last executing test programs:

1h10m45.792861531s ago: executing program 0 (id=237):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x90003, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r3, 0x2, 0x1})
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000bfe000/0x400000)=nil)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000140)={0x4, <r8=>0xffffffffffffffff, 0x1})
r9 = ioctl$KVM_CREATE_VM(r8, 0x894c, 0x0)
syz_kvm_setup_cpu$arm64(r9, 0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil, &(0x7f00000008c0)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
r10 = syz_kvm_add_vcpu$arm64(r5, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x0, 0x4, 0x2}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x1, 0x7fffd, 0x10000, 0x20, 0x0, 0x2}}], 0x50}, 0x0, 0x0)
r11 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r11, 0x801c581f, 0x0)
r12 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000b4a000/0x2000)=nil, 0x930, 0x280000f, 0x11, r12, 0x0)
r13 = syz_kvm_vgic_v3_setup(r4, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000180)={0x8, <r14=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r14, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r10, 0xae80, 0x0)
r15 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r15, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x100000c, 0x4d832, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x4, 0xcd7, &(0x7f0000000000)=0x7})

1h10m38.652293566s ago: executing program 1 (id=239):
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc9, 0x5})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0xa0000, 0x0) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0xa0000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000007, 0x4f833, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) (async)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000938000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000)
mmap$KVM_VCPU(&(0x7f0000f1a000/0x4000)=nil, 0x930, 0x0, 0x9032, 0xffffffffffffffff, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000f1a000/0x4000)=nil, 0x930, 0x0, 0x9032, 0xffffffffffffffff, 0x0)
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) (async)
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000eed000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000011000/0xc00000)=nil, 0xc00000)
munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000) (async)
munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000800000/0x800000)=nil, 0x800000)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) (async)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, <r2=>0xffffffffffffffff, 0x1})
ioctl$KVM_CREATE_VM(r2, 0x8004b708, 0x20000000000f)

1h10m37.801206581s ago: executing program 0 (id=240):
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000)
r0 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x20, 0xffffffffffffff32)
r1 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0)
syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000bfe000/0x400000)=nil)

1h10m32.922970884s ago: executing program 1 (id=241):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000e51000/0x4000)=nil, 0x4000) (async)
munmap(&(0x7f0000e51000/0x4000)=nil, 0x4000)
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) (async)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
munmap(&(0x7f000000f000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) (async)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x4437d4c359d591a, 0x0)

1h10m28.03128959s ago: executing program 1 (id=242):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x5})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x8, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r8 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil)
r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r11, 0x4018aee1, &(0x7f0000000000)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0x20e4586c})
ioctl$KVM_RUN(r11, 0xae80, 0x0)
ioctl$KVM_RUN(r11, 0xae80, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0)
syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil)
r12 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r7, 0xae04)
mmap$KVM_VCPU(&(0x7f0000669000/0x3000)=nil, r12, 0x2000001, 0x12, r6, 0x0)
r13 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04)
mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, r13, 0x8, 0x13, r6, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x2000)=nil, r13, 0x1000001, 0x12, r6, 0x0)
munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000)
ioctl$KVM_CREATE_VM(r2, 0x400454cb, 0x23)
munmap(&(0x7f000049b000/0x400000)=nil, 0x400000)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)

1h10m27.100732774s ago: executing program 0 (id=243):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1})
ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x1000, 0x100000, 0x8})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4)
ioctl$KVM_ARM_VCPU_INIT(r4, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8})
mmap$KVM_VCPU(&(0x7f0000027000/0x13000)=nil, 0x930, 0x3, 0x4102932, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1, 0x16831, 0xffffffffffffffff, 0x0)
r7 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
mmap$KVM_VCPU(&(0x7f0000f2b000/0x3000)=nil, 0x0, 0x3000002, 0x112, 0xffffffffffffffff, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x2a)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000027000/0x13000)=nil, 0x930, 0x3, 0x4102932, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r10 = mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r10, 0x20, &(0x7f0000000240)="fb4149dd033be3ac2cc4a22332fdaa8de0418df24200000000a6ab8031d1dfd92f0000000001ffffffff9610fbff77521ce10d8f6b69d22627e700", 0x0, 0xffffffffffffffca)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b6565d2f1, 0xffffffffffffffff, 0x0)
syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, 0x0)
r11 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000b80)={0x0, &(0x7f00000000c0)=[@hvc={0x32, 0x40, {0x84000015, [0x7, 0x8000000000000000, 0xffffffffffffffff, 0xee24, 0xfffffffffffeffff]}}], 0x40}, &(0x7f0000000040)=[@featur1={0x1, 0x4}], 0x1)
ioctl$KVM_RUN(r11, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000500)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f00000000c0)=@arm64_sys={0x603000000013dce0, &(0x7f0000000000)=0x43ff})
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r4, 0x4018aee1, &(0x7f00000000c0)=@attr_pmu_init)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

1h10m18.35006255s ago: executing program 0 (id=244):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x5, 0x1, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000bc2000/0x400000)=nil)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
r7 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r7, 0x3, 0x11, r6, 0x0)
syz_kvm_setup_cpu$arm64(r5, r6, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f00000000c0)=[@code={0xa, 0x20, {"002080d2a0bbbbf21f0000f9"}}, @uexit={0x0, 0x18, 0xaaaa}], 0x38}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r8 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x29)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1)
r11 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r10, 0x0)
r12 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x2)
ioctl$KVM_SET_DEVICE_ATTR(r14, 0x4018aee1, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r11, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r10, 0x0)
r15 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01)
ioctl$KVM_CREATE_VM(r15, 0x541b, 0x2004001c)

1h10m15.527267305s ago: executing program 1 (id=245):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000000c0)={0x7, <r2=>0xffffffffffffffff})
ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece)
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x4, 0x3, &(0x7f0000000000)=0x400000000})

1h10m8.50351577s ago: executing program 1 (id=246):
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r3, 0x1, 0x100)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r5, 0x4018aee1, &(0x7f0000000040)=@attr_irq_timer={0x0, 0x1, 0x0, &(0x7f0000000000)=0x1e})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, <r6=>0xffffffffffffffff})
mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x13, r6, 0x0)
r7 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r8 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = syz_kvm_vgic_v3_setup(r9, 0x3, 0x60)
ioctl$KVM_GET_DEVICE_ATTR(r10, 0x4018aee2, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x3, 0xc0f, &(0x7f0000000000)=0x40})
r11 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r12 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil)
r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@its_setup={0x82, 0x28, {0x4, 0x4, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x0, 0x10002, 0x9, 0x0, 0x104, 0x3}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r11, 0x1, 0x140)
ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f0000000180)={0x8, <r14=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r14, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r13, 0xae80, 0x0)

1h10m5.28472977s ago: executing program 0 (id=247):
ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000140)={0x4, 0x0, [{0x1, 0x2, 0x1, 0x0, @adapter={0x7, 0x100000000, 0x8, 0x0, 0x7}}, {0x9, 0x2, 0x1, 0x0, @adapter={0xd4ff, 0x6d39, 0x2, 0x0, 0x7f}}, {0x3, 0x0, 0x1, 0x0, @sint={0x6, 0x8000}}, {0x0, 0x0, 0x0, 0x0, @adapter={0x8f9, 0xe808e8f, 0x3f, 0x7, 0x332ccd89}}]})
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x3})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, <r2=>0xffffffffffffffff, 0x1})
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x9b, 0xf, 0x0, 0x5, 0x8, 0x82, 0x46, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x900001, 0x0, 0x0, 0x3, 0xa, 0x8, '\x00', 0x1, 0x93})
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
eventfd2(0x3, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
r6 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r5, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r5, 0x0)
r7 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01)
ioctl$KVM_CHECK_EXTENSION(r7, 0x40086602, 0x110ca32020)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0)
write$eventfd(r2, &(0x7f00000001c0)=0x3, 0xfdef)

