last executing test programs:

1h17m23.281204009s ago: executing program 32 (id=326):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x32) (async)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x32)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x6030000000138084, 0x8000}}], 0x20}, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

52m11.903328151s ago: executing program 2 (id=608):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vm(r1, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x3}})
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_CAP_ARM_SYSTEM_SUSPEND(r1, 0x4068aea3, &(0x7f00000000c0))
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000000)={0x0, &(0x7f0000000040)=[@smc={0x1e, 0x40, {0x84000009, [0x5fb, 0x10, 0x7f, 0x4, 0x2]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x12}], 0x1)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

52m9.11594002s ago: executing program 0 (id=609):
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) (async)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000040)=@arm64_core={0x6030000000100050, &(0x7f0000000000)=0x85c7}) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r2, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29) (async)
ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000140)=@arm64_sve_vls={0x606000000015ffff, &(0x7f0000000100)=0x1})
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) (async)
r4 = eventfd2(0x0, 0x0)
close(r4) (async)
mmap$KVM_VCPU(&(0x7f00006e2000/0x2000)=nil, 0x930, 0x0, 0x30, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01)
write$eventfd(r4, &(0x7f0000000180)=0x5, 0x8) (async)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0)

52m3.54144944s ago: executing program 2 (id=610):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000000000)=@arm64)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1fe, 0x3, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) (async, rerun: 32)
r6 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) (rerun: 32)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f00000001c0)={0x8, <r8=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4}) (async)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x29)
ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) (async, rerun: 32)
ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) (async, rerun: 32)
syz_kvm_vgic_v3_setup(r10, 0x4, 0x80)
ioctl$KVM_IRQ_LINE(r10, 0x4008ae61, &(0x7f0000000040)={0x2000000, 0x8000bb28}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x8, 0x100, &(0x7f0000000080)=0x8000000000000000}) (async)
ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f0000000280)=@attr_arm64={0x0, 0x4, 0x2, 0x0})
ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f0000000300)=@attr_other={0x0, 0x4, 0x1, 0x0}) (async)
r11 = mmap$KVM_VCPU(&(0x7f0000000000/0x4000)=nil, 0x0, 0x100000c, 0x13, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r11, 0x20, &(0x7f0000000340)="d864b37e50c7947c25777bee7ad24345736658bd7e27f01741f950e0fb3685088df4921962dce7db420d94561444c2005a2642a16aedf0cefd50fc56953f053a4634d9ecc4e20dbc", 0x0, 0x48) (async, rerun: 32)
ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x380, 0x0}) (rerun: 32)

52m2.855603556s ago: executing program 0 (id=611):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000b80)={0x0, &(0x7f0000000080)=[@hvc={0x32, 0x40, {0x84000001, [0x9, 0x8, 0x6, 0x603c8354, 0x200]}}], 0x40}, &(0x7f0000000280)=[@featur2={0x1, 0x42}], 0x1) (async)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xf0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) (async)
ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000000)={0x0, 0x100})
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async, rerun: 64)
ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, 0x0) (rerun: 64)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x0, 0x1, 0x2013, 0xffffffffffffffff, 0x200001fe0000) (async)
r5 = eventfd2(0x1, 0x1) (async, rerun: 32)
r6 = openat$kvm(0x0, &(0x7f0000000080), 0x40000, 0x0) (rerun: 32)
ioctl$KVM_SET_GUEST_DEBUG_arm64(r3, 0x4208ae9b, &(0x7f0000000400)={0x0, 0x0, {[0x3, 0x7, 0x0, 0x9, 0x4, 0xb0f, 0x6, 0x7, 0xfffffffffffffffe, 0x32, 0xffff, 0x20000000000000, 0x8e91, 0x0, 0x9, 0x58d], [0x6, 0x1, 0x1, 0x0, 0x7fffffff, 0x2, 0x9c, 0xd3e9, 0x8001, 0x4, 0x7, 0x4, 0x100, 0x100, 0x8, 0x1], [0xff, 0x80000001, 0x9, 0xd6f, 0x8, 0x7, 0x1ff, 0x1, 0xe, 0x1fb, 0x8000000000000000, 0x1, 0x4, 0xdf0, 0x10000, 0x2], [0x9, 0x3, 0x4, 0x6, 0x7, 0x0, 0x7, 0xf, 0x1, 0xd, 0x388f, 0x7, 0x4800000000000000, 0x9, 0x20000000000000, 0x7]}})
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
syz_kvm_vgic_v3_setup(r7, 0x1, 0x100) (async)
ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f0000000100)={r5, 0x3, 0x2, r5})
ioctl$KVM_SET_GSI_ROUTING(r7, 0x4008ae6a, &(0x7f00000000c0)={0x1, 0x0, [{0x3, 0x2, 0x1, 0x0, @sint={0x9d, 0x800}}]}) (async)
ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000040)={0x8}) (async)
write$eventfd(r5, &(0x7f0000000000)=0x1000007, 0x8)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async)
r8 = eventfd2(0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0x4020940d, 0x20000000) (async)
r9 = openat$kvm(0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) (async)
ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f0000000380)={0xb6, 0x0, 0x8})

51m55.293164756s ago: executing program 0 (id=612):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc9, 0x3})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x8800, 0x0)
ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xf0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000140)={0xc8e1fbbe21aa1041, <r5=>0xffffffffffffffff, 0x1})
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
r7 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x1800002, 0x11, r6, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f0000000280)="d6011813013c360000000000f4ff8000802346cbd98762c7795582ba3948ecff090001000000000000000000040000000100", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r6, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r5, 0x40305828, &(0x7f0000000040)=@attr_other={0x0, 0x0, 0xfffffffffffffff7, 0x0})

51m54.485341046s ago: executing program 2 (id=613):
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x2000001, 0x5c1fd1b656473f1, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x26)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3)
ioctl$KVM_ARM_VCPU_INIT(r3, 0x4020aeae, &(0x7f0000000200)={0x5, 0x6})
ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f00000000c0)=@arm64_core={0x603000000010003e, &(0x7f00000001c0)=0x1})
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f00000001c0)="f21bc75509bf71c9d70236fc044842da97e87fd62c18b875c2357c6ed6000000000000000000000000002000e4ff00", 0x0, 0x48)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000080)={0x0, &(0x7f0000000240)=[@memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x7fe, 0x4, 0x4}}], 0x30}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r6, 0x2, 0x100)
r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x80)
ioctl$KVM_GET_ONE_REG(r9, 0x4010aeab, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x4, <r10=>0xffffffffffffffff, 0x1})
write$eventfd(r10, &(0x7f00000001c0)=0xffffff7f, 0xff25)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x2000001, 0x5c1fd1b656473f1, 0xffffffffffffffff, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x26) (async)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) (async)
ioctl$KVM_ARM_VCPU_INIT(r3, 0x4020aeae, &(0x7f0000000200)={0x5, 0x6}) (async)
ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f00000000c0)=@arm64_core={0x603000000010003e, &(0x7f00000001c0)=0x1}) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) (async)
syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f00000001c0)="f21bc75509bf71c9d70236fc044842da97e87fd62c18b875c2357c6ed6000000000000000000000000002000e4ff00", 0x0, 0x48) (async)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async)
syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) (async)
syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000080)={0x0, &(0x7f0000000240)=[@memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x7fe, 0x4, 0x4}}], 0x30}, 0x0, 0x0) (async)
syz_kvm_vgic_v3_setup(r6, 0x2, 0x100) (async)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x80) (async)
ioctl$KVM_GET_ONE_REG(r9, 0x4010aeab, 0x0) (async)
ioctl$KVM_RUN(r8, 0xae80, 0x0) (async)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) (async)
write$eventfd(r10, &(0x7f00000001c0)=0xffffff7f, 0xff25) (async)

51m47.410909593s ago: executing program 0 (id=614):
r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
mmap$KVM_VCPU(&(0x7f0000f2b000/0x3000)=nil, 0x0, 0x3000002, 0x112, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2a)
syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x26)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=[@featur2={0x1, 0x2}], 0x1)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x6, 0x2, 0x0, 0x3, 0x3, 0x0, 0x7, 0x7, 0x7f, 0x8, 0x0, 0x0, 0x2, 0x4, 0x4, 0x1, 0x5, 0x7, '\x00', 0x0, 0x8})
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
r7 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0x401c5820, 0x20002500)
r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r9, r10, &(0x7f0000b74000/0x400000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x40}], 0x1, 0x0, 0x0, 0x0)
munmap$KVM_VCPU(0x0, 0x1000000000)
ioctl$KVM_GET_REG_LIST(r10, 0xc008aeb0, 0x0)
munmap(&(0x7f0000c3f000/0x2000)=nil, 0x2000)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r11, 0xae03, 0x59)
r12 = syz_kvm_add_vcpu$arm64(r0, &(0x7f0000000b80)={0x0, &(0x7f00000000c0)=[@hvc={0x32, 0x40, {0x84000015, [0x7, 0x8000000000000000, 0xffffffffffffffff, 0xee24, 0xfffffffffffeffff]}}], 0x40}, &(0x7f0000000040)=[@featur1={0x1, 0x4}], 0x1)
ioctl$KVM_RUN(r12, 0xae80, 0x0)

51m44.297909899s ago: executing program 2 (id=615):
r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000001c0)={0x8, <r2=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x2, 0x4})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000140)=@attr_other={0x0, 0x8, 0x100, &(0x7f0000000080)=0xfffffffffffffff7})
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000280)=@attr_arm64={0x0, 0x4, 0x2, 0x0})
r3 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
r6 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r5, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000300)="fb4149dd033b8986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67525673312b01040000000000002627e7000000000000000200", 0x0, 0xfffffffffffffe73)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x12, r5, 0x0)
r7 = eventfd2(0x2, 0x80001)
close(r7)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x0)
write$eventfd(r7, &(0x7f0000000100)=0xfffffffffffffffe, 0x8)
r8 = eventfd2(0x0, 0x0)
close(r8)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r9 = openat$kvm(0x0, &(0x7f0000000140), 0x40002, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil)
r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000180)={0x0, &(0x7f0000000080)=[@hvc={0x32, 0x40, {0x8600ff01, [0x7fffffff, 0x101, 0xfb4, 0x1, 0x8]}}], 0x40}, 0x0, 0x0)
ioctl$KVM_RUN(r12, 0xae80, 0x0)
r13 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04)
mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, r13, 0x2000004, 0x2011, r8, 0x0)

51m36.11498781s ago: executing program 0 (id=616):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$KVM_VCPU(&(0x7f0000dd4000/0x3000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r2, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, r2, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0)
munmap(&(0x7f0000db7000/0x2000)=nil, 0x2000)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
ioctl$KVM_SET_SIGNAL_MASK(r5, 0x4004ae8b, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0)

51m32.814457177s ago: executing program 2 (id=617):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x4)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r4, 0x4018aee1, &(0x7f00000000c0)=@attr_pmu_init)
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x6)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r1, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000000)=@x86={0x1, 0x9, 0x10, 0x0, 0x6a56, 0x1, 0x0, 0x1, 0x2, 0x6, 0x8, 0x4f, 0x0, 0x0, 0xdb, 0x6, 0xa, 0x72, 0x29, '\x00', 0x2, 0x5})
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
r13 = syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34)
r14 = syz_kvm_add_vcpu$arm64(r13, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x3, 0x2}}, @its_send_cmd={0xaa, 0x28, {0x4, 0x1, 0x80000, 0xfffc, 0x0, 0x8, 0x2}}], 0x50}, 0x0, 0x0)
r15 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r15, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x82880, 0x0)
close(0x5)
ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, &(0x7f0000000180)={0x8, <r16=>0xffffffffffffffff})
ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000300)={0xffe86ffd, 0x100000})
ioctl$KVM_SET_DEVICE_ATTR(r16, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000240)=0x8080000})
ioctl$KVM_RUN(r14, 0xae80, 0x0)
syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000b7c000/0x400000)=nil)

51m29.637379771s ago: executing program 0 (id=618):
openat$kvm(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$kvm(0x0, 0x0, 0x0, 0x0)
r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x3d)
syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000100)={0x0, 0x81})
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_RESET_DIRTY_RINGS(r4, 0xaec7)
r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000d50000/0x3000)=nil})
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_GUEST_MEMFD(r8, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x2})
syz_kvm_vgic_v3_setup(r4, 0x2, 0x40)
ioctl$KVM_SET_USER_MEMORY_REGION2(r8, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0xa7000, &(0x7f0000ffc000/0x2000)=nil, 0x4000, r9})
r10 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@its_setup={0x82, 0x28, {0x4, 0x4, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x0, 0x10002, 0x109, 0x0, 0x104, 0x3}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r6, 0x1, 0x140)
ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000180)={0x8, <r12=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r12, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r11, 0xae80, 0x0)
r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r14, 0x4020ae46, &(0x7f0000000040)={0x5, 0x1, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil})

50m46.123336827s ago: executing program 33 (id=617):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x4)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r4, 0x4018aee1, &(0x7f00000000c0)=@attr_pmu_init)
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x6)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r1, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000000)=@x86={0x1, 0x9, 0x10, 0x0, 0x6a56, 0x1, 0x0, 0x1, 0x2, 0x6, 0x8, 0x4f, 0x0, 0x0, 0xdb, 0x6, 0xa, 0x72, 0x29, '\x00', 0x2, 0x5})
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
r13 = syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34)
r14 = syz_kvm_add_vcpu$arm64(r13, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x3, 0x2}}, @its_send_cmd={0xaa, 0x28, {0x4, 0x1, 0x80000, 0xfffc, 0x0, 0x8, 0x2}}], 0x50}, 0x0, 0x0)
r15 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r15, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x82880, 0x0)
close(0x5)
ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, &(0x7f0000000180)={0x8, <r16=>0xffffffffffffffff})
ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000300)={0xffe86ffd, 0x100000})
ioctl$KVM_SET_DEVICE_ATTR(r16, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000240)=0x8080000})
ioctl$KVM_RUN(r14, 0xae80, 0x0)
syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000b7c000/0x400000)=nil)

50m42.052448082s ago: executing program 34 (id=618):
openat$kvm(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$kvm(0x0, 0x0, 0x0, 0x0)
r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x3d)
syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000100)={0x0, 0x81})
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_RESET_DIRTY_RINGS(r4, 0xaec7)
r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000d50000/0x3000)=nil})
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_GUEST_MEMFD(r8, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x2})
syz_kvm_vgic_v3_setup(r4, 0x2, 0x40)
ioctl$KVM_SET_USER_MEMORY_REGION2(r8, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0xa7000, &(0x7f0000ffc000/0x2000)=nil, 0x4000, r9})
r10 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@its_setup={0x82, 0x28, {0x4, 0x4, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x0, 0x10002, 0x109, 0x0, 0x104, 0x3}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r6, 0x1, 0x140)
ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000180)={0x8, <r12=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r12, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r11, 0xae80, 0x0)
r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r14, 0x4020ae46, &(0x7f0000000040)={0x5, 0x1, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil})

46m5.207788906s ago: executing program 3 (id=619):
r0 = mmap$KVM_VCPU(&(0x7f0000ffa000/0x3000)=nil, 0x0, 0x2000001, 0x10, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_MMIO(r0, 0x20, &(0x7f0000000000)="cbd30351d8111edf6ddda35fc9f14922fa10b02f9d3159b7", 0x0, 0x18)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000040)="c8d0744782fd58ee83b9df6483039adcf7d1cb704248d786595777d29ab083593d13c5319523a522b762f150a9661ba439a93daf01fca8070557ae2e806505a294451ddd01f2cd0e", 0x0, 0x48) (async)
r1 = syz_kvm_vgic_v3_setup(0xffffffffffffffff, 0x0, 0x340)
ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000100)=@attr_riscv64=@attr_ctrl={0x0, 0x1, 0x1, &(0x7f00000000c0)=0x100}) (async)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x24)
syz_kvm_vgic_v3_setup(r2, 0x4, 0x200) (async)
r3 = eventfd2(0x26, 0x80000)
write$eventfd(r3, &(0x7f0000000140)=0x7fffffffffffffff, 0x8)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x2, <r4=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000200)=@attr_other={0x0, 0x4, 0x56, &(0x7f00000001c0)=0x800}) (async)
r5 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000bfe000/0x400000)=nil)
ioctl$KVM_GET_DEVICE_ATTR(r4, 0x4018aee2, &(0x7f0000000280)=@attr_riscv64=@attr_config={0x0, 0x1, 0x0, &(0x7f0000000240)=0x2}) (async)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000680)={0x0, &(0x7f00000002c0)=[@eret={0xe6, 0x18, 0x5}, @svc={0x122, 0x40, {0x84000003, [0x4, 0x2, 0x1, 0x5, 0xffffffffffffffff]}}, @mrs={0xbe, 0x18, {0x603000000013c019}}, @memwrite={0x6e, 0x30, @generic={0x200000, 0xa0f, 0xffffffffffffffd1, 0x2}}, @uexit={0x0, 0x18, 0xaa}, @hvc={0x32, 0x40, {0x8600400b, [0x3, 0x6, 0x71ef, 0x0, 0x66]}}, @svc={0x122, 0x40, {0x400, [0x5, 0x7abc8af2, 0x8cee, 0x391c, 0x4]}}, @mrs={0xbe, 0x18, {0x603000000013da21}}, @smc={0x1e, 0x40, {0x20, [0x120, 0xa, 0x4, 0x7fff, 0x63b1]}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x180, 0x2, 0x1}}, @smc={0x1e, 0x40, {0x84000007, [0xfffffffffffffffd, 0x2, 0x7da, 0x0, 0x5]}}, @mrs={0xbe, 0x18, {0x603000000013deb2}}, @memwrite={0x6e, 0x30, @generic={0xdddd0000, 0x468, 0x2, 0x2}}, @svc={0x122, 0x40, {0x8400000b, [0x9, 0x8, 0xffffffffffffffff, 0x8e26, 0x8]}}, @its_setup={0x82, 0x28, {0x4, 0x1, 0x1c8}}, @smc={0x1e, 0x40, {0x8400000b, [0x8, 0x61d, 0x10001, 0xf, 0x8000]}}, @svc={0x122, 0x40, {0xffff, [0xfffffffffffffffd, 0xf, 0x70000000, 0x5e00, 0x80000000]}}, @eret={0xe6, 0x18, 0x64}, @irq_setup={0x46, 0x18, {0x3, 0x1}}, @smc={0x1e, 0x40, {0x84000008, [0x401, 0x1f7a98e8, 0x7, 0x100000000, 0x2]}}], 0x3a0}, &(0x7f00000006c0)=[@featur1={0x1, 0x44}], 0x1)
ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000700)=@arm64) (async)
ioctl$KVM_RESET_DIRTY_RINGS(r2, 0xaec7) (async)
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000740)={0x5000, 0x14000, 0x1}) (async)
r7 = syz_kvm_vgic_v3_setup(0xffffffffffffffff, 0x2, 0x0)
ioctl$KVM_GET_DEVICE_ATTR(r7, 0x4018aee2, &(0x7f00000007c0)=@attr_arm64={0x0, 0x5, 0x4, &(0x7f0000000780)=0x9})
r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) (async)
r9 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000880)={0x0, &(0x7f0000000800)=[@eret={0xe6, 0x18, 0x9}, @hvc={0x32, 0x40, {0x8400000a, [0x7, 0x0, 0xc, 0x5]}}], 0x58}, &(0x7f00000008c0)=[@featur1={0x1, 0x20}], 0x1)
mmap$KVM_VCPU(&(0x7f0000e99000/0x4000)=nil, r8, 0x200000a, 0x110, r9, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000900)=@x86={0x87, 0xbc, 0x1, 0x0, 0x80, 0x3a, 0x1, 0x4, 0x81, 0x8, 0x10, 0x1d, 0x0, 0x7, 0x7a, 0x7f, 0x9, 0x0, 0x4, '\x00', 0x1, 0x7}) (async)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000940)={0x7, <r10=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f00000009c0)=@attr_other={0x0, 0x100, 0xfd2e, &(0x7f0000000980)=0xfffffffffffff800})
ioctl$KVM_CAP_HALT_POLL(r2, 0x4068aea3, &(0x7f0000000a00)={0xb6, 0x0, 0xf08}) (async)
ioctl$KVM_SET_ONE_REG(r9, 0x4010aeac, &(0x7f0000000ac0)=@other={0x2, &(0x7f0000000a80)=0x822})
syz_kvm_vgic_v3_setup(r2, 0x4, 0x0) (async)
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000b00)={r2, 0xc0, 0x1, r3})
ioctl$KVM_CAP_HALT_POLL(r2, 0x4068aea3, &(0x7f0000000b40)={0xb6, 0x0, 0xd8})

