cf674e91688b7e5f412bbf909f89a451da1eac0e84fb021b76b9e5607684f2b36bdfbc72f0"})

1h21m26.513576228s ago: executing program 0 (id=230):
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xc6)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
mmap$KVM_VCPU(&(0x7f0000f2a000/0x4000)=nil, 0x930, 0xf, 0x32, 0xffffffffffffffff, 0x0)

1h21m24.290064585s ago: executing program 1 (id=231):
r0 = openat$kvm(0x0, &(0x7f0000000240), 0x4b8801, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000ae9000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000140)=@arm64_fw={0x6030000000140000, &(0x7f0000000200)=0x10001})
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@mrs={0xbe, 0x18, {0x6030000000138010}}], 0x18}, 0x0, 0x0)
r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r8, 0x3, 0x11, r7, 0x0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0)
ioctl$KVM_CHECK_EXTENSION(r9, 0x5421, 0x8)
r10 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, 0xfffffffffffffffe, 0x0, 0xfffffffffffffee9)
openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r11 = openat$kvm(0x0, &(0x7f0000000140), 0x101000, 0x0)
ioctl$KVM_CREATE_VM(r11, 0xae01, 0x11)
r12 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ARM_VCPU_INIT(r12, 0x4020aeae, &(0x7f0000000100)={0x5, 0x18})
ioctl$KVM_GET_ONE_REG(r7, 0x4010aeab, &(0x7f0000000000)=@arm64_core={0x603000000010001e, &(0x7f0000000040)=0x8000000000000005})
r13 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x4)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000c00000/0x400000)=nil)
r14 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000080)={0x0, &(0x7f0000000800)=[@mrs={0xbe, 0x18, {0x603000000013dce9}}, @hvc={0x32, 0x40, {0x84000006, [0x7fffffff, 0x0, 0x5e9b, 0x7, 0x4]}}], 0x58}, 0x0, 0x0)
ioctl$KVM_RUN(r14, 0xae80, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)

1h21m21.575245715s ago: executing program 0 (id=232):
r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x3})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20040, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x4, <r5=>0xffffffffffffffff, 0x1})
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x9b, 0xf, 0x0, 0x5, 0x8, 0x82, 0x46, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x100001, 0x0, 0x0, 0x3, 0xa, 0x4, '\x00', 0x1, 0xc31}) (async)
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x9b, 0xf, 0x0, 0x5, 0x8, 0x82, 0x46, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x100001, 0x0, 0x0, 0x3, 0xa, 0x4, '\x00', 0x1, 0xc31})
write$eventfd(r5, &(0x7f00000001c0)=0x3, 0xfdef)
syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) (async)
syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0x5000}) (async)
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0x5000})
r6 = syz_kvm_add_vcpu$arm64(r0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@msr={0x14, 0x20, {0x603000000013c00d, 0xc}}], 0x20}, 0x0, 0x0)
openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async)
r7 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000180)={0x8}) (async)
ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000180)={0x8, <r9=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x4, 0x4, 0x0})
r10 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x26)
r12 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x34)
syz_kvm_add_vcpu$arm64(r12, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) (async)
syz_kvm_add_vcpu$arm64(r12, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r11, 0x1, 0x40) (async)
r13 = syz_kvm_vgic_v3_setup(r11, 0x1, 0x40)
ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f00000007c0)=@attr_other={0x0, 0x7, 0x40, &(0x7f0000000100)=0x7fffffff})
ioctl$KVM_RUN(r6, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

1h21m17.480865832s ago: executing program 1 (id=233):
r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0x400454e2, 0x1000110c23001c) (async)
openat$kvm(0x0, 0x0, 0x300, 0x0) (async)
ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000140)={0x4, 0x0, [{0x1, 0x2, 0x1, 0x0, @adapter={0x7, 0x100000000, 0x8, 0x0, 0x7}}, {0x9, 0x2, 0x1, 0x0, @adapter={0xd4ff, 0x6d39, 0x2, 0x0, 0x7f}}, {0x3, 0x0, 0x1, 0x0, @sint={0x6, 0x8000}}, {0x0, 0x0, 0x0, 0x0, @adapter={0x8f9, 0xe808e8f, 0x3f, 0x7, 0x332ccd89}}]})
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x3}) (async)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4000ae84, &(0x7f0000000300)={{0x41000, 0x5112230311195ad3, 0x3, 0x81, 0x5b, 0xb, 0x81, 0x8, 0xe, 0x78, 0x3, 0x6}, {0x7f625000, 0xdddd1000, 0x10, 0x81, 0xb, 0x0, 0x0, 0xf2, 0x10, 0xcb, 0x9, 0x98}, {0x40000, 0x100000, 0x10, 0x0, 0xa6, 0x7, 0x2d, 0xf2, 0xa, 0x0, 0x2, 0x4}, {0x26000, 0x40000, 0xa, 0x7e, 0x80, 0x7, 0x5c, 0x9, 0x0, 0x2, 0xe, 0xef}, {0x6000, 0x81c0003, 0xc, 0x1b, 0xf1, 0xa4, 0x0, 0xa, 0x5, 0x2, 0xff}, {0x0, 0xeeee0000, 0x8, 0x7, 0x4, 0x40, 0x8, 0x9, 0x4, 0x9a, 0xd, 0x7}, {0x26000, 0x2, 0x9, 0x9, 0x5, 0x8, 0xf6, 0xa, 0x0, 0x5, 0x8, 0x2}, {0x40000, 0x1000, 0x8, 0x6, 0x2, 0x7f, 0x5, 0x5, 0x4, 0x1, 0x6, 0x81}, {0x80a0000, 0x2}, {0x58000, 0xfffd}, 0x60000004, 0x0, 0x58000, 0x244bc, 0xf, 0x1, 0x58000, [0x4, 0x1, 0x81, 0x2]}) (async)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000140)={0x4, <r6=>0xffffffffffffffff, 0x1}) (async, rerun: 32)
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x9b, 0xf, 0x0, 0x5, 0x8, 0x82, 0x46, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x900001, 0x0, 0x0, 0x3, 0xa, 0x8, '\x00', 0x1, 0x93}) (rerun: 32)
write$eventfd(r6, &(0x7f00000001c0)=0x3, 0xfdef) (async, rerun: 64)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000000000)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0x20e4586c}) (async, rerun: 64)
r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
ioctl$KVM_ARM_VCPU_INIT(r10, 0x4020aeae, &(0x7f0000000140)={0x5, 0x8}) (async)
ioctl$KVM_SET_ONE_REG(r10, 0x4010aeac, &(0x7f0000000040)=@arm64_core={0x603000000010003a, &(0x7f0000000000)=0xffffffffffffffff}) (async)
ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x8, 0x0, &(0x7f0000000100)=0x8})

1h20m35.75750355s ago: executing program 32 (id=232):
r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x3})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20040, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x4, <r5=>0xffffffffffffffff, 0x1})
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x9b, 0xf, 0x0, 0x5, 0x8, 0x82, 0x46, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x100001, 0x0, 0x0, 0x3, 0xa, 0x4, '\x00', 0x1, 0xc31}) (async)
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x9b, 0xf, 0x0, 0x5, 0x8, 0x82, 0x46, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x100001, 0x0, 0x0, 0x3, 0xa, 0x4, '\x00', 0x1, 0xc31})
write$eventfd(r5, &(0x7f00000001c0)=0x3, 0xfdef)
syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) (async)
syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0x5000}) (async)
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0x5000})
r6 = syz_kvm_add_vcpu$arm64(r0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@msr={0x14, 0x20, {0x603000000013c00d, 0xc}}], 0x20}, 0x0, 0x0)
openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async)
r7 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000180)={0x8}) (async)
ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000180)={0x8, <r9=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x4, 0x4, 0x0})
r10 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x26)
r12 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x34)
syz_kvm_add_vcpu$arm64(r12, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) (async)
syz_kvm_add_vcpu$arm64(r12, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r11, 0x1, 0x40) (async)
r13 = syz_kvm_vgic_v3_setup(r11, 0x1, 0x40)
ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f00000007c0)=@attr_other={0x0, 0x7, 0x40, &(0x7f0000000100)=0x7fffffff})
ioctl$KVM_RUN(r6, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

1h20m30.319033897s ago: executing program 33 (id=233):
r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0x400454e2, 0x1000110c23001c) (async)
openat$kvm(0x0, 0x0, 0x300, 0x0) (async)
ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000140)={0x4, 0x0, [{0x1, 0x2, 0x1, 0x0, @adapter={0x7, 0x100000000, 0x8, 0x0, 0x7}}, {0x9, 0x2, 0x1, 0x0, @adapter={0xd4ff, 0x6d39, 0x2, 0x0, 0x7f}}, {0x3, 0x0, 0x1, 0x0, @sint={0x6, 0x8000}}, {0x0, 0x0, 0x0, 0x0, @adapter={0x8f9, 0xe808e8f, 0x3f, 0x7, 0x332ccd89}}]})
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x3}) (async)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4000ae84, &(0x7f0000000300)={{0x41000, 0x5112230311195ad3, 0x3, 0x81, 0x5b, 0xb, 0x81, 0x8, 0xe, 0x78, 0x3, 0x6}, {0x7f625000, 0xdddd1000, 0x10, 0x81, 0xb, 0x0, 0x0, 0xf2, 0x10, 0xcb, 0x9, 0x98}, {0x40000, 0x100000, 0x10, 0x0, 0xa6, 0x7, 0x2d, 0xf2, 0xa, 0x0, 0x2, 0x4}, {0x26000, 0x40000, 0xa, 0x7e, 0x80, 0x7, 0x5c, 0x9, 0x0, 0x2, 0xe, 0xef}, {0x6000, 0x81c0003, 0xc, 0x1b, 0xf1, 0xa4, 0x0, 0xa, 0x5, 0x2, 0xff}, {0x0, 0xeeee0000, 0x8, 0x7, 0x4, 0x40, 0x8, 0x9, 0x4, 0x9a, 0xd, 0x7}, {0x26000, 0x2, 0x9, 0x9, 0x5, 0x8, 0xf6, 0xa, 0x0, 0x5, 0x8, 0x2}, {0x40000, 0x1000, 0x8, 0x6, 0x2, 0x7f, 0x5, 0x5, 0x4, 0x1, 0x6, 0x81}, {0x80a0000, 0x2}, {0x58000, 0xfffd}, 0x60000004, 0x0, 0x58000, 0x244bc, 0xf, 0x1, 0x58000, [0x4, 0x1, 0x81, 0x2]}) (async)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000140)={0x4, <r6=>0xffffffffffffffff, 0x1}) (async, rerun: 32)
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x9b, 0xf, 0x0, 0x5, 0x8, 0x82, 0x46, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x900001, 0x0, 0x0, 0x3, 0xa, 0x8, '\x00', 0x1, 0x93}) (rerun: 32)
write$eventfd(r6, &(0x7f00000001c0)=0x3, 0xfdef) (async, rerun: 64)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000000000)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0x20e4586c}) (async, rerun: 64)
r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
ioctl$KVM_ARM_VCPU_INIT(r10, 0x4020aeae, &(0x7f0000000140)={0x5, 0x8}) (async)
ioctl$KVM_SET_ONE_REG(r10, 0x4010aeac, &(0x7f0000000040)=@arm64_core={0x603000000010003a, &(0x7f0000000000)=0xffffffffffffffff}) (async)
ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x8, 0x0, &(0x7f0000000100)=0x8})