1h9m54.526538174s ago: executing program 1 (id=248):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000100)={0x0, &(0x7f0000000240)=[@its_setup={0x82, 0x28, {0x3, 0x0, 0x16f}}, @its_send_cmd={0xaa, 0x28, {0xe, 0x0, 0x2, 0x8, 0x8, 0x100}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x2, 0x40)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, <r4=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000bc5000/0x400000)=nil)
r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@mrs={0xbe, 0x18, {0x603000000013dce6}}], 0x18}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r8, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
r9 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000000)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r9, 0x4018aee1, &(0x7f0000000100)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f00000000c0)={0x2, 0x4, 0x1}})
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil})
ioctl$KVM_CLEAR_DIRTY_LOG(r11, 0xc018aec0, &(0x7f0000000140)={0x0, 0x1c0, 0x3d70000, 0x0})
ioctl$KVM_RUN(r8, 0xae80, 0x0)

1h9m52.814016006s ago: executing program 0 (id=249):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04)
mmap$KVM_VCPU(&(0x7f0000ffc000/0x3000)=nil, r4, 0x1, 0x11, r3, 0x0)
r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04)
mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, r5, 0x8, 0x13, r3, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x34)
r6 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil)
r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f00000000c0)={0x0, &(0x7f0000000d40)=[@code={0xa, 0x9c, {"e0d597d20040b0f2610080d2020080d2630080d2440180d2020000d4c0ce98d20000b0f2a10180d2a20080d2e30080d2c40080d2020000d4007008d50008200e007008d5007008d500008012000008d5a04c95d20020b8f2810080d2020180d2030080d2840080d2020000d4c03f86d200a0b8f2c10080d2620080d2c30180d2640080d2020000d4"}}, @hvc={0x32, 0x40, {0x8400000a, [0x2, 0x7, 0x0, 0xd]}}, @msr={0x14, 0x20, {0x603000000013f100, 0xb34}}, @svc={0x122, 0x40, {0x4000000, [0x100, 0x322, 0xffffffff, 0x32, 0x8]}}, @svc={0x122, 0x40, {0x84000009, [0x7, 0xa, 0x9, 0x3ff, 0x4]}}, @mrs={0xbe, 0x18, {0x3861}}, @mrs={0xbe, 0x18, {0x603000000013c006}}, @smc={0x1e, 0x40, {0xc4000010, [0x4, 0x8, 0x10, 0x5, 0x3]}}, @irq_setup={0x46, 0x18, {0x4, 0x90}}, @its_setup={0x82, 0x28, {0x1, 0x2, 0x33f}}, @msr={0x14, 0x20, {0x603000000013f290, 0xfffffffffffffffb}}, @its_setup={0x82, 0x28, {0x0, 0x4, 0x285}}, @irq_setup={0x46, 0x18, {0x2, 0x35d}}, @smc={0x1e, 0x40, {0xc4000004, [0x3, 0x81, 0x2125, 0x2, 0x5]}}, @its_send_cmd={0xaa, 0x28, {0xa, 0x0, 0x3, 0xc, 0x5, 0x80000000, 0x1}}, @uexit={0x0, 0x18, 0x91}, @eret={0xe6, 0x18, 0x5}, @svc={0x122, 0x40, {0xffff, [0xfffffffffffffffe, 0x34, 0x3, 0x100000001, 0xfffffffffffffff9]}}, @msr={0x14, 0x20, {0x6030000000138084, 0x8}}, @smc={0x1e, 0x40, {0x10, [0x0, 0x8000, 0x80, 0x9, 0x5f]}}, @its_setup={0x82, 0x28, {0x2, 0x2, 0x3cf}}, @uexit={0x0, 0x18, 0x5}, @memwrite={0x6e, 0x30, @generic={0x0, 0x331, 0x4, 0x1}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x1, 0x1, 0xe, 0x5, 0x661c, 0x1}}, @svc={0x122, 0x40, {0x6000000, [0x7, 0x8, 0x4, 0x7, 0x8]}}, @its_setup={0x82, 0x28, {0x3, 0x0, 0x1c3}}, @hvc={0x32, 0x40, {0x84000000, [0x5, 0x7fff, 0x1, 0x40, 0x8]}}, @svc={0x122, 0x40, {0xc5000020, [0x8, 0xb, 0x251541fb, 0x8, 0x8]}}], 0x544}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r7, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000180)={0x8, <r10=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f0000000240)=@attr_arm64={0x0, 0x4, 0x0, 0x0})
r11 = openat$kvm(0x0, &(0x7f0000000040), 0xe0000, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
r13 = syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil)
r14 = syz_kvm_add_vcpu$arm64(r13, &(0x7f0000000000)={0x0, &(0x7f0000000040)=[@smc={0x1e, 0x40, {0xc4000003, [0x1000004, 0x100000003, 0x5, 0x101, 0x9]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1)
ioctl$KVM_RUN(r14, 0xae80, 0x0)
r15 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r6, 0xae04)
r16 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r15, 0x3, 0x11, r9, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
ioctl$KVM_GET_API_VERSION(r6, 0xae00, 0x0)
syz_kvm_assert_syzos_uexit$arm64(r9, r16, 0xfffffffffffffffe)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
syz_kvm_assert_syzos_uexit$arm64(r9, r16, 0xffffffffffffffff)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x2000)=nil, r5, 0x1000001, 0x12, r3, 0x0)