45m57.33803368s ago: executing program 3 (id=621):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x2401, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2e)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3)
ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000000)={0x5, 0x18})
ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, &(0x7f0000000300)={0x1, [0x1]}) (fail_nth: 1)

45m42.38164442s ago: executing program 3 (id=622):
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2c) (async)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2c)
syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000b56000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000000)={0x0, &(0x7f0000000540)=[@memwrite={0x6e, 0x30, @generic={0x8000000, 0x100000004ab, 0x6, 0x9}}], 0x30}, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

45m36.701430346s ago: executing program 4 (id=620):
r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2a)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0xdddd1000, 0x2000, &(0x7f0000fa3000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
ioctl$KVM_CREATE_DEVICE(r4, 0xc018aec0, &(0x7f00000000c0)={0x1})
syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r0, &(0x7f0000000b80)={0x0, &(0x7f0000000100)=[@hvc={0x32, 0x40, {0x86000001, [0x100000001, 0x77, 0xffffffffffffffff, 0xee24, 0xfffffffffffeffff]}}], 0x40}, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x3)
ioctl$KVM_ARM_VCPU_INIT(r8, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8})
ioctl$KVM_SET_ONE_REG(r8, 0x4010aeac, &(0x7f0000000240)=@arm64_core={0x6030000000100036, &(0x7f00000002c0)=0x1})
ioctl$KVM_SET_ONE_REG(r8, 0x4010aeac, &(0x7f0000000040)=@arm64_sve_vls={0x606000000015ffff, &(0x7f0000000000)=0x3})

45m29.711412421s ago: executing program 3 (id=623):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1b)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000380)={0x1, 0xa000, 0x1})
ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000480)={0x2, 0x18000, 0x1})
close(r3)
r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000280)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r7, 0x4010aeac, &(0x7f0000000100)=@arm64_core={0x6030000000100042, &(0x7f00000000c0)=0x1b})
r8 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000180)={0x8, <r10=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f0000000240)=@attr_arm64={0x0, 0x0, 0x4, 0xffffffffffffffff})
r11 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r1, r11, &(0x7f0000b74000/0x400000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x40}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$arm64(r1, r11, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000880)=[{0x0, 0x0}], 0x1, 0x0, &(0x7f00000008c0)=[@featur2={0x1, 0x1a}], 0x1)

45m22.642654145s ago: executing program 4 (id=624):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
close(0xffffffffffffffff)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, <r2=>0xffffffffffffffff, 0x1})
syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f00006b2000/0x400000)=nil, &(0x7f0000000340)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f00000001c0)={0x2, 0x0, [{0x0, 0x2, 0x0, 0x0, @sint={0x6, 0x5}}, {0xfff, 0x5, 0x0, 0x0, @adapter={0xe, 0x7, 0x7, 0x3, 0x3ff}}]})
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x2b)
ioctl$KVM_REGISTER_COALESCED_MMIO(r7, 0x4010ae67, &(0x7f0000000240)={0x1, 0xe000, 0x1})
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x163800, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x3)
ioctl$KVM_ARM_VCPU_INIT(r10, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8})
ioctl$KVM_SET_ONE_REG(r10, 0x4010aeac, &(0x7f0000000040)=@arm64_fw={0x6030000000140001, &(0x7f0000000280)=0x1ff})
ioctl$KVM_REGISTER_COALESCED_MMIO(r7, 0x4010ae67, &(0x7f0000000100)={0x0, 0x1000, 0x1})
r11 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x13)
ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, &(0x7f0000000180)={0x8, <r13=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f0000000240)=@attr_arm64={0x0, 0x0, 0x4, 0xffffffffffffffff})
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r7, 0x4010ae68, &(0x7f0000001480)={0xfffffffffffffdfd, 0x13000, 0x1})
r14 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r14, 0xae03, 0x66)
r15 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000bfe000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r15, &(0x7f00000000c0)={0x0, &(0x7f0000000380)=[@its_setup={0x82, 0x28, {0x2, 0x2, 0x349}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x1, 0x7fffd, 0x10000, 0x7, 0x0, 0x4}}], 0x50}, 0x0, 0x0)

45m16.868855362s ago: executing program 3 (id=625):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000aba000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000300)={0x0, &(0x7f0000000140)=[@its_setup={0x82, 0x28, {0x1, 0x3, 0x121}}], 0x28}, 0x0, 0x0)
r4 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000000)={0x0, &(0x7f0000000340)=[@mrs={0xbe, 0x18, {0x603000000013e664}}, @uexit={0x0, 0x18, 0x94}, @eret={0xe6, 0x18, 0x6}, @irq_setup={0x46, 0x18, {0x4, 0x38c}}, @smc={0x1e, 0x40, {0xc4000014, [0x9, 0x7b, 0x7, 0x2, 0x8cf8]}}, @hvc={0x32, 0x40, {0xc4000011, [0x10ce, 0x1, 0x7f, 0x7, 0x8000]}}, @code={0xa, 0x9c, {"00c8a00e007008d5e0738ed200a0b8f2610080d2a20180d2e30180d2c40080d2020000d420b68ad20040b0f2210080d2c20080d2030080d2840180d2020000d4008008d540069ed20040b8f2210080d2220180d2230080d2a40180d2020000d4000008d5605191d200a0b0f2a10180d2220080d2230080d2440180d2020000d40020002f0010c0da"}}, @irq_setup={0x46, 0x18, {0x1, 0x116}}, @irq_setup={0x46, 0x18, {0x0, 0x2ca}}, @its_send_cmd={0xaa, 0x28, {0xe, 0x0, 0x1, 0x5, 0x6, 0x97}}, @code={0xa, 0x84, {"60278ed20080b8f2610080d2c20080d2e30080d2440180d2020000d4007008d500a4002f00b399d20060b0f2810180d2420180d2c30080d2440180d2020000d4007008d5008008d50050c01a00a0ff0d20f689d200c0b0f2210180d2020180d2c30180d2440180d2020000d4007008d5"}}, @smc={0x1e, 0x40, {0x4, [0x4, 0x2, 0x9f, 0x9, 0x100]}}, @msr={0x14, 0x20, {0x603000000013c2ab, 0x7}}, @its_setup={0x82, 0x28, {0x2, 0x0, 0x132}}, @smc={0x1e, 0x40, {0x0, [0x4a1f, 0x3fc, 0x4, 0x1, 0xee]}}, @uexit={0x0, 0x18, 0x6}, @uexit={0x0, 0x18, 0x3}, @its_setup={0x82, 0x28, {0x3, 0x0, 0x9e}}, @irq_setup={0x46, 0x18, {0x1, 0x1f1}}, @its_send_cmd={0xaa, 0x28, {0xa, 0x1, 0x0, 0x6, 0x5b1, 0x9, 0x3}}, @msr={0x14, 0x20, {0x603000000013df1a, 0xffff}}], 0x3d8}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r1, 0xff7ffffffffffffd, 0x360)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, <r5=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r4, 0x4018aee1, &(0x7f0000000240)=@attr_other={0x0, 0x767d15da, 0x4e9, &(0x7f0000000040)=0x5244})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

45m3.312133546s ago: executing program 4 (id=626):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f0000000000)=[@msr={0x14, 0x20, {0x603000000013c4f1, 0x8000}}, @msr={0x14, 0x20, {0x603000000013c4f2, 0x8000}}, @its_setup={0x82, 0x28, {0x1, 0x0, 0x80000011c}}, @msr={0x14, 0x20, {0x603000000013dce1, 0x20000008000}}, @msr={0x14, 0x20, {0x603000000013dce2, 0x8000}}, @msr={0x14, 0x20, {0x603000000013dce3, 0x8000}}, @eret={0xe6, 0x18, 0xe0}, @msr={0x14, 0x20, {0x603000000013df46, 0x8000}}], 0x100}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

45m0.634563091s ago: executing program 3 (id=627):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x31)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000100)={0x0, &(0x7f0000000240)=[@its_send_cmd={0xaa, 0x28, {0xe, 0x0, 0x2, 0x8, 0x8, 0x100}}], 0x28}, 0x0, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, 0x0)
ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)=@arm64_core={0x6030000000100018, &(0x7f0000000000)=0x2})
openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x31) (async)
syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) (async)
syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000100)={0x0, &(0x7f0000000240)=[@its_send_cmd={0xaa, 0x28, {0xe, 0x0, 0x2, 0x8, 0x8, 0x100}}], 0x28}, 0x0, 0x0) (async)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, 0x0) (async)
ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)=@arm64_core={0x6030000000100018, &(0x7f0000000000)=0x2}) (async)

44m51.881106168s ago: executing program 4 (id=628):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vm(r1, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x16, 0x4, 0x1}}) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x3}) (async)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x4, <r5=>0xffffffffffffffff, 0x1})
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x5, 0xe, 0x0, 0x5, 0x8, 0x82, 0x46, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x100001, 0xff80000, 0x0, 0x4, 0x2a, 0x7, '\x00', 0x1, 0x2000000080000093}) (async)
syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000880)={0x0, &(0x7f0000000200)=[@its_send_cmd={0xaa, 0x28, {0x4, 0x1, 0x4, 0x4, 0x8, 0xb, 0x200000}}], 0x28}, 0x0, 0x0)
write$eventfd(r5, &(0x7f00000001c0)=0x3, 0xfdef) (async)
syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000b74000/0x400000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f0000000240)=[@smc={0x1e, 0x40, {0xc5000020, [0x6, 0x5f9, 0x3, 0x401, 0x1000]}}], 0x40}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

44m13.128932826s ago: executing program 35 (id=627):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x31)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000100)={0x0, &(0x7f0000000240)=[@its_send_cmd={0xaa, 0x28, {0xe, 0x0, 0x2, 0x8, 0x8, 0x100}}], 0x28}, 0x0, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, 0x0)
ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)=@arm64_core={0x6030000000100018, &(0x7f0000000000)=0x2})
openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x31) (async)
syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) (async)
syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000100)={0x0, &(0x7f0000000240)=[@its_send_cmd={0xaa, 0x28, {0xe, 0x0, 0x2, 0x8, 0x8, 0x100}}], 0x28}, 0x0, 0x0) (async)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, 0x0) (async)
ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)=@arm64_core={0x6030000000100018, &(0x7f0000000000)=0x2}) (async)

44m2.327746218s ago: executing program 36 (id=628):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vm(r1, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x16, 0x4, 0x1}}) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x3}) (async)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x4, <r5=>0xffffffffffffffff, 0x1})
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x5, 0xe, 0x0, 0x5, 0x8, 0x82, 0x46, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x100001, 0xff80000, 0x0, 0x4, 0x2a, 0x7, '\x00', 0x1, 0x2000000080000093}) (async)
syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000880)={0x0, &(0x7f0000000200)=[@its_send_cmd={0xaa, 0x28, {0x4, 0x1, 0x4, 0x4, 0x8, 0xb, 0x200000}}], 0x28}, 0x0, 0x0)
write$eventfd(r5, &(0x7f00000001c0)=0x3, 0xfdef) (async)
syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000b74000/0x400000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f0000000240)=[@smc={0x1e, 0x40, {0xc5000020, [0x6, 0x5f9, 0x3, 0x401, 0x1000]}}], 0x40}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

38m7.899791858s ago: executing program 5 (id=631):
r0 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r3, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x100000d, 0x11, r0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000000)=@arm64={0x6, 0xd, 0x9b, '\x00', 0x2})
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000002000/0x400000)=nil)
r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x30)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) (async)
openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0) (async)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r3, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x100000d, 0x11, r0, 0x0) (async)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000000)=@arm64={0x6, 0xd, 0x9b, '\x00', 0x2}) (async)
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000002000/0x400000)=nil) (async)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x30) (async)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) (async)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) (async)

37m52.903238664s ago: executing program 5 (id=633):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3)
ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8})
ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f00000000c0)=@arm64_sys={0x603000000013c00a, &(0x7f0000000000)=0x337a2444})
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x4, <r5=>0xffffffffffffffff})
ioctl$KVM_CREATE_VM(r5, 0x401054d5, 0x110c230022)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) (async)
ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) (async)
ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f00000000c0)=@arm64_sys={0x603000000013c00a, &(0x7f0000000000)=0x337a2444}) (async)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0) (async)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x4}) (async)
ioctl$KVM_CREATE_VM(r5, 0x401054d5, 0x110c230022) (async)

37m39.840254288s ago: executing program 6 (id=634):
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x2, 0x23ac5f9b426ec4b1, 0xffffffffffffffff, 0xc007000000000000) (async)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r2, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) (async)
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) (async)
r3 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32) (async)
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0)

37m36.329535052s ago: executing program 5 (id=635):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x1)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r6, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3})
r7 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x29)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1)
r10 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r7, 0xae04)
mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, r10, 0x2, 0x12, r9, 0x0)
r11 = mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r11, 0x20, &(0x7f0000000240)="37e68986ad644f5dc57bbc1ff382863b67f3eee57a32ec911d95f88f3dd8ea716e4a29cefbd440b2ecf83f57baf33b0c97182970a47ef45c954e42f2055384921830f6e273d2eb30", 0x0, 0x2a2019ac5ed2a1ef)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x200000, &(0x7f0000200000/0x200000)=nil})
ioctl$KVM_GET_REGS(r2, 0x8360ae81, &(0x7f0000000340))
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0xfffa7000, 0x200000, &(0x7f0000200000/0x200000)=nil})
ioctl$KVM_CLEAR_DIRTY_LOG(r6, 0xc018aec0, &(0x7f0000000300)={0x0, 0x200, 0x280, &(0x7f0000000400)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2a, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x200, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x10001, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xf7ffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xaa, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]})
r12 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, &(0x7f0000000180)={0x5, <r13=>0xffffffffffffffff})
ioctl$KVM_HAS_DEVICE_ATTR(r13, 0x4018aee3, &(0x7f0000000140)=@attr_arm64={0x0, 0x1, 0x0, 0x0})
r14 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r14, 0x4008ae6a, &(0x7f00000000c0)={0x1, 0x0, [{0xc, 0x2, 0x1, 0x0, @msi={0xebb, 0x394c794c, 0x7f, 0x800}}]})
r15 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r16 = eventfd2(0x6, 0x80000)
ioctl$KVM_IOEVENTFD(r14, 0x4040ae79, &(0x7f00000001c0)={0xee, 0x40000, 0x8, r16, 0xe})
ioctl$KVM_CREATE_VM(r15, 0xae01, 0x0)

37m24.589883444s ago: executing program 6 (id=636):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3f)
ioctl$KVM_RESET_DIRTY_RINGS(r0, 0xaec7)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x40)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10201, 0x6, 0x58000, 0x2000, &(0x7f0000ffc000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r0, 0xc040aed4, &(0x7f0000000040)={0xa4, 0xe7e7})
ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000080)={0x4, 0x6, 0x100000, 0x2000, &(0x7f0000ffb000/0x2000)=nil, 0x800, r2})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x4000, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x11)
r5 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece)
ioctl$KVM_GET_REG_LIST(r5, 0xc008aeb0, &(0x7f0000000180)={0xa, [0xff, 0x1, 0x8, 0x8, 0x400, 0x200, 0x2, 0x8, 0x6, 0x5]})
ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000200)={r5, 0x0, 0x6, r5})
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r0, 0x4068aea3, &(0x7f0000000240)={0xdf, 0x0, 0x1000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x10002, 0x4, 0x100000, 0x1000, &(0x7f0000ffd000/0x1000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000300)={0xb})
r6 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000bff000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r6, &(0x7f00000003c0)={0x0, &(0x7f0000000340)=[@its_send_cmd={0xaa, 0x28, {0xa, 0x0, 0x4, 0x8, 0x4, 0x400, 0x1}}, @smc={0x1e, 0x40, {0x80003fff, [0x8, 0x6, 0x5, 0x6, 0x8]}}], 0x68}, &(0x7f0000000400)=[@featur1={0x1, 0x60}], 0x1)
ioctl$KVM_CHECK_EXTENSION_VM(r4, 0xae03, 0x215)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
ioctl$KVM_ARM_VCPU_INIT(r5, 0x4020aeae, &(0x7f0000000480)={0x1, 0x18})
r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04)
mmap$KVM_VCPU(&(0x7f0000f12000/0x2000)=nil, r8, 0x2000000, 0x10010, r5, 0x0)
ioctl$KVM_GET_SREGS(r5, 0x8000ae83, &(0x7f00000004c0))
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000600)={0x3, 0x0, [{0x5, 0x2, 0x0, 0x0, @msi={0x7, 0x9, 0x6, 0x4}}, {0x6, 0x1, 0x1, 0x0, @sint={0x401, 0x4}}, {0x2a000000, 0x5, 0x1, 0x0, @sint={0x8, 0xb}}]})
syz_kvm_setup_cpu$arm64(r0, r5, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000007c0)=[{0x0, &(0x7f00000006c0)=[@code={0xa, 0x84, {"008008d5000028d5007008d5007008d5a04988d20060b8f2010080d2420080d2a30080d2640180d2020000d4000028d5a0a886d200a0b8f2c10080d2e20080d2030080d2240180d2020000d4000028d5600588d200e0b8f2410080d2420180d2230180d2e40080d2020000d40000c06d"}}, @uexit={0x0, 0x18, 0x7379}, @eret={0xe6, 0x18, 0x9}, @uexit={0x0, 0x18, 0x3}], 0xcc}], 0x1, 0x0, &(0x7f0000000800)=[@featur1={0x1, 0xb}], 0x1)
r9 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x36)
ioctl$KVM_GET_DIRTY_LOG(r9, 0x4010ae42, &(0x7f0000000840)={0x10001, 0x0, &(0x7f0000dd0000/0x2000)=nil})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000880), 0x2000, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000008c0)=@arm64={0x81, 0x8, 0xad, '\x00', 0xc})

37m13.462058046s ago: executing program 6 (id=637):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000a5a000/0x400000)=nil) (async)
ioctl$KVM_GET_STATS_FD_vm(r2, 0xaece) (async)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x38)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x4)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r4, 0x4018aee1, &(0x7f00000000c0)=@attr_pmu_init)

37m10.840028588s ago: executing program 5 (id=638):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xa)
r1 = syz_kvm_setup_syzos_vm$arm64(r0, &(0x7f0000be5000/0x400000)=nil)
r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r1, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@mrs={0xbe, 0x18, {0x603000000013c807}}], 0x18}, 0x0, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_GET_DIRTY_LOG(r8, 0x4010ae42, 0xfffffffffffffffe)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1)
r9 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
r11 = syz_kvm_vgic_v3_setup(r6, 0x4, 0x220)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
ioctl$KVM_HAS_DEVICE_ATTR(r11, 0x4018aee3, &(0x7f0000000240)=@attr_other={0x0, 0x6, 0x0, 0x0})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xa) (async)
syz_kvm_setup_syzos_vm$arm64(r0, &(0x7f0000be5000/0x400000)=nil) (async)
openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) (async)
syz_kvm_add_vcpu$arm64(r1, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@mrs={0xbe, 0x18, {0x603000000013c807}}], 0x18}, 0x0, 0x0) (async)
openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async)
openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async)
ioctl$KVM_GET_DIRTY_LOG(r8, 0x4010ae42, 0xfffffffffffffffe) (async)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) (async)
syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) (async)
syz_kvm_add_vcpu$arm64(r9, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) (async)
syz_kvm_vgic_v3_setup(r6, 0x4, 0x220) (async)
ioctl$KVM_RUN(r10, 0xae80, 0x0) (async)
ioctl$KVM_HAS_DEVICE_ATTR(r11, 0x4018aee3, &(0x7f0000000240)=@attr_other={0x0, 0x6, 0x0, 0x0}) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)

36m58.993831233s ago: executing program 6 (id=639):
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = syz_kvm_setup_syzos_vm$arm64(r0, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r1, &(0x7f0000000000)={0x0, 0x0}, &(0x7f00000000c0)=[@featur1={0x1, 0x5}], 0x1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f00000000c0)={0x7})
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000040)=@attr_riscv64=@attr_aplic={0x0, 0x1, @any=0x7, &(0x7f0000000140)=0x73b})
r4 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
r7 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r6, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f0000000300)="fb4149dd033b8986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67525673312b01040000000000002627e7000000000000000200", 0x0, 0xfffffffffffffe73)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x12, r6, 0x0)
r8 = eventfd2(0x0, 0x0)
close(r8)
openat$kvm(0xffffff9c, &(0x7f0000000200), 0x7a3db0, 0x0)
write$eventfd(r8, &(0x7f0000000100)=0xfffffffffffffffe, 0x8)
r9 = eventfd2(0x0, 0x0)
close(r9)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
mmap$KVM_VCPU(&(0x7f0000008000/0x3000)=nil, 0x930, 0x2000004, 0x2011, r9, 0x0)
write$eventfd(r8, &(0x7f0000000180)=0xa19, 0x8)
r10 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r11, r12, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000000)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r12, 0x4010aeac, 0x0)
ioctl$KVM_SET_ONE_REG(r12, 0x4010aeac, &(0x7f0000000140)=@arm64_fp_extra={0x60200000001000d4, &(0x7f0000000100)=0x5})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x10)