41m7.000703563s ago: executing program 3 (id=599):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x16)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000140)={0x10200, 0x4, 0x80a0000, 0x1000, &(0x7f0000ce5000/0x1000)=nil})
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2c)
r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x27)
r6 = syz_kvm_vgic_v3_setup(r5, 0xf, 0x40)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x105c00, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_GUEST_MEMFD(r9, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3})
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x2000003, 0x2013, r10, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r7, 0xae04) (async)
r11 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r7, 0xae04)
mmap$KVM_VCPU(&(0x7f0000007000/0x2000)=nil, r11, 0x3000003, 0x2011, r10, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000007000/0x2000)=nil, r11, 0x3000003, 0x2011, r10, 0x0)
r12 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0xe)
r14 = syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000bff000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r14, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) (async)
r15 = syz_kvm_add_vcpu$arm64(r14, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_GET_ONE_REG(r15, 0x4010aeab, &(0x7f0000000180)=@arm64_extra={0x603000000013c009, &(0x7f0000000200)=0x4})
mmap$KVM_VCPU(&(0x7f0000dee000/0x3000)=nil, r11, 0x1000006, 0x30, r15, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000dee000/0x3000)=nil, r11, 0x1000006, 0x30, r15, 0x0)
ioctl$KVM_HAS_DEVICE_ATTR(r6, 0x4018aee3, &(0x7f0000000280)=@attr_other={0x0, 0x4, 0x6, 0x0}) (async)
ioctl$KVM_HAS_DEVICE_ATTR(r6, 0x4018aee3, &(0x7f0000000280)=@attr_other={0x0, 0x4, 0x6, 0x0})
syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) (async)
r16 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r16, 0x4010aeac, &(0x7f0000000100)=@arm64_fw={0x6030000000140005, &(0x7f0000000000)=0xfffffffffffffffd}) (async)
ioctl$KVM_SET_ONE_REG(r16, 0x4010aeac, &(0x7f0000000100)=@arm64_fw={0x6030000000140005, &(0x7f0000000000)=0xfffffffffffffffd})

41m3.917700573s ago: executing program 2 (id=600):
r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xb6)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2f)
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
mmap$KVM_VCPU(&(0x7f0000dd4000/0x3000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r6, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r6, 0x0)
munmap(&(0x7f0000db7000/0x2000)=nil, 0x2000)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0)
syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@hvc={0x32, 0x40, {0x84000013, [0x804, 0x1010, 0x7, 0x7, 0x100000000]}}], 0x40}, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

40m48.035829235s ago: executing program 3 (id=601):
r0 = eventfd2(0x101, 0x800)
write$eventfd(r0, &(0x7f0000000080)=0xfffffffffffffff7, 0x8)
openat$kvm(0x0, 0x0, 0x0, 0x0)
r1 = openat$kvm(0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r4, r5, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x20}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_GET_ONE_REG(r5, 0x4010aeab, &(0x7f0000000100)=@arm64_core={0x6030000000100016, &(0x7f0000000200)=0x81})
r6 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_CAP_ARM_SYSTEM_SUSPEND(r8, 0x4068aea3, &(0x7f00000000c0))
syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000b80)={0x0, 0x0}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1)
syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1)
r10 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000b80)={0x0, &(0x7f0000000080)=[@hvc={0x32, 0x40, {0x84000003, [0xaee, 0x0, 0x4, 0x9, 0x4d]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1)
ioctl$KVM_RUN(r10, 0xae80, 0x0)

40m45.145537985s ago: executing program 2 (id=602):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x101800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000700)={0x7, <r2=>0xffffffffffffffff})
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xd)
ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r3, 0x4010ae74, &(0x7f0000000180)={0x9, 0xe271, 0x1})
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x4, 0x0, 0x0})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x111880, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
openat$kvm(0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000140)={0x4, <r6=>0xffffffffffffffff, 0x1})
ioctl$KVM_CREATE_VM(r6, 0x5452, 0x110c230300)
ioctl$KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, &(0x7f0000000340)=@attr_other={0x0, 0x5, 0x8, &(0x7f0000000000)=0xcb1})
r7 = mmap$KVM_VCPU(&(0x7f0000ffa000/0x3000)=nil, 0x0, 0x3000009, 0x11, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f00000000c0)="b36063cd0c43570ea684111d8f74a5dd9a0ee5b7bdbb897b7891410e33113ac0a53344c859f05cee856f0ae662930afa94ae8ee80f67f6a39dc352c5401c521311a60cee7e102761", 0x0, 0x48)

40m37.909598402s ago: executing program 3 (id=603):
openat$kvm(0x0, 0x0, 0x0, 0x0)
r0 = openat$kvm(0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3)
ioctl$KVM_ARM_VCPU_INIT(r4, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8})
ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f00000000c0)=@arm64_core={0x6030000000100034, &(0x7f0000000000)=0x80})
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000080)=@x86={0x2, 0x9, 0x40, 0x0, 0x4, 0xf7, 0x4, 0x2, 0x2, 0x8, 0x6, 0x3, 0x0, 0x1, 0x7ff, 0x6, 0x0, 0x6, 0x2, '\x00', 0x6, 0x6})
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r6 = openat$kvm(0x0, &(0x7f0000000200), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r7, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_irq={0x0, 0x0, 0x0, &(0x7f00000001c0)=0x2})
r8 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000b80)={0x0, 0x0}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1)
syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1)
r10 = syz_kvm_add_vcpu$arm64(r1, &(0x7f0000000b80)={0x0, &(0x7f00000000c0)=[@hvc={0x32, 0x40, {0x84000003, [0xaee, 0x0, 0x4, 0x9, 0x4d]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1)
ioctl$KVM_RUN(r10, 0xae80, 0x0)

40m37.332437064s ago: executing program 2 (id=604):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r3, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x454303, 0x0)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2d)
syz_kvm_setup_cpu$arm64(r5, r4, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000840)=[{0x0, &(0x7f0000000240)=[@uexit={0x0, 0x18, 0xfc2}, @hvc={0x32, 0x40, {0x8000bfff, [0x1ca71fa7, 0x3ff, 0x4, 0xffffffffffffff50, 0x4]}}, @code={0xa, 0x6c, {"000008d50068a0380008a07800a0400c008008d500c0600d40019ad200a0b8f2210080d2020080d2830080d2840080d2020000d40004006e000008d5a02e92d20080b0f2a10080d2620180d2230080d2840180d2020000d4"}}, @eret={0xe6, 0x18, 0x3}, @code={0xa, 0x9c, {"007008d5003c0053008008d500a4600de0fa9ed200e0b0f2010080d2e20080d2430180d2a40080d2020000d4000028d5207084d20020b8f2c10180d2620180d2430080d2440180d2020000d4a06a96d200c0b8f2610080d2820080d2030180d2c40180d2020000d4e08189d20020b8f2810180d2820180d2e30180d2040180d2020000d4000080d2"}}, @svc={0x122, 0x40, {0x84000004, [0xf4b, 0x6, 0x80000001, 0xf38a, 0x4]}}, @its_setup={0x82, 0x28, {0x3, 0x1, 0x209}}, @irq_setup={0x46, 0x18, {0x3, 0x1d2}}, @mrs={0xbe, 0x18, {0x2}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0xffe8, 0x3, 0xc}}, @irq_setup={0x46, 0x18, {0x4, 0x3ca}}, @mrs={0xbe, 0x18, {0x603000000013dcf0}}, @svc={0x122, 0x40, {0x0, [0x2, 0x6, 0x8, 0x2]}}, @msr={0x14, 0x20, {0x603000000013c016, 0x5}}, @svc={0x122, 0x40, {0x10, [0x6, 0x5, 0xdea0, 0x9, 0x1]}}, @irq_setup={0x46, 0x18, {0x2, 0x182}}, @hvc={0x32, 0x40, {0x84000012, [0x4, 0x0, 0x5, 0xffff, 0x401]}}, @smc={0x1e, 0x40, {0x80008000, [0x3004, 0x7, 0xc, 0x5, 0x1]}}, @msr={0x14, 0x20, {0x603000000013804d, 0x311}}, @msr={0x14, 0x20, {0x603000000013deb9, 0x8}}, @svc={0x122, 0x40, {0xc4000003, [0x1, 0x176, 0x1, 0x401, 0xb2]}}, @svc={0x122, 0x40, {0x80003fff, [0x9, 0x2, 0x3, 0xfff, 0x4]}}, @svc={0x122, 0x40, {0x800, [0xfffffffffffeffff, 0x2a, 0x2, 0x2, 0x100000000]}}, @eret={0xe6, 0x18, 0x7f}, @uexit={0x0, 0x18, 0x4}, @hvc={0x32, 0x40, {0x8, [0x7, 0x100000001, 0xd, 0x0, 0x6]}}, @msr={0x14, 0x20, {0x603000000013e710, 0x10}}, @hvc={0x32, 0x40, {0x84000001, [0xd, 0x5, 0x3, 0xc, 0x9]}}, @eret={0xe6, 0x18, 0x85a3}, @irq_setup={0x46, 0x18, {0x4, 0x76}}, @mrs={0xbe, 0x18, {0x603000000013e298}}, @its_send_cmd={0xaa, 0x28, {0x5, 0x0, 0x1, 0xc, 0x33, 0x10, 0x3}}], 0x5e8}], 0x1, 0x0, &(0x7f0000000880)=[@featur1={0x1, 0x4}], 0x1)
r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000000)=@arm64={0x0, 0x5, 0x2, '\x00', 0x5})
mmap$KVM_VCPU(&(0x7f0000ffc000/0x3000)=nil, r6, 0x1, 0x11, r3, 0x0)
r7 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04)
mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, r7, 0x8, 0x13, r3, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffa000/0x4000)=nil, r7, 0x0, 0x12, r3, 0x0)
r8 = eventfd2(0x1, 0x1)
r9 = openat$kvm(0x0, &(0x7f0000000080), 0x40000, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
syz_kvm_vgic_v3_setup(r10, 0x1, 0x100)
r11 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x28)
ioctl$KVM_CAP_HALT_POLL(r12, 0x4068aea3, &(0x7f00000001c0)={0xb6, 0x2000000})
ioctl$KVM_IRQFD(r10, 0x4020ae76, &(0x7f0000000100)={r8, 0x3, 0x2, r8})
ioctl$KVM_SET_GSI_ROUTING(r10, 0x4008ae6a, &(0x7f00000001c0)={0x1, 0x0, [{0x4, 0x2, 0x0, 0x0, @irqchip={0x6, 0x8}}]})
mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0)

40m27.858798882s ago: executing program 3 (id=605):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x12)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x10201, 0x2, 0xffff1000, 0x1000, &(0x7f0000ffd000/0x1000)=nil})
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000bfe000/0x400000)=nil)
r6 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vm(r7, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)={0x1, 0x1001, 0x2}})
ioctl$KVM_SET_DEVICE_ATTR_vm(r7, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x9e, 0x7fffffff, 0x2}})
r8 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r8, 0x4010aeac, &(0x7f0000000000)=@arm64_extra={0x603000000013c026, &(0x7f0000000140)})
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000080)={0x4})
syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f00000001c0)="f21bc75509bf71c9d70236fc044842da0700ffffffffffd24993f297e87fd62c18b875c2357c6ed6000000000000000000000000002000e4ff00", 0x0, 0x48)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, <r9=>0xffffffffffffffff, 0x1})
write$eventfd(r9, &(0x7f00000001c0)=0xffffff7f, 0xff25)

40m19.758176353s ago: executing program 2 (id=606):
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
r0 = openat$kvm(0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000000)={0x802})
openat$kvm(0x0, &(0x7f0000000180), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x36)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x42680, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000140)={0x9})
write$eventfd(0xffffffffffffffff, &(0x7f0000000200), 0x8)
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000140)={0x4, <r7=>0xffffffffffffffff, 0x1})
r8 = openat$kvm(0x0, &(0x7f0000000040), 0x101800, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2)
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f00000002c0)={0xa, <r10=>0xffffffffffffffff, 0x1})
ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x4, 0x0, 0x0})
ioctl$KVM_GET_DEVICE_ATTR(r10, 0x4018aee2, &(0x7f0000000340)=@attr_riscv64=@attr_imsic={0x0, 0x1, 0x3, &(0x7f0000000080)=0x9})
write$eventfd(r7, &(0x7f00000001c0), 0xf001)
syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r11 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r11, 0xae01, 0x23)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
r12 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000100)={0x7})
ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000240)=@attr_other={0x0, 0x2346, 0x50, &(0x7f0000000280)=0xfffffffffffff8e5})