1h9m7.680333553s ago: executing program 32 (id=249):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04)
mmap$KVM_VCPU(&(0x7f0000ffc000/0x3000)=nil, r4, 0x1, 0x11, r3, 0x0)
r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04)
mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, r5, 0x8, 0x13, r3, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x34)
r6 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil)
r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f00000000c0)={0x0, &(0x7f0000000d40)=[@code={0xa, 0x9c, {"e0d597d20040b0f2610080d2020080d2630080d2440180d2020000d4c0ce98d20000b0f2a10180d2a20080d2e30080d2c40080d2020000d4007008d50008200e007008d5007008d500008012000008d5a04c95d20020b8f2810080d2020180d2030080d2840080d2020000d4c03f86d200a0b8f2c10080d2620080d2c30180d2640080d2020000d4"}}, @hvc={0x32, 0x40, {0x8400000a, [0x2, 0x7, 0x0, 0xd]}}, @msr={0x14, 0x20, {0x603000000013f100, 0xb34}}, @svc={0x122, 0x40, {0x4000000, [0x100, 0x322, 0xffffffff, 0x32, 0x8]}}, @svc={0x122, 0x40, {0x84000009, [0x7, 0xa, 0x9, 0x3ff, 0x4]}}, @mrs={0xbe, 0x18, {0x3861}}, @mrs={0xbe, 0x18, {0x603000000013c006}}, @smc={0x1e, 0x40, {0xc4000010, [0x4, 0x8, 0x10, 0x5, 0x3]}}, @irq_setup={0x46, 0x18, {0x4, 0x90}}, @its_setup={0x82, 0x28, {0x1, 0x2, 0x33f}}, @msr={0x14, 0x20, {0x603000000013f290, 0xfffffffffffffffb}}, @its_setup={0x82, 0x28, {0x0, 0x4, 0x285}}, @irq_setup={0x46, 0x18, {0x2, 0x35d}}, @smc={0x1e, 0x40, {0xc4000004, [0x3, 0x81, 0x2125, 0x2, 0x5]}}, @its_send_cmd={0xaa, 0x28, {0xa, 0x0, 0x3, 0xc, 0x5, 0x80000000, 0x1}}, @uexit={0x0, 0x18, 0x91}, @eret={0xe6, 0x18, 0x5}, @svc={0x122, 0x40, {0xffff, [0xfffffffffffffffe, 0x34, 0x3, 0x100000001, 0xfffffffffffffff9]}}, @msr={0x14, 0x20, {0x6030000000138084, 0x8}}, @smc={0x1e, 0x40, {0x10, [0x0, 0x8000, 0x80, 0x9, 0x5f]}}, @its_setup={0x82, 0x28, {0x2, 0x2, 0x3cf}}, @uexit={0x0, 0x18, 0x5}, @memwrite={0x6e, 0x30, @generic={0x0, 0x331, 0x4, 0x1}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x1, 0x1, 0xe, 0x5, 0x661c, 0x1}}, @svc={0x122, 0x40, {0x6000000, [0x7, 0x8, 0x4, 0x7, 0x8]}}, @its_setup={0x82, 0x28, {0x3, 0x0, 0x1c3}}, @hvc={0x32, 0x40, {0x84000000, [0x5, 0x7fff, 0x1, 0x40, 0x8]}}, @svc={0x122, 0x40, {0xc5000020, [0x8, 0xb, 0x251541fb, 0x8, 0x8]}}], 0x544}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r7, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000180)={0x8, <r10=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f0000000240)=@attr_arm64={0x0, 0x4, 0x0, 0x0})
r11 = openat$kvm(0x0, &(0x7f0000000040), 0xe0000, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
r13 = syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil)
r14 = syz_kvm_add_vcpu$arm64(r13, &(0x7f0000000000)={0x0, &(0x7f0000000040)=[@smc={0x1e, 0x40, {0xc4000003, [0x1000004, 0x100000003, 0x5, 0x101, 0x9]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1)
ioctl$KVM_RUN(r14, 0xae80, 0x0)
r15 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r6, 0xae04)
r16 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r15, 0x3, 0x11, r9, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
ioctl$KVM_GET_API_VERSION(r6, 0xae00, 0x0)
syz_kvm_assert_syzos_uexit$arm64(r9, r16, 0xfffffffffffffffe)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
syz_kvm_assert_syzos_uexit$arm64(r9, r16, 0xffffffffffffffff)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x2000)=nil, r5, 0x1000001, 0x12, r3, 0x0)

1h9m4.282469696s ago: executing program 33 (id=248):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000100)={0x0, &(0x7f0000000240)=[@its_setup={0x82, 0x28, {0x3, 0x0, 0x16f}}, @its_send_cmd={0xaa, 0x28, {0xe, 0x0, 0x2, 0x8, 0x8, 0x100}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x2, 0x40)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, <r4=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000bc5000/0x400000)=nil)
r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@mrs={0xbe, 0x18, {0x603000000013dce6}}], 0x18}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r8, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
r9 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000000)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r9, 0x4018aee1, &(0x7f0000000100)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f00000000c0)={0x2, 0x4, 0x1}})
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil})
ioctl$KVM_CLEAR_DIRTY_LOG(r11, 0xc018aec0, &(0x7f0000000140)={0x0, 0x1c0, 0x3d70000, 0x0})
ioctl$KVM_RUN(r8, 0xae80, 0x0)

52m20.979624212s ago: executing program 2 (id=367):
r0 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000540)={0x0, &(0x7f0000000280)=[@msr={0x14, 0x20, {0x603000000013deae, 0xca}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x1, 0x0, 0x2, 0x81, 0x3, 0x1}}, @smc={0x1e, 0x40, {0x86000001, [0x9, 0x5, 0x3, 0x6, 0x1]}}, @smc={0x1e, 0x40, {0x2000, [0x2, 0x8, 0x40, 0x5, 0x4]}}, @msr={0x14, 0x20, {0x603000000013deb9, 0x4}}, @msr={0x14, 0x20, {0x6030000000138037, 0x3ff}}, @mrs={0xbe, 0x18, {0x603000000013e091}}, @msr={0x14, 0x20, {0x603000000013c01e, 0x6}}, @hvc={0x32, 0x40, {0x8400000f, [0x6, 0x5, 0xe, 0x79b2, 0x9]}}, @eret={0xe6, 0x18, 0x2}, @its_setup={0x82, 0x28, {0x3, 0x4, 0x21d}}, @smc={0x1e, 0x40, {0x6000000, [0xb7b, 0x8000000000000001, 0x6, 0xb61c, 0x5]}}, @smc={0x1e, 0x40, {0x0, [0xffffffffffffff1a, 0x80, 0x1, 0xc2, 0x3]}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x23fa6cc1e283d730, 0xab, 0xa}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x0, 0x800, 0x2}}], 0x2a0}, &(0x7f0000000580)=[@featur2], 0x1)
mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x0, 0x4000010, r0, 0x0)
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8010, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ARM_VCPU_INIT(r3, 0x4020aeae, &(0x7f0000000140)={0x5, 0x8}) (rerun: 32)
r4 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0)
r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, r8, 0x8, 0x13, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x2000)=nil, r8, 0x1000001, 0x12, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000f38000/0x3000)=nil, r8, 0xdc25ce87217b5339, 0x20dc465032e594d6, r7, 0x0)
ioctl$KVM_SET_SIGNAL_MASK(r7, 0x4004ae8b, &(0x7f0000000000))
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000080)=@arm64_sys={0x603000000013f682, &(0x7f0000000000)=0x36a0bd2a})
r9 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil)
r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x2}}], 0x28}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r10, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000240)={0x8, <r13=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r12, 0xae80, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f0000000000)=@attr_arm64={0x0, 0x4, 0x1, 0x0})
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0)

52m7.431574101s ago: executing program 2 (id=369):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = eventfd2(0xfffffffa, 0x80001)
ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000140)={0x80, 0x4, 0x0, r4})
r5 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000000)={0x1, 0x37d03030d7a92616})
ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000180)={0x5000})
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r7 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@msr={0x14, 0x20, {0x603000000013e130, 0x98}}], 0x20}, 0x0, 0x0)
r9 = syz_kvm_vgic_v3_setup(r1, 0x1, 0x100)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
r12 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x20)
ioctl$KVM_GET_DEVICE_ATTR_vm(r12, 0x4018aee2, &(0x7f0000000180)=@attr_other={0x0, 0x1, 0x81, &(0x7f0000000140)=0xcc})
ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, &(0x7f00000001c0)={0x5, <r13=>0xffffffffffffffff, 0x1})
ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f0000000240)=@attr_other={0x0, 0x0, 0xb58, &(0x7f0000000200)=0x4})
r14 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r15 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r16 = ioctl$KVM_CREATE_VM(r15, 0xae01, 0x0)
ioctl$KVM_CREATE_GUEST_MEMFD(r16, 0xc040aed4, 0xfffffffffffffffe)
r17 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0)
r18 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r17, r18, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r18, 0x4010aeac, &(0x7f0000000100)=@arm64_sys={0x603000000013df1a, &(0x7f00000000c0)=0x3})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x4, 0x3, 0x0})