36m49.960121714s ago: executing program 5 (id=640):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000080)=@attr_arm64={0x0, 0x2, 0x0, &(0x7f0000000040)=0x2})
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x0, 0x0}) (async)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x4) (async)
openat$kvm(0x0, 0x0, 0x4000, 0x0)
openat$kvm(0x0, &(0x7f0000000080), 0x141001, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x10) (async)
ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xab) (async)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000100)={0x0, 0x0}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r3, 0x2, 0x100) (async)
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async)
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r0, 0x4068aea3, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) (async)
r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) (async)
ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
r8 = ioctl$KVM_GET_STATS_FD_cpu(r7, 0xaece)
close(r8) (async)
r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async)
r10 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r9, r10, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x20}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_GET_ONE_REG(r10, 0x4010aeab, &(0x7f0000000100)=@arm64_sve_vls={0x606000000015ffff, &(0x7f0000000140)=0x8000000000000000}) (async)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x2000)=nil, r6, 0x0, 0x2010, r8, 0x0)

36m40.509658563s ago: executing program 6 (id=641):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2b)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000aec000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000040)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f00000000c0)=@arm64={0x7, 0x0, 0xfc, '\x00', 0x4}) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async, rerun: 64)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000080)=@arm64={0xd, 0x8, 0x7, '\x00', 0x2d}) (async, rerun: 64)
ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000080)={0x1, 0x0, [{0xc9, 0x2, 0x0, 0x0, @msi={0x0, 0x8}}]}) (async)
munmap(&(0x7f00005ed000/0x800000)=nil, 0x800000)
ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000140)=@other={0x7, &(0x7f0000000100)=0x100000001}) (async)
r4 = syz_kvm_vgic_v3_setup(r1, 0x3, 0x40)
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)=@attr_riscv64=@attr_addr={0x0, 0x1, @imsic, &(0x7f0000000180)=0x7fffffffffffffff})

36m36.329476685s ago: executing program 5 (id=642):
r0 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, r0, 0x100000c, 0x110, r1, 0x0)
r2 = eventfd2(0x6, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_GET_REG_LIST(r3, 0xc008aeb0, &(0x7f0000000000)={0x5, [0x5, 0x401, 0x1a1, 0x4, 0x6]})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0)
ioctl$KVM_GET_API_VERSION(r4, 0xae00, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r1, 0x4018aee1, &(0x7f00000000c0)=@attr_set_pmu={0x0, 0x0, 0x3, &(0x7f0000000080)=0x1})
r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_SIGNAL_MASK(r5, 0x4004ae8b, &(0x7f0000000100)={0xa0, "afa018e94f35d7e83c17ded46a806dfbcde2f38edb90430c72e21347981059ced82d0dde77eb419f124a2eb1e8e8f9c4769de1041373744d3639b05d0ba3cc1e57a109facb9fea1bd8a3e46b973ec0cf004150ee9084fcbe75700092290484ecc19021cd214c616e40df8d161834dc31987a2dacb5a7f35ebfd9de40e1dc0463b3cc1cfebaaa41bef9e524940c270a9ab89829e107f96a492137ad6c93e9cb7e"})
r6 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece)
ioctl$KVM_CAP_ARM_MTE(r6, 0x4068aea3, &(0x7f00000001c0))
ioctl$KVM_RESET_DIRTY_RINGS(r6, 0xaec7)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x34)
ioctl$KVM_PRE_FAULT_MEMORY(r1, 0xc040aed5, &(0x7f0000000240)={0x41000, 0x10000})
ioctl$KVM_CREATE_GUEST_MEMFD(r7, 0xc040aed4, &(0x7f0000000280)={0x1, 0x1})
eventfd2(0x1, 0x800)
ioctl$KVM_IRQ_LINE_STATUS(r6, 0xc008ae67, &(0x7f00000002c0)={0xffff, 0x9})
ioctl$KVM_ARM_SET_COUNTER_OFFSET(r6, 0x4010aeb5, &(0x7f0000000300)={0x6, 0x9})
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000340)={0x10000, 0x7, 0x5000, 0x1000, &(0x7f0000ffc000/0x1000)=nil})
write$eventfd(r2, &(0x7f0000000380)=0x12, 0x8)
r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0xb)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r1, 0x4018aee1, &(0x7f0000000400)=@attr_irq_timer={0x0, 0x1, 0x0, &(0x7f00000003c0)=0x1b})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2)
r9 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0xe)
ioctl$KVM_PPC_ALLOCATE_HTAB(r9, 0xc004aea7, &(0x7f0000000440)=0x4)
ioctl$KVM_SET_DEVICE_ATTR_vm(0xffffffffffffffff, 0x4018aee1, &(0x7f00000004c0)=@attr_other={0x0, 0x7b, 0x6, &(0x7f0000000480)})

36m26.941015687s ago: executing program 6 (id=643):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x101300, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_add_vcpu$arm64(0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x7, <r2=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000240)=@attr_arm64={0x0, 0x0, 0x2, &(0x7f0000000280)=0x400000080a0000})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x26) (async)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x26)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
openat$kvm(0x0, &(0x7f00000000c0), 0xc0000, 0x0) (async)
r6 = openat$kvm(0x0, &(0x7f00000000c0), 0xc0000, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r8, 0x4010ae67, &(0x7f0000000000)={0x4000, 0x13000, 0x1}) (async)
ioctl$KVM_REGISTER_COALESCED_MMIO(r8, 0x4010ae67, &(0x7f0000000000)={0x4000, 0x13000, 0x1})
ioctl$KVM_REGISTER_COALESCED_MMIO(r8, 0x4010ae67, &(0x7f0000000380)={0x2, 0x25000, 0x1})
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r8, 0x4010ae68, &(0x7f00000003c0)={0x4, 0xa7e9ea20e9018807, 0x1}) (async)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r8, 0x4010ae68, &(0x7f00000003c0)={0x4, 0xa7e9ea20e9018807, 0x1})
r9 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) (async)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2)
r11 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r10, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r11, 0x20, &(0x7f0000000300)="fb4149dd033b8986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67525673312b01040000000000002627e7000000000000000200", 0x0, 0xfffffffffffffe73) (async)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r11, 0x20, &(0x7f0000000300)="fb4149dd033b8986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67525673312b01040000000000002627e7000000000000000200", 0x0, 0xfffffffffffffe73)
ioctl$KVM_SET_ONE_REG(r10, 0x4010aeac, &(0x7f0000000080)=@riscv64_config={0x8030000000100001, &(0x7f0000000040)})
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x12, r10, 0x0)
close(0xffffffffffffffff) (async)
close(0xffffffffffffffff)
r12 = eventfd2(0x0, 0x0)
r13 = mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r13, 0x20, &(0x7f0000000240)="37e68986ad644f5dc57bbc1ff382863b67f3eee57a32ec911d95f88f3dd8ea716e4a29cefbd440b2ecf83f57baf33b0c97182970a47ef45c954e42f2055384921830f6e273d2eb30", 0x0, 0x2a2019ac5ed2a1ef)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r13, 0x20, &(0x7f0000000100)="746abf250f7959c813e4adfb369b808022e69fe80cfadce4a1259e77bab54ac9749537b3d016bb7f745a6e22d2f9ff443f19467748a3fe02c239457600", 0x0, 0xfffffffffffffec5)
close(r12) (async)
close(r12)
openat$kvm(0xffffffffffffff9c, 0x0, 0xc0c82, 0x0)
r14 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, r14, 0x2000001, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x0)
syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=[@featur2={0x1, 0x2}], 0x1)

35m48.208864912s ago: executing program 37 (id=642):
r0 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, r0, 0x100000c, 0x110, r1, 0x0)
r2 = eventfd2(0x6, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_GET_REG_LIST(r3, 0xc008aeb0, &(0x7f0000000000)={0x5, [0x5, 0x401, 0x1a1, 0x4, 0x6]})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0)
ioctl$KVM_GET_API_VERSION(r4, 0xae00, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r1, 0x4018aee1, &(0x7f00000000c0)=@attr_set_pmu={0x0, 0x0, 0x3, &(0x7f0000000080)=0x1})
r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_SIGNAL_MASK(r5, 0x4004ae8b, &(0x7f0000000100)={0xa0, "afa018e94f35d7e83c17ded46a806dfbcde2f38edb90430c72e21347981059ced82d0dde77eb419f124a2eb1e8e8f9c4769de1041373744d3639b05d0ba3cc1e57a109facb9fea1bd8a3e46b973ec0cf004150ee9084fcbe75700092290484ecc19021cd214c616e40df8d161834dc31987a2dacb5a7f35ebfd9de40e1dc0463b3cc1cfebaaa41bef9e524940c270a9ab89829e107f96a492137ad6c93e9cb7e"})
r6 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece)
ioctl$KVM_CAP_ARM_MTE(r6, 0x4068aea3, &(0x7f00000001c0))
ioctl$KVM_RESET_DIRTY_RINGS(r6, 0xaec7)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x34)
ioctl$KVM_PRE_FAULT_MEMORY(r1, 0xc040aed5, &(0x7f0000000240)={0x41000, 0x10000})
ioctl$KVM_CREATE_GUEST_MEMFD(r7, 0xc040aed4, &(0x7f0000000280)={0x1, 0x1})
eventfd2(0x1, 0x800)
ioctl$KVM_IRQ_LINE_STATUS(r6, 0xc008ae67, &(0x7f00000002c0)={0xffff, 0x9})
ioctl$KVM_ARM_SET_COUNTER_OFFSET(r6, 0x4010aeb5, &(0x7f0000000300)={0x6, 0x9})
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000340)={0x10000, 0x7, 0x5000, 0x1000, &(0x7f0000ffc000/0x1000)=nil})
write$eventfd(r2, &(0x7f0000000380)=0x12, 0x8)
r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0xb)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r1, 0x4018aee1, &(0x7f0000000400)=@attr_irq_timer={0x0, 0x1, 0x0, &(0x7f00000003c0)=0x1b})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2)
r9 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0xe)
ioctl$KVM_PPC_ALLOCATE_HTAB(r9, 0xc004aea7, &(0x7f0000000440)=0x4)
ioctl$KVM_SET_DEVICE_ATTR_vm(0xffffffffffffffff, 0x4018aee1, &(0x7f00000004c0)=@attr_other={0x0, 0x7b, 0x6, &(0x7f0000000480)})

35m37.462189712s ago: executing program 38 (id=643):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x101300, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_add_vcpu$arm64(0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x7, <r2=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000240)=@attr_arm64={0x0, 0x0, 0x2, &(0x7f0000000280)=0x400000080a0000})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x26) (async)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x26)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
openat$kvm(0x0, &(0x7f00000000c0), 0xc0000, 0x0) (async)
r6 = openat$kvm(0x0, &(0x7f00000000c0), 0xc0000, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r8, 0x4010ae67, &(0x7f0000000000)={0x4000, 0x13000, 0x1}) (async)
ioctl$KVM_REGISTER_COALESCED_MMIO(r8, 0x4010ae67, &(0x7f0000000000)={0x4000, 0x13000, 0x1})
ioctl$KVM_REGISTER_COALESCED_MMIO(r8, 0x4010ae67, &(0x7f0000000380)={0x2, 0x25000, 0x1})
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r8, 0x4010ae68, &(0x7f00000003c0)={0x4, 0xa7e9ea20e9018807, 0x1}) (async)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r8, 0x4010ae68, &(0x7f00000003c0)={0x4, 0xa7e9ea20e9018807, 0x1})
r9 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) (async)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2)
r11 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r10, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r11, 0x20, &(0x7f0000000300)="fb4149dd033b8986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67525673312b01040000000000002627e7000000000000000200", 0x0, 0xfffffffffffffe73) (async)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r11, 0x20, &(0x7f0000000300)="fb4149dd033b8986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67525673312b01040000000000002627e7000000000000000200", 0x0, 0xfffffffffffffe73)
ioctl$KVM_SET_ONE_REG(r10, 0x4010aeac, &(0x7f0000000080)=@riscv64_config={0x8030000000100001, &(0x7f0000000040)})
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x12, r10, 0x0)
close(0xffffffffffffffff) (async)
close(0xffffffffffffffff)
r12 = eventfd2(0x0, 0x0)
r13 = mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r13, 0x20, &(0x7f0000000240)="37e68986ad644f5dc57bbc1ff382863b67f3eee57a32ec911d95f88f3dd8ea716e4a29cefbd440b2ecf83f57baf33b0c97182970a47ef45c954e42f2055384921830f6e273d2eb30", 0x0, 0x2a2019ac5ed2a1ef)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r13, 0x20, &(0x7f0000000100)="746abf250f7959c813e4adfb369b808022e69fe80cfadce4a1259e77bab54ac9749537b3d016bb7f745a6e22d2f9ff443f19467748a3fe02c239457600", 0x0, 0xfffffffffffffec5)
close(r12) (async)
close(r12)
openat$kvm(0xffffffffffffff9c, 0x0, 0xc0c82, 0x0)
r14 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, r14, 0x2000001, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x0)
syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=[@featur2={0x1, 0x2}], 0x1)

26m15.13706802s ago: executing program 7 (id=648):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) (async, rerun: 32)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) (async, rerun: 32)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) (async)
munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x9000000) (async)
mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) (async, rerun: 32)
r1 = eventfd2(0x1, 0x800) (rerun: 32)
write$eventfd(r1, &(0x7f0000000000)=0xffffffffffffffff, 0x8)
munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) (async)
munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000) (async)
munmap(&(0x7f0000e76000/0x12000)=nil, 0x12000) (async)
mmap$KVM_VCPU(&(0x7f0000f1a000/0x4000)=nil, 0x930, 0x0, 0x9032, 0xffffffffffffffff, 0x0) (async)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4360ae82, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000fed000/0x3000)=nil, 0x930, 0x0, 0x4030031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) (async)
munmap(&(0x7f0000011000/0xc00000)=nil, 0xc00000)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) (async)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) (async)
munmap(&(0x7f0000d8f000/0x4000)=nil, 0x4000) (async)
munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000) (async, rerun: 32)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x3000000, 0x4d832, 0xffffffffffffffff, 0x0) (async, rerun: 32)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) (async)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000001c0)={0x8}) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x238001, 0x0)

26m0.732780538s ago: executing program 7 (id=650):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x28342, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000100), 0x80402, 0x0)
ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xb1)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_GET_API_VERSION(r1, 0xae00, 0x0)
r3 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@mrs={0xbe, 0x18, {0x603000000013c807}}], 0x18}, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
syz_kvm_setup_cpu$arm64(r2, 0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000140)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x1fe, 0x1, 0x8000000, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CAP_HALT_POLL(r2, 0x4068aea3, &(0x7f0000000080)={0xb6, 0x0, 0x2})
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1, 0x16831, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000500)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})

25m42.221963158s ago: executing program 8 (id=651):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x0, 0x1, 0x4}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000004}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r3, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000180)={0x8, <r6=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_RESET_DIRTY_RINGS(r7, 0xaec7)
r8 = syz_kvm_add_vcpu$arm64(r1, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@its_setup={0x82, 0x28, {0x1, 0x3, 0x2}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x1, 0x9, 0x2, 0x0, 0xa, 0x21}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r7, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000180)={0x8, <r9=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r8, 0xae80, 0x0)

25m40.83484413s ago: executing program 7 (id=652):
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x9000000)
mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000)
munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000)
munmap(&(0x7f000075a000/0xb000)=nil, 0xb000)
munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000)
r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece)
ioctl$KVM_RUN(r0, 0xae80, 0x0)
munmap(&(0x7f0000482000/0x2000)=nil, 0x2000)
munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000)
munmap(&(0x7f0000e76000/0x12000)=nil, 0x12000)
mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x24132, 0xffffffffffffffff, 0x0)
syz_kvm_setup_cpu$arm64(r0, r0, &(0x7f00002a0000/0x400000)=nil, &(0x7f00000001c0)=[{0x0, &(0x7f0000000040)=[@uexit={0x0, 0x18, 0x3}, @msr={0x14, 0x20, {0x603000000013c662, 0x4}}, @hvc={0x32, 0x40, {0x8600ff01, [0x10001, 0x5, 0x106, 0x80000000, 0x800]}}, @mrs={0xbe, 0x18, {0x603000000013c00f}}, @irq_setup={0x46, 0x18, {0x0, 0x86}}, @hvc={0x32, 0x40, {0x80, [0x7, 0x8000, 0x9, 0x4]}}, @msr={0x14, 0x20, {0x603000000013e532, 0x7}}, @uexit={0x0, 0x18, 0x8}, @mrs={0xbe, 0x18, {0x4126}}, @uexit={0x0, 0x18, 0xfffffffffffff1ea}, @uexit={0x0, 0x18, 0x9}], 0x168}], 0x1, 0x0, &(0x7f0000000200)=[@featur2={0x1, 0x61}], 0x1)
mmap$KVM_VCPU(&(0x7f0000f1a000/0x4000)=nil, 0x930, 0x0, 0x9032, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000fed000/0x3000)=nil, 0x930, 0x0, 0x4030031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04)
mmap$KVM_VCPU(&(0x7f000064b000/0x4000)=nil, r2, 0x100000d, 0x9032, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000667000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)

25m24.592691184s ago: executing program 8 (id=653):
r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r3 = mmap$KVM_VCPU(&(0x7f0000c42000/0x3000)=nil, 0x0, 0x9, 0x80010, r2, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000300)="fb4149dd033b8986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67525673312b01040000000000002627e7000000000000000200", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000f20000/0x1000)=nil, 0x930, 0x3000006, 0x40010, r2, 0x0)
close(0xffffffffffffffff) (async)
close(0xffffffffffffffff)
r4 = eventfd2(0x0, 0x0)
close(r4)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0x109272, 0x1f01) (async)
r5 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x109272, 0x1f01)
write$eventfd(r4, &(0x7f0000000180)=0x6, 0x8)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0)
write$eventfd(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffffe, 0xfdef)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x523082, 0x0)
close(r6) (async)
close(r6)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async)
r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) (async)
syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1)
ioctl$KVM_ARM_PREFERRED_TARGET(0xffffffffffffffff, 0x8020aeaf, &(0x7f00000001c0))
ioctl$KVM_IRQ_LINE(r7, 0x4008ae61, &(0x7f0000000000)={0x0, 0x80000001})
ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f00000000c0)={0x8, 0x100}) (async)
ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f00000000c0)={0x8, 0x100})
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x1ff, 0x1, 0x50000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x1ff, 0x1, 0x50000, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_arm64(r9, 0x4208ae9b, &(0x7f0000000380)={0x0, 0x0, {[0xffff, 0xffffffff, 0x7fffffff, 0x64e0bc01, 0x3, 0x1, 0x5, 0x10001, 0x6, 0x200, 0x5, 0x6, 0x0, 0xe0000, 0x8, 0x4d7], [0xd0, 0x1, 0x0, 0x9, 0xf28, 0x582, 0x0, 0x4, 0x8000000000000001, 0xfffffffffffffffc, 0x27bd, 0x40, 0x7, 0x6, 0x4, 0x3], [0x5, 0x5, 0x8000000000000000, 0xd179, 0x8, 0x5, 0xfffffffffffffffc, 0x4, 0x8, 0x8, 0x0, 0x533, 0x6, 0xffff, 0x7, 0x66], [0x8, 0x4, 0x8, 0xc000000000000000, 0x0, 0x7, 0x52c4, 0x8c, 0x7fffffffffffffff, 0xffffffff80000001, 0x4, 0x7, 0x3, 0x7, 0x1, 0x2]}})
ioctl$KVM_GET_REG_LIST(r9, 0xc008aeb0, &(0x7f00000005c0)={0x8, [0x1, 0x5, 0x3, 0x4007ff, 0x61, 0x6, 0x8, 0x80000001]})

25m24.050559112s ago: executing program 7 (id=654):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r4 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000b80)={0x0, &(0x7f00000003c0)=[@msr={0x14, 0x20, {0x6030000000138045, 0x9}}], 0x20}, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000000)={0x1, 0x0, &(0x7f0000ffb000/0x3000)=nil})
syz_kvm_vgic_v3_setup(r3, 0x0, 0x1e0)
r6 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f00000000c0)={0x0, 0x0, 0xb}, &(0x7f0000000bc0)=[@featur1={0x1, 0xb2}], 0x1)
ioctl$KVM_SET_ONE_REG(r8, 0x4010aeac, &(0x7f0000000000)=@arm64_fw={0x6030000000140000, &(0x7f0000000200)=0x10001})
r9 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000b80)={0x0, &(0x7f0000000100)=[@smc={0x1e, 0x40, {0x8400000a, [0x3, 0x6e, 0x7f, 0x9, 0x9]}}], 0x40}, &(0x7f0000000040)=[@featur1={0x1, 0x4}], 0x1)
ioctl$KVM_RUN(r9, 0xae80, 0x0)