40m17.857336317s ago: executing program 3 (id=607):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1c)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x22)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000240)={0x1fe, 0x3, 0xffff1000, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0xfffffffffffffffd)
r6 = mmap$KVM_VCPU(&(0x7f0000c27000/0x1000)=nil, 0x0, 0x3800007, 0x4000010, r5, 0x0)
ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, 0x0)
r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0xfffffffffffffffe)
openat$kvm(0x0, 0x0, 0x102, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2a)
ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000100)={0x7, <r9=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f00000002c0)=@attr_riscv64=@attr_aplic={0x0, 0x1, @any=0xfffffffffffffff7, &(0x7f0000000140)=0x8e6})
ioctl$KVM_IRQFD(r8, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0x5, 0x2})
write$eventfd(0xffffffffffffffff, &(0x7f0000000080)=0x81, 0xffffffffffffffac)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000080)="fb0149dd033be3ac4e37c4005a9614fbff67521ce16f8f09449a7a836b73312954000000000000000000000000000000000000000000000000000000dc6900", 0x0, 0x2e)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r10, 0x5451, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r5, 0x0)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x37)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x103201, 0x0)
r11 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x3800003, 0x8010, r11, 0x0)
r12 = openat$kvm(0x0, &(0x7f0000000080), 0x40000, 0x0)
ioctl$KVM_CREATE_VM(r12, 0xae01, 0x3f)

40m8.208172316s ago: executing program 2 (id=608):
r0 = mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000240)="37e68986ad644f5dc57bbc1ff382863b67f3eee57a32ec911d95f88f3dd8ea716e4a29cefbd440b2ecf83f57baf33b0c97182970a47ef45c954e42f2055384921830f6e273d2eb30", 0x0, 0x2a2019ac5ed2a1ef)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x15)
syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f00000a3000/0x400000)=nil) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) (async)
ioctl$KVM_CLEAR_DIRTY_LOG(r3, 0xc018aec0, &(0x7f0000000140)={0x0, 0x1c0, 0x3d70000, 0x0}) (async)
r4 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) (async)
r5 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0x4b49, 0x0) (async)
ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f0000000040)=@riscv64_smstateen_csr) (async)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000100)="746abf250f7959c813e4adfb369b808022e69fe80cfadce4a1259e77bab54ac9749537b3d016bb7f745a6e22d2f9ff443f19467748a3fe02c239457600", 0x0, 0xfffffffffffffec5)

40m7.920939587s ago: executing program 3 (id=609):
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04)
mmap$KVM_VCPU(&(0x7f0000c0c000/0x2000)=nil, r3, 0x0, 0x80031, 0xffffffffffffffff, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x2}}], 0x20}, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0)
r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r7 = openat$kvm(0x0, &(0x7f0000000100), 0x80402, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
r11 = openat$kvm(0x0, &(0x7f0000000040), 0x800, 0x0)
ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r13, 0x4008ae6a, &(0x7f0000000140)={0x2, 0x0, [{0x3, 0x1, 0x0, 0x0, @msi={0x0, 0x3, 0x1, 0x2}}, {0x3, 0x2, 0x0, 0x0, @msi={0x2, 0x3, 0xb, 0x5}}]})
ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000700)={0x7, <r14=>0xffffffffffffffff})
ioctl$KVM_GET_DEVICE_ATTR(r14, 0x4018aee2, &(0x7f00000000c0)=@attr_arm64={0x0, 0x3, 0x0, 0x0})
mmap$KVM_VCPU(0x0, 0x50000, 0x3, 0x11, r10, 0x0)
r15 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x2c)
ioctl$KVM_SET_DEVICE_ATTR_vm(r15, 0x4018aee1, &(0x7f0000000080)=@attr_arm64={0x0, 0x0, 0x0, 0x0})
r16 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r17 = ioctl$KVM_CREATE_VCPU(r16, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r16, r17, &(0x7f0000b74000/0x400000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x40}], 0x1, 0x0, 0x0, 0x0)
r18 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x33)
syz_kvm_setup_cpu$arm64(r18, r10, &(0x7f0000a53000/0x400000)=nil, &(0x7f00000000c0)=[{0x0, 0x0}], 0x6, 0x0, &(0x7f0000000140)=[@featur1={0x1, 0xd2}], 0x1)

39m58.680997303s ago: executing program 2 (id=610):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000080)={0xa8, 0x0, 0x3})
r2 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0)
ioctl$KVM_ARM_VCPU_INIT(0xffffffffffffffff, 0x4020aeae, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r5, 0x4018aee1, &(0x7f0000000000)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0x20e4586c})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x900c0, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r6 = openat$kvm(0x0, &(0x7f0000000080), 0x101e40, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x28)
r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000b75000/0x400000)=nil)
r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000140)={0x0, &(0x7f0000000000)=[@hvc={0x32, 0x40, {0x84000051, [0x84000053, 0x7, 0x9, 0xc, 0x7fff]}}], 0x40}, 0x0, 0x0)
r10 = openat$kvm(0x0, &(0x7f0000000280), 0x103080, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2)
r12 = syz_kvm_vgic_v3_setup(r11, 0x1, 0x40)
ioctl$KVM_GET_DEVICE_ATTR(r12, 0x4018aee2, &(0x7f0000000100)=@attr_riscv64=@attr_imsic={0x0, 0x1, 0x8, &(0x7f0000000180)})
ioctl$KVM_ASSIGN_SET_MSIX_NR(0xffffffffffffffff, 0x4008ae73, &(0x7f0000000100)={0x8e3, 0x40})
ioctl$KVM_RUN(r9, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})

39m22.187866686s ago: executing program 34 (id=609):
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04)
mmap$KVM_VCPU(&(0x7f0000c0c000/0x2000)=nil, r3, 0x0, 0x80031, 0xffffffffffffffff, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x2}}], 0x20}, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0)
r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r7 = openat$kvm(0x0, &(0x7f0000000100), 0x80402, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
r11 = openat$kvm(0x0, &(0x7f0000000040), 0x800, 0x0)
ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r13, 0x4008ae6a, &(0x7f0000000140)={0x2, 0x0, [{0x3, 0x1, 0x0, 0x0, @msi={0x0, 0x3, 0x1, 0x2}}, {0x3, 0x2, 0x0, 0x0, @msi={0x2, 0x3, 0xb, 0x5}}]})
ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000700)={0x7, <r14=>0xffffffffffffffff})
ioctl$KVM_GET_DEVICE_ATTR(r14, 0x4018aee2, &(0x7f00000000c0)=@attr_arm64={0x0, 0x3, 0x0, 0x0})
mmap$KVM_VCPU(0x0, 0x50000, 0x3, 0x11, r10, 0x0)
r15 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x2c)
ioctl$KVM_SET_DEVICE_ATTR_vm(r15, 0x4018aee1, &(0x7f0000000080)=@attr_arm64={0x0, 0x0, 0x0, 0x0})
r16 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r17 = ioctl$KVM_CREATE_VCPU(r16, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r16, r17, &(0x7f0000b74000/0x400000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x40}], 0x1, 0x0, 0x0, 0x0)
r18 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x33)
syz_kvm_setup_cpu$arm64(r18, r10, &(0x7f0000a53000/0x400000)=nil, &(0x7f00000000c0)=[{0x0, 0x0}], 0x6, 0x0, &(0x7f0000000140)=[@featur1={0x1, 0xd2}], 0x1)

39m12.17693001s ago: executing program 35 (id=610):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000080)={0xa8, 0x0, 0x3})
r2 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0)
ioctl$KVM_ARM_VCPU_INIT(0xffffffffffffffff, 0x4020aeae, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r5, 0x4018aee1, &(0x7f0000000000)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0x20e4586c})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x900c0, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r6 = openat$kvm(0x0, &(0x7f0000000080), 0x101e40, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x28)
r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000b75000/0x400000)=nil)
r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000140)={0x0, &(0x7f0000000000)=[@hvc={0x32, 0x40, {0x84000051, [0x84000053, 0x7, 0x9, 0xc, 0x7fff]}}], 0x40}, 0x0, 0x0)
r10 = openat$kvm(0x0, &(0x7f0000000280), 0x103080, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2)
r12 = syz_kvm_vgic_v3_setup(r11, 0x1, 0x40)
ioctl$KVM_GET_DEVICE_ATTR(r12, 0x4018aee2, &(0x7f0000000100)=@attr_riscv64=@attr_imsic={0x0, 0x1, 0x8, &(0x7f0000000180)})
ioctl$KVM_ASSIGN_SET_MSIX_NR(0xffffffffffffffff, 0x4008ae73, &(0x7f0000000100)={0x8e3, 0x40})
ioctl$KVM_RUN(r9, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})

8m56.904375173s ago: executing program 4 (id=820):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000180)={0x8, <r4=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
syz_kvm_add_vcpu$arm64(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}, 0x0, 0x0)
ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000340)={0x1a64afb6, 0x8000000})
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000040)=@arm64_core={0x6030000000100050, 0x0})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
r8 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r7, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r7, 0x0)
r9 = eventfd2(0x0, 0x0)
close(r9)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01)
write$eventfd(r9, &(0x7f0000000180)=0x5, 0xfffffde3)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
r13 = syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r13, &(0x7f0000000b80)={0x0, &(0x7f0000000040)=[@smc={0x1e, 0x40, {0xc4000004, [0x40000099a, 0x4, 0x9, 0x89, 0xffffffffffffffff]}}], 0x40}, &(0x7f0000000bc0)=[@featur1={0x1, 0x4}], 0x1)
syz_kvm_add_vcpu$arm64(r13, &(0x7f0000000140)={0x0, &(0x7f0000000580)=[@uexit={0x0, 0x18, 0x1}, @irq_setup={0x46, 0x18, {0x2, 0xd7}}, @smc={0x1e, 0x40, {0x40000000, [0x8, 0xfffffffffffffffa, 0x8, 0x10000, 0x81]}}, @msr={0x14, 0x20, {0x603000000013df48, 0x8}}, @code={0xa, 0xb4, {"008008d5007008d5007c96d20080b0f2410180d2820080d2230180d2440180d2020000d440e384d20000b0f2010080d2c20180d2030080d2840080d2020000d4001c602e008008d5008008d5001583d200a0b0f2e10080d2a20180d2e30180d2040180d2020000d480859ad20020b0f2410180d2020080d2030080d2e40080d2020000d4007893d20060b0f2e10080d2020180d2c30180d2a40080d2020000d4"}}, @msr={0x14, 0x20, {0x603000000013c4d0, 0x6}}, @eret={0xe6, 0x18, 0x4}, @uexit={0x0, 0x18, 0x7fffffffffffffff}, @svc={0x122, 0x40, {0x84000050, [0x7, 0x1, 0x8000, 0x6, 0x7f]}}], 0x1d4}, 0x0, 0x0)

8m52.069754678s ago: executing program 5 (id=821):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x2e)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000180)=0xa)
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x38)
ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000000)={0x2, 0x0, &(0x7f0000ffa000/0x3000)=nil})
openat$kvm(0xffffffffffffff9c, 0x0, 0x4eed40, 0x0)
syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, &(0x7f0000000240)="57ffe02b199233af1c100f993e9c1541d69a2077275a13cf", 0x0, 0x18)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x1})
r7 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20080, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0xb00, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000140)={0x4, <r10=>0xffffffffffffffff, 0x1})
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x8, 0xf, 0x0, 0x5, 0x6, 0x86, 0x6, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x0, 0x800000, 0x0, 0x3, 0x5, 0x8, '\x00', 0x9, 0x93})
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x3)
r13 = syz_kvm_vgic_v3_setup(r12, 0x2, 0x40)
ioctl$KVM_HAS_DEVICE_ATTR(r13, 0x4018aee3, &(0x7f0000000040)=@attr_riscv64=@attr_ctrl={0x0, 0x1, 0x1, 0x0})
write$eventfd(r10, &(0x7f00000001c0)=0x3, 0xfdef)
syz_kvm_setup_cpu$arm64(r3, r4, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000140)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