52m6.332910404s ago: executing program 3 (id=370):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async)
r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vm(r3, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)={0xef000000, 0x1000, 0x2}})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_vgic_v3_setup(r3, 0x4, 0x160)
syz_kvm_setup_cpu$arm64(r3, r4, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000140)=[{0x0, &(0x7f00000005c0)=[@smc={0x1e, 0x40, {0xef000000, [0x0, 0x400000001, 0x2, 0x3, 0x4]}}], 0x40}], 0x1, 0x0, 0x0, 0x0) (async)
syz_kvm_setup_cpu$arm64(r3, r4, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000140)=[{0x0, &(0x7f00000005c0)=[@smc={0x1e, 0x40, {0xef000000, [0x0, 0x400000001, 0x2, 0x3, 0x4]}}], 0x40}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r3, 0x4010ae74, 0x0) (async)
ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r3, 0x4010ae74, 0x0)
r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04)
r6 = syz_kvm_add_vcpu$arm64(0x0, 0x0, 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000e88000/0x14000)=nil, r5, 0x2000002, 0x40010, r6, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000aba000/0x400000)=nil) (async)
r7 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000aba000/0x400000)=nil)
r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000300)={0x0, &(0x7f0000000140)=[@its_setup={0x82, 0x28, {0x1, 0x3, 0x121}}], 0x28}, 0x0, 0x0)
r9 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000000)={0x0, &(0x7f0000000780)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x8000000000000f6}}], 0x28}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r1, 0xff7ffffffffffffd, 0x360) (async)
syz_kvm_vgic_v3_setup(r1, 0xff7ffffffffffffd, 0x360)
openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
ioctl$KVM_GET_REG_LIST(r10, 0xc008aeb0, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, <r11=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r9, 0xae80, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r9, 0x4018aee1, &(0x7f0000000240)=@attr_other={0x0, 0x767d15da, 0x4e9, &(0x7f0000000040)=0x5244}) (async)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r9, 0x4018aee1, &(0x7f0000000240)=@attr_other={0x0, 0x767d15da, 0x4e9, &(0x7f0000000040)=0x5244})
ioctl$KVM_RUN(r8, 0xae80, 0x0)

51m53.790849199s ago: executing program 3 (id=371):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000)
munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000482000/0x2000)=nil, 0x2000)
mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000)
munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x9000000)
munmap(&(0x7f000075a000/0xb000)=nil, 0xb000)
munmap(&(0x7f0000e76000/0x12000)=nil, 0x12000)
mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x24132, 0xffffffffffffffff, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2e)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x30}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)=@arm64_core={0x6030000000100042, &(0x7f0000000000)=0x9})
r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000140)={0x4, <r6=>0xffffffffffffffff, 0x1})
r7 = ioctl$KVM_CREATE_VM(r6, 0x894c, 0x0)
syz_kvm_setup_cpu$arm64(r7, 0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil, &(0x7f00000008c0)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vm(r8, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)={0xef000000, 0x1000, 0x1}})
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)

51m44.313439672s ago: executing program 2 (id=372):
r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000040)={0xe000, 0x2000}) (async)
r2 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) (async)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x5, 0x3, &(0x7f0000000000)=0x1})

51m36.712130701s ago: executing program 3 (id=373):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2f)
ioctl$KVM_SET_DEVICE_ATTR_vm(r1, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x16, 0x4, 0x1}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000b74000/0x400000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f0000000240)=[@smc={0x1e, 0x40, {0xc5000020, [0x6, 0x5f9, 0x3, 0x401, 0x1000]}}], 0x40}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)=@riscv64_sbi_fwft={0x0, &(0x7f0000000100)})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

51m36.481726731s ago: executing program 2 (id=374):
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CAP_ARM_SYSTEM_SUSPEND(r2, 0x4068aea3, &(0x7f00000000c0))
r3 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r3, &(0x7f00000000c0)={0x0, &(0x7f00000002c0)=[@memwrite={0x6e, 0x30, @vgic_gicr={0x80a0000, 0xa0, 0x8001, 0x3}}], 0x30}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r5, 0x1, 0x100)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r7 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000000)={0x0, &(0x7f0000000040)=[@smc={0x1e, 0x40, {0xc400000e, [0x99b, 0x100000003, 0x5, 0x101, 0x10]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1)
syz_kvm_vgic_v3_setup(r2, 0x3, 0xc0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
r11 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r10, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r11, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r10, 0x0)
r12 = eventfd2(0x0, 0x0)
close(r12)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01)
write$eventfd(r12, &(0x7f0000000180)=0x5, 0xfffffde3)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0)

51m22.39250084s ago: executing program 3 (id=375):
r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0)
ioctl$KVM_ARM_VCPU_INIT(0xffffffffffffffff, 0x4020aeae, 0x0) (async)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) (async, rerun: 32)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x20200, 0x0) (rerun: 32)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_vgic_v3_setup(r3, 0x3, 0x40)
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000000)=@attr_arm64={0x0, 0x4, 0x0, 0x0})
r5 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000080)={0x8, 0xffffffffffffffff, 0x1}) (async, rerun: 64)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r6, 0x4018aee1, &(0x7f0000000000)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0x20e4586c}) (async, rerun: 64)
ioctl$KVM_RUN(r6, 0xae80, 0x0) (async, rerun: 64)
ioctl$KVM_RUN(r6, 0xae80, 0x0) (async, rerun: 64)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x900c0, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0)

51m21.459697361s ago: executing program 2 (id=376):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x208000, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, r2, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0)
openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x3f)
r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000c62000/0x2000)=nil, r6, 0x6, 0x20010, r5, 0x0)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000140)={0x4, <r9=>0xffffffffffffffff, 0x1})
write$eventfd(r9, &(0x7f00000001c0)=0xffffff7f, 0xff25)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04)
r10 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000140)={0x1ff, 0x2, 0xeeee8000, 0x1000, &(0x7f0000001000/0x1000)=nil})
r13 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
r14 = syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000c00000/0x400000)=nil)
r15 = syz_kvm_add_vcpu$arm64(r14, &(0x7f0000000140)={0x0, &(0x7f0000000300)=[@hvc={0x32, 0x40, {0x84000011, [0xb, 0x7, 0x3, 0xe, 0x9]}}, @code={0xa, 0x6c, {"000840f8403d89d20040b0f2c10180d2220080d2430180d2440180d2020000d4007008d51f0000ea007008d50028214e008008d5e00183d20000b8f2810180d2220180d2030080d2840080d2020000d40000008b000028d5"}}], 0xac}, &(0x7f0000000280)=[@featur1={0x1, 0x88}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r15, 0x4018aee1, &(0x7f00000002c0)=@attr_pmu_init)
ioctl$KVM_RUN(r15, 0xae80, 0x0)