25m9.105261494s ago: executing program 8 (id=655):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r2 = openat$kvm(0x0, &(0x7f00000002c0), 0x4a080, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) (async)
r4 = syz_kvm_vgic_v3_setup(r3, 0x1, 0x40)
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x3, 0x2, 0xffffffffffffffff}) (async)
r5 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013c520, 0x8000}}], 0x20}, 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xd) (async)
ioctl$KVM_RUN(r6, 0xae80, 0x0) (async, rerun: 64)
r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x2e) (rerun: 64)
r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) (async)
r11 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2f)
ioctl$KVM_SET_GSI_ROUTING(r11, 0x4008ae6a, &(0x7f0000000300)={0x4, 0x0, [{0xffff, 0x4, 0x1, 0x0, @msi={0x0, 0x7f, 0xfffffff2, 0x5}}, {0x6, 0x3, 0x1, 0x0, @sint={0xa94, 0x6}}, {0x9, 0x0, 0x0, 0x0, @msi={0xff, 0x0, 0x9, 0x81}}, {0x3, 0x1, 0x1, 0x0, @adapter={0x40, 0x1, 0x7fffffffffffffff, 0x8, 0x1}}]})
r12 = syz_kvm_vgic_v3_setup(r9, 0x1, 0x100)
ioctl$KVM_SET_DEVICE_ATTR(r12, 0x4018aee1, &(0x7f0000000140)=@attr_riscv64=@attr_config={0x0, 0x1, 0x0, &(0x7f0000000000)=0x10}) (async, rerun: 64)
syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) (rerun: 64)

25m5.883949603s ago: executing program 7 (id=656):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x8521, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000080), 0x101e40, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x28)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000b75000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000140)={0x0, &(0x7f0000000000)=[@hvc={0x32, 0x40, {0x84000051, [0x84000053, 0x7, 0x9, 0xc, 0x7fff]}}], 0x40}, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_CREATE_VM(r1, 0x5452, 0x3a)
r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CHECK_EXTENSION_VM(r8, 0xae03, 0x83)
r9 = ioctl$KVM_GET_STATS_FD_vm(r6, 0xaece)
ioctl$KVM_ARM_SET_COUNTER_OFFSET(r9, 0x4010aeb5, &(0x7f0000000100)={0x8799, 0x7ff})
r10 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@its_setup={0x82, 0x28, {0x0, 0x1, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x0, 0x5, 0x10, 0x0, 0x20000080, 0x4}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r6, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000180)={0x8, <r12=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r12, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r11, 0xae80, 0x0)

24m53.479492271s ago: executing program 8 (id=657):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04)
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, r2, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3)
ioctl$KVM_ARM_VCPU_INIT(r5, 0x4020aeae, &(0x7f0000000000)={0x5, 0x18})
ioctl$KVM_ARM_VCPU_FINALIZE(r5, 0x4004aec2, &(0x7f0000000180)=0x4)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_ARM_VCPU_INIT(r5, 0x4020aeae, &(0x7f0000000000)={0x5, 0x18}) (async)
mmap$KVM_VCPU(&(0x7f0000f94000/0x3000)=nil, r2, 0x8, 0x30, r5, 0x0)
r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x4f832, 0xffffffffffffffff, 0x1000000)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xc, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x20000000)
r7 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
r11 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r11, 0x4018aee1, &(0x7f0000000040)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000280)={0x14, 0xff}})
r12 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x2}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x1, 0x80000, 0x10000, 0x0, 0x0, 0x2}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r6, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000180)={0x8, <r14=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r14, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r13, 0xae80, 0x0)

24m42.454872958s ago: executing program 7 (id=658):
r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04)
mmap$KVM_VCPU(&(0x7f0000c58000/0x1000)=nil, r4, 0x2000003, 0xaf832, 0xffffffffffffffff, 0x0)
ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r2, 0x4068aea3, &(0x7f0000000000)={0xef, 0x0, 0x7})
syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@mrs={0xbe, 0x18, {0x603000000013c807}}], 0x18}, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x27)
syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000140)={0x4, <r11=>0xffffffffffffffff})
close(r11)
ioctl$KVM_CLEAR_DIRTY_LOG(r8, 0xc018aec0, &(0x7f00000007c0)={0x2, 0x2c0, 0x200, &(0x7f00000003c0)=[0x9, 0x8, 0xffffffff80000001, 0x6, 0x21e2, 0x1000, 0x800, 0x5, 0x0, 0xa160, 0x8, 0x8, 0xb, 0x80000000, 0x7, 0x8, 0x9e, 0x3, 0x9, 0x0, 0x3, 0x7, 0x1, 0x0, 0x6, 0x0, 0xde0f, 0xc3, 0x80000000, 0x4, 0x4ba0, 0x10000, 0xffffffff, 0x0, 0x7, 0x9, 0x800, 0x5, 0x0, 0x2, 0x7f5, 0x5, 0x5, 0x2, 0xfffffffffffffff4, 0x3a7d, 0x3, 0x6, 0x8001, 0x1, 0x200, 0xffffffffffffa323, 0x5, 0x6, 0x100, 0x7f, 0x2, 0x1, 0x3, 0x9, 0x7, 0x100000001, 0x6, 0x2, 0x6, 0x196, 0x10001, 0x1, 0x9, 0x10000, 0x8, 0x81, 0x5, 0x9, 0x5, 0x8000, 0x2, 0x304d8a97, 0xff, 0x6, 0x5128, 0x34680000080, 0x7, 0x7d, 0x7, 0x6a7, 0x8001, 0x1c, 0xb, 0x200, 0x0, 0x1, 0xcd8, 0x40, 0x5, 0x4, 0x3, 0x100000000, 0xfffffffffffff006, 0x5, 0x6, 0x101, 0x5, 0xcf, 0x10000, 0xcb7, 0x3, 0x7, 0x8, 0x3, 0xffffffffffffffff, 0x8, 0xa, 0x8, 0x4, 0x7fff, 0x4, 0xfffffffffffffffa, 0x2, 0xfffffffffffffff7, 0x100, 0x9, 0x6, 0x26, 0x80000001, 0xc, 0x4, 0x5]})
r12 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r12, r13, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f00000000c0)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r12, 0x1, 0x100)
ioctl$KVM_RUN(r13, 0xae80, 0x0)
r14 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x34)
ioctl$KVM_CAP_ARM_INJECT_SERROR_ESR(r14, 0x4068aea3, &(0x7f00000001c0))
ioctl$KVM_IRQ_LINE(r12, 0x4008ae61, &(0x7f0000000100)={0x1000020, 0x1})
ioctl$KVM_RUN(r13, 0xae80, 0x0)

24m24.853490029s ago: executing program 8 (id=659):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xb)
r1 = eventfd2(0x2000000, 0x80801)
r2 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece)
ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000000)={r1, 0x9, 0x2, r2})
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000080)=@attr_arm64={0x0, 0x6, 0x2, &(0x7f0000000040)=0x7})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x200240, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000100)=@arm64={0x8, 0x9, 0xf7, '\x00', 0x1})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0)
r4 = ioctl$KVM_GET_STATS_FD_vm(r2, 0xaece)
ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000180)={0x5, 0x6, 0x0, 0x1000, &(0x7f0000ffc000/0x1000)=nil, 0x2, r4})
ioctl$KVM_CAP_ARM_SYSTEM_SUSPEND(r2, 0x4068aea3, &(0x7f0000000240))
r5 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f00000004c0)={0x0, &(0x7f00000002c0)=[@mrs={0xbe, 0x18, {0x603000000013e6d6}}, @uexit={0x0, 0x18}, @its_send_cmd={0xaa, 0x28, {0x5, 0x0, 0x2, 0xe, 0x9, 0xfff, 0x2}}, @eret={0xe6, 0x18, 0x5}, @msr={0x14, 0x20, {0x603000000013df51, 0x6}}, @smc={0x1e, 0x40, {0x84000007, [0x7, 0x6, 0x0, 0x8, 0x10]}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x0, 0x0, 0x4, 0x9, 0xff, 0x2}}, @smc={0x1e, 0x40, {0x84000050, [0x8, 0x10000, 0x5, 0x40, 0x118]}}, @its_setup={0x82, 0x28, {0x1, 0x3, 0x33e}}, @its_setup={0x82, 0x28, {0x3, 0x3, 0x109}}, @code={0xa, 0x6c, {"00a4006f0080200e0008203c809e85d200e0b8f2a10180d2a20180d2030080d2840180d2020000d400000078007008d5000008d5a0a999d200c0b8f2010080d2820180d2430180d2040180d2020000d40000241e00808008"}}], 0x1f4}, &(0x7f0000000500)=[@featur1={0x1, 0x44}], 0x1)
ioctl$KVM_RESET_DIRTY_RINGS(r0, 0xaec7)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x49c042, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000580)={0x5, 0x1, 0x8080000, 0x1000, &(0x7f0000ea1000/0x1000)=nil})
syz_kvm_vgic_v3_setup(r0, 0x3, 0x0)
ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f00000005c0)={0x4})
ioctl$KVM_SET_DEVICE_ATTR_vm(r0, 0x4018aee1, &(0x7f0000000640)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000600)={0xc9, 0x4, 0x1}})
ioctl$KVM_RESET_DIRTY_RINGS(r4, 0xaec7)
ioctl$KVM_S390_VCPU_FAULT(r6, 0x4008ae52, &(0x7f0000000680)=0x8)
r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0xf)
ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f00000006c0)={r4, 0x0, 0x1, r4})
r8 = eventfd2(0x8, 0x1)
r9 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x20)
ioctl$KVM_SET_USER_MEMORY_REGION2(r9, 0x40a0ae49, &(0x7f0000000700)={0x1, 0x4, 0xeeef0000, 0x1000, &(0x7f0000edc000/0x1000)=nil, 0x8, r2})
r10 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x19)
ioctl$KVM_IOEVENTFD(r10, 0x4040ae79, &(0x7f00000007c0)={0xca, 0x25000, 0x0, r8})
ioctl$KVM_DIRTY_TLB(r6, 0x4010aeaa, &(0x7f0000000800)={0x3, 0x10000})
ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000000840)=0x2)

24m15.330153207s ago: executing program 8 (id=660):
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f00000001c0)="f21bc75509bf71c9d70236fc044842dae3ffffffffffffff4c24501958da2e2c18b875c2357c6ed600", 0x0, 0x48)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, <r2=>0xffffffffffffffff, 0x1})
write$eventfd(r2, &(0x7f00000001c0)=0xffffff7f, 0xff25)
mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x9000000)
munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000)
munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000)
munmap(&(0x7f000075a000/0xb000)=nil, 0xb000)
munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000482000/0x2000)=nil, 0x2000)
mmap$KVM_VCPU(&(0x7f0000f1a000/0x4000)=nil, 0x930, 0x0, 0x9032, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000fed000/0x3000)=nil, 0x930, 0x0, 0x4030031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)

23m53.631814783s ago: executing program 39 (id=658):
r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04)
mmap$KVM_VCPU(&(0x7f0000c58000/0x1000)=nil, r4, 0x2000003, 0xaf832, 0xffffffffffffffff, 0x0)
ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r2, 0x4068aea3, &(0x7f0000000000)={0xef, 0x0, 0x7})
syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@mrs={0xbe, 0x18, {0x603000000013c807}}], 0x18}, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x27)
syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000140)={0x4, <r11=>0xffffffffffffffff})
close(r11)
ioctl$KVM_CLEAR_DIRTY_LOG(r8, 0xc018aec0, &(0x7f00000007c0)={0x2, 0x2c0, 0x200, &(0x7f00000003c0)=[0x9, 0x8, 0xffffffff80000001, 0x6, 0x21e2, 0x1000, 0x800, 0x5, 0x0, 0xa160, 0x8, 0x8, 0xb, 0x80000000, 0x7, 0x8, 0x9e, 0x3, 0x9, 0x0, 0x3, 0x7, 0x1, 0x0, 0x6, 0x0, 0xde0f, 0xc3, 0x80000000, 0x4, 0x4ba0, 0x10000, 0xffffffff, 0x0, 0x7, 0x9, 0x800, 0x5, 0x0, 0x2, 0x7f5, 0x5, 0x5, 0x2, 0xfffffffffffffff4, 0x3a7d, 0x3, 0x6, 0x8001, 0x1, 0x200, 0xffffffffffffa323, 0x5, 0x6, 0x100, 0x7f, 0x2, 0x1, 0x3, 0x9, 0x7, 0x100000001, 0x6, 0x2, 0x6, 0x196, 0x10001, 0x1, 0x9, 0x10000, 0x8, 0x81, 0x5, 0x9, 0x5, 0x8000, 0x2, 0x304d8a97, 0xff, 0x6, 0x5128, 0x34680000080, 0x7, 0x7d, 0x7, 0x6a7, 0x8001, 0x1c, 0xb, 0x200, 0x0, 0x1, 0xcd8, 0x40, 0x5, 0x4, 0x3, 0x100000000, 0xfffffffffffff006, 0x5, 0x6, 0x101, 0x5, 0xcf, 0x10000, 0xcb7, 0x3, 0x7, 0x8, 0x3, 0xffffffffffffffff, 0x8, 0xa, 0x8, 0x4, 0x7fff, 0x4, 0xfffffffffffffffa, 0x2, 0xfffffffffffffff7, 0x100, 0x9, 0x6, 0x26, 0x80000001, 0xc, 0x4, 0x5]})
r12 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r12, r13, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f00000000c0)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r12, 0x1, 0x100)
ioctl$KVM_RUN(r13, 0xae80, 0x0)
r14 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x34)
ioctl$KVM_CAP_ARM_INJECT_SERROR_ESR(r14, 0x4068aea3, &(0x7f00000001c0))
ioctl$KVM_IRQ_LINE(r12, 0x4008ae61, &(0x7f0000000100)={0x1000020, 0x1})
ioctl$KVM_RUN(r13, 0xae80, 0x0)

23m26.859721304s ago: executing program 40 (id=660):
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f00000001c0)="f21bc75509bf71c9d70236fc044842dae3ffffffffffffff4c24501958da2e2c18b875c2357c6ed600", 0x0, 0x48)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, <r2=>0xffffffffffffffff, 0x1})
write$eventfd(r2, &(0x7f00000001c0)=0xffffff7f, 0xff25)
mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x9000000)
munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000)
munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000)
munmap(&(0x7f000075a000/0xb000)=nil, 0xb000)
munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000482000/0x2000)=nil, 0x2000)
mmap$KVM_VCPU(&(0x7f0000f1a000/0x4000)=nil, 0x930, 0x0, 0x9032, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000fed000/0x3000)=nil, 0x930, 0x0, 0x4030031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)

10m56.107602186s ago: executing program 1 (id=671):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xb8000, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0)
r1 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32)
syz_memcpy_off$KVM_EXIT_MMIO(r1, 0x20, 0x0, 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04)
r4 = mmap$KVM_VCPU(&(0x7f0000c60000/0x2000)=nil, r3, 0x300000a, 0x16831, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f00000000c0)="e65bf643e6e1a3ffc871fcc8064f26b4d9f94b6f1ccd7b41443d2b5486580143226c0ead9a1620b6709fafba2af023314cc4bf610d6a743ad4913910b8364e5f73ea2fc43ac1ebfc", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1)
r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r9 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r8, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r9, 0x3, 0x11, r7, 0x0)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f00000000c0)={0x2, 0x3, 0x100000, 0x2000, &(0x7f000000f000/0x2000)=nil})
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x1)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r12, 0x0)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r7, 0x0)
r13 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r13, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r14 = syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r14, &(0x7f0000000740)={0x0, &(0x7f0000000440)=[@eret={0xe6, 0x18, 0xfffffffffffffff9}, @svc={0x122, 0x40, {0x8400000a, [0x8, 0x7, 0xc8, 0x7, 0x5]}}, @uexit={0x0, 0x18, 0xb4d1}, @smc={0x1e, 0x40, {0x42000412, [0x7f, 0xfffffffffffffd1b, 0x5, 0x7, 0x8]}}, @irq_setup={0x46, 0x18, {0x4, 0x30a}}, @code={0xa, 0x54, {"007008d50080000d000860fc0000000d40c69cd20000b8f2610180d2c20080d2630080d2840180d2020000d4007008d500c8b02e007008d5000008d5007008d5"}}, @irq_setup={0x46, 0x18, {0x2, 0x12f}}, @mrs={0xbe, 0x18, {0x603000000013e6de}}, @code={0xa, 0xb4, {"404892d20040b8f2610080d2e20180d2a30180d2040080d2020000d40090807f0070000e0008202e20f89dd20060b8f2410180d2020080d2e30180d2c40080d2020000d40038302e60389ad200e0b8f2e10080d2a20180d2030080d2240180d2020000d4007008d560d996d200c0b8f2e10080d2420080d2630080d2a40080d2020000d420578fd20060b0f2210180d2e20180d2a30080d2c40180d2020000d4"}}, @its_send_cmd={0xaa, 0x28, {0xe, 0x1, 0x4, 0xd, 0x98, 0x3}}, @irq_setup={0x46, 0x18, {0x3, 0x144}}, @mrs={0xbe, 0x18, {0x6030000000138065}}, @code={0xa, 0x6c, {"c0c897d200a0b8f2610080d2c20180d2a30080d2840180d2020000d4007008d5003c205e007008d500a09f0d0048216e401c8bd20060b8f2c10180d2220080d2430180d2a40080d2020000d40040e00d007008d5008008d5"}}], 0x2c4}, &(0x7f0000000780)=[@featur1={0x1, 0x82}], 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r13, 0x4020ae46, &(0x7f0000000240)={0x1fe, 0x3, 0xffff6000, 0x1000, &(0x7f0000b24000/0x1000)=nil})
mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x0, 0xe, 0x4010, 0xffffffffffffffff, 0x0)

10m34.589395414s ago: executing program 1 (id=672):
openat$kvm(0x0, &(0x7f0000000380), 0x80, 0x0)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2e)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = ioctl$KVM_GET_STATS_FD_cpu(r2, 0xaece)
syz_kvm_setup_cpu$arm64(r3, r2, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000100)=[{0x0, 0x0}], 0x1, 0x0, &(0x7f0000000300)=[@featur2={0x1, 0x17}], 0x1)
ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)=@arm64_core={0x6030000000100042, &(0x7f0000000000)=0x11})
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@arm64={0xe6, 0x7, 0x8, '\x00', 0xabfe})
openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3e)
ioctl$KVM_SET_USER_MEMORY_REGION2(r3, 0x40a0ae49, &(0x7f0000000440)={0x10000, 0x3, 0x9000, 0x1000, &(0x7f0000d75000/0x1000)=nil, 0x7, r3})
ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000240)={0x10004, 0x0, &(0x7f0000b18000/0x3000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, &(0x7f0000000180)={0x1, 0x0, 0xdddd0000, 0x1000, &(0x7f0000e8b000/0x1000)=nil, 0xe})
syz_kvm_setup_cpu$arm64(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x30}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04)
r5 = openat$kvm(0x0, &(0x7f0000000400), 0xc0083, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x0, 0x11, r5, 0x0)
r6 = openat$kvm(0x0, &(0x7f0000000140), 0x103202, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x68)
syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil)
r8 = openat$kvm(0x0, &(0x7f0000000140), 0x608bc0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil)
r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000180)={0x0, &(0x7f00000002c0)}, &(0x7f00000002c0)=[@featur1={0x1, 0x50}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r11, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
ioctl$KVM_RUN(r11, 0xae80, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x90440, 0x0)
ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000280)={0x1, 0xe})

10m18.177230868s ago: executing program 1 (id=673):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r4, 0x4068aea3, &(0x7f0000000140)={0xdf, 0x0, 0x8000})
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f00000002c0)=@arm64_fw={0x6030000000140002, &(0x7f0000000000)=0x7})

10m5.132600827s ago: executing program 1 (id=674):
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1800, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000140)={0x4, <r3=>0xffffffffffffffff, 0x1})
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b6565d2f1, 0xffffffffffffffff, 0x0)
write$eventfd(r3, &(0x7f00000001c0)=0x3, 0x10)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2b)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_IRQFD(r6, 0x4020ae76, 0x0)
r7 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000040)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_GET_ONE_REG(r8, 0x4010aeab, &(0x7f0000000280)=@arm64_sys={0x603000000013c006, &(0x7f0000000200)})
r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2008)
ioctl$KVM_SET_DEVICE_ATTR_vm(r6, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000080)={0xe, 0x7fff, 0x1}})
ioctl$KVM_ARM_SET_COUNTER_OFFSET(r9, 0x8020aeaf, 0xfffffffffffffffe)