8m30.280338106s ago: executing program 4 (id=822):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x8, <r3=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000180)=0x8080000})
ioctl$KVM_GET_DEVICE_ATTR(r3, 0x4018aee2, &(0x7f0000000080)=@attr_other={0x0, 0x8, 0x8, 0xffffffffffffffff})
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r6 = openat$kvm(0x0, &(0x7f00000000c0), 0x345940, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x9000000)
mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000)
munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000)
munmap(&(0x7f000075a000/0xb000)=nil, 0xb000)
munmap(&(0x7f0000482000/0x2000)=nil, 0x2000)
munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000)
munmap(&(0x7f0000e76000/0x12000)=nil, 0x12000)
mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x24132, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000f1a000/0x4000)=nil, 0x930, 0x0, 0x9032, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000fed000/0x3000)=nil, 0x930, 0x0, 0x4030031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
syz_kvm_vgic_v3_setup(r7, 0x2, 0x100)
close(r7)
r8 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
close(r8)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x30)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

8m30.278176186s ago: executing program 5 (id=823):
r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r0, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
eventfd2(0x3ff, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000140)={0x6, <r3=>0xffffffffffffffff, 0x1})
ioctl$KVM_CREATE_VM(r3, 0x400454d0, 0x1)

8m23.167024398s ago: executing program 5 (id=824):
r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2d)
r2 = syz_kvm_vgic_v3_setup(r1, 0x1, 0x100)
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x0, 0xd0, &(0x7f0000000000)=0x1})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x10004, 0x1, 0x9000, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80c01, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3})
mmap$KVM_VCPU(&(0x7f0000fff000/0x1000)=nil, 0x930, 0x2000003, 0x30, r5, 0x200001fe0000)

7m57.119128787s ago: executing program 5 (id=825):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r3, r4, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x20}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_GET_ONE_REG(r4, 0x4010aeab, &(0x7f0000000100)=@arm64_core={0x6030000000100016, &(0x7f0000000200)=0x81})
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000180)={0x8, <r7=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x4, 0x4, 0x0})
ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, 0x0)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1)
ioctl$KVM_GET_REGS(r4, 0x8360ae81, &(0x7f0000000300))
r8 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000b7c000/0x400000)=nil)
r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r9, 0x4018aee1, &(0x7f0000000000)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0x20e4586c})
ioctl$KVM_RUN(r9, 0xae80, 0x0)

7m56.568371182s ago: executing program 4 (id=826):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000bfe000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x3, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x1, 0x80000, 0x10000, 0x20, 0xfffffffe, 0x2}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x1, 0x100)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2e)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000040)={0x9, <r5=>0xffffffffffffffff, 0x1})
ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

7m39.058211517s ago: executing program 4 (id=827):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x8800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x38)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000000000/0x400000)=nil, &(0x7f00000005c0)=[{0x0, &(0x7f0000000840)=[@its_send_cmd={0xaa, 0x28, {0xb, 0x0, 0x2, 0x2, 0xfffffd04, 0x200}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x1, 0x1, 0xd, 0xe2, 0x8}}, @uexit={0x0, 0x18, 0xdb39}, @code={0xa, 0x84, {"000028d5208587d20040b0f2e10180d2c20080d2e30080d2c40080d2020000d4e03b95d20020b0f2210180d2a20180d2e30180d2c40080d2020000d40078214e007008d50094007f00d8a02e40178cd200a0b0f2810180d2a20080d2630180d2240180d2020000d4000008d5000008d5"}}, @irq_setup={0x46, 0x18, {0x0, 0x3b}}, @mrs={0xbe, 0x18, {0x603000000013e681}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x1, 0x2, 0xc, 0x8, 0x5a, 0x1}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x1400, 0x4, 0xb}}, @hvc={0x32, 0x40, {0xc400000c, [0x8b, 0xffffffffffffff9a, 0x5, 0x0, 0x4fd]}}, @irq_setup={0x46, 0x18, {0x2, 0x5f}}, @its_setup={0x82, 0x28, {0x4, 0x2, 0x3d5}}, @irq_setup={0x46, 0x18, {0x0, 0x2dd}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0xc, 0x7, 0x1}}], 0x23c}], 0x1, 0x0, &(0x7f0000000600)=[@featur2={0x1, 0x38}], 0x1) (async)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0xffffffffffffffff)
ioctl$KVM_ARM_VCPU_INIT(r5, 0x4020aeae, &(0x7f0000000340)={0x5}) (async)
ioctl$KVM_SET_ONE_REG(r5, 0x4010aeac, &(0x7f0000000280)=@arm64_core={0x6030000000100024, &(0x7f0000000140)=0x6f}) (async)
syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000080)="fb01ea6d6931e3ac2cc4a29ea6abf4e7454e37c4b8062147000000000067521ce16f8f1f3d9a7a835673312b54ebb2aa5cc87dd22627e700", 0x0, 0x48) (async)
r6 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x25) (async)
r8 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r9 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async)
r10 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) (async)
r11 = syz_kvm_add_vcpu$arm64(r9, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x2}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x1, 0x9, 0x2, 0x0, 0xa, 0x1}}], 0x50}, 0x0, 0x0) (async)
syz_kvm_vgic_v3_setup(r10, 0x1, 0x100) (async)
ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000180)={0x8, <r12=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r12, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) (async)
ioctl$KVM_RUN(r11, 0xae80, 0x0)
ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f00000001c0)={0x8, <r13=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000380)})
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f00000000c0)={0x5, 0x2, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) (async)
ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f00000001c0)={0x8, <r14=>0xffffffffffffffff, 0x1})
ioctl$KVM_SET_DEVICE_ATTR(r14, 0x4018aee1, &(0x7f00000002c0)=@attr_other={0x0, 0x8, 0x100, &(0x7f0000000300)=0xc000000000000000}) (async)
ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x4, 0x2, 0x0}) (async)
r15 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r16 = ioctl$KVM_CREATE_VM(r15, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r16, 0xae41, 0x0)

7m38.348471693s ago: executing program 5 (id=828):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_vgic_v3_setup(r2, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000280)={0x8, <r3=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000180)=0x8080000})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000000200)={0x8090040, 0x0, 0x402, 0x1})
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = eventfd2(0xfffffffa, 0x80001)
ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000140)={0x80, 0x4, 0x0, r6})
ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000080)={0x7001, 0x37d03030d7a92616})
ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000180)={0x5000})
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_GUEST_MEMFD(r8, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3})
r10 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
r11 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2a)
ioctl$KVM_ARM_SET_COUNTER_OFFSET(r11, 0x4010aeb5, &(0x7f0000000040)={0xffffffff, 0x8})
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, r10, 0x2000003, 0x2013, r9, 0x0)
close(r9)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x2000001, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x0)

7m28.389837081s ago: executing program 4 (id=829):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x2}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x1, 0x1, 0x10002, 0xfffffff9, 0x0, 0x2}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, <r4=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r5 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
r8 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r7, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r7, 0x0)
r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_GET_API_VERSION(r9, 0xae00, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0x80111500, 0x20000000)
write$eventfd(r11, &(0x7f0000000040), 0x8)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000000)=@arm64_core={0x603000000010000c, 0x0})
ioctl$KVM_CREATE_VM(r9, 0x401c5820, 0x20000001)

7m23.615823326s ago: executing program 5 (id=830):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x161642, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
r4 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, r3, 0x1000002, 0x13, r2, 0x0)
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1, 0x10, r2, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x535402, 0x0)
ioctl$KVM_CREATE_VM(r5, 0x40049409, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x161642, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) (async)
mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, r3, 0x1000002, 0x13, r2, 0x0) (async)
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x0) (async)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48) (async)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1, 0x10, r2, 0x0) (async)
openat$kvm(0x0, &(0x7f0000000040), 0x535402, 0x0) (async)
ioctl$KVM_CREATE_VM(r5, 0x40049409, 0x0) (async)

7m15.928357523s ago: executing program 4 (id=831):
syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000080)="fb01ea6d6931e3ac2cc4a29ea6abf4e7454e37c4b8062147000000000067521ce16f8f1f3d9a7a835673312b54ebb2aa5cc87dd22627e700", 0x0, 0x48)
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x161642, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2f)
r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x4}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000004}}], 0x50}, 0x0, 0x0)
r7 = syz_kvm_vgic_v3_setup(r4, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000180)={0x8, <r8=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000040)={0x5, 0x1, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000500)={0x5, 0x0, 0x1000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x4, 0x3, 0x0})
r11 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r11, 0x0)
openat$kvm(0x0, &(0x7f0000000240), 0x670e94d674870166, 0x0)
r12 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x5)
ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, &(0x7f00000001c0)={0x8, <r13=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000380)})
ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f00000000c0)={0x5, 0x2, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, &(0x7f00000001c0)={0x8, <r14=>0xffffffffffffffff, 0x1})
ioctl$KVM_SET_DEVICE_ATTR(r14, 0x4018aee1, &(0x7f00000002c0)=@attr_other={0x0, 0x8, 0x100, &(0x7f0000000300)=0xc000000000000000})
ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x4, 0x2, 0x0})

6m37.555260201s ago: executing program 36 (id=830):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x161642, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
r4 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, r3, 0x1000002, 0x13, r2, 0x0)
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1, 0x10, r2, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x535402, 0x0)
ioctl$KVM_CREATE_VM(r5, 0x40049409, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x161642, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) (async)
mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, r3, 0x1000002, 0x13, r2, 0x0) (async)
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x0) (async)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48) (async)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1, 0x10, r2, 0x0) (async)
openat$kvm(0x0, &(0x7f0000000040), 0x535402, 0x0) (async)
ioctl$KVM_CREATE_VM(r5, 0x40049409, 0x0) (async)

6m28.395206348s ago: executing program 37 (id=831):
syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000080)="fb01ea6d6931e3ac2cc4a29ea6abf4e7454e37c4b8062147000000000067521ce16f8f1f3d9a7a835673312b54ebb2aa5cc87dd22627e700", 0x0, 0x48)
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x161642, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2f)
r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x4}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000004}}], 0x50}, 0x0, 0x0)
r7 = syz_kvm_vgic_v3_setup(r4, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000180)={0x8, <r8=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000040)={0x5, 0x1, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000500)={0x5, 0x0, 0x1000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x4, 0x3, 0x0})
r11 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r11, 0x0)
openat$kvm(0x0, &(0x7f0000000240), 0x670e94d674870166, 0x0)
r12 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x5)
ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, &(0x7f00000001c0)={0x8, <r13=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000380)})
ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f00000000c0)={0x5, 0x2, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, &(0x7f00000001c0)={0x8, <r14=>0xffffffffffffffff, 0x1})
ioctl$KVM_SET_DEVICE_ATTR(r14, 0x4018aee1, &(0x7f00000002c0)=@attr_other={0x0, 0x8, 0x100, &(0x7f0000000300)=0xc000000000000000})
ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x4, 0x2, 0x0})

1m9.499498972s ago: executing program 6 (id=832):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4360ae82, &(0x7f0000000240)={[0x0, 0x9, 0x3, 0xc, 0x5e, 0x2000000000002, 0x4df, 0x2, 0x9e8, 0x0, 0xc3b3, 0xee, 0x6, 0x5, 0x8, 0xff], 0x9000, 0x102402})
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x2}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x1, 0x80000, 0x10000, 0x0, 0x2, 0x2}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x4, 0x160)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, <r4=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