51m15.031786395s ago: executing program 3 (id=377):
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x0, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0)
r0 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, r0, 0x1000003, 0x4010, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vm(r2, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)={0xef000000, 0x1000, 0x2}})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_vgic_v3_setup(r2, 0x3, 0x240)
syz_kvm_setup_cpu$arm64(r2, r3, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000140)=[{0x0, &(0x7f00000005c0)=[@smc={0x1e, 0x40, {0xef000000, [0x0, 0x400000001, 0x2, 0x3, 0x4]}}], 0x40}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, 0x0)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04)
r5 = syz_kvm_add_vcpu$arm64(0x0, 0x0, 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000e88000/0x14000)=nil, r4, 0x2000002, 0x40010, r5, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r6 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = openat$kvm(0x0, &(0x7f0000000080), 0x4482, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2)
mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r9, 0x0)
mmap$KVM_VCPU(&(0x7f0000e04000/0x2000)=nil, 0x930, 0x1, 0x11, r9, 0x0)
r10 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r8, 0xae04)
mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, r10, 0x8, 0x13, r9, 0x0)
r11 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
r13 = syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_CAP_HALT_POLL(r12, 0x4068aea3, &(0x7f00000001c0)={0xb6, 0x0, 0x7fffffff})
r14 = syz_kvm_add_vcpu$arm64(r13, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x18, {"7f2003d5"}}], 0x18}, 0x0, 0x0)
ioctl$KVM_RUN(r14, 0xae80, 0x0)
ioctl$KVM_IRQ_LINE_STATUS(r12, 0xc008ae67, &(0x7f0000000100)={0x0, 0x81})
mmap$KVM_VCPU(&(0x7f0000ffd000/0x2000)=nil, r10, 0x1000001, 0x12, r9, 0x0)

51m11.841487488s ago: executing program 2 (id=378):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x1fe, 0x3, 0xffff1000, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x2, 0x3, 0x100000, 0x2000, &(0x7f000000f000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xcccc0000, 0x1000, &(0x7f0000f15000/0x1000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x1fd, 0x0, 0xeeee0000, 0x1000, &(0x7f0000ffd000/0x1000)=nil})
r2 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = eventfd2(0x2, 0x0)
r5 = eventfd2(0x200, 0x801)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000000)={0x7, <r8=>0xffffffffffffffff})
ioctl$KVM_GET_DEVICE_ATTR(r8, 0x4018aee2, &(0x7f0000000640)=@attr_other={0x0, 0x1, 0xc, &(0x7f0000000600)=0x2})
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000100)={r4, 0x6307, 0x3, r5})
r9 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x16}], 0x1)
ioctl$KVM_GET_REG_LIST(r10, 0xc008aeb0, &(0x7f0000000040)={0x3, [0xfffffffffffffff7, 0x2, 0xfffffffffffffffa]})
ioctl$KVM_RUN(r10, 0xae80, 0x0)
r11 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x2710, 0x3, 0x200000, 0x1000, &(0x7f0000ffd000/0x1000)=nil})
r12 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x33)
ioctl$KVM_CAP_HALT_POLL(r12, 0x4068aea3, &(0x7f0000000280)={0xb6, 0x0, 0x3})
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r11, 0x0)

50m58.39226707s ago: executing program 3 (id=379):
r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x27)
r3 = syz_kvm_vgic_v3_setup(r2, 0xf, 0x40)
ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f00000001c0)=@attr_arm64={0x0, 0x2, 0x2, 0x0})
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x0, 0x100000d, 0x24132, r4, 0x0)
syz_kvm_setup_cpu$arm64(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xa)
ioctl$KVM_SET_DEVICE_ATTR_vm(r5, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000080)={0xd20, 0x282, 0x1}})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x27)
r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil)
r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000b80)={0x0, 0x0}, &(0x7f0000000bc0)=[@featur1={0x1, 0x4}], 0x1)
ioctl$KVM_SET_ONE_REG(r9, 0x4010aeac, &(0x7f0000000000)=@arm64_fw={0x6030000000140000, &(0x7f0000000200)=0x10000})
r10 = syz_kvm_add_vcpu$arm64(r0, &(0x7f0000000b80)={0x0, &(0x7f0000000100)=[@hvc={0x32, 0x40, {0xc4000012, [0x100000001, 0x8000000000000000, 0xffffffffffffffff, 0xee24, 0xffffffffffff0001]}}], 0x40}, &(0x7f0000000040)=[@featur1={0x1, 0x4}], 0x1)
ioctl$KVM_RUN(r10, 0xae80, 0x0)

50m25.235369991s ago: executing program 34 (id=378):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x1fe, 0x3, 0xffff1000, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x2, 0x3, 0x100000, 0x2000, &(0x7f000000f000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xcccc0000, 0x1000, &(0x7f0000f15000/0x1000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x1fd, 0x0, 0xeeee0000, 0x1000, &(0x7f0000ffd000/0x1000)=nil})
r2 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = eventfd2(0x2, 0x0)
r5 = eventfd2(0x200, 0x801)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000000)={0x7, <r8=>0xffffffffffffffff})
ioctl$KVM_GET_DEVICE_ATTR(r8, 0x4018aee2, &(0x7f0000000640)=@attr_other={0x0, 0x1, 0xc, &(0x7f0000000600)=0x2})
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000100)={r4, 0x6307, 0x3, r5})
r9 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x16}], 0x1)
ioctl$KVM_GET_REG_LIST(r10, 0xc008aeb0, &(0x7f0000000040)={0x3, [0xfffffffffffffff7, 0x2, 0xfffffffffffffffa]})
ioctl$KVM_RUN(r10, 0xae80, 0x0)
r11 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x2710, 0x3, 0x200000, 0x1000, &(0x7f0000ffd000/0x1000)=nil})
r12 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x33)
ioctl$KVM_CAP_HALT_POLL(r12, 0x4068aea3, &(0x7f0000000280)={0xb6, 0x0, 0x3})
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r11, 0x0)

50m12.651781853s ago: executing program 35 (id=379):
r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x27)
r3 = syz_kvm_vgic_v3_setup(r2, 0xf, 0x40)
ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f00000001c0)=@attr_arm64={0x0, 0x2, 0x2, 0x0})
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x0, 0x100000d, 0x24132, r4, 0x0)
syz_kvm_setup_cpu$arm64(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xa)
ioctl$KVM_SET_DEVICE_ATTR_vm(r5, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000080)={0xd20, 0x282, 0x1}})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x27)
r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil)
r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000b80)={0x0, 0x0}, &(0x7f0000000bc0)=[@featur1={0x1, 0x4}], 0x1)
ioctl$KVM_SET_ONE_REG(r9, 0x4010aeac, &(0x7f0000000000)=@arm64_fw={0x6030000000140000, &(0x7f0000000200)=0x10000})
r10 = syz_kvm_add_vcpu$arm64(r0, &(0x7f0000000b80)={0x0, &(0x7f0000000100)=[@hvc={0x32, 0x40, {0xc4000012, [0x100000001, 0x8000000000000000, 0xffffffffffffffff, 0xee24, 0xffffffffffff0001]}}], 0x40}, &(0x7f0000000040)=[@featur1={0x1, 0x4}], 0x1)
ioctl$KVM_RUN(r10, 0xae80, 0x0)

35m27.170226502s ago: executing program 5 (id=461):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x2}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x1, 0x80000, 0x6, 0x0, 0x2, 0x2}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x1, 0x100)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, <r4=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r3, 0xae80, 0x10800)

35m24.352643288s ago: executing program 4 (id=462):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x88000, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CAP_HALT_POLL(r2, 0x4068aea3, 0x0)
ioctl$KVM_CAP_HALT_POLL(r2, 0x4068aea3, &(0x7f00000000c0)={0xe1, 0x0, 0x3})
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x12)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
syz_kvm_vgic_v3_setup(r3, 0x2, 0x40)
r4 = eventfd2(0x10001, 0x80000)
r5 = eventfd2(0x10, 0x800)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000000c0)={r5, 0xa})
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000000)={r4, 0x8, 0x2, r4})
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000040)={r4, 0xb3, 0x3, r5})

35m17.02822131s ago: executing program 5 (id=463):
r0 = openat$kvm(0x0, &(0x7f0000000280), 0x28000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8})
ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000140)={0xffffffff, 0xffffffff, 0x4, 0x1})