9m49.66096652s ago: executing program 1 (id=675):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000140)={0x5, 0x8})
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}, 0x0, 0x0)
r7 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000100)={0x0, &(0x7f0000000140)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r4, 0x2, 0x100)
r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04)
r9 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r8, 0x3, 0x11, r6, 0x0)
r10 = mmap$KVM_VCPU(&(0x7f000000a000/0x1000)=nil, r8, 0x3, 0x11, r7, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
syz_kvm_assert_syzos_uexit$arm64(r7, r10, 0xffffffffffffffff)
ioctl$KVM_IRQ_LINE(r4, 0x4008ae61, &(0x7f0000000180)={0x1010020, 0x1})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
syz_kvm_assert_syzos_uexit$arm64(r6, r9, 0xfffffffffffffffe)
ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000040)=@arm64_core={0x6030000000100012, &(0x7f0000000000)=0x1})

9m33.952048402s ago: executing program 1 (id=676):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7)
r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x34) (async)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x34)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000aba000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000300)={0x0, &(0x7f0000000140), 0xffffffe6}, 0x0, 0x0)
openat$kvm(0x0, &(0x7f0000000100), 0x80402, 0x0) (async)
r5 = openat$kvm(0x0, &(0x7f0000000100), 0x80402, 0x0)
r6 = openat$kvm(0x0, &(0x7f0000000080), 0x80, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000bfe000/0x400000)=nil)
r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f00000000c0)={0x0, &(0x7f00000003c0)=[@memwrite={0x6e, 0x30, @vgic_gicr={0x80a0000, 0xa4, 0x402, 0x4}}], 0x30}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r7, 0x4, 0x100) (async)
syz_kvm_vgic_v3_setup(r7, 0x4, 0x100)
ioctl$KVM_RUN(r9, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) (async)
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0)
mmap$KVM_VCPU(0x0, 0x50000, 0x3, 0x11, r12, 0x0)
r13 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x2c)
ioctl$KVM_SET_DEVICE_ATTR_vm(r13, 0x4018aee1, &(0x7f0000000080)=@attr_arm64={0x0, 0x0, 0x0, 0x0})
r14 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0)
r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r15, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r15, 0x4008ae6a, &(0x7f0000000140)={0x2, 0x0, [{0x3, 0x1, 0x0, 0x0, @msi={0x0, 0x3, 0x1, 0x2}}, {0x3, 0x1, 0x0, 0x0, @msi={0x2, 0x7, 0xb, 0x5}}]}) (async)
ioctl$KVM_SET_GSI_ROUTING(r15, 0x4008ae6a, &(0x7f0000000140)={0x2, 0x0, [{0x3, 0x1, 0x0, 0x0, @msi={0x0, 0x3, 0x1, 0x2}}, {0x3, 0x1, 0x0, 0x0, @msi={0x2, 0x7, 0xb, 0x5}}]})
syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000000)={0x0, &(0x7f0000000780)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x8000000000000f6}}], 0x28}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r3, 0x1, 0x320)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xe2a00, 0x0) (async)
r16 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xe2a00, 0x0)
ioctl$KVM_CREATE_VM(r16, 0x5452, 0x2000fdfd) (async)
ioctl$KVM_CREATE_VM(r16, 0x5452, 0x2000fdfd)
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000180)={0x8}) (async)
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000180)={0x8, <r17=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r17, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})

8m45.95082326s ago: executing program 41 (id=676):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7)
r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x34) (async)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x34)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000aba000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000300)={0x0, &(0x7f0000000140), 0xffffffe6}, 0x0, 0x0)
openat$kvm(0x0, &(0x7f0000000100), 0x80402, 0x0) (async)
r5 = openat$kvm(0x0, &(0x7f0000000100), 0x80402, 0x0)
r6 = openat$kvm(0x0, &(0x7f0000000080), 0x80, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000bfe000/0x400000)=nil)
r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f00000000c0)={0x0, &(0x7f00000003c0)=[@memwrite={0x6e, 0x30, @vgic_gicr={0x80a0000, 0xa4, 0x402, 0x4}}], 0x30}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r7, 0x4, 0x100) (async)
syz_kvm_vgic_v3_setup(r7, 0x4, 0x100)
ioctl$KVM_RUN(r9, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) (async)
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0)
mmap$KVM_VCPU(0x0, 0x50000, 0x3, 0x11, r12, 0x0)
r13 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x2c)
ioctl$KVM_SET_DEVICE_ATTR_vm(r13, 0x4018aee1, &(0x7f0000000080)=@attr_arm64={0x0, 0x0, 0x0, 0x0})
r14 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0)
r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r15, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r15, 0x4008ae6a, &(0x7f0000000140)={0x2, 0x0, [{0x3, 0x1, 0x0, 0x0, @msi={0x0, 0x3, 0x1, 0x2}}, {0x3, 0x1, 0x0, 0x0, @msi={0x2, 0x7, 0xb, 0x5}}]}) (async)
ioctl$KVM_SET_GSI_ROUTING(r15, 0x4008ae6a, &(0x7f0000000140)={0x2, 0x0, [{0x3, 0x1, 0x0, 0x0, @msi={0x0, 0x3, 0x1, 0x2}}, {0x3, 0x1, 0x0, 0x0, @msi={0x2, 0x7, 0xb, 0x5}}]})
syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000000)={0x0, &(0x7f0000000780)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x8000000000000f6}}], 0x28}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r3, 0x1, 0x320)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xe2a00, 0x0) (async)
r16 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xe2a00, 0x0)
ioctl$KVM_CREATE_VM(r16, 0x5452, 0x2000fdfd) (async)
ioctl$KVM_CREATE_VM(r16, 0x5452, 0x2000fdfd)
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000180)={0x8}) (async)
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000180)={0x8, <r17=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r17, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})

4m41.858781704s ago: executing program 9 (id=661):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x27)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x10001, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x10002, 0x2, 0x2000, 0x1000, &(0x7f0000fff000/0x1000)=nil})
ioctl$KVM_CAP_ARM_MTE(r0, 0x4068aea3, &(0x7f0000000080))
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_PRE_FAULT_MEMORY(r1, 0xc040aed5, &(0x7f0000000100)={0x41000})
ioctl$KVM_CLEAR_DIRTY_LOG(r0, 0xc018aec0, &(0x7f0000000540)={0x2, 0x40, 0xc0, &(0x7f0000000140)=[0x854, 0x1, 0x177c, 0x3, 0x8000, 0x3, 0x9, 0x7, 0x0, 0x101, 0x3ff, 0x5, 0x6, 0x8, 0x8000000000000001, 0xfffffffffffffffc, 0xe, 0xbda, 0x180000000, 0x2, 0x5, 0x4, 0xffffffffffffff27, 0x4b, 0xc1a, 0xa, 0x5, 0x7fffffff, 0x4, 0x7fffffff, 0xfff, 0x4, 0x6, 0x100000001, 0x7fff, 0x9da, 0x0, 0xfffffffffffffffb, 0x83c, 0x0, 0xffffffff80000000, 0x6, 0x3, 0x7, 0x1b, 0x3ff, 0x73, 0x10, 0x8, 0x7, 0x7, 0x10, 0x3, 0x6e6, 0x8000000000000001, 0x4, 0x6, 0x40, 0x1000000000, 0x1, 0x1ff, 0x0, 0x80, 0x5, 0x7, 0x5, 0x5, 0x4000, 0x200, 0x7, 0x7, 0xc, 0x0, 0x800, 0x7, 0x95d, 0x3, 0xf, 0x5, 0x9, 0x672e, 0x8, 0xff, 0xffffffffffffffff, 0x2, 0x5, 0xc3, 0x7, 0x79, 0xd15, 0x5, 0x4, 0x100000001, 0x7fffffff, 0x5, 0x7, 0x3c7e, 0x10001, 0x40, 0x8000000000000001, 0xff, 0x8000, 0xfac, 0x73a1, 0x0, 0xfff, 0xffffffffffff030c, 0x8001, 0xfff, 0x101, 0x5, 0x6, 0x8, 0x9, 0x3ff, 0x8, 0x8, 0x10, 0x2, 0x4, 0x6, 0x38000, 0x7, 0x0, 0xff, 0x4, 0xffffffff, 0x3]})
syz_kvm_setup_syzos_vm$arm64(r0, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_CAP_ARM_USER_IRQ(r0, 0x4068aea3, &(0x7f0000000580))
ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f0000000600)={0x7, "54acf8eaa2c379"})
ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000640)={0x41000, 0x54000, 0x6})
ioctl$KVM_CHECK_EXTENSION_VM(r0, 0xae03, 0x6)
ioctl$KVM_CAP_HALT_POLL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000680)={0xb6, 0x0, 0x4a})
ioctl$KVM_RESET_DIRTY_RINGS(r0, 0xaec7)
syz_kvm_vgic_v3_setup(r0, 0x1, 0x0)
syz_kvm_setup_cpu$arm64(r0, r1, &(0x7f0000bfd000/0x400000)=nil, &(0x7f0000000ac0)=[{0x0, &(0x7f0000000700)=[@hvc={0x32, 0x40, {0xc4000001, [0xbb4a, 0x6, 0x80, 0x401]}}, @its_setup={0x82, 0x28, {0x2, 0x1, 0x1e}}, @eret={0xe6, 0x18, 0x7}, @its_send_cmd={0xaa, 0x28, {0x8, 0x1, 0x0, 0x7, 0x12e, 0x8, 0x1}}, @svc={0x122, 0x40, {0x0, [0x0, 0x4dec, 0xb2, 0xd9, 0x2]}}, @uexit={0x0, 0x18}, @mrs={0xbe, 0x18, {0x603000000013c528}}, @uexit={0x0, 0x18, 0x1}, @eret={0xe6, 0x18, 0x2}, @mrs={0xbe, 0x18, {0x603000000013e6d0}}, @smc={0x1e, 0x40, {0x84000050, [0xfffffffffffffffa, 0xbf, 0x53cf8, 0x34b7, 0x83e]}}, @uexit={0x0, 0x18, 0xf}, @uexit={0x0, 0x18, 0x4}, @msr={0x14, 0x20, {0x603000000013c2a1, 0x9}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x0, 0x3, 0xc}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x1000, 0x88, 0x2}}, @uexit={0x0, 0x18, 0x674}, @msr={0x14, 0x20, {0x603000000013e65b, 0x800}}, @mrs={0xbe, 0x18, {0x603000000013c00a}}, @irq_setup={0x46, 0x18, {0x3, 0x187}}, @its_setup={0x82, 0x28, {0x3, 0x1, 0x3d1}}, @irq_setup={0x46, 0x18, {0x4, 0x171}}, @svc={0x122, 0x40, {0xc4000005, [0x5, 0xffffffffffff7fff, 0x7, 0x992d, 0x382f]}}, @its_send_cmd={0xaa, 0x28, {0x4, 0x0, 0x0, 0x7, 0x5, 0x5, 0x3}}, @uexit={0x0, 0x18, 0x1b}, @its_send_cmd={0xaa, 0x28, {0xf, 0x0, 0x2, 0x0, 0x39a2, 0x4d0, 0x2}}], 0x3a0}], 0x1, 0x0, &(0x7f0000000b00)=[@featur2={0x1, 0x88}], 0x1)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x39)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000fc0)={0x0, &(0x7f0000000b40)=[@uexit={0x0, 0x18, 0xed10}, @memwrite={0x6e, 0x30, @vgic_gicr={0x8100000, 0xffe8, 0x7, 0x4}}, @hvc={0x32, 0x40, {0x2000, [0x4, 0x0, 0x400, 0x1]}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x400, 0xffffffffffffffc0, 0xd}}, @its_send_cmd={0xaa, 0x28, {0xa, 0x0, 0x4, 0x9, 0x100, 0x800, 0x4}}, @smc={0x1e, 0x40, {0x400, [0x1, 0x7, 0x5, 0xffffffff00000001, 0x7fffffff]}}, @its_setup={0x82, 0x28, {0x0, 0x2, 0x398}}, @uexit={0x0, 0x18, 0x7}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0xf20, 0xd7, 0x1}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80a0000, 0x78, 0xc8, 0x8}}, @its_send_cmd={0xaa, 0x28, {0x5, 0x1, 0x1, 0x5, 0x80, 0x3, 0x4}}, @its_setup={0x82, 0x28, {0x0, 0x0, 0x3e9}}, @uexit={0x0, 0x18, 0x9}, @svc={0x122, 0x40, {0x84000010, [0x4, 0x3, 0x5, 0x1]}}, @msr={0x14, 0x20, {0x603000000013e6d5, 0x1}}, @msr={0x14, 0x20, {0x603000000013da10, 0x2}}, @uexit={0x0, 0x18, 0x4}, @uexit={0x0, 0x18, 0x7}, @irq_setup={0x46, 0x18, {0x4, 0x3b6}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x0, 0x2, 0xa, 0x5, 0xd5a, 0x3}}, @code={0xa, 0x84, {"00809f0c007008d500f992d20080b8f2410080d2020080d2a30180d2640080d2020000d4e0b194d200c0b0f2c10080d2420080d2230180d2840080d2020000d4007008d5007008d50000007d60878dd20020b0f2010180d2820080d2430080d2240180d2020000d4008008d5007008d5"}}, @uexit={0x0, 0x18, 0x4}, @svc={0x122, 0x40, {0x84000005, [0x7e, 0x0, 0x2, 0x7ff, 0x1a]}}, @its_send_cmd={0xaa, 0x28, {0x5, 0x1, 0x1, 0x1, 0xd836, 0x80000001}}, @its_setup={0x82, 0x28, {0x0, 0x3, 0x6}}], 0x444}, &(0x7f0000001000)=[@featur2], 0x1)
r4 = eventfd2(0x6, 0x800)
write$eventfd(r4, &(0x7f0000001040)=0x6, 0x8)
syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r5 = mmap$KVM_VCPU(&(0x7f0000e38000/0x1000)=nil, 0x0, 0x0, 0x11, 0xffffffffffffffff, 0x0)
munmap$KVM_VCPU(r5, 0x1)
syz_kvm_vgic_v3_setup(r2, 0x4, 0x120)
ioctl$KVM_GET_DEVICE_ATTR_vm(0xffffffffffffffff, 0x4018aee2, &(0x7f00000010c0)=@attr_other={0x0, 0x1, 0xfffffffffffffff2, &(0x7f0000001080)=0x1ff})
ioctl$KVM_GET_MP_STATE(r3, 0x8004ae98, &(0x7f0000001100))
ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0xb414)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x29)
syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)

4m26.823510898s ago: executing program 9 (id=678):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0x80111500, 0x20000000)
close(r6)
ioctl$KVM_GET_STATS_FD_vm(r4, 0xaece)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r9, 0x0)
openat$kvm(0x0, &(0x7f0000000200), 0x193ed82286968cae, 0x0)
r10 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x1, 0x40)
ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4040aea0, &(0x7f0000000000)=@arm64={0x6, 0x6, 0xad, '\x00', 0x76})
ioctl$KVM_SET_MP_STATE(r10, 0x4004ae99, &(0x7f00000000c0)=0xa)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
r11 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x1})
r12 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000140)={0x4, <r14=>0xffffffffffffffff, 0x1})
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x9, 0xf, 0x0, 0x5, 0x6, 0x6, 0x6, 0x47, 0x86, 0xdd, 0x68, 0x0, 0xce, 0x6, 0x4, 0x3, 0x5, 0x8, '\x00', 0x1, 0x400000000002})
write$eventfd(r14, &(0x7f00000001c0)=0x3, 0x50)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0xfffffffffffffffe)

3m38.642427995s ago: executing program 42 (id=678):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0x80111500, 0x20000000)
close(r6)
ioctl$KVM_GET_STATS_FD_vm(r4, 0xaece)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r9, 0x0)
openat$kvm(0x0, &(0x7f0000000200), 0x193ed82286968cae, 0x0)
r10 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x1, 0x40)
ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4040aea0, &(0x7f0000000000)=@arm64={0x6, 0x6, 0xad, '\x00', 0x76})
ioctl$KVM_SET_MP_STATE(r10, 0x4004ae99, &(0x7f00000000c0)=0xa)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
r11 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x1})
r12 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000140)={0x4, <r14=>0xffffffffffffffff, 0x1})
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x9, 0xf, 0x0, 0x5, 0x6, 0x6, 0x6, 0x47, 0x86, 0xdd, 0x68, 0x0, 0xce, 0x6, 0x4, 0x3, 0x5, 0x8, '\x00', 0x1, 0x400000000002})
write$eventfd(r14, &(0x7f00000001c0)=0x3, 0x50)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0xfffffffffffffffe)

49.429290492s ago: executing program 2 (id=677):
r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x46ae80, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_ARM_VCPU_INIT(r4, 0x4020aeae, &(0x7f0000000340)={0x5})
ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f0000000280)=@arm64_sys={0x603000000013c2a3, &(0x7f0000000100)=0x5})
r5 = syz_kvm_vgic_v3_setup(r1, 0x1, 0x80)
ioctl$KVM_GET_DEVICE_ATTR(r5, 0x4018aee2, &(0x7f0000000080)=@attr_arm64={0x0, 0x0, 0x5, &(0x7f0000000000)=0x80})

0s ago: executing program 43 (id=677):
r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x46ae80, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_ARM_VCPU_INIT(r4, 0x4020aeae, &(0x7f0000000340)={0x5})
ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f0000000280)=@arm64_sys={0x603000000013c2a3, &(0x7f0000000100)=0x5})
r5 = syz_kvm_vgic_v3_setup(r1, 0x1, 0x80)
ioctl$KVM_GET_DEVICE_ATTR(r5, 0x4018aee2, &(0x7f0000000080)=@attr_arm64={0x0, 0x0, 0x5, &(0x7f0000000000)=0x80})

kernel console output (not intermixed with test programs):