47.309710222s ago: executing program 7 (id=833):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x20)
ioctl$KVM_GET_DEVICE_ATTR_vm(r2, 0x4018aee2, &(0x7f0000000180)=@attr_other={0x0, 0x9, 0x3, &(0x7f0000000140)=0x4})
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000001c0)={0x5, <r3=>0xffffffffffffffff, 0x1})
ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000240)=@attr_other={0x0, 0x0, 0xb58, &(0x7f0000000200)=0x4})
r4 = openat$kvm(0x0, &(0x7f0000000080), 0x20000, 0x0)
ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x47)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_ARM_VCPU_INIT(r8, 0x4020aeae, &(0x7f0000000340)={0x5})
ioctl$KVM_SET_ONE_REG(r8, 0x4010aeac, &(0x7f0000000280)=@arm64_core={0x6030000000100024, &(0x7f0000000140)=0x6f})
syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r9 = syz_kvm_vgic_v3_setup(r5, 0x1, 0x40)
ioctl$KVM_GET_DEVICE_ATTR(r9, 0x4018aee2, &(0x7f0000000100)=@attr_arm64={0x0, 0x3, 0x3, &(0x7f00000000c0)=0xd})
r10 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
ioctl$KVM_CREATE_GUEST_MEMFD(r12, 0xc040aed4, 0xfffffffffffffffe)
r13 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
ioctl$KVM_CAP_ARM_MTE(r12, 0x4068aea3, &(0x7f0000000380))
ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f00000002c0)=@attr_other={0x0, 0x1b, 0x200, &(0x7f0000000400)=0xe})
r14 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r13, r14, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r14, 0x4010aeac, &(0x7f0000000100)=@arm64_sys={0x603000000013df1a, &(0x7f00000000c0)=0x3})

20.71764459s ago: executing program 38 (id=832):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4360ae82, &(0x7f0000000240)={[0x0, 0x9, 0x3, 0xc, 0x5e, 0x2000000000002, 0x4df, 0x2, 0x9e8, 0x0, 0xc3b3, 0xee, 0x6, 0x5, 0x8, 0xff], 0x9000, 0x102402})
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x2}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x1, 0x80000, 0x10000, 0x0, 0x2, 0x2}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x4, 0x160)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, <r4=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

0s ago: executing program 39 (id=833):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x20)
ioctl$KVM_GET_DEVICE_ATTR_vm(r2, 0x4018aee2, &(0x7f0000000180)=@attr_other={0x0, 0x9, 0x3, &(0x7f0000000140)=0x4})
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000001c0)={0x5, <r3=>0xffffffffffffffff, 0x1})
ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000240)=@attr_other={0x0, 0x0, 0xb58, &(0x7f0000000200)=0x4})
r4 = openat$kvm(0x0, &(0x7f0000000080), 0x20000, 0x0)
ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x47)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_ARM_VCPU_INIT(r8, 0x4020aeae, &(0x7f0000000340)={0x5})
ioctl$KVM_SET_ONE_REG(r8, 0x4010aeac, &(0x7f0000000280)=@arm64_core={0x6030000000100024, &(0x7f0000000140)=0x6f})
syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r9 = syz_kvm_vgic_v3_setup(r5, 0x1, 0x40)
ioctl$KVM_GET_DEVICE_ATTR(r9, 0x4018aee2, &(0x7f0000000100)=@attr_arm64={0x0, 0x3, 0x3, &(0x7f00000000c0)=0xd})
r10 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
ioctl$KVM_CREATE_GUEST_MEMFD(r12, 0xc040aed4, 0xfffffffffffffffe)
r13 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
ioctl$KVM_CAP_ARM_MTE(r12, 0x4068aea3, &(0x7f0000000380))
ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f00000002c0)=@attr_other={0x0, 0x1b, 0x200, &(0x7f0000000400)=0xe})
r14 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r13, r14, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r14, 0x4010aeac, &(0x7f0000000100)=@arm64_sys={0x603000000013df1a, &(0x7f00000000c0)=0x3})

kernel console output (not intermixed with test programs):