35m15.471265301s ago: executing program 4 (id=464):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x20) (async)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x23)
syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r4 = ioctl$KVM_GET_STATS_FD_vm(r2, 0xaece)
ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r4, 0x4068aea3, &(0x7f0000000180)={0xe4, 0x0, 0xf})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000140)={0x1ff, 0x2, 0xeeee8000, 0x1000, &(0x7f0000001000/0x1000)=nil}) (async)
ioctl$KVM_SET_DEVICE_ATTR_vm(r2, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)={0xef000000, 0x1000, 0x2}}) (async)
r7 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)

35m3.065816828s ago: executing program 4 (id=465):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xa) (async)
r2 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000bfe000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@hvc={0x32, 0x40, {0x86000000, [0x5, 0x7, 0x4, 0xa3, 0xdec]}}], 0x40}, 0x0, 0x0)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
r5 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
syz_kvm_assert_syzos_uexit$arm64(r3, r5, 0x0) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0x8000c7, 0x1}) (async)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000140)={0x4, <r8=>0xffffffffffffffff, 0x1})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x8, 0x20, 0x0, 0x5, 0x6, 0x6, 0x6, 0x48, 0x86, 0xdb, 0x68, 0x0, 0x9, 0x0, 0x0, 0x3, 0x25, 0x8, '\x00', 0x1, 0x400000000001}) (async)
ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000140)={0x4, 0x0, [{0x1, 0x1, 0x0, 0x0, @adapter={0x8000000000000001, 0x8, 0x2, 0xb, 0x10}}, {0x9, 0x3, 0x0, 0x0, @adapter={0x4d4ff, 0xffffffffffffffff}}, {0x0, 0x4, 0x1, 0x0, @sint={0x7fffffff, 0x6}}, {0x0, 0x6, 0x0, 0x0, @adapter={0x0, 0x7fffffff, 0x20000000401, 0x7f, 0xb2d}}]}) (async)
write$eventfd(r8, &(0x7f00000001c0)=0x3, 0x50)
syz_kvm_assert_syzos_uexit$arm64(r3, r5, 0xaaaa) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
r9 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = ioctl$KVM_GET_STATS_FD_cpu(r3, 0xaece)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r11, 0xae04) (async)
ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000240)={0x8}) (async)
r12 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000140)={0x4, <r14=>0xffffffffffffffff, 0x1})
write$eventfd(r14, &(0x7f00000001c0)=0x3, 0xfdef)
r15 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r16 = ioctl$KVM_CREATE_VM(r15, 0x80111500, 0x20000000)
write$eventfd(r16, &(0x7f0000000040), 0x8)

34m53.974433266s ago: executing program 5 (id=466):
r0 = openat$kvm(0x0, &(0x7f0000000000), 0xaaa43, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r2, 0x4018aee1, &(0x7f0000000040)=@attr_irq_timer={0x0, 0x1, 0x1, 0x0})
ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000080)={0x7, 0x200})
r3 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r4, 0x4068aea3, &(0x7f0000000340)={0xdf, 0x0, 0x2000})

34m47.298665208s ago: executing program 4 (id=467):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x2}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x1, 0x80000, 0x6, 0x0, 0x2, 0x2}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x1, 0x100)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, <r4=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r3, 0xae80, 0x20000)

34m45.050417484s ago: executing program 5 (id=468):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000000)="a5920cde26834aa184e7c68682e19a3807d00f8b1a7c3e2dae4d8bf46a11d12093c2dd078e772ac86399a31ce1b22623f070b95932ccb50e492079aac2512f89406d6d6c6c066e5c", 0x0, 0x48) (async, rerun: 32)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) (async, rerun: 32)
syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, &(0x7f0000000200)="c198a54e97ce40a62720224f77db7e5f6cd110b0d8ca3983", 0x0, 0x18) (async)
r5 = syz_kvm_vgic_v3_setup(0xffffffffffffffff, 0x3, 0x40)
ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, 0x0) (async)
r6 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x7fff}}, @msr={0x14, 0x20, {0x603000000013dce1, 0x7}}], 0x40}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r6, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
ioctl$KVM_RUN(r6, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r6, 0xae80, 0x0) (async, rerun: 32)
r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (rerun: 32)
mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r7, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000e04000/0x2000)=nil, 0x930, 0x1, 0x11, r7, 0x0)
munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) (async)
mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x0, 0x8, 0x13, r7, 0x0)
mmap$KVM_VCPU(&(0x7f0000011000/0x3000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) (async, rerun: 64)
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) (async, rerun: 64)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) (async, rerun: 32)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) (async, rerun: 32)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x0, 0x8032, 0xffffffffffffffff, 0x0)

34m35.762182787s ago: executing program 4 (id=469):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2081, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000000140)={0x200200001fe0000, 0x3})
ioctl$KVM_SET_DEVICE_ATTR_vm(r2, 0x4018aee1, &(0x7f00000000c0)=@attr_other={0x0, 0x3, 0x5, &(0x7f0000000000)=0xfffffffffffff8dc})
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r3, r4, &(0x7f0000bfe000/0x400000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="320000000000000040000000000000000c0000c400000000070000000000000009000000000000000800"], 0x40}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2081, 0x0) (async)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000000140)={0x200200001fe0000, 0x3}) (async)
ioctl$KVM_SET_DEVICE_ATTR_vm(r2, 0x4018aee1, &(0x7f00000000c0)=@attr_other={0x0, 0x3, 0x5, &(0x7f0000000000)=0xfffffffffffff8dc}) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async)
syz_kvm_setup_cpu$arm64(r3, r4, &(0x7f0000bfe000/0x400000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="320000000000000040000000000000000c0000c400000000070000000000000009000000000000000800"], 0x40}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)

34m33.288107211s ago: executing program 5 (id=470):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r3 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r2, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r2, 0x0)
r4 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r5, r6, &(0x7f0000bff000/0x400000)=nil, &(0x7f0000000c00)=[{0x0, &(0x7f0000000640)=[@its_setup={0x82, 0x28, {0x3, 0x3, 0x185}}, @eret={0xe6, 0x18, 0x42d5}, @hvc={0x32, 0x40, {0x4000000, [0x2, 0x543ba709, 0x4, 0x7, 0x3]}}, @eret={0xe6, 0x18, 0xc22}, @eret={0xe6, 0x18, 0x251b3336}, @hvc={0x32, 0x40, {0xc4000007, [0x401, 0x2, 0x1, 0x8, 0x5]}}, @its_setup={0x82, 0x28, {0x2, 0x4, 0x311}}, @smc={0x1e, 0x40, {0x200, [0x0, 0x8, 0x2, 0x8, 0xfffffffffffffff9]}}, @hvc={0x32, 0x40, {0x84000004, [0xffffffffffff0000, 0x0, 0x7, 0x9, 0x6]}}, @msr={0x14, 0x20, {0x6030000000138012, 0x5}}, @msr={0x14, 0x20, {0x603000000013df70, 0x4}}, @uexit={0x0, 0x18, 0x2}, @uexit={0x0, 0x18, 0x1}], 0x208}], 0x1, 0x0, &(0x7f0000000c40)=[@featur2={0x1, 0x8}], 0x1)
ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, &(0x7f0000000040)=@arm64_sys={0x603000000013c028, &(0x7f0000000600)=0x6})
r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0x801c581f, 0x0)
r8 = openat$kvm(0x0, &(0x7f0000000040), 0x800, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0xb)
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000000)={0x10001, 0x1, 0x30000, 0x1000, &(0x7f0000c1f000/0x1000)=nil})
r10 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x2e)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r10, r11, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000100)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r11, 0x4010aeac, &(0x7f0000000180)=@arm64_core={0x6030000000100028, &(0x7f0000000080)=0x4})