[  351.488164][   T24] audit: type=1400 audit(350.680:74): avc:  denied  { read } for  pid=3210 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[  357.882472][   T24] audit: type=1400 audit(357.100:75): avc:  denied  { write } for  pid=3263 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  361.461004][   T24] audit: type=1400 audit(360.680:76): avc:  denied  { write } for  pid=3268 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  364.803963][ T3210] 8021q: adding VLAN 0 to HW filter on device bond0
[  371.490484][   T24] audit: type=1400 audit(370.700:77): avc:  denied  { write } for  pid=3273 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  375.260330][   T24] audit: type=1400 audit(374.480:78): avc:  denied  { write } for  pid=3276 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  387.391789][   T24] audit: type=1400 audit(386.550:79): avc:  denied  { write } for  pid=3281 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  392.067617][   T24] audit: type=1400 audit(391.270:80): avc:  denied  { write } for  pid=3284 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  395.176465][ T3210] eql: remember to turn off Van-Jacobson compression on your slave devices
[  404.267898][   T24] audit: type=1400 audit(403.490:81): avc:  denied  { write } for  pid=3290 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  407.742682][   T24] audit: type=1400 audit(406.950:82): avc:  denied  { write } for  pid=3293 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  417.122637][   T24] audit: type=1400 audit(416.340:83): avc:  denied  { write } for  pid=3298 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  420.654746][   T24] audit: type=1400 audit(419.880:84): avc:  denied  { write } for  pid=3301 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  432.954884][   T24] audit: type=1400 audit(432.180:85): avc:  denied  { write } for  pid=3307 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  436.512588][   T24] audit: type=1400 audit(435.720:86): avc:  denied  { write } for  pid=3310 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  441.337863][   T24] audit: type=1400 audit(440.560:87): avc:  denied  { write } for  pid=3312 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  444.970380][   T24] audit: type=1400 audit(444.190:88): avc:  denied  { write } for  pid=3315 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  452.190388][   T24] audit: type=1400 audit(451.410:89): avc:  denied  { write } for  pid=3318 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  456.852193][   T24] audit: type=1400 audit(456.060:90): avc:  denied  { write } for  pid=3321 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  472.022695][   T24] audit: type=1400 audit(471.250:91): avc:  denied  { write } for  pid=3329 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  475.510525][   T24] audit: type=1400 audit(474.730:92): avc:  denied  { write } for  pid=3332 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  487.024182][   T24] audit: type=1400 audit(486.220:93): avc:  denied  { write } for  pid=3338 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  490.486694][   T24] audit: type=1400 audit(489.710:94): avc:  denied  { write } for  pid=3341 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  498.902767][   T24] audit: type=1400 audit(498.130:95): avc:  denied  { write } for  pid=3345 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  502.461592][   T24] audit: type=1400 audit(501.650:96): avc:  denied  { write } for  pid=3348 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  522.711585][   T24] audit: type=1400 audit(521.930:97): avc:  denied  { write } for  pid=3354 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  526.374204][   T24] audit: type=1400 audit(525.600:98): avc:  denied  { write } for  pid=3357 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  532.120245][   T24] audit: type=1400 audit(531.340:99): avc:  denied  { write } for  pid=3360 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  535.637867][   T24] audit: type=1400 audit(534.860:100): avc:  denied  { write } for  pid=3363 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
Warning: Permanently added '[localhost]:7633' (ED25519) to the list of known hosts.
[  559.365371][   T24] audit: type=1400 audit(558.590:101): avc:  denied  { name_bind } for  pid=3367 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  560.141839][   T24] audit: type=1400 audit(559.360:102): avc:  denied  { execute } for  pid=3368 comm="sh" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[  560.164853][   T24] audit: type=1400 audit(559.390:103): avc:  denied  { execute_no_trans } for  pid=3368 comm="sh" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[  585.395750][   T24] audit: type=1400 audit(584.620:104): avc:  denied  { mounton } for  pid=3368 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[  585.432195][   T24] audit: type=1400 audit(584.650:105): avc:  denied  { mount } for  pid=3368 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  585.508469][ T3368] cgroup: Unknown subsys name 'net'
[  585.563305][   T24] audit: type=1400 audit(584.790:106): avc:  denied  { unmount } for  pid=3368 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  585.917978][ T3368] cgroup: Unknown subsys name 'cpuset'
[  586.026177][ T3368] cgroup: Unknown subsys name 'rlimit'
[  586.778759][   T24] audit: type=1400 audit(586.000:107): avc:  denied  { setattr } for  pid=3368 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  586.797945][   T24] audit: type=1400 audit(586.010:108): avc:  denied  { mounton } for  pid=3368 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[  586.821198][   T24] audit: type=1400 audit(586.040:109): avc:  denied  { mount } for  pid=3368 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[  587.742169][ T3371] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[  587.758354][   T24] audit: type=1400 audit(586.980:110): avc:  denied  { relabelto } for  pid=3371 comm="mkswap" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[  587.777980][   T24] audit: type=1400 audit(587.000:111): avc:  denied  { write } for  pid=3371 comm="mkswap" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
Setting up swapspace version 1, size = 127995904 bytes
[  587.946732][   T24] audit: type=1400 audit(587.170:112): avc:  denied  { read } for  pid=3368 comm="syz-executor" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[  587.971569][   T24] audit: type=1400 audit(587.180:113): avc:  denied  { open } for  pid=3368 comm="syz-executor" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[  588.014476][ T3368] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[  642.394542][   T24] audit: type=1400 audit(641.620:114): avc:  denied  { execmem } for  pid=3372 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  645.767852][   T24] audit: type=1400 audit(644.990:116): avc:  denied  { open } for  pid=3375 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  645.786448][   T24] audit: type=1400 audit(644.980:115): avc:  denied  { read } for  pid=3374 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  645.854178][   T24] audit: type=1400 audit(645.060:117): avc:  denied  { mounton } for  pid=3374 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  646.057032][   T24] audit: type=1400 audit(645.280:118): avc:  denied  { module_request } for  pid=3375 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  646.095244][   T24] audit: type=1400 audit(645.320:119): avc:  denied  { module_request } for  pid=3374 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  646.988774][   T24] audit: type=1400 audit(646.210:120): avc:  denied  { sys_module } for  pid=3375 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  667.451240][ T3374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  667.523260][ T3375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  667.590953][ T3374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  667.836174][ T3375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  678.566590][ T3374] hsr_slave_0: entered promiscuous mode
[  678.594173][ T3374] hsr_slave_1: entered promiscuous mode
[  679.555499][ T3375] hsr_slave_0: entered promiscuous mode
[  679.603979][ T3375] hsr_slave_1: entered promiscuous mode
[  679.652911][ T3375] debugfs: 'hsr0' already exists in 'hsr'
[  679.660641][ T3375] Cannot create hsr debugfs directory
[  684.656743][   T24] audit: type=1400 audit(683.880:121): avc:  denied  { create } for  pid=3374 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  684.713412][   T24] audit: type=1400 audit(683.940:122): avc:  denied  { write } for  pid=3374 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  684.785244][   T24] audit: type=1400 audit(683.950:123): avc:  denied  { read } for  pid=3374 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  684.907969][ T3374] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  685.242859][ T3374] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  685.374930][ T3374] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  685.624501][ T3374] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  685.713874][ T3374] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  685.822285][ T3374] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  685.986180][ T3374] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  686.042261][ T3374] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  687.382859][ T3375] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  687.496343][ T3375] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  687.548787][ T3375] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  687.674626][ T3375] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  687.753012][ T3375] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  687.843842][ T3375] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  687.935008][ T3375] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  688.081718][ T3375] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  702.034640][ T3374] 8021q: adding VLAN 0 to HW filter on device bond0
[  704.987199][ T3375] 8021q: adding VLAN 0 to HW filter on device bond0
[  730.400901][   T24] audit: type=1400 audit(729.610:124): avc:  denied  { write } for  pid=3493 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  735.201992][   T24] audit: type=1400 audit(734.400:125): avc:  denied  { write } for  pid=3503 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  750.654905][ T3374] veth0_vlan: entered promiscuous mode
[  751.073448][ T3374] veth1_vlan: entered promiscuous mode
[  753.223118][ T3374] veth0_macvtap: entered promiscuous mode
[  753.593060][ T3374] veth1_macvtap: entered promiscuous mode
[  755.186698][ T3375] veth0_vlan: entered promiscuous mode
[  756.395612][ T3375] veth1_vlan: entered promiscuous mode
[  757.144076][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  757.341342][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  757.345660][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  757.514244][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  759.824461][ T3375] veth0_macvtap: entered promiscuous mode
[  760.456731][ T3375] veth1_macvtap: entered promiscuous mode
[  760.556211][   T24] audit: type=1400 audit(759.780:126): avc:  denied  { mount } for  pid=3374 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  760.877616][   T24] audit: type=1400 audit(760.100:127): avc:  denied  { mounton } for  pid=3374 comm="syz-executor" path="/syzkaller.0xTXUi/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  761.201391][   T24] audit: type=1400 audit(760.370:128): avc:  denied  { mount } for  pid=3374 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  761.614967][   T24] audit: type=1400 audit(760.840:129): avc:  denied  { mounton } for  pid=3374 comm="syz-executor" path="/syzkaller.0xTXUi/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  761.776817][   T24] audit: type=1400 audit(761.000:130): avc:  denied  { mounton } for  pid=3374 comm="syz-executor" path="/syzkaller.0xTXUi/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  762.712618][   T24] audit: type=1400 audit(761.840:131): avc:  denied  { unmount } for  pid=3374 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  762.997020][   T24] audit: type=1400 audit(762.220:132): avc:  denied  { mounton } for  pid=3374 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1544 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[  763.143013][   T24] audit: type=1400 audit(762.360:133): avc:  denied  { mount } for  pid=3374 comm="syz-executor" name="/" dev="gadgetfs" ino=3720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  763.423476][ T3419] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  763.424888][ T3419] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  763.435542][ T3419] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  763.462189][ T3419] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  763.630239][   T24] audit: type=1400 audit(762.850:134): avc:  denied  { mount } for  pid=3374 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  763.754372][   T24] audit: type=1400 audit(762.980:135): avc:  denied  { mounton } for  pid=3374 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[  765.507429][ T3374] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  766.754540][   T24] kauditd_printk_skb: 1 callbacks suppressed
[  766.764782][   T24] audit: type=1400 audit(765.980:137): avc:  denied  { read write } for  pid=3374 comm="syz-executor" name="loop0" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  766.811639][   T24] audit: type=1400 audit(766.030:138): avc:  denied  { open } for  pid=3374 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  766.855147][   T24] audit: type=1400 audit(766.030:139): avc:  denied  { ioctl } for  pid=3374 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=636 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  775.244727][   T24] audit: type=1400 audit(774.470:140): avc:  denied  { read } for  pid=3530 comm="syz.0.1" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  775.274459][   T24] audit: type=1400 audit(774.500:141): avc:  denied  { open } for  pid=3530 comm="syz.0.1" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  775.690570][   T24] audit: type=1400 audit(774.910:142): avc:  denied  { ioctl } for  pid=3530 comm="syz.0.1" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  777.324729][   T24] audit: type=1400 audit(776.550:143): avc:  denied  { write } for  pid=3532 comm="syz.1.2" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  790.593170][   T24] audit: type=1400 audit(789.810:144): avc:  denied  { create } for  pid=3540 comm="syz.1.4" anonclass=[kvm-gmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  818.711255][   T24] audit: type=1400 audit(817.930:145): avc:  denied  { append } for  pid=3564 comm="syz.1.11" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  848.758049][   T24] audit: type=1400 audit(847.970:146): avc:  denied  { execute } for  pid=3581 comm="syz.0.17" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=4906 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  866.975346][ T3593] kvm [3593]: Failed to find VMA for hva 0x20c01000
[  870.645856][   T24] audit: type=1400 audit(869.800:147): avc:  denied  { map } for  pid=3594 comm="syz.0.22" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  870.672105][   T24] audit: type=1400 audit(869.890:148): avc:  denied  { execute } for  pid=3594 comm="syz.0.22" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  940.398333][ T3629] KVM: debugfs: duplicate directory 3629-5
[  976.728855][   T24] audit: type=1400 audit(975.950:149): avc:  denied  { execute } for  pid=3649 comm="syz.0.40" path=2F32322F10FBFF67525673312B0104 dev="tmpfs" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[ 1009.923931][   T24] audit: type=1400 audit(1009.090:150): avc:  denied  { write } for  pid=3668 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1019.575934][   T24] audit: type=1400 audit(1018.710:151): avc:  denied  { write } for  pid=3678 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1031.167391][ T3687] kvm [3687]: Failed to find VMA for hva 0x20e8a000
[ 1089.364787][   T24] audit: type=1400 audit(1088.570:152): avc:  denied  { mmap_zero } for  pid=3724 comm="syz.0.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1
[ 1171.107567][ T3777] kvm [3775]: Unsupported guest access at: eeef0000
[ 1171.107567][ T3777]  { Op0( 2), Op1( 0), CRn( 0), CRm( 6), Op2( 2), func_read },
[ 1182.232920][ T3781] kvm [3781]: Failed to find VMA for hva 0x203b0000
[ 1312.576375][   T24] audit: type=1400 audit(1311.800:153): avc:  denied  { setattr } for  pid=3860 comm="syz.0.112" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1342.322894][   T24] audit: type=1400 audit(1341.530:154): avc:  denied  { write } for  pid=3877 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1349.484313][   T24] audit: type=1400 audit(1348.710:155): avc:  denied  { write } for  pid=3885 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1359.512910][   T24] audit: type=1400 audit(1358.730:156): avc:  denied  { map } for  pid=3889 comm="syz.1.121" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=10833 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1359.573528][   T24] audit: type=1400 audit(1358.780:157): avc:  denied  { read } for  pid=3889 comm="syz.1.121" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=10833 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1586.768968][ T4044] kvm [4044]: Failed to find VMA for hva 0x20d8d000
[ 1586.878045][ T4045] kvm [4045]: Failed to find VMA for hva 0x20d8d000
[ 1668.211617][ T4098] kvm [4098]: Failed to find VMA for hva 0x20c79000
[ 1756.215997][ T4160] kvm [4159]: Unsupported guest access at: eeef0000
[ 1756.215997][ T4160]  { Op0( 2), Op1( 3), CRn(15), CRm( 5), Op2( 5), func_write },
[ 1758.173598][ T4160] kvm [4160]: Failed to find VMA for hva 0x20d8d000
[ 1811.762141][   T24] audit: type=1400 audit(1810.980:158): avc:  denied  { write } for  pid=4185 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1819.590686][   T24] audit: type=1400 audit(1818.780:159): avc:  denied  { write } for  pid=4191 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1902.567116][   T24] audit: type=1400 audit(1901.790:160): avc:  denied  { ioctl } for  pid=4252 comm="syz.1.233" path="net:[4026532628]" dev="nsfs" ino=4026532628 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 2335.642603][ T4516] kvm [4516]: Failed to find VMA for hva 0x20d8d000
[ 2401.265085][   T24] audit: type=1400 audit(2400.490:161): avc:  denied  { write } for  pid=4545 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2406.680301][   T24] audit: type=1400 audit(2405.880:162): avc:  denied  { write } for  pid=4548 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2411.357497][   T24] audit: type=1400 audit(2410.580:163): avc:  denied  { execute } for  pid=4550 comm="syz-executor" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[ 2411.427053][   T24] audit: type=1400 audit(2410.620:164): avc:  denied  { execute_no_trans } for  pid=4550 comm="syz-executor" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[ 2437.886217][ T3435] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2439.012938][ T3435] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2440.193890][ T3435] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2441.543044][ T3435] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2456.388929][ T3435] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2456.654334][ T3435] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2456.836908][ T3435] bond0 (unregistering): Released all slaves
[ 2458.102203][ T3435] hsr_slave_0: left promiscuous mode
[ 2458.188364][ T3435] hsr_slave_1: left promiscuous mode
[ 2458.723024][ T3435] veth1_macvtap: left promiscuous mode
[ 2458.736885][ T3435] veth0_macvtap: left promiscuous mode
[ 2458.761798][ T3435] veth1_vlan: left promiscuous mode
[ 2458.784928][ T3435] veth0_vlan: left promiscuous mode
[ 2465.757706][   T24] audit: type=1400 audit(2464.930:165): avc:  denied  { write } for  pid=4585 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2473.252647][   T24] audit: type=1400 audit(2472.460:166): avc:  denied  { write } for  pid=4590 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2490.446055][ T3210] 8021q: adding VLAN 0 to HW filter on device eth1
[ 2502.754837][   T24] audit: type=1400 audit(2501.970:167): avc:  denied  { write } for  pid=4606 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2508.654952][   T24] audit: type=1400 audit(2507.860:168): avc:  denied  { write } for  pid=4617 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2512.723010][ T4551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2512.798754][ T3210] 8021q: adding VLAN 0 to HW filter on device eth2
[ 2512.974718][ T4551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2525.353800][   T24] audit: type=1400 audit(2524.570:169): avc:  denied  { write } for  pid=4629 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2532.061638][   T24] audit: type=1400 audit(2531.270:170): avc:  denied  { write } for  pid=4638 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2536.747873][ T3210] 8021q: adding VLAN 0 to HW filter on device eth3
[ 2539.004499][ T4551] hsr_slave_0: entered promiscuous mode
[ 2539.095593][ T4551] hsr_slave_1: entered promiscuous mode
[ 2539.183808][ T4551] debugfs: 'hsr0' already exists in 'hsr'
[ 2539.200362][ T4551] Cannot create hsr debugfs directory
[ 2550.554755][   T24] audit: type=1400 audit(2549.780:171): avc:  denied  { write } for  pid=4648 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2555.024707][ T4551] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 2555.442344][ T4551] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 2555.572409][ T4551] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 2555.757998][ T4551] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 2555.861508][ T4551] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 2556.144629][ T4551] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 2556.272107][ T4551] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 2556.505005][ T4551] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 2557.692827][   T24] audit: type=1400 audit(2556.830:172): avc:  denied  { write } for  pid=4657 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2562.166377][ T3210] 8021q: adding VLAN 0 to HW filter on device eth4
[ 2578.635121][ T4551] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2591.664824][ T4691] kvm [4690]: Unsupported guest access at: eeef0000
[ 2591.664824][ T4691]  { Op0( 2), Op1( 0), CRn( 0), CRm( 6), Op2( 2), func_write },
[ 2598.545570][   T24] audit: type=1400 audit(2597.750:173): avc:  denied  { write } for  pid=4698 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2608.530767][   T24] audit: type=1400 audit(2607.740:174): avc:  denied  { write } for  pid=4706 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2622.277100][   T24] audit: type=1400 audit(2621.490:175): avc:  denied  { write } for  pid=4719 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2628.712886][   T24] audit: type=1400 audit(2627.930:176): avc:  denied  { write } for  pid=4730 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2639.462422][   T24] audit: type=1400 audit(2638.660:177): avc:  denied  { write } for  pid=4736 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2644.984994][   T24] audit: type=1400 audit(2644.210:178): avc:  denied  { write } for  pid=4743 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2658.687421][   T24] audit: type=1400 audit(2657.910:179): avc:  denied  { write } for  pid=4750 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2665.092267][ T4551] veth0_vlan: entered promiscuous mode
[ 2666.007042][ T4551] veth1_vlan: entered promiscuous mode
[ 2666.614416][   T24] audit: type=1400 audit(2665.730:180): avc:  denied  { write } for  pid=4756 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2668.833490][ T4551] veth0_macvtap: entered promiscuous mode
[ 2669.451998][ T4551] veth1_macvtap: entered promiscuous mode
[ 2672.308761][ T4575] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2672.374449][ T4577] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2672.378357][ T4577] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2672.405234][ T4577] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2744.474685][   T24] audit: type=1400 audit(2743.700:181): avc:  denied  { write } for  pid=4796 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2752.333181][   T24] audit: type=1400 audit(2751.540:182): avc:  denied  { write } for  pid=4805 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2785.625888][ T4833] debugfs: 'vgic-its-state@8080000' already exists in '4832-9'
[ 2822.381652][   T24] audit: type=1400 audit(2821.600:183): avc:  denied  { write } for  pid=4859 comm="syz.0.378" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=26073 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 2824.485404][   T24] audit: type=1400 audit(2823.710:184): avc:  denied  { ioctl } for  pid=4859 comm="syz.0.378" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=26073 ioctlcmd=0xae00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 2863.334131][ T4884] kvm [4884]: Failed to find VMA for hva 0x20dde000
[ 3327.761939][   T24] audit: type=1400 audit(3326.950:185): avc:  denied  { write } for  pid=5208 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 3336.650731][   T24] audit: type=1400 audit(3335.860:186): avc:  denied  { write } for  pid=5217 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 3367.894859][ T5242] kvm [5240]: Unsupported guest access at: eeef0000
[ 3367.894859][ T5242]  { Op0( 2), Op1( 0), CRn( 0), CRm( 6), Op2( 2), func_read },