[  360.438731][   T24] audit: type=1400 audit(359.680:75): avc:  denied  { write } for  pid=3263 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  363.984345][   T24] audit: type=1400 audit(363.210:76): avc:  denied  { write } for  pid=3267 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  366.536995][ T3210] 8021q: adding VLAN 0 to HW filter on device bond0
[  373.049542][   T24] audit: type=1400 audit(372.290:77): avc:  denied  { write } for  pid=3275 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  377.298668][   T24] audit: type=1400 audit(376.540:78): avc:  denied  { write } for  pid=3278 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  390.365654][   T24] audit: type=1400 audit(389.600:79): avc:  denied  { write } for  pid=3283 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  395.174504][   T24] audit: type=1400 audit(394.340:80): avc:  denied  { write } for  pid=3286 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  398.001470][ T3210] eql: remember to turn off Van-Jacobson compression on your slave devices
[  407.061755][   T24] audit: type=1400 audit(406.300:81): avc:  denied  { write } for  pid=3292 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  410.471769][   T24] audit: type=1400 audit(409.710:82): avc:  denied  { write } for  pid=3295 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  420.151443][   T24] audit: type=1400 audit(419.390:83): avc:  denied  { write } for  pid=3300 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  423.734235][   T24] audit: type=1400 audit(422.930:84): avc:  denied  { write } for  pid=3303 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  436.508154][   T24] audit: type=1400 audit(435.750:85): avc:  denied  { write } for  pid=3309 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  440.035598][   T24] audit: type=1400 audit(439.270:86): avc:  denied  { write } for  pid=3312 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  445.512051][   T24] audit: type=1400 audit(444.750:87): avc:  denied  { write } for  pid=3314 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  450.174419][   T24] audit: type=1400 audit(449.390:88): avc:  denied  { write } for  pid=3317 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  457.341550][   T24] audit: type=1400 audit(456.580:89): avc:  denied  { write } for  pid=3320 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  460.954382][   T24] audit: type=1400 audit(460.180:90): avc:  denied  { write } for  pid=3323 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  469.464369][   T24] audit: type=1400 audit(468.700:91): avc:  denied  { write } for  pid=3327 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  473.115289][   T24] audit: type=1400 audit(472.340:92): avc:  denied  { write } for  pid=3330 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  492.782399][   T24] audit: type=1400 audit(492.020:93): avc:  denied  { write } for  pid=3341 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  496.255572][   T24] audit: type=1400 audit(495.480:94): avc:  denied  { write } for  pid=3344 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  505.366881][   T24] audit: type=1400 audit(504.590:95): avc:  denied  { write } for  pid=3348 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  510.144703][   T24] audit: type=1400 audit(509.380:96): avc:  denied  { write } for  pid=3351 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  527.328918][   T24] audit: type=1400 audit(526.570:97): avc:  denied  { write } for  pid=3356 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  530.845922][   T24] audit: type=1400 audit(530.070:98): avc:  denied  { write } for  pid=3359 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
Warning: Permanently added '[localhost]:18520' (ED25519) to the list of known hosts.
[  561.939281][   T24] audit: type=1400 audit(561.180:99): avc:  denied  { name_bind } for  pid=3364 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  562.716040][   T24] audit: type=1400 audit(561.950:100): avc:  denied  { execute } for  pid=3365 comm="sh" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[  562.740314][   T24] audit: type=1400 audit(561.980:101): avc:  denied  { execute_no_trans } for  pid=3365 comm="sh" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[  588.071475][   T24] audit: type=1400 audit(587.310:102): avc:  denied  { mounton } for  pid=3365 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[  588.109517][   T24] audit: type=1400 audit(587.350:103): avc:  denied  { mount } for  pid=3365 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  588.189630][ T3365] cgroup: Unknown subsys name 'net'
[  588.239959][   T24] audit: type=1400 audit(587.480:104): avc:  denied  { unmount } for  pid=3365 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  588.782225][ T3365] cgroup: Unknown subsys name 'cpuset'
[  588.979780][ T3365] cgroup: Unknown subsys name 'rlimit'
[  589.808024][   T24] audit: type=1400 audit(589.050:105): avc:  denied  { setattr } for  pid=3365 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  589.832385][   T24] audit: type=1400 audit(589.060:106): avc:  denied  { mounton } for  pid=3365 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[  589.855446][   T24] audit: type=1400 audit(589.090:107): avc:  denied  { mount } for  pid=3365 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[  590.781670][ T3368] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[  590.801345][   T24] audit: type=1400 audit(590.040:108): avc:  denied  { relabelto } for  pid=3368 comm="mkswap" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[  590.821532][   T24] audit: type=1400 audit(590.060:109): avc:  denied  { write } for  pid=3368 comm="mkswap" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
Setting up swapspace version 1, size = 127995904 bytes
[  590.998895][   T24] audit: type=1400 audit(590.240:110): avc:  denied  { read } for  pid=3365 comm="syz-executor" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[  591.015122][   T24] audit: type=1400 audit(590.250:111): avc:  denied  { open } for  pid=3365 comm="syz-executor" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[  591.061602][ T3365] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[  645.317507][   T24] audit: type=1400 audit(644.560:112): avc:  denied  { execmem } for  pid=3369 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  648.771108][   T24] audit: type=1400 audit(648.010:113): avc:  denied  { read } for  pid=3372 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  648.794793][   T24] audit: type=1400 audit(648.030:114): avc:  denied  { open } for  pid=3371 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  648.867425][   T24] audit: type=1400 audit(648.090:115): avc:  denied  { mounton } for  pid=3372 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  649.087802][   T24] audit: type=1400 audit(648.330:116): avc:  denied  { module_request } for  pid=3371 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  650.027437][   T24] audit: type=1400 audit(649.240:117): avc:  denied  { sys_module } for  pid=3371 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  670.247112][ T3371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  670.488111][ T3371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  670.548053][ T3372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  670.788008][ T3372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  681.549544][ T3371] hsr_slave_0: entered promiscuous mode
[  681.590271][ T3371] hsr_slave_1: entered promiscuous mode
[  682.550898][ T3372] hsr_slave_0: entered promiscuous mode
[  682.591617][ T3372] hsr_slave_1: entered promiscuous mode
[  682.626278][ T3372] debugfs: 'hsr0' already exists in 'hsr'
[  682.635370][ T3372] Cannot create hsr debugfs directory
[  687.705189][   T24] audit: type=1400 audit(686.940:118): avc:  denied  { create } for  pid=3371 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  687.755025][   T24] audit: type=1400 audit(686.990:119): avc:  denied  { write } for  pid=3371 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  687.818460][   T24] audit: type=1400 audit(687.060:120): avc:  denied  { read } for  pid=3371 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  687.940756][ T3371] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  688.145740][ T3371] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  688.238235][ T3371] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  688.400166][ T3371] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  688.470243][ T3371] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  688.600881][ T3371] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  688.622532][ T3371] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  688.707016][ T3371] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  690.479239][ T3372] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  690.727537][ T3372] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  690.809206][ T3372] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  690.975867][ T3372] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  691.052022][ T3372] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  691.260500][ T3372] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  691.349015][ T3372] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  691.556959][ T3372] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  705.082292][ T3371] 8021q: adding VLAN 0 to HW filter on device bond0
[  707.767545][ T3372] 8021q: adding VLAN 0 to HW filter on device bond0
[  749.732104][ T3371] veth0_vlan: entered promiscuous mode
[  750.167667][ T3371] veth1_vlan: entered promiscuous mode
[  752.136870][ T3371] veth0_macvtap: entered promiscuous mode
[  752.450910][ T3371] veth1_macvtap: entered promiscuous mode
[  754.548174][ T3372] veth0_vlan: entered promiscuous mode
[  755.697462][ T3443] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  755.722370][ T3443] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  755.728131][ T3443] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  755.735440][ T3443] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  755.880283][ T3372] veth1_vlan: entered promiscuous mode
[  758.886768][   T24] audit: type=1400 audit(758.110:121): avc:  denied  { mount } for  pid=3371 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  759.138928][   T24] audit: type=1400 audit(758.380:122): avc:  denied  { mounton } for  pid=3371 comm="syz-executor" path="/syzkaller.UklTR1/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  759.420384][   T24] audit: type=1400 audit(758.660:123): avc:  denied  { mount } for  pid=3371 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  759.565210][ T3372] veth0_macvtap: entered promiscuous mode
[  759.790545][   T24] audit: type=1400 audit(758.980:124): avc:  denied  { mounton } for  pid=3371 comm="syz-executor" path="/syzkaller.UklTR1/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  760.030661][   T24] audit: type=1400 audit(759.270:125): avc:  denied  { mounton } for  pid=3371 comm="syz-executor" path="/syzkaller.UklTR1/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  760.072343][ T3372] veth1_macvtap: entered promiscuous mode
[  760.887633][   T24] audit: type=1400 audit(760.130:126): avc:  denied  { unmount } for  pid=3371 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  761.214729][   T24] audit: type=1400 audit(760.380:127): avc:  denied  { mounton } for  pid=3371 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1544 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[  761.318765][   T24] audit: type=1400 audit(760.550:128): avc:  denied  { mount } for  pid=3371 comm="syz-executor" name="/" dev="gadgetfs" ino=3722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  761.798014][   T24] audit: type=1400 audit(760.910:129): avc:  denied  { mount } for  pid=3371 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  761.931326][   T24] audit: type=1400 audit(761.110:130): avc:  denied  { mounton } for  pid=3371 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[  762.936135][ T3417] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  762.945924][ T3417] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  762.995066][ T3417] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  762.999294][ T3417] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  763.991167][ T3371] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  765.877546][   T24] kauditd_printk_skb: 1 callbacks suppressed
[  765.882335][   T24] audit: type=1400 audit(765.110:132): avc:  denied  { read write } for  pid=3371 comm="syz-executor" name="loop0" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  765.935932][   T24] audit: type=1400 audit(765.130:133): avc:  denied  { open } for  pid=3371 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  765.954180][   T24] audit: type=1400 audit(765.190:134): avc:  denied  { ioctl } for  pid=3371 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=636 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  771.694826][   T24] audit: type=1400 audit(770.910:135): avc:  denied  { write } for  pid=3522 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  777.174571][   T24] audit: type=1400 audit(776.410:136): avc:  denied  { write } for  pid=3528 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  777.544478][   T24] audit: type=1400 audit(776.770:137): avc:  denied  { read } for  pid=3525 comm="syz.0.1" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  777.669711][   T24] audit: type=1400 audit(776.910:138): avc:  denied  { open } for  pid=3525 comm="syz.0.1" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  777.766426][   T24] audit: type=1400 audit(777.000:139): avc:  denied  { ioctl } for  pid=3525 comm="syz.0.1" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  778.889423][   T24] audit: type=1400 audit(778.130:140): avc:  denied  { execute } for  pid=3525 comm="syz.0.1" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=3803 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  782.369892][   T24] audit: type=1400 audit(781.610:141): avc:  denied  { setattr } for  pid=3527 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  784.358294][   T24] audit: type=1400 audit(783.600:142): avc:  denied  { write } for  pid=3527 comm="syz.1.2" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  785.065781][   T24] audit: type=1400 audit(784.220:143): avc:  denied  { create } for  pid=3527 comm="syz.1.2" anonclass=[kvm-gmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  785.175334][   T24] audit: type=1400 audit(784.410:144): avc:  denied  { map } for  pid=3527 comm="syz.1.2" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=3923 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  785.301597][   T24] audit: type=1400 audit(784.460:145): avc:  denied  { read execute } for  pid=3527 comm="syz.1.2" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=3923 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  826.069725][   T24] audit: type=1400 audit(825.300:146): avc:  denied  { append } for  pid=3553 comm="syz.0.10" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  827.354262][   T24] audit: type=1400 audit(826.560:147): avc:  denied  { write } for  pid=3553 comm="syz.0.10" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=4325 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  834.880128][ T3561] kvm [3561]: Failed to find VMA for hva 0x20c01000
[ 1100.049940][ T3707] FAULT_INJECTION: forcing a failure.
[ 1100.049940][ T3707] name fail_usercopy, interval 1, probability 0, space 0, times 1
[ 1100.097818][ T3707] CPU: 0 UID: 0 PID: 3707 Comm: syz.0.62 Not tainted syzkaller #0 PREEMPT 
[ 1100.098510][ T3707] Hardware name: linux,dummy-virt (DT)
[ 1100.098993][ T3707] Call trace:
[ 1100.099404][ T3707]  show_stack+0x2c/0x3c (C)
[ 1100.101430][ T3707]  __dump_stack+0x30/0x40
[ 1100.101856][ T3707]  dump_stack_lvl+0xd8/0x12c
[ 1100.102187][ T3707]  dump_stack+0x1c/0x28
[ 1100.102489][ T3707]  should_fail_ex+0x56c/0x6d8
[ 1100.102829][ T3707]  should_fail+0x14/0x24
[ 1100.103122][ T3707]  should_fail_usercopy+0x20/0x30
[ 1100.103456][ T3707]  simple_read_from_buffer+0xd0/0x294
[ 1100.103747][ T3707]  proc_fail_nth_read+0x184/0x214
[ 1100.104059][ T3707]  vfs_read+0x220/0x9d8
[ 1100.104364][ T3707]  ksys_read+0x108/0x1fc
[ 1100.104572][ T3707]  __arm64_sys_read+0x98/0xcc
[ 1100.104821][ T3707]  invoke_syscall+0x94/0x1ec
[ 1100.105130][ T3707]  el0_svc_common+0x120/0x2f4
[ 1100.105424][ T3707]  do_el0_svc+0x58/0x74
[ 1100.105713][ T3707]  el0_svc+0x64/0x240
[ 1100.106039][ T3707]  el0t_64_sync_handler+0x84/0x12c
[ 1100.106351][ T3707]  el0t_64_sync+0x198/0x19c
[ 1112.945179][ T3714] kvm [3714]: Failed to find VMA for hva 0x20d8d000