34m23.301684479s ago: executing program 4 (id=471):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3c)
ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000000)={0x6, 0xbbf})
r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x10100, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x37)
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f00000001c0)={0x8, <r4=>0xffffffffffffffff})
r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x34)
r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x2}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x1, 0x80000, 0x10000, 0x0, 0x200, 0x2}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r6, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000180)={0x8, <r9=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000b7b000/0x400000)=nil)
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000380)})
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f00000001c0)={0x8, <r10=>0xffffffffffffffff, 0x1})
ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f00000002c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f00000000c0)=0x33})

34m12.621798872s ago: executing program 5 (id=472):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x2c)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000580)={0x0, &(0x7f0000000200)=[@smc={0x1e, 0x40, {0x2000000, [0x8, 0x5, 0x17, 0x5]}}, @uexit={0x0, 0x18, 0x6}, @mrs={0xbe, 0x18, {0x603000000013c667}}, @uexit={0x0, 0x18, 0x1}, @eret={0xe6, 0x18, 0x1}, @uexit={0x0, 0x18, 0xff}, @code={0xa, 0x6c, {"00c4a02e0060df0d0084202e0010005e00804048008c000f000028d5007008d5406080d200e0b8f2810080d2e20080d2030080d2a40080d2020000d4e0da96d200e0b0f2210180d2c20080d2c30180d2c40080d2020000d4"}}, @irq_setup={0x46, 0x18, {0x3, 0x32}}, @smc={0x1e, 0x40, {0xc4000047, [0xa, 0x1, 0x4, 0x5, 0x4]}}, @uexit={0x0, 0x18, 0x5}, @uexit={0x0, 0x18, 0x2}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x58, 0x9, 0xc}}, @uexit={0x0, 0x18, 0x5}, @code={0xa, 0xb4, {"60c987d200a0b8f2a10180d2420080d2e30080d2040180d2020000d460348ed20020b0f2c10180d2020080d2a30080d2c40180d2020000d4e0ba98d20040b0f2810180d2e20080d2430080d2c40180d2020000d4007008d5000028d50000271e007008d5a07e88d20080b0f2a10180d2e20180d2a30080d2c40080d2020000d4008008d5c04d82d20080b8f2e10080d2820180d2a30180d2440080d2020000d4"}}, @its_setup={0x82, 0x28, {0x3, 0x0, 0x13f}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80c0000, 0x4, 0xe3, 0xc}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0xf00, 0x7, 0x5}}, @its_setup={0x82, 0x28, {0x1, 0x1, 0x23c}}], 0x358}, &(0x7f00000005c0)=[@featur2={0x1, 0x6}], 0x1)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xc, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x20000000)
ioctl$KVM_SET_DEVICE_ATTR_vm(r3, 0x8030aeb4, 0x0)
r7 = eventfd2(0xc6, 0x801)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0xc8, 0x0, r7})
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, <r8=>0xffffffffffffffff, 0x1})
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x3, 0x27, 0x6, 0x0, 0x4, 0x9, 0xff, 0x7, 0xc7, 0x43, 0x5, 0x7, 0x0, 0x5, 0x2e, 0xd7, 0x10, 0xaa, 0x7, '\x00', 0x2, 0x100000000000000})
write$eventfd(r8, &(0x7f00000001c0)=0x9, 0x1d)

33m37.271007256s ago: executing program 36 (id=471):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3c)
ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000000)={0x6, 0xbbf})
r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x10100, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x37)
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f00000001c0)={0x8, <r4=>0xffffffffffffffff})
r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x34)
r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x2}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x1, 0x80000, 0x10000, 0x0, 0x200, 0x2}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r6, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000180)={0x8, <r9=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000b7b000/0x400000)=nil)
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000380)})
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f00000001c0)={0x8, <r10=>0xffffffffffffffff, 0x1})
ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f00000002c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f00000000c0)=0x33})

33m25.882290295s ago: executing program 37 (id=472):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x2c)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000580)={0x0, &(0x7f0000000200)=[@smc={0x1e, 0x40, {0x2000000, [0x8, 0x5, 0x17, 0x5]}}, @uexit={0x0, 0x18, 0x6}, @mrs={0xbe, 0x18, {0x603000000013c667}}, @uexit={0x0, 0x18, 0x1}, @eret={0xe6, 0x18, 0x1}, @uexit={0x0, 0x18, 0xff}, @code={0xa, 0x6c, {"00c4a02e0060df0d0084202e0010005e00804048008c000f000028d5007008d5406080d200e0b8f2810080d2e20080d2030080d2a40080d2020000d4e0da96d200e0b0f2210180d2c20080d2c30180d2c40080d2020000d4"}}, @irq_setup={0x46, 0x18, {0x3, 0x32}}, @smc={0x1e, 0x40, {0xc4000047, [0xa, 0x1, 0x4, 0x5, 0x4]}}, @uexit={0x0, 0x18, 0x5}, @uexit={0x0, 0x18, 0x2}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x58, 0x9, 0xc}}, @uexit={0x0, 0x18, 0x5}, @code={0xa, 0xb4, {"60c987d200a0b8f2a10180d2420080d2e30080d2040180d2020000d460348ed20020b0f2c10180d2020080d2a30080d2c40180d2020000d4e0ba98d20040b0f2810180d2e20080d2430080d2c40180d2020000d4007008d5000028d50000271e007008d5a07e88d20080b0f2a10180d2e20180d2a30080d2c40080d2020000d4008008d5c04d82d20080b8f2e10080d2820180d2a30180d2440080d2020000d4"}}, @its_setup={0x82, 0x28, {0x3, 0x0, 0x13f}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80c0000, 0x4, 0xe3, 0xc}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0xf00, 0x7, 0x5}}, @its_setup={0x82, 0x28, {0x1, 0x1, 0x23c}}], 0x358}, &(0x7f00000005c0)=[@featur2={0x1, 0x6}], 0x1)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xc, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x20000000)
ioctl$KVM_SET_DEVICE_ATTR_vm(r3, 0x8030aeb4, 0x0)
r7 = eventfd2(0xc6, 0x801)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0xc8, 0x0, r7})
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, <r8=>0xffffffffffffffff, 0x1})
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x3, 0x27, 0x6, 0x0, 0x4, 0x9, 0xff, 0x7, 0xc7, 0x43, 0x5, 0x7, 0x0, 0x5, 0x2e, 0xd7, 0x10, 0xaa, 0x7, '\x00', 0x2, 0x100000000000000})
write$eventfd(r8, &(0x7f00000001c0)=0x9, 0x1d)

17m46.446986446s ago: executing program 6 (id=528):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r2, r3, &(0x7f0000bfe000/0x400000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f0000000100)=[@mrs={0xbe, 0x18, {0x603000000013808c}}], 0x18}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x2}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x1, 0x80000, 0x30000, 0x0, 0x0, 0x2}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r4, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000180)={0x8, <r7=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r6, 0xae80, 0x0)