[ 3580.173729][   T24] audit: type=1400 audit(3579.390:187): avc:  denied  { write } for  pid=5375 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 3588.170746][   T24] audit: type=1400 audit(3587.370:188): avc:  denied  { write } for  pid=5384 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 3802.327426][   T24] audit: type=1400 audit(3801.500:189): avc:  denied  { write } for  pid=5515 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 3812.151638][   T24] audit: type=1400 audit(3811.370:190): avc:  denied  { write } for  pid=5524 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 3839.275168][ T5541] kvm [5541]: Failed to find VMA for hva 0x21016000
[ 3953.704201][ T5612] kvm [5612]: Failed to find VMA for hva 0x20de1000
[ 4069.954543][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 4070.165402][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 4075.631941][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 4075.846331][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 4092.728089][ T5628] hsr_slave_0: entered promiscuous mode
[ 4092.825107][ T5628] hsr_slave_1: entered promiscuous mode
[ 4092.884365][ T5628] debugfs: 'hsr0' already exists in 'hsr'
[ 4092.890412][ T5628] Cannot create hsr debugfs directory
[ 4104.513879][ T5631] hsr_slave_0: entered promiscuous mode
[ 4104.574154][ T5631] hsr_slave_1: entered promiscuous mode
[ 4104.680256][ T5631] debugfs: 'hsr0' already exists in 'hsr'
[ 4104.681032][ T5631] Cannot create hsr debugfs directory
[ 4113.086037][ T5689] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4114.973457][ T5689] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4115.688954][ T5689] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4116.427024][ T5689] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4121.062751][ T5628] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 4121.308254][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 4121.785200][ T5628] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 4122.005702][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 4127.923868][ T5689] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 4128.013653][ T5689] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 4128.083063][ T5689] bond0 (unregistering): Released all slaves
[ 4128.423967][ T5628] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 4128.695717][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 4129.544007][ T5689] hsr_slave_0: left promiscuous mode
[ 4129.665143][ T5689] hsr_slave_1: left promiscuous mode
[ 4129.937071][ T5689] veth1_macvtap: left promiscuous mode
[ 4129.963606][ T5689] veth0_macvtap: left promiscuous mode
[ 4129.977610][ T5689] veth1_vlan: left promiscuous mode
[ 4130.001688][ T5689] veth0_vlan: left promiscuous mode
[ 4142.545738][ T5628] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 4142.771666][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 4146.101949][ T5631] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 4146.404959][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 4146.532309][ T5631] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 4146.826071][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 4146.897391][ T5631] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 4147.285950][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 4147.426832][ T5631] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 4147.772316][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 4148.323509][ T4577] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4149.586051][ T4577] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4151.216273][ T4577] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4152.777648][ T4577] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4160.131706][   T24] audit: type=1400 audit(4159.340:191): avc:  denied  { write } for  pid=5717 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4167.427605][   T24] audit: type=1400 audit(4166.650:192): avc:  denied  { write } for  pid=5727 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4171.312281][ T4577] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 4171.853285][ T4577] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 4172.172404][ T4577] bond0 (unregistering): Released all slaves
[ 4173.043040][ T3210] 8021q: adding VLAN 0 to HW filter on device eth5
[ 4174.061613][ T4577] hsr_slave_0: left promiscuous mode
[ 4174.171947][ T4577] hsr_slave_1: left promiscuous mode
[ 4174.659838][ T4577] veth1_macvtap: left promiscuous mode
[ 4174.742496][ T4577] veth0_macvtap: left promiscuous mode
[ 4174.767758][ T4577] veth1_vlan: left promiscuous mode
[ 4174.781511][ T4577] veth0_vlan: left promiscuous mode
[ 4194.664834][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0
[ 4199.957523][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0
[ 4202.947403][   T24] audit: type=1400 audit(4202.170:193): avc:  denied  { write } for  pid=5739 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4208.384454][   T24] audit: type=1400 audit(4207.570:194): avc:  denied  { write } for  pid=5748 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4212.961289][ T3210] 8021q: adding VLAN 0 to HW filter on device eth6
[ 4219.897603][   T24] audit: type=1400 audit(4219.070:195): avc:  denied  { write } for  pid=5754 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4228.011622][   T24] audit: type=1400 audit(4227.140:196): avc:  denied  { write } for  pid=5763 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4245.248074][   T24] audit: type=1400 audit(4244.470:197): avc:  denied  { write } for  pid=5777 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4251.042767][   T24] audit: type=1400 audit(4250.260:198): avc:  denied  { write } for  pid=5788 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4254.914850][ T3210] 8021q: adding VLAN 0 to HW filter on device eth7
[ 4266.904620][   T24] audit: type=1400 audit(4266.130:199): avc:  denied  { write } for  pid=5803 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4272.584131][   T24] audit: type=1400 audit(4271.780:200): avc:  denied  { write } for  pid=5812 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4273.943419][ T5628] veth0_vlan: entered promiscuous mode
[ 4274.563251][ T5628] veth1_vlan: entered promiscuous mode
[ 4277.836998][ T3210] 8021q: adding VLAN 0 to HW filter on device eth8
[ 4277.968529][ T5628] veth0_macvtap: entered promiscuous mode
[ 4278.822354][ T5628] veth1_macvtap: entered promiscuous mode
[ 4282.198907][ T5297] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 4282.216928][ T5297] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 4282.217999][ T5297] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 4282.218819][ T5297] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 4295.823291][   T24] audit: type=1400 audit(4295.010:201): avc:  denied  { write } for  pid=5823 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4302.003804][ T5631] veth0_vlan: entered promiscuous mode
[ 4302.292770][ T5836] FAULT_INJECTION: forcing a failure.
[ 4302.292770][ T5836] name fail_usercopy, interval 1, probability 0, space 0, times 1
[ 4302.334176][ T5836] CPU: 0 UID: 0 PID: 5836 Comm: syz.3.621 Not tainted syzkaller #0 PREEMPT 
[ 4302.334886][ T5836] Hardware name: linux,dummy-virt (DT)
[ 4302.335344][ T5836] Call trace:
[ 4302.335736][ T5836]  show_stack+0x2c/0x3c (C)
[ 4302.337687][ T5836]  __dump_stack+0x30/0x40
[ 4302.338139][ T5836]  dump_stack_lvl+0xd8/0x12c
[ 4302.338464][ T5836]  dump_stack+0x1c/0x28
[ 4302.338786][ T5836]  should_fail_ex+0x56c/0x6d8
[ 4302.339073][ T5836]  should_fail+0x14/0x24
[ 4302.339336][ T5836]  should_fail_usercopy+0x20/0x30
[ 4302.339634][ T5836]  simple_read_from_buffer+0xd0/0x294
[ 4302.339907][ T5836]  proc_fail_nth_read+0x184/0x214
[ 4302.340167][ T5836]  vfs_read+0x220/0x9d8
[ 4302.340459][ T5836]  ksys_read+0x108/0x1fc
[ 4302.340790][ T5836]  __arm64_sys_read+0x98/0xcc
[ 4302.341035][ T5836]  invoke_syscall+0x94/0x1ec
[ 4302.341328][ T5836]  el0_svc_common+0x120/0x2f4
[ 4302.341626][ T5836]  do_el0_svc+0x58/0x74
[ 4302.341934][ T5836]  el0_svc+0x64/0x240
[ 4302.342248][ T5836]  el0t_64_sync_handler+0x84/0x12c
[ 4302.342532][ T5836]  el0t_64_sync+0x198/0x19c
[ 4303.215781][ T5631] veth1_vlan: entered promiscuous mode
[ 4304.937749][   T24] audit: type=1400 audit(4304.100:202): avc:  denied  { write } for  pid=5835 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4306.166485][ T5631] veth0_macvtap: entered promiscuous mode
[ 4306.715977][ T5631] veth1_macvtap: entered promiscuous mode
[ 4309.764868][ T3435] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 4309.781748][ T5706] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 4309.792761][ T5000] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 4309.802546][ T5511] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 4311.207073][ T3210] 8021q: adding VLAN 0 to HW filter on device eth9
[ 4330.121000][   T24] audit: type=1400 audit(4329.340:203): avc:  denied  { write } for  pid=5849 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4339.842073][   T24] audit: type=1400 audit(4339.000:204): avc:  denied  { write } for  pid=5856 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4347.335795][ T3210] 8021q: adding VLAN 0 to HW filter on device eth10
[ 4369.537436][   T24] audit: type=1400 audit(4368.670:205): avc:  denied  { write } for  pid=5874 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4376.684143][   T24] audit: type=1400 audit(4375.870:206): avc:  denied  { write } for  pid=5881 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4380.496625][ T3210] 8021q: adding VLAN 0 to HW filter on device eth11
[ 4388.781766][   T24] audit: type=1400 audit(4387.980:207): avc:  denied  { write } for  pid=5885 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4392.597931][   T24] audit: type=1400 audit(4391.820:208): avc:  denied  { write } for  pid=5888 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4395.397756][ T3210] 8021q: adding VLAN 0 to HW filter on device eth12
[ 4436.723073][ T5297] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4438.623616][ T5297] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4439.933260][ T5297] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4441.373476][ T5297] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4446.591528][   T24] audit: type=1400 audit(4445.800:209): avc:  denied  { write } for  pid=5916 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4455.613822][   T24] audit: type=1400 audit(4454.830:210): avc:  denied  { write } for  pid=5929 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4461.406582][ T5297] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 4461.656153][ T5297] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 4461.885334][ T5297] bond0 (unregistering): Released all slaves
[ 4465.753020][ T5297] hsr_slave_0: left promiscuous mode
[ 4466.126427][ T5297] hsr_slave_1: left promiscuous mode
[ 4466.688706][ T5297] veth1_macvtap: left promiscuous mode
[ 4466.694713][ T5297] veth0_macvtap: left promiscuous mode
[ 4466.711691][ T5297] veth1_vlan: left promiscuous mode
[ 4466.733389][ T5297] veth0_vlan: left promiscuous mode
[ 4488.440266][   T24] audit: type=1400 audit(4487.660:211): avc:  denied  { write } for  pid=5939 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4488.956745][ T5297] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4490.455429][ T5297] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4491.715695][ T5297] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4492.608671][ T5297] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4493.002444][   T24] audit: type=1400 audit(4492.220:212): avc:  denied  { write } for  pid=5942 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4506.887323][ T5297] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 4506.995829][ T5297] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 4507.043061][ T5297] bond0 (unregistering): Released all slaves
[ 4508.352438][ T5297] hsr_slave_0: left promiscuous mode
[ 4508.450697][ T5297] hsr_slave_1: left promiscuous mode
[ 4509.072504][ T5297] veth1_macvtap: left promiscuous mode
[ 4509.102206][ T5297] veth0_macvtap: left promiscuous mode
[ 4509.113871][ T5297] veth1_vlan: left promiscuous mode
[ 4509.115769][ T5297] veth0_vlan: left promiscuous mode
[ 4536.060852][   T24] audit: type=1400 audit(4535.280:213): avc:  denied  { write } for  pid=5966 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4541.046163][   T24] audit: type=1400 audit(4540.270:214): avc:  denied  { write } for  pid=5977 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4544.755550][ T3210] 8021q: adding VLAN 0 to HW filter on device eth13
[ 4545.656168][ T5900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 4545.848835][ T5900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 4548.884078][ T5908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 4549.096871][ T5908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 4549.641786][   T24] audit: type=1400 audit(4548.860:215): avc:  denied  { write } for  pid=5984 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4555.140606][   T24] audit: type=1400 audit(4554.350:216): avc:  denied  { write } for  pid=5992 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4564.750224][   T24] audit: type=1400 audit(4563.970:217): avc:  denied  { write } for  pid=6000 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4567.973235][ T5900] hsr_slave_0: entered promiscuous mode
[ 4568.016070][ T5900] hsr_slave_1: entered promiscuous mode
[ 4570.041142][   T24] audit: type=1400 audit(4569.250:218): avc:  denied  { write } for  pid=6009 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4571.928207][ T5908] hsr_slave_0: entered promiscuous mode
[ 4571.967327][ T5908] hsr_slave_1: entered promiscuous mode
[ 4572.030974][ T5908] debugfs: 'hsr0' already exists in 'hsr'
[ 4572.034137][ T5908] Cannot create hsr debugfs directory
[ 4577.618352][   T24] audit: type=1400 audit(4576.840:219): avc:  denied  { write } for  pid=6014 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4582.431460][   T24] audit: type=1400 audit(4581.600:220): avc:  denied  { write } for  pid=6018 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4586.425176][ T5900] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 4586.984331][ T5900] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 4587.127550][ T5900] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 4587.792242][ T5900] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 4587.977625][ T5900] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 4588.532601][ T5900] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 4589.424006][ T5900] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 4589.835801][ T5900] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 4594.052778][ T5908] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 4594.455544][ T5908] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 4594.627393][ T5908] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 4594.927052][ T5908] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 4595.086831][ T5908] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 4595.374060][ T5908] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 4595.561937][ T5908] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 4596.037127][ T5908] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 4603.470312][   T24] audit: type=1400 audit(4602.690:221): avc:  denied  { write } for  pid=6032 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4609.846630][   T24] audit: type=1400 audit(4609.050:222): avc:  denied  { write } for  pid=6048 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4617.763931][ T5900] 8021q: adding VLAN 0 to HW filter on device bond0
[ 4621.645213][ T5908] 8021q: adding VLAN 0 to HW filter on device bond0
[ 4628.485309][   T24] audit: type=1400 audit(4627.690:223): avc:  denied  { write } for  pid=6059 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4634.920848][   T24] audit: type=1400 audit(4634.130:224): avc:  denied  { write } for  pid=6068 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4640.187836][ T3210] 8021q: adding VLAN 0 to HW filter on device eth14
[ 4662.591777][   T24] audit: type=1400 audit(4661.800:225): avc:  denied  { write } for  pid=6083 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4670.740860][   T24] audit: type=1400 audit(4669.890:226): avc:  denied  { write } for  pid=6092 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4675.294770][ T3210] 8021q: adding VLAN 0 to HW filter on device eth15
[ 4696.215859][   T24] audit: type=1400 audit(4695.420:227): avc:  denied  { write } for  pid=6114 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4703.243442][   T24] audit: type=1400 audit(4702.460:228): avc:  denied  { write } for  pid=6125 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4709.063601][ T3210] 8021q: adding VLAN 0 to HW filter on device eth16
[ 4729.202647][   T24] audit: type=1400 audit(4728.420:229): avc:  denied  { write } for  pid=6143 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4734.418279][ T5900] veth0_vlan: entered promiscuous mode
[ 4735.374369][ T5900] veth1_vlan: entered promiscuous mode
[ 4737.030737][   T24] audit: type=1400 audit(4736.190:230): avc:  denied  { write } for  pid=6153 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4739.125311][ T5908] veth0_vlan: entered promiscuous mode
[ 4739.504936][ T5900] veth0_macvtap: entered promiscuous mode
[ 4740.333478][ T5900] veth1_macvtap: entered promiscuous mode
[ 4740.867943][ T5908] veth1_vlan: entered promiscuous mode
[ 4742.005109][ T3210] 8021q: adding VLAN 0 to HW filter on device eth17
[ 4745.273303][ T5723] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 4745.287009][ T5723] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 4745.296265][ T5723] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 4745.593347][ T5723] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 4746.092385][ T5908] veth0_macvtap: entered promiscuous mode
[ 4747.072157][ T5908] veth1_macvtap: entered promiscuous mode
[ 4752.371398][ T5723] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 4752.383297][ T4575] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 4752.384119][ T4575] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 4752.384799][ T4575] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 4772.352424][   T24] audit: type=1400 audit(4771.560:231): avc:  denied  { write } for  pid=6166 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4785.172547][   T24] audit: type=1400 audit(4784.290:232): avc:  denied  { write } for  pid=6179 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4793.636422][ T3210] 8021q: adding VLAN 0 to HW filter on device eth18
[ 4804.986154][   T24] audit: type=1400 audit(4804.190:233): avc:  denied  { write } for  pid=6191 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4816.534905][   T24] audit: type=1400 audit(4815.690:234): avc:  denied  { write } for  pid=6202 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4858.052694][   T24] audit: type=1400 audit(4857.240:235): avc:  denied  { write } for  pid=6222 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4869.214589][   T24] audit: type=1400 audit(4868.410:236): avc:  denied  { write } for  pid=6236 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4875.795998][ T3210] 8021q: adding VLAN 0 to HW filter on device eth19
[ 4885.243853][   T24] audit: type=1400 audit(4884.440:237): avc:  denied  { write } for  pid=6243 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4893.253721][   T24] audit: type=1400 audit(4892.350:238): avc:  denied  { write } for  pid=6246 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4910.061944][   T24] audit: type=1400 audit(4909.270:239): avc:  denied  { write } for  pid=6250 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4917.941480][   T24] audit: type=1400 audit(4917.070:240): avc:  denied  { write } for  pid=6254 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4943.277211][   T24] audit: type=1400 audit(4942.470:241): avc:  denied  { write } for  pid=6266 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4954.651666][   T24] audit: type=1400 audit(4953.870:242): avc:  denied  { write } for  pid=6276 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4962.627117][ T3210] 8021q: adding VLAN 0 to HW filter on device eth20
[ 4976.632243][   T24] audit: type=1400 audit(4975.810:243): avc:  denied  { write } for  pid=6283 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4986.220927][   T24] audit: type=1400 audit(4985.440:244): avc:  denied  { write } for  pid=6290 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5021.732793][ T6257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 5022.221892][ T6257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 5036.715719][ T6263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 5037.340647][ T6263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 5061.560933][   T24] audit: type=1400 audit(5060.750:245): avc:  denied  { write } for  pid=6338 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5068.576544][ T6257] hsr_slave_0: entered promiscuous mode
[ 5068.794882][ T6257] hsr_slave_1: entered promiscuous mode
[ 5068.913194][ T6257] debugfs: 'hsr0' already exists in 'hsr'
[ 5068.960615][ T6257] Cannot create hsr debugfs directory
[ 5072.616716][   T24] audit: type=1400 audit(5071.710:246): avc:  denied  { write } for  pid=6346 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5084.846404][ T6263] hsr_slave_0: entered promiscuous mode
[ 5085.004380][ T6263] hsr_slave_1: entered promiscuous mode
[ 5085.123912][ T6263] debugfs: 'hsr0' already exists in 'hsr'
[ 5085.161370][ T6263] Cannot create hsr debugfs directory
[ 5093.073716][   T24] audit: type=1400 audit(5092.300:247): avc:  denied  { write } for  pid=6351 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5102.400762][   T24] audit: type=1400 audit(5101.620:248): avc:  denied  { write } for  pid=6356 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5110.373259][ T6257] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 5111.420537][ T6257] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 5111.458105][ T6257] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 5112.284062][ T6257] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 5112.482089][ T6257] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 5113.356623][ T6257] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 5113.541461][ T6257] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 5114.208092][ T6257] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 5123.084626][ T6263] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 5123.762853][ T6263] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 5123.983143][ T6263] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 5124.388222][ T6263] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 5124.557885][ T6263] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 5125.134803][ T6263] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 5125.317772][ T6263] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 5126.003158][ T6263] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 5134.890394][   T24] audit: type=1400 audit(5134.090:249): avc:  denied  { write } for  pid=6371 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5148.180851][   T24] audit: type=1400 audit(5147.350:250): avc:  denied  { write } for  pid=6388 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5165.717203][ T6257] 8021q: adding VLAN 0 to HW filter on device bond0
[ 5172.871480][   T24] audit: type=1400 audit(5172.070:251): avc:  denied  { write } for  pid=6396 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5174.512165][ T6263] 8021q: adding VLAN 0 to HW filter on device bond0
[ 5185.550717][   T24] audit: type=1400 audit(5184.770:252): avc:  denied  { write } for  pid=6403 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5216.093312][   T24] audit: type=1400 audit(5215.320:253): avc:  denied  { write } for  pid=6413 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5231.153762][   T24] audit: type=1400 audit(5230.180:254): avc:  denied  { write } for  pid=6421 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5255.423310][ T5689] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5259.055167][ T5689] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5261.784473][ T5689] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5264.588689][ T5689] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5290.414949][ T5689] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 5290.613909][ T5689] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 5290.741444][ T5689] bond0 (unregistering): Released all slaves
[ 5292.533539][ T5689] hsr_slave_0: left promiscuous mode
[ 5293.123215][ T5689] hsr_slave_1: left promiscuous mode
[ 5294.212900][ T5689] veth1_macvtap: left promiscuous mode
[ 5294.264131][ T5689] veth0_macvtap: left promiscuous mode
[ 5294.266759][ T5689] veth1_vlan: left promiscuous mode
[ 5294.313447][ T5689] veth0_vlan: left promiscuous mode
[ 5331.827546][ T5689] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5333.482581][ T5689] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5335.288100][ T5689] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5337.004208][ T5689] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5351.824603][   T24] audit: type=1400 audit(5351.020:255): avc:  denied  { write } for  pid=6475 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5357.780356][ T5689] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 5358.423801][ T5689] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 5358.897281][ T5689] bond0 (unregistering): Released all slaves
[ 5358.960632][   T24] audit: type=1400 audit(5358.100:256): avc:  denied  { write } for  pid=6480 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5361.560795][ T5689] hsr_slave_0: left promiscuous mode