[ 1177.976184][   T24] audit: type=1400 audit(1177.200:148): avc:  denied  { map } for  pid=3749 comm="syz.0.77" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1178.010585][   T24] audit: type=1400 audit(1177.230:149): avc:  denied  { execute } for  pid=3749 comm="syz.0.77" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1204.335175][   T24] audit: type=1400 audit(1203.570:150): avc:  denied  { write } for  pid=3767 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1212.167636][   T24] audit: type=1400 audit(1211.400:151): avc:  denied  { write } for  pid=3776 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1257.122450][   T24] audit: type=1400 audit(1256.330:152): avc:  denied  { ioctl } for  pid=3806 comm="syz.0.94" path="net:[4026532628]" dev="nsfs" ino=4026532628 ioctlcmd=0xb705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 1269.127048][   T24] audit: type=1400 audit(1268.360:153): avc:  denied  { mmap_zero } for  pid=3813 comm="syz.0.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1
[ 1359.628157][ T3872] kvm [3872]: Failed to find VMA for hva 0x20c01000
[ 1359.775040][ T3872] kvm [3872]: Failed to find VMA for hva 0x20c01000
[ 1459.767665][   T24] audit: type=1400 audit(1458.990:154): avc:  denied  { map } for  pid=3928 comm="syz.0.134" path="/" dev="tmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[ 1506.967907][   T24] audit: type=1400 audit(1506.200:155): avc:  denied  { write } for  pid=3958 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1514.179922][   T24] audit: type=1400 audit(1513.320:156): avc:  denied  { write } for  pid=3970 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1868.655868][   T24] audit: type=1400 audit(1867.870:157): avc:  denied  { write } for  pid=4186 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1876.794148][   T24] audit: type=1400 audit(1875.990:158): avc:  denied  { write } for  pid=4195 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1954.126474][   T24] audit: type=1400 audit(1953.320:159): avc:  denied  { execute } for  pid=4228 comm="syz-executor" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[ 1954.158734][   T24] audit: type=1400 audit(1953.400:160): avc:  denied  { execute_no_trans } for  pid=4228 comm="syz-executor" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[ 2009.238963][ T4229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2009.438044][ T4229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2016.232288][ T4235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2016.505014][ T4235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2031.349233][ T4229] hsr_slave_0: entered promiscuous mode
[ 2031.458230][ T4229] hsr_slave_1: entered promiscuous mode
[ 2031.546867][ T4229] debugfs: 'hsr0' already exists in 'hsr'
[ 2031.556247][ T4229] Cannot create hsr debugfs directory
[ 2043.639898][ T4235] hsr_slave_0: entered promiscuous mode
[ 2043.800283][ T4235] hsr_slave_1: entered promiscuous mode
[ 2043.865450][ T4235] debugfs: 'hsr0' already exists in 'hsr'
[ 2043.884109][ T4235] Cannot create hsr debugfs directory
[ 2045.911408][ T3452] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2047.811486][ T3452] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2049.466808][ T3452] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2050.569039][ T3452] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2055.416643][ T4229] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 2055.552530][ T4229] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 2055.639119][ T4229] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 2055.829026][ T4229] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 2056.779758][ T4229] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 2057.089547][ T4229] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 2057.441024][ T4229] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 2057.632471][ T4229] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 2062.355663][ T3452] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2062.539081][ T3452] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2062.596964][ T3452] bond0 (unregistering): Released all slaves
[ 2063.531267][ T3452] hsr_slave_0: left promiscuous mode
[ 2063.596386][ T3452] hsr_slave_1: left promiscuous mode
[ 2063.849267][ T3452] veth1_macvtap: left promiscuous mode
[ 2063.871370][ T3452] veth0_macvtap: left promiscuous mode
[ 2063.889154][ T3452] veth1_vlan: left promiscuous mode
[ 2063.910091][ T3452] veth0_vlan: left promiscuous mode
[ 2079.295949][ T4235] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 2079.636203][ T4235] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 2079.726594][ T4235] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 2080.016244][ T4235] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 2080.542714][ T3452] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2080.942262][ T4235] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 2081.111914][ T4235] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 2081.748045][ T3452] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2082.178281][ T4235] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 2082.460606][ T4235] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 2083.191247][ T3452] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2084.522584][ T3452] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2091.204934][   T24] audit: type=1400 audit(2090.430:161): avc:  denied  { write } for  pid=4318 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2097.812506][   T24] audit: type=1400 audit(2097.050:162): avc:  denied  { write } for  pid=4330 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2101.389170][ T3452] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2101.895807][ T3452] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2102.266212][ T3452] bond0 (unregistering): Released all slaves
[ 2103.221079][ T3210] 8021q: adding VLAN 0 to HW filter on device eth1
[ 2104.055830][ T3452] hsr_slave_0: left promiscuous mode
[ 2104.129259][ T3452] hsr_slave_1: left promiscuous mode
[ 2104.556818][ T3452] veth1_macvtap: left promiscuous mode
[ 2104.560144][ T3452] veth0_macvtap: left promiscuous mode
[ 2104.586894][ T3452] veth1_vlan: left promiscuous mode
[ 2104.590860][ T3452] veth0_vlan: left promiscuous mode
[ 2124.475580][ T4229] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2129.686320][ T4235] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2132.956200][   T24] audit: type=1400 audit(2132.140:163): avc:  denied  { write } for  pid=4341 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2138.162121][   T24] audit: type=1400 audit(2137.400:164): avc:  denied  { write } for  pid=4350 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2142.962388][ T3210] 8021q: adding VLAN 0 to HW filter on device eth2
[ 2155.011349][   T24] audit: type=1400 audit(2154.250:165): avc:  denied  { write } for  pid=4364 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2160.774470][   T24] audit: type=1400 audit(2159.990:166): avc:  denied  { write } for  pid=4373 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2165.466364][ T3210] 8021q: adding VLAN 0 to HW filter on device eth3
[ 2178.264767][   T24] audit: type=1400 audit(2177.500:167): avc:  denied  { write } for  pid=4387 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2183.974428][   T24] audit: type=1400 audit(2183.190:168): avc:  denied  { write } for  pid=4398 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2187.900757][ T3210] 8021q: adding VLAN 0 to HW filter on device eth4
[ 2198.691141][   T24] audit: type=1400 audit(2197.930:169): avc:  denied  { write } for  pid=4412 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2198.875673][ T4229] veth0_vlan: entered promiscuous mode
[ 2199.586843][ T4229] veth1_vlan: entered promiscuous mode
[ 2202.056991][ T4229] veth0_macvtap: entered promiscuous mode
[ 2202.379503][ T4229] veth1_macvtap: entered promiscuous mode
[ 2205.275956][   T24] audit: type=1400 audit(2204.450:170): avc:  denied  { write } for  pid=4419 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2205.525561][ T4235] veth0_vlan: entered promiscuous mode
[ 2205.599117][ T3452] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2205.604417][ T3452] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2205.616302][ T3452] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2205.639544][ T3452] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2206.736126][ T4235] veth1_vlan: entered promiscuous mode
[ 2209.450098][ T3210] 8021q: adding VLAN 0 to HW filter on device eth5
[ 2210.645866][ T4235] veth0_macvtap: entered promiscuous mode
[ 2211.219743][ T4235] veth1_macvtap: entered promiscuous mode
[ 2214.324234][ T3443] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2214.344984][ T3443] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2214.391532][ T3443] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2214.392475][ T3443] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2226.732214][   T24] audit: type=1400 audit(2225.970:171): avc:  denied  { write } for  pid=4426 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2236.975062][   T24] audit: type=1400 audit(2236.160:172): avc:  denied  { write } for  pid=4435 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2244.008769][ T3210] 8021q: adding VLAN 0 to HW filter on device eth6
[ 2261.194479][   T24] audit: type=1400 audit(2260.380:173): avc:  denied  { write } for  pid=4452 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2269.777810][   T24] audit: type=1400 audit(2268.990:174): avc:  denied  { write } for  pid=4458 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2276.019088][ T3210] 8021q: adding VLAN 0 to HW filter on device eth7
[ 2296.425334][   T24] audit: type=1400 audit(2295.660:175): avc:  denied  { write } for  pid=4470 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2306.278763][   T24] audit: type=1400 audit(2305.480:176): avc:  denied  { write } for  pid=4479 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2311.540508][ T3210] 8021q: adding VLAN 0 to HW filter on device eth8
[ 2353.914567][   T24] audit: type=1400 audit(2353.090:177): avc:  denied  { write } for  pid=4511 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2364.464399][   T24] audit: type=1400 audit(2363.680:178): avc:  denied  { write } for  pid=4520 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2380.124757][   T24] audit: type=1400 audit(2379.330:179): avc:  denied  { write } for  pid=4530 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2388.687374][   T24] audit: type=1400 audit(2387.790:180): avc:  denied  { write } for  pid=4541 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2412.376532][   T24] audit: type=1400 audit(2411.590:181): avc:  denied  { write } for  pid=4555 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2421.137193][   T24] audit: type=1400 audit(2420.380:182): avc:  denied  { write } for  pid=4567 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2432.394086][   T24] audit: type=1400 audit(2431.620:183): avc:  denied  { write } for  pid=4571 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2435.945051][   T24] audit: type=1400 audit(2435.110:184): avc:  denied  { write } for  pid=4574 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2447.857317][   T24] audit: type=1400 audit(2447.070:185): avc:  denied  { write } for  pid=4579 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2456.807863][   T24] audit: type=1400 audit(2456.020:186): avc:  denied  { write } for  pid=4589 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2497.594757][   T24] audit: type=1400 audit(2496.820:187): avc:  denied  { write } for  pid=4613 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2506.337566][   T24] audit: type=1400 audit(2505.580:188): avc:  denied  { write } for  pid=4621 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2529.653939][   T24] audit: type=1400 audit(2528.870:189): avc:  denied  { write } for  pid=4634 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2539.094747][   T24] audit: type=1400 audit(2538.310:190): avc:  denied  { write } for  pid=4644 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2556.439080][   T24] audit: type=1400 audit(2555.610:191): avc:  denied  { write } for  pid=4653 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2565.179558][   T24] audit: type=1400 audit(2564.400:192): avc:  denied  { write } for  pid=4664 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2581.251948][   T24] audit: type=1400 audit(2580.490:193): avc:  denied  { write } for  pid=4671 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2591.812113][   T24] audit: type=1400 audit(2591.010:194): avc:  denied  { write } for  pid=4681 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2608.472100][   T24] audit: type=1400 audit(2607.710:195): avc:  denied  { write } for  pid=4687 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2617.499697][   T24] audit: type=1400 audit(2616.740:196): avc:  denied  { write } for  pid=4695 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2678.973798][   T24] audit: type=1400 audit(2678.200:197): avc:  denied  { execute } for  pid=4727 comm="syz.2.297" path=2F33312F10FBFF67525673312B0104 dev="tmpfs" ino=173 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[ 3049.967580][   T24] audit: type=1400 audit(3049.140:198): avc:  denied  { write } for  pid=4953 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 3059.054913][   T24] audit: type=1400 audit(3058.270:199): avc:  denied  { write } for  pid=4961 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 3359.672034][   T24] audit: type=1400 audit(3358.910:200): avc:  denied  { write } for  pid=5124 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 3368.698114][   T24] audit: type=1400 audit(3367.940:201): avc:  denied  { write } for  pid=5134 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 3424.219367][ T5168] kvm [5168]: Failed to find VMA for hva 0x20d8d000
[ 3587.341207][ T5272] kvm [5272]: Failed to find VMA for hva 0x21016000
[ 3711.720647][   T24] audit: type=1400 audit(3710.960:202): avc:  denied  { write } for  pid=5335 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 3719.854748][   T24] audit: type=1400 audit(3719.080:203): avc:  denied  { write } for  pid=5341 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4106.093731][   T24] audit: type=1400 audit(4105.320:204): avc:  denied  { write } for  pid=5562 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4115.457624][   T24] audit: type=1400 audit(4114.670:205): avc:  denied  { write } for  pid=5569 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4124.678234][ T5576] debugfs: 'vgic-its-state@8080000' already exists in '5576-4'
[ 4132.266920][ T5581] kvm [5581]: Failed to find VMA for hva 0x20c79000
[ 4475.606234][ T4334] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4476.702440][ T4334] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4477.721865][ T4334] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4478.874879][ T4334] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4491.891162][ T4334] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 4491.982034][ T4334] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 4492.044008][ T4334] bond0 (unregistering): Released all slaves
[ 4493.777683][ T4334] hsr_slave_0: left promiscuous mode
[ 4493.878195][ T4334] hsr_slave_1: left promiscuous mode
[ 4494.274462][ T4334] veth1_macvtap: left promiscuous mode
[ 4494.277882][ T4334] veth0_macvtap: left promiscuous mode
[ 4494.305511][ T4334] veth1_vlan: left promiscuous mode
[ 4494.327387][ T4334] veth0_vlan: left promiscuous mode
[ 4510.069210][ T5725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 4510.491163][ T5725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 4515.037528][ T4334] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4517.059967][ T4334] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4518.646643][ T4334] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4520.110336][ T4334] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4526.307099][   T24] audit: type=1400 audit(4525.500:206): avc:  denied  { write } for  pid=5774 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4532.173951][   T24] audit: type=1400 audit(4531.400:207): avc:  denied  { write } for  pid=5785 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4537.231775][ T4334] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 4537.372375][ T4334] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 4537.586307][ T4334] bond0 (unregistering): Released all slaves
[ 4538.450317][ T3210] 8021q: adding VLAN 0 to HW filter on device eth9
[ 4538.801605][ T4334] hsr_slave_0: left promiscuous mode
[ 4538.874377][ T4334] hsr_slave_1: left promiscuous mode
[ 4539.267565][ T4334] veth1_macvtap: left promiscuous mode
[ 4539.275291][ T4334] veth0_macvtap: left promiscuous mode
[ 4539.288500][ T4334] veth1_vlan: left promiscuous mode
[ 4539.304965][ T4334] veth0_vlan: left promiscuous mode
[ 4554.237981][ T5725] hsr_slave_0: entered promiscuous mode
[ 4554.318125][ T5725] hsr_slave_1: entered promiscuous mode
[ 4561.476915][   T24] audit: type=1400 audit(4560.700:208): avc:  denied  { write } for  pid=5800 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4561.547056][ T5734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 4562.002401][ T5734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 4565.818363][   T24] audit: type=1400 audit(4565.050:209): avc:  denied  { write } for  pid=5803 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4567.941008][ T5725] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 4568.322547][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 4568.440675][ T5725] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 4568.746273][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 4568.792253][ T5725] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 4568.941801][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 4569.000928][ T5725] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 4569.206458][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 4571.050137][ T3210] 8021q: adding VLAN 0 to HW filter on device eth10
[ 4585.719351][   T24] audit: type=1400 audit(4584.960:210): avc:  denied  { write } for  pid=5824 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4590.087084][ T5734] hsr_slave_0: entered promiscuous mode
[ 4590.138365][ T5734] hsr_slave_1: entered promiscuous mode
[ 4590.177514][ T5734] debugfs: 'hsr0' already exists in 'hsr'
[ 4590.195547][ T5734] Cannot create hsr debugfs directory
[ 4590.334617][   T24] audit: type=1400 audit(4589.570:211): avc:  denied  { write } for  pid=5831 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4594.127067][ T5725] 8021q: adding VLAN 0 to HW filter on device bond0
[ 4594.237102][ T3210] 8021q: adding VLAN 0 to HW filter on device eth11
[ 4603.807615][ T5734] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 4604.146989][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 4604.227669][ T5734] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 4604.437807][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 4604.554589][ T5734] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 4604.778058][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 4604.802452][ T5734] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 4605.154822][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 4608.625053][   T24] audit: type=1400 audit(4607.850:212): avc:  denied  { write } for  pid=5840 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4616.014362][   T24] audit: type=1400 audit(4615.240:213): avc:  denied  { write } for  pid=5855 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4620.918950][ T3210] 8021q: adding VLAN 0 to HW filter on device eth12
[ 4628.428015][ T5734] 8021q: adding VLAN 0 to HW filter on device bond0
[ 4628.496409][   T24] audit: type=1400 audit(4627.720:214): avc:  denied  { write } for  pid=5863 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4636.703999][   T24] audit: type=1400 audit(4635.920:215): avc:  denied  { write } for  pid=5870 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4657.598153][   T24] audit: type=1400 audit(4656.770:216): avc:  denied  { write } for  pid=5885 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4663.856458][   T24] audit: type=1400 audit(4663.060:217): avc:  denied  { write } for  pid=5895 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4668.239673][ T3210] 8021q: adding VLAN 0 to HW filter on device eth13
[ 4681.201514][   T24] audit: type=1400 audit(4680.440:218): avc:  denied  { write } for  pid=5910 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4688.756159][   T24] audit: type=1400 audit(4687.970:219): avc:  denied  { write } for  pid=5920 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4694.409122][ T3210] 8021q: adding VLAN 0 to HW filter on device eth14
[ 4702.646946][ T5725] veth0_vlan: entered promiscuous mode
[ 4703.751703][ T5725] veth1_vlan: entered promiscuous mode
[ 4707.185430][ T5725] veth0_macvtap: entered promiscuous mode
[ 4707.856618][ T5725] veth1_macvtap: entered promiscuous mode
[ 4711.375673][ T5768] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 4711.425310][ T5768] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 4711.429247][ T5768] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 4711.471031][ T5768] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 4715.110561][   T24] audit: type=1400 audit(4714.350:220): avc:  denied  { write } for  pid=5934 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4723.705442][   T24] audit: type=1400 audit(4722.930:221): avc:  denied  { write } for  pid=5942 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4730.168603][ T3210] 8021q: adding VLAN 0 to HW filter on device eth15
[ 4745.925967][ T5734] veth0_vlan: entered promiscuous mode
[ 4747.220954][ T5734] veth1_vlan: entered promiscuous mode
[ 4747.871131][   T24] audit: type=1400 audit(4747.090:222): avc:  denied  { write } for  pid=5958 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4750.922354][ T5734] veth0_macvtap: entered promiscuous mode
[ 4751.667946][ T5734] veth1_macvtap: entered promiscuous mode
[ 4755.848238][ T3443] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 4755.911349][   T40] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 4755.985473][   T40] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 4756.028328][ T3443] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 4760.420680][   T24] audit: type=1400 audit(4759.660:223): avc:  denied  { write } for  pid=5962 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4767.726839][ T3210] 8021q: adding VLAN 0 to HW filter on device eth16
[ 4801.595351][ T5992] FAULT_INJECTION: forcing a failure.
[ 4801.595351][ T5992] name failslab, interval 1, probability 0, space 0, times 1
[ 4801.628583][ T5992] CPU: 0 UID: 0 PID: 5992 Comm: syz.4.618 Not tainted syzkaller #0 PREEMPT 
[ 4801.628998][ T5992] Hardware name: linux,dummy-virt (DT)
[ 4801.629113][ T5992] Call trace:
[ 4801.629192][ T5992]  show_stack+0x2c/0x3c (C)
[ 4801.629565][ T5992]  __dump_stack+0x30/0x40
[ 4801.629908][ T5992]  dump_stack_lvl+0xd8/0x12c
[ 4801.630221][ T5992]  dump_stack+0x1c/0x28
[ 4801.630514][ T5992]  should_fail_ex+0x56c/0x6d8
[ 4801.630825][ T5992]  should_failslab+0xb8/0xec
[ 4801.631118][ T5992]  __kmalloc_cache_noprof+0x94/0x538
[ 4801.631421][ T5992]  kvm_set_memory_region+0x6d4/0xb74
[ 4801.631753][ T5992]  kvm_vm_ioctl_set_memory_region+0x8c/0xbc
[ 4801.632058][ T5992]  kvm_vm_ioctl+0x858/0x9b0
[ 4801.632307][ T5992]  __arm64_sys_ioctl+0x18c/0x244
[ 4801.632606][ T5992]  invoke_syscall+0x94/0x1ec
[ 4801.632973][ T5992]  el0_svc_common+0x120/0x2f4
[ 4801.633268][ T5992]  do_el0_svc+0x58/0x74
[ 4801.633543][ T5992]  el0_svc+0x64/0x240
[ 4801.633861][ T5992]  el0t_64_sync_handler+0x84/0x12c
[ 4801.634186][ T5992]  el0t_64_sync+0x198/0x19c
[ 4825.922471][   T24] audit: type=1400 audit(4825.160:224): avc:  denied  { write } for  pid=6004 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4837.504212][   T24] audit: type=1400 audit(4836.650:225): avc:  denied  { write } for  pid=6014 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4860.620244][   T24] audit: type=1400 audit(4859.850:226): avc:  denied  { write } for  pid=6029 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4871.505868][   T24] audit: type=1400 audit(4870.700:227): avc:  denied  { write } for  pid=6035 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4892.407337][   T24] audit: type=1400 audit(4891.650:228): avc:  denied  { write } for  pid=6044 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4904.016053][   T24] audit: type=1400 audit(4903.230:229): avc:  denied  { write } for  pid=6053 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4939.857816][   T24] audit: type=1400 audit(4939.100:230): avc:  denied  { write } for  pid=6073 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4951.552388][   T24] audit: type=1400 audit(4950.790:231): avc:  denied  { write } for  pid=6082 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4983.666910][   T24] audit: type=1400 audit(4982.900:232): avc:  denied  { write } for  pid=6100 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4990.957787][   T24] audit: type=1400 audit(4989.990:233): avc:  denied  { write } for  pid=6103 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5011.004467][   T24] audit: type=1400 audit(5010.230:234): avc:  denied  { write } for  pid=6117 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5022.935123][   T24] audit: type=1400 audit(5022.080:235): avc:  denied  { write } for  pid=6126 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5047.158023][   T24] audit: type=1400 audit(5046.390:236): avc:  denied  { write } for  pid=6140 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5058.414163][   T24] audit: type=1400 audit(5057.610:237): avc:  denied  { write } for  pid=6149 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5081.274658][   T24] audit: type=1400 audit(5080.500:238): avc:  denied  { write } for  pid=6156 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5091.646202][   T24] audit: type=1400 audit(5090.810:239): avc:  denied  { write } for  pid=6168 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5109.984010][   T24] audit: type=1400 audit(5109.220:240): avc:  denied  { write } for  pid=6179 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5122.235348][   T24] audit: type=1400 audit(5121.440:241): avc:  denied  { write } for  pid=6188 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5217.888406][   T24] audit: type=1400 audit(5217.060:242): avc:  denied  { write } for  pid=6239 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5227.304496][   T24] audit: type=1400 audit(5226.500:243): avc:  denied  { write } for  pid=6245 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5496.693916][   T24] audit: type=1400 audit(5495.910:244): avc:  denied  { write } for  pid=6386 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5500.961812][   T24] audit: type=1400 audit(5500.200:245): avc:  denied  { write } for  pid=6389 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5772.394237][   T24] audit: type=1400 audit(5771.610:246): avc:  denied  { write } for  pid=6536 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5784.314016][   T24] audit: type=1400 audit(5783.550:247): avc:  denied  { write } for  pid=6544 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6299.048307][   T24] audit: type=1400 audit(6298.270:248): avc:  denied  { write } for  pid=6803 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6306.354113][   T24] audit: type=1400 audit(6305.540:249): avc:  denied  { write } for  pid=6807 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6466.296401][ T6839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 6466.886645][ T6839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 6482.332090][ T6846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 6482.592604][ T6846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 6495.841810][ T6839] hsr_slave_0: entered promiscuous mode
[ 6495.978874][ T6839] hsr_slave_1: entered promiscuous mode
[ 6496.025249][ T6839] debugfs: 'hsr0' already exists in 'hsr'
[ 6496.028361][ T6839] Cannot create hsr debugfs directory
[ 6518.879196][ T6846] hsr_slave_0: entered promiscuous mode
[ 6518.956368][ T6846] hsr_slave_1: entered promiscuous mode
[ 6519.026126][ T6846] debugfs: 'hsr0' already exists in 'hsr'
[ 6519.049264][ T6846] Cannot create hsr debugfs directory
[ 6522.158093][ T6839] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 6522.411587][ T6839] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 6522.586509][ T6839] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 6522.865830][ T6839] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 6522.921752][ T6839] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 6523.349040][ T6839] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 6523.482569][ T6839] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 6523.932016][ T6839] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 6539.249004][ T6846] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 6539.736962][ T6846] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 6539.897866][ T6846] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 6540.297953][ T6846] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 6540.341482][ T6846] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 6540.746080][ T6846] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 6540.880893][ T6846] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 6541.157589][ T6846] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 6556.551341][ T6839] 8021q: adding VLAN 0 to HW filter on device bond0
[ 6574.408952][ T6846] 8021q: adding VLAN 0 to HW filter on device bond0
[ 6701.869527][ T6839] veth0_vlan: entered promiscuous mode
[ 6703.255687][ T6839] veth1_vlan: entered promiscuous mode
[ 6706.988222][ T6839] veth0_macvtap: entered promiscuous mode
[ 6707.928585][ T6839] veth1_macvtap: entered promiscuous mode
[ 6711.731948][ T5743] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 6711.733976][ T5743] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 6711.867988][ T5743] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 6711.885130][ T5743] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 6719.549189][ T6846] veth0_vlan: entered promiscuous mode
[ 6720.979079][ T6846] veth1_vlan: entered promiscuous mode
[ 6725.367991][ T6846] veth0_macvtap: entered promiscuous mode
[ 6726.269983][ T6846] veth1_macvtap: entered promiscuous mode
[ 6731.309327][ T5880] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 6731.401582][ T5072] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 6731.434576][ T5072] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 6731.620085][ T5072] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 6747.866046][   T24] audit: type=1400 audit(6747.060:250): avc:  denied  { write } for  pid=7005 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6761.644387][   T24] audit: type=1400 audit(6760.880:251): avc:  denied  { write } for  pid=7014 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6792.927293][   T26] INFO: task syz.4.831:6836 blocked for more than 430 seconds.
[ 6792.941420][   T26]       Not tainted syzkaller #0
[ 6792.942360][   T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 6792.943916][   T26] task:syz.4.831       state:D stack:0     pid:6836  tgid:6836  ppid:5725   task_flags:0x400040 flags:0x00000011
[ 6792.946703][   T26] Call trace:
[ 6792.947102][   T26]  __switch_to+0x5e0/0xb70 (T)
[ 6792.947759][   T26]  __schedule+0x1e0c/0x38cc
[ 6792.948261][   T26]  schedule+0x1b4/0x274
[ 6792.948734][   T26]  schedule_timeout+0x68/0x1e4
[ 6792.949258][   T26]  wait_for_completion+0x1b8/0x414
[ 6792.949761][   T26]  __synchronize_srcu+0x1c8/0x208
[ 6792.950253][   T26]  synchronize_srcu+0x668/0x8dc
[ 6792.950738][   T26]  mmu_notifier_unregister+0x33c/0x444
[ 6792.951279][   T26]  kvm_put_kvm+0x69c/0xbbc
[ 6792.951815][   T26]  kvm_vm_release+0x58/0x78
[ 6792.952280][   T26]  __fput+0x4ac/0x978
[ 6793.066725][   T26]  ____fput+0x20/0x30
[ 6793.076317][   T26]  task_work_run+0x1b8/0x250
SYZFAIL: failed to recv rpc
[ 6793.114518][   T26]  exit_to_user_mode_loop+0x110/0x188
[ 6793.145859][   T26]  el0_svc+0x18c/0x240
[ 6793.146592][   T26]  el0t_64_sync_handler+0x84/0x12c
[ 6793.147158][   T26]  el0t_64_sync+0x198/0x19c
[ 6793.148722][   T26] 
[ 6793.148722][   T26] Showing all locks held in the system:
[ 6793.149235][   T26] 1 lock held by khungtaskd/26:
[ 6793.149608][   T26]  #0: ffff800087e93598 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x4c/0x188
[ 6793.152147][   T26] 1 lock held by syslogd/3169:
[ 6793.152521][   T26] 2 locks held by getty/3239:
[ 6793.255109][   T26]  #0: aef00000124aa0a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c
[ 6793.257065][   T26]  #1: 7aff80008cbdb2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x314/0x11f8
[ 6793.258791][   T26] 3 locks held by kworker/u4:8/5743:
[ 6793.259153][   T26] 3 locks held by kworker/u4:10/5768:
[ 6793.259512][   T26] 3 locks held by kworker/u4:11/5880:
[ 6793.259874][   T26] 2 locks held by kworker/u4:0/6704:
[ 6793.260192][   T26] 2 locks held by syz.5.830/6833:
[ 6793.260506][   T26] 3 locks held by kworker/u4:6/6910:
[ 6793.260842][   T26] 2 locks held by kworker/u4:12/6929:
[ 6793.261128][   T26]  #0: f5f000000d034140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x958/0x154c
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 6793.385897][   T26]  #1: ffff80008ff47ce8 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x978/0x154c
[ 6793.388134][   T26] 3 locks held by kworker/u4:13/6940:
[ 6793.388466][   T26] 2 locks held by syz-executor/7022:
[ 6793.388766][   T26] 1 lock held by modprobe/7023:
[ 6793.389210][   T26] 
[ 6793.389459][   T26] =============================================
[ 6793.389459][   T26] 
[ 6793.390397][   T26] Kernel panic - not syncing: hung_task: blocked tasks
[ 6793.398465][   T26] CPU: 0 UID: 0 PID: 26 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT 
[ 6793.399755][   T26] Hardware name: linux,dummy-virt (DT)
[ 6793.400718][   T26] Call trace:
[ 6793.401412][   T26]  show_stack+0x2c/0x3c (C)
[ 6793.402477][   T26]  __dump_stack+0x30/0x40
[ 6793.403478][   T26]  dump_stack_lvl+0x30/0x12c
[ 6793.404501][   T26]  dump_stack+0x1c/0x28
[ 6793.405414][   T26]  vpanic+0x4cc/0x844
[ 6793.406270][   T26]  vpanic+0x0/0x844
[ 6793.407093][   T26]  hung_task_panic+0x0/0x2c
[ 6793.408032][   T26]  kthread+0x4cc/0x514
[ 6793.408917][   T26]  ret_from_fork+0x10/0x20
[ 6793.410691][   T26] Kernel Offset: disabled
[ 6793.411543][   T26] CPU features: 0x00000000,00d1802f,df1847a1,057ffe1f
[ 6793.412677][   T26] Memory Limit: none
[ 6793.414990][   T26] Rebooting in 86400 seconds..