[ 5361.661739][ T5689] hsr_slave_1: left promiscuous mode
[ 5362.341337][ T5689] veth1_macvtap: left promiscuous mode
[ 5362.360528][ T5689] veth0_macvtap: left promiscuous mode
[ 5362.367439][ T5689] veth1_vlan: left promiscuous mode
[ 5362.463180][ T5689] veth0_vlan: left promiscuous mode
[ 5389.118544][ T3210] 8021q: adding VLAN 0 to HW filter on device eth21
[ 5400.527438][   T24] audit: type=1400 audit(5399.740:257): avc:  denied  { write } for  pid=6489 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5408.870349][   T24] audit: type=1400 audit(5408.020:258): avc:  denied  { write } for  pid=6500 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5419.308707][ T6257] veth0_vlan: entered promiscuous mode
[ 5420.152606][ T6257] veth1_vlan: entered promiscuous mode
[ 5423.498377][ T6257] veth0_macvtap: entered promiscuous mode
[ 5424.404583][ T6257] veth1_macvtap: entered promiscuous mode
[ 5428.805376][ T6263] veth0_vlan: entered promiscuous mode
[ 5430.070570][   T24] audit: type=1400 audit(5429.260:259): avc:  denied  { write } for  pid=6511 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5430.753717][   T49] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 5430.758606][   T49] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 5430.831274][ T6139] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 5430.878957][ T6373] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 5431.625427][ T6263] veth1_vlan: entered promiscuous mode
[ 5438.393353][ T6263] veth0_macvtap: entered promiscuous mode
[ 5439.362702][ T6263] veth1_macvtap: entered promiscuous mode
[ 5440.707287][   T24] audit: type=1400 audit(5439.930:260): avc:  denied  { write } for  pid=6515 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5443.715640][ T3435] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 5443.717628][ T3435] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 5443.807645][ T6373] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 5443.842584][ T6373] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 5476.121255][   T24] audit: type=1400 audit(5475.330:261): avc:  denied  { write } for  pid=6527 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5488.921983][   T24] audit: type=1400 audit(5488.000:262): avc:  denied  { write } for  pid=6538 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5498.174000][ T3210] 8021q: adding VLAN 0 to HW filter on device eth22
[ 5512.407257][   T24] audit: type=1400 audit(5511.630:263): avc:  denied  { write } for  pid=6547 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5525.825940][   T24] audit: type=1400 audit(5524.950:264): avc:  denied  { write } for  pid=6559 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5567.404780][   T24] audit: type=1400 audit(5566.620:265): avc:  denied  { write } for  pid=6581 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5581.272668][   T24] audit: type=1400 audit(5580.450:266): avc:  denied  { write } for  pid=6589 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5590.897759][ T3210] 8021q: adding VLAN 0 to HW filter on device eth23
[ 5602.380724][   T24] audit: type=1400 audit(5601.590:267): avc:  denied  { write } for  pid=6596 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5613.877029][   T24] audit: type=1400 audit(5613.080:268): avc:  denied  { write } for  pid=6603 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5646.423480][   T24] audit: type=1400 audit(5645.620:269): avc:  denied  { write } for  pid=6611 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5657.320448][   T24] audit: type=1400 audit(5656.490:270): avc:  denied  { write } for  pid=6619 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5664.745476][ T3210] 8021q: adding VLAN 0 to HW filter on device eth24
[ 5691.646300][   T24] audit: type=1400 audit(5690.870:271): avc:  denied  { write } for  pid=6631 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5704.041720][   T24] audit: type=1400 audit(5703.260:272): avc:  denied  { write } for  pid=6642 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5711.857435][ T3210] 8021q: adding VLAN 0 to HW filter on device eth25
[ 5743.181482][ T6609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 5743.663489][ T6609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 5744.892824][   T24] audit: type=1400 audit(5744.120:273): avc:  denied  { write } for  pid=6659 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5757.602880][   T24] audit: type=1400 audit(5756.750:274): avc:  denied  { write } for  pid=6666 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5765.852328][ T3210] 8021q: adding VLAN 0 to HW filter on device eth26
[ 5781.835792][ T6623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 5782.302510][ T6623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 5791.038386][   T24] audit: type=1400 audit(5790.230:275): avc:  denied  { write } for  pid=6682 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5797.342787][ T6609] hsr_slave_0: entered promiscuous mode
[ 5797.507321][ T6609] hsr_slave_1: entered promiscuous mode
[ 5803.980720][   T24] audit: type=1400 audit(5803.110:276): avc:  denied  { write } for  pid=6690 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5812.337258][ T3210] 8021q: adding VLAN 0 to HW filter on device eth27
[ 5834.616817][ T6609] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 5835.001343][ T6609] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 5836.762706][ T6609] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 5837.162484][ T6609] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 5838.114001][ T6623] hsr_slave_0: entered promiscuous mode
[ 5838.292404][ T6623] hsr_slave_1: entered promiscuous mode
[ 5838.432968][ T6623] debugfs: 'hsr0' already exists in 'hsr'
[ 5838.464862][ T6623] Cannot create hsr debugfs directory
[ 5838.561263][ T6609] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 5839.075652][ T6609] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 5839.381949][ T6609] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 5839.694828][ T6609] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 5847.503769][   T24] audit: type=1400 audit(5846.670:277): avc:  denied  { write } for  pid=6702 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5862.362219][   T24] audit: type=1400 audit(5861.480:278): avc:  denied  { write } for  pid=6714 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5873.077721][ T3210] 8021q: adding VLAN 0 to HW filter on device eth28
[ 5896.752039][   T24] audit: type=1400 audit(5895.950:279): avc:  denied  { write } for  pid=6724 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5897.148445][ T6623] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 5897.735551][ T6623] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 5897.918010][ T6623] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 5898.622409][ T6623] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 5898.808041][ T6623] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 5899.374957][ T6623] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 5900.152038][ T6623] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 5900.744501][ T6623] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 5903.785736][ T6609] 8021q: adding VLAN 0 to HW filter on device bond0
[ 5911.246875][   T24] audit: type=1400 audit(5910.450:280): avc:  denied  { write } for  pid=6734 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5934.775371][   T24] audit: type=1400 audit(5933.960:281): avc:  denied  { write } for  pid=6742 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5949.382504][   T24] audit: type=1400 audit(5948.580:282): avc:  denied  { write } for  pid=6751 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5957.478614][ T6623] 8021q: adding VLAN 0 to HW filter on device bond0
[ 5972.582949][   T24] audit: type=1400 audit(5971.760:283): avc:  denied  { write } for  pid=6754 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5987.148653][   T24] audit: type=1400 audit(5986.360:284): avc:  denied  { write } for  pid=6764 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6021.272031][   T24] audit: type=1400 audit(6020.470:285): avc:  denied  { write } for  pid=6774 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6032.807051][   T49] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 6035.536437][   T49] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 6036.250607][   T24] audit: type=1400 audit(6035.340:286): avc:  denied  { write } for  pid=6785 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6038.316818][   T49] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 6041.024602][   T49] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 6062.731677][   T24] audit: type=1400 audit(6061.940:287): avc:  denied  { write } for  pid=6794 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6072.588332][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 6072.834433][   T24] audit: type=1400 audit(6072.020:288): avc:  denied  { write } for  pid=6803 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6073.496600][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 6074.203150][   T49] bond0 (unregistering): Released all slaves
[ 6077.272832][   T49] hsr_slave_0: left promiscuous mode
[ 6077.691227][   T49] hsr_slave_1: left promiscuous mode
[ 6078.607455][   T49] veth1_macvtap: left promiscuous mode
[ 6078.614629][   T49] veth0_macvtap: left promiscuous mode
[ 6078.648867][   T49] veth1_vlan: left promiscuous mode
[ 6078.753001][   T49] veth0_vlan: left promiscuous mode
[ 6090.992885][   T24] audit: type=1400 audit(6090.200:289): avc:  denied  { write } for  pid=6807 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6100.951352][   T24] audit: type=1400 audit(6100.150:290): avc:  denied  { write } for  pid=6812 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6116.728952][   T24] audit: type=1400 audit(6115.950:291): avc:  denied  { write } for  pid=6814 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6126.322753][   T24] audit: type=1400 audit(6125.510:292): avc:  denied  { write } for  pid=6817 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6128.577774][   T49] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 6130.633142][   T49] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 6132.745571][   T49] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 6134.787929][   T49] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 6159.086242][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 6159.472335][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 6159.646533][   T49] bond0 (unregistering): Released all slaves
[ 6162.473291][   T49] hsr_slave_0: left promiscuous mode
[ 6162.781933][   T49] hsr_slave_1: left promiscuous mode
[ 6163.597008][   T49] veth1_macvtap: left promiscuous mode
[ 6163.611081][   T49] veth0_macvtap: left promiscuous mode
[ 6163.622544][   T49] veth1_vlan: left promiscuous mode
[ 6163.628359][   T49] veth0_vlan: left promiscuous mode
[ 6215.083281][ T6609] veth0_vlan: entered promiscuous mode
[ 6216.131944][ T6623] veth0_vlan: entered promiscuous mode
[ 6217.498256][ T6609] veth1_vlan: entered promiscuous mode
[ 6218.444532][ T6623] veth1_vlan: entered promiscuous mode
[ 6224.715399][ T6609] veth0_macvtap: entered promiscuous mode
[ 6226.463305][ T6623] veth0_macvtap: entered promiscuous mode
[ 6227.183067][ T6609] veth1_macvtap: entered promiscuous mode
[ 6228.718542][ T6623] veth1_macvtap: entered promiscuous mode
[ 6237.103594][ T6317] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 6237.107712][ T6317] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 6237.211905][ T6438] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 6237.251106][ T6438] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 6305.451682][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 6305.921590][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 6306.144370][   T49] bond0 (unregistering): Released all slaves
[ 6308.641625][   T49] hsr_slave_0: left promiscuous mode
[ 6308.767175][   T49] hsr_slave_1: left promiscuous mode
[ 6309.530549][   T49] veth1_macvtap: left promiscuous mode
[ 6309.531729][   T49] veth0_macvtap: left promiscuous mode
[ 6309.552339][   T49] veth1_vlan: left promiscuous mode
[ 6309.568726][   T49] veth0_vlan: left promiscuous mode
[ 6423.388740][ T6870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 6423.873666][ T6870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 6469.881739][ T6870] hsr_slave_0: entered promiscuous mode
[ 6469.976157][ T6870] hsr_slave_1: entered promiscuous mode
[ 6503.924705][ T6870] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 6504.437501][ T6870] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 6504.558572][ T6870] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 6505.047626][ T6870] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 6505.168716][ T6870] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 6505.518250][ T6870] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 6505.638682][ T6870] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 6506.087323][ T6870] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 6516.571974][   T24] audit: type=1400 audit(6515.640:293): avc:  denied  { write } for  pid=6996 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6527.073137][   T24] audit: type=1400 audit(6526.270:294): avc:  denied  { write } for  pid=7010 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6546.888905][ T6870] 8021q: adding VLAN 0 to HW filter on device bond0
[ 6547.755091][   T24] audit: type=1400 audit(6546.980:295): avc:  denied  { write } for  pid=7016 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6558.054834][   T24] audit: type=1400 audit(6557.250:296): avc:  denied  { write } for  pid=7023 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6581.593520][   T24] audit: type=1400 audit(6580.770:297): avc:  denied  { write } for  pid=7033 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6593.908380][   T24] audit: type=1400 audit(6593.130:298): avc:  denied  { write } for  pid=7043 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6613.751084][   T24] audit: type=1400 audit(6612.970:299): avc:  denied  { write } for  pid=7047 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6624.172788][   T24] audit: type=1400 audit(6623.350:300): avc:  denied  { write } for  pid=7059 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6660.285599][ T7020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 6660.890321][ T7020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 6708.901066][ T7020] hsr_slave_0: entered promiscuous mode
[ 6709.014887][ T7020] hsr_slave_1: entered promiscuous mode
[ 6709.201291][ T7020] debugfs: 'hsr0' already exists in 'hsr'
[ 6709.222388][ T7020] Cannot create hsr debugfs directory
[ 6717.867456][   T24] audit: type=1400 audit(6717.090:301): avc:  denied  { write } for  pid=7108 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6723.413786][ T6870] veth0_vlan: entered promiscuous mode
[ 6727.533891][   T24] audit: type=1400 audit(6726.680:302): avc:  denied  { write } for  pid=7113 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6729.730771][ T6870] veth1_vlan: entered promiscuous mode
[ 6744.380824][ T6870] veth0_macvtap: entered promiscuous mode
[ 6745.482797][ T6870] veth1_macvtap: entered promiscuous mode
[ 6746.591494][   T24] audit: type=1400 audit(6745.780:303): avc:  denied  { write } for  pid=7116 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6753.468287][ T5297] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 6753.483676][ T5297] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 6753.522646][ T5297] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 6753.541729][ T5297] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 6758.773829][   T24] audit: type=1400 audit(6757.980:304): avc:  denied  { write } for  pid=7121 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6759.427580][ T7020] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 6759.918639][ T7020] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 6760.536952][ T7020] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 6761.125245][ T7020] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 6761.544250][ T7020] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 6762.015144][ T7020] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 6762.361713][ T7020] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 6762.763593][ T7020] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 6789.710809][   T24] audit: type=1400 audit(6788.890:305): avc:  denied  { write } for  pid=7133 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6803.506471][   T24] audit: type=1400 audit(6802.600:306): avc:  denied  { write } for  pid=7147 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6810.487739][ T7020] 8021q: adding VLAN 0 to HW filter on device bond0
[ 6813.216013][ T3210] 8021q: adding VLAN 0 to HW filter on device eth3
[ 6829.883173][   T24] audit: type=1400 audit(6829.110:307): avc:  denied  { write } for  pid=7152 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6842.076581][   T24] audit: type=1400 audit(6841.230:308): avc:  denied  { write } for  pid=7160 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6849.831643][ T3210] 8021q: adding VLAN 0 to HW filter on device eth4
[ 6867.341426][   T24] audit: type=1400 audit(6866.550:309): avc:  denied  { write } for  pid=7164 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6880.572382][   T24] audit: type=1400 audit(6879.770:310): avc:  denied  { write } for  pid=7176 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6889.651546][ T3210] 8021q: adding VLAN 0 to HW filter on device eth29
[ 6910.120520][   T24] audit: type=1400 audit(6909.240:311): avc:  denied  { write } for  pid=7187 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6922.171791][   T24] audit: type=1400 audit(6921.350:312): avc:  denied  { write } for  pid=7195 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6930.277331][ T3210] 8021q: adding VLAN 0 to HW filter on device eth30
[ 6951.200647][   T24] audit: type=1400 audit(6950.280:313): avc:  denied  { write } for  pid=7206 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6964.393565][   T24] audit: type=1400 audit(6963.600:314): avc:  denied  { write } for  pid=7217 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6973.514287][ T3210] 8021q: adding VLAN 0 to HW filter on device eth31
[ 6973.588004][ T7020] veth0_vlan: entered promiscuous mode
[ 6975.237115][ T7020] veth1_vlan: entered promiscuous mode
[ 6982.390811][ T7166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 6983.208729][ T7166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 6987.085985][ T7020] veth0_macvtap: entered promiscuous mode
[ 6988.164905][ T7020] veth1_macvtap: entered promiscuous mode
[ 6993.373308][   T24] audit: type=1400 audit(6992.480:315): avc:  denied  { write } for  pid=7225 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6993.593946][ T6776] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 6993.601637][ T6776] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 6993.612917][ T6776] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 6993.613843][ T6776] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 7009.662454][   T24] audit: type=1400 audit(7008.700:316): avc:  denied  { write } for  pid=7231 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 7020.975782][ T3210] 8021q: adding VLAN 0 to HW filter on device eth32
[ 7044.958390][ T7166] hsr_slave_0: entered promiscuous mode
[ 7045.125178][ T7166] hsr_slave_1: entered promiscuous mode
[ 7045.255714][ T7166] debugfs: 'hsr0' already exists in 'hsr'
[ 7045.311931][ T7166] Cannot create hsr debugfs directory
[ 7087.801125][   T24] audit: type=1400 audit(7086.840:317): avc:  denied  { write } for  pid=7260 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 7102.691828][   T24] audit: type=1400 audit(7101.890:318): avc:  denied  { write } for  pid=7267 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 7112.134118][ T7166] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 7112.856454][ T7166] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 7113.028274][ T7166] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 7113.665988][ T7166] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 7113.953948][ T7166] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 7114.565791][ T7166] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 7114.771750][ T7166] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 7115.470280][ T7166] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 7129.862403][   T24] audit: type=1400 audit(7128.950:319): avc:  denied  { write } for  pid=7273 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 7144.234792][   T24] audit: type=1400 audit(7143.310:320): avc:  denied  { write } for  pid=7291 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 7167.414981][ T7166] 8021q: adding VLAN 0 to HW filter on device bond0
[ 7182.872431][   T24] audit: type=1400 audit(7182.030:321): avc:  denied  { write } for  pid=7301 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 7196.940266][   T24] audit: type=1400 audit(7196.090:322): avc:  denied  { write } for  pid=7311 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 7224.633851][   T24] audit: type=1400 audit(7223.860:323): avc:  denied  { write } for  pid=7321 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 7232.427215][ T7264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 7233.003385][ T7264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 7238.980455][   T24] audit: type=1400 audit(7238.150:324): avc:  denied  { write } for  pid=7330 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 7240.973901][   T26] INFO: task syz.9.678:7143 blocked for more than 430 seconds.
[ 7240.992278][   T26]       Not tainted syzkaller #0
[ 7241.056363][   T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 7241.071376][   T26] task:syz.9.678       state:D stack:0     pid:7143  tgid:7143  ppid:6870   task_flags:0x400040 flags:0x00000011
[ 7241.074599][   T26] Call trace:
[ 7241.075009][   T26]  __switch_to+0x5e0/0xb70 (T)
[ 7241.075625][   T26]  __schedule+0x1e0c/0x38cc
[ 7241.076089][   T26]  schedule+0x1b4/0x274
[ 7241.076564][   T26]  schedule_timeout+0x68/0x1e4
[ 7241.077054][   T26]  wait_for_completion+0x1b8/0x414
[ 7241.077540][   T26]  __synchronize_srcu+0x1c8/0x208
[ 7241.078033][   T26]  synchronize_srcu+0x668/0x8dc
[ 7241.078546][   T26]  mmu_notifier_unregister+0x33c/0x444
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 7241.241990][   T26]  kvm_put_kvm+0x69c/0xbbc
[ 7241.290602][   T26]  kvm_vm_release+0x58/0x78
[ 7241.291309][   T26]  __fput+0x4ac/0x978
[ 7241.291807][   T26]  ____fput+0x20/0x30
[ 7241.292263][   T26]  task_work_run+0x1b8/0x250
[ 7241.292806][   T26]  exit_to_user_mode_loop+0x110/0x188
[ 7241.293356][   T26]  el0_svc+0x18c/0x240
[ 7241.293869][   T26]  el0t_64_sync_handler+0x84/0x12c
[ 7241.294410][   T26]  el0t_64_sync+0x198/0x19c
[ 7241.403026][   T26] 
[ 7241.403026][   T26] Showing all locks held in the system:
[ 7241.430621][   T26] 1 lock held by khungtaskd/26:
[ 7241.431183][   T26]  #0: ffff800087e73598 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x4c/0x188
[ 7241.433730][   T26] 3 locks held by kworker/u4:5/49:
[ 7241.434247][   T26] 1 lock held by klogd/3173:
[ 7241.434608][   T26] 2 locks held by getty/3238:
[ 7241.434936][   T26]  #0: 48f00000124a60a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c
[ 7241.436672][   T26]  #1: a6ff80008cbbb2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x314/0x11f8
[ 7241.438405][   T26] 2 locks held by syz-executor/3368:
[ 7241.438741][   T26] 3 locks held by kworker/u4:4/3435:
[ 7241.622315][   T26] 2 locks held by kworker/u4:6/3455:
[ 7241.623668][   T26]  #0: f9f000000d034140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x958/0x154c
[ 7241.625601][   T26]  #1: ffff8000a3de7ce8 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x978/0x154c
[ 7241.627455][   T26] 3 locks held by kworker/u4:0/5000:
[ 7241.627811][   T26] 3 locks held by kworker/u4:8/5689:
[ 7241.628121][   T26] 3 locks held by kworker/u4:9/5706:
[ 7241.628448][   T26] 3 locks held by kworker/u4:10/5723:
[ 7241.628822][   T26] 3 locks held by kworker/u4:13/6373:
[ 7241.715626][   T26] 2 locks held by kworker/u4:11/6776:
[ 7241.741043][   T26]  #0: f9f000000d034140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x958/0x154c
[ 7241.743158][   T26]  #1: ffff80008ff47ce8 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x978/0x154c
[ 7241.744912][   T26] 2 locks held by syz.1.676/6991:
[ 7241.745352][   T26] 1 lock held by modprobe/7331:
[ 7241.745694][   T26] 4 locks held by modprobe/7332:
[ 7241.746008][   T26] 2 locks held by dhcpcd-run-hook/7333:
[ 7241.746544][   T26] 
[ 7241.746819][   T26] =============================================
[ 7241.746819][   T26] 
[ 7241.747786][   T26] Kernel panic - not syncing: hung_task: blocked tasks
[ 7241.759969][   T26] CPU: 0 UID: 0 PID: 26 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT 
[ 7241.761549][   T26] Hardware name: linux,dummy-virt (DT)
[ 7241.762567][   T26] Call trace:
[ 7241.763332][   T26]  show_stack+0x2c/0x3c (C)
[ 7241.764479][   T26]  __dump_stack+0x30/0x40
[ 7241.765567][   T26]  dump_stack_lvl+0x30/0x12c
[ 7241.766499][   T26]  dump_stack+0x1c/0x28
[ 7241.767520][   T26]  vpanic+0x4cc/0x844
[ 7241.768472][   T26]  vpanic+0x0/0x844
[ 7241.769426][   T26]  hung_task_panic+0x0/0x2c
[ 7241.770525][   T26]  kthread+0x4cc/0x514
[ 7241.771488][   T26]  ret_from_fork+0x10/0x20
[ 7241.773211][   T26] Kernel Offset: disabled
[ 7241.774112][   T26] CPU features: 0x00000000,00d1802f,df1847a1,057ffe1f
[ 7241.775491][   T26] Memory Limit: none
[ 7241.777870][   T26] Rebooting in 86400 seconds..