17m45.180690166s ago: executing program 7 (id=529):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x24)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_GET_ONE_REG(r5, 0x4010aeab, &(0x7f0000000080)=@arm64_fp_extra={0x60200000001000d4, &(0x7f0000000040)=0x3cc})
r6 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000180)={0x1fe, 0x4, 0xeeef0000, 0x2000, &(0x7f0000c08000/0x2000)=nil, 0x1000, r6})
syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000bfd000/0x400000)=nil)
r7 = eventfd2(0x0, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={r7, 0x0, 0x3, r7})
r8 = eventfd2(0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0x4020940d, 0x20000000)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x400401, 0x0)
ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000040)={0x5, 0x1, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r12 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000bc2000/0x400000)=nil)
r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000540)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_RUN(r13, 0xae80, 0x0)
ioctl$KVM_GET_REG_LIST(r13, 0xc008aeb0, &(0x7f0000000040))
ioctl$KVM_GET_DEVICE_ATTR_vcpu(r13, 0x4018aee2, &(0x7f00000000c0)=@attr_irq_timer={0x0, 0x1, 0x1, &(0x7f0000000080)=0x1a})
r14 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, r14, 0x3000001, 0x11, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000240)={0x1ff, 0x5, 0x2, 0x1000, &(0x7f0000ffd000/0x1000)=nil, 0x9})

17m28.740464517s ago: executing program 6 (id=530):
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000)
r0 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3)
ioctl$KVM_ARM_VCPU_INIT(r3, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8})
ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f00000000c0)=@arm64_core={0x6030000000100014, &(0x7f0000000000)=0x40000280})
ioctl$KVM_DIRTY_TLB(r3, 0x4010aeaa, &(0x7f0000000740)={0x7fffffffffffffff, 0x2})
syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f00000000c0)={0x2, 0x0, 0x100000, 0x2000, &(0x7f000000f000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xcccc0000, 0x1000, &(0x7f0000f15000/0x1000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000200)={0x1fd, 0x0, 0xeeee0000, 0x1000, &(0x7f0000ffd000/0x1000)=nil})
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x2710, 0x3, 0x200000, 0x1000, &(0x7f0000ffd000/0x1000)=nil})
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r8, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000100)={0x0, 0x6, 0x100000, 0x1000, &(0x7f0000cfb000/0x1000)=nil})
r9 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CHECK_EXTENSION_VM(r9, 0xae03, 0x80)
r10 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r10, r11, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000000)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r11, 0x4010aeac, 0x0)
ioctl$KVM_SET_ONE_REG(r11, 0x4010aeac, &(0x7f0000000140)=@arm64_fp_extra={0x60200000001000d4, &(0x7f0000000100)=0x5})
syz_kvm_add_vcpu$arm64(0x0, &(0x7f00000004c0)={0x0, &(0x7f0000000e40)=[@uexit={0x0, 0x18, 0xffffffffffffffff}, @hvc={0x32, 0x40, {0x8, [0x3, 0x7, 0x800, 0x5, 0x40]}}, @eret={0xe6, 0x18, 0x81}, @svc={0x122, 0x40, {0x32000000, [0xb, 0x7, 0xffffffffffffc447, 0x9, 0x5]}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80c0000, 0xac, 0x60dc, 0x2}}, @code={0xa, 0x9c, {"409798d20040b8f2410080d2e20180d2830180d2e40180d2020000d440a392d200a0b0f2e10180d2420180d2630080d2040180d2020000d40040671e0030005e007008d5c01685d20040b0f2810080d2a20180d2030180d2240080d2020000d4000028d560e085d20080b0f2810180d2420080d2e30080d2040080d2020000d4007008d5007008d5"}}, @uexit={0x0, 0x18, 0x8}, @its_setup={0x82, 0x28, {0x1, 0x2, 0x2cc}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80c0000, 0xc0, 0x4}}, @code={0xa, 0xb4, {"000008d500c0000f809495d20080b0f2210080d2a20180d2c30080d2240080d2020000d4c00794d20060b0f2a10080d2c20080d2c30080d2240080d2020000d460b49ad200e0b0f2a10180d2420180d2a30180d2e40080d2020000d4000028d5000008d5001c600e207291d20000b8f2210080d2020080d2a30080d2440180d2020000d4a0188cd200a0b0f2810080d2220080d2830080d2240080d2020000d4"}}, @its_setup={0x82, 0x28, {0x3, 0x4, 0x1bf}}, @msr={0x14, 0x20, {0x603000000013c011, 0x7}}, @smc={0x1e, 0x40, {0xc4000011, [0x48d, 0xa000000000, 0xfffffffffffffff6, 0x1, 0x8]}}, @mrs={0xbe, 0x18, {0x603000000013806c}}, @msr={0x14, 0x20, {0x603000000013c082, 0x100000000001567}}, @svc={0x122, 0x40, {0x86000001, [0x1, 0x8, 0x7fff, 0x6, 0x9]}}, @svc={0x122, 0x40, {0x6000000, [0x5, 0xffff, 0x9, 0xf, 0x6000000000]}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x1, 0x0, 0x8, 0x6, 0x5, 0x1}}, @eret={0xe6, 0x18, 0x5}, @mrs={0xbe, 0x18, {0x603000000013e534}}, @svc={0x122, 0x40, {0xc5000021, [0x0, 0x400, 0x10001, 0x800, 0x5]}}, @code={0xa, 0x9c, {"00d8a15e00008092207c87d20040b0f2410180d2620080d2430180d2e40180d2020000d4e0d185d20060b0f2a10180d2a20180d2830180d2840080d2020000d4007008d5a05493d20060b8f2810180d2220080d2a30180d2c40080d2020000d400a4200d0000403c002c9fd200a0b8f2e10180d2e20180d2230080d2c40180d2020000d4008008d5"}}, @its_setup={0x82, 0x28, {0x2, 0x2, 0xe4}}, @uexit={0x0, 0x18, 0x8}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x4, 0x1}}, @smc={0x1e, 0x40, {0x86000000, [0x8, 0x80000000, 0x0, 0xa6ed, 0x8]}}, @svc={0x122, 0x40, {0x31000000, [0x0, 0xc5a1, 0x1, 0x40, 0x2]}}, @uexit={0x0, 0x18, 0x9583}, @code={0xa, 0x54, {"0040621e000800f8007008d5008008d5000000180000791e008008d5000820f800b8a15e206791d20080b0f2a10180d2820180d2630080d2440180d2020000d4"}}, @eret={0xe6, 0x18, 0x6}, @mrs={0xbe, 0x18, {0x6030000000138066}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0xf00, 0x100000000}}], 0x6d0}, &(0x7f0000000500)=[@featur2={0x1, 0x1c}], 0x1)
syz_kvm_add_vcpu$arm64(0x0, &(0x7f00000006c0)={0x0, &(0x7f0000000540)=[@msr={0x14, 0x20, {0xa050000000345257, 0x4}}, @smc={0x1e, 0x40, {0x800, [0xaa6, 0x4, 0xb, 0xc2, 0x1]}}, @msr={0x14, 0x20, {0x603000000013e10a, 0xffffffffffffffff}}, @msr={0x14, 0x20, {0x603000000013e6d1, 0x8}}, @msr={0x14, 0x20, {0x603000000013deaa, 0x1}}, @msr={0x14, 0x20, {0x603000000013e300, 0x10000}}, @code={0xa, 0x6c, {"005c205e000028d50090800f008008d500008092c0258ad20060b8f2410080d2c20180d2030180d2e40080d2020000d40004002f00c0df0dc0659ed20040b0f2210180d2620180d2830180d2440080d2020000d4007008d5"}}], 0x14c}, &(0x7f0000000700)=[@featur2={0x1, 0xa0}], 0x1)

17m24.761539338s ago: executing program 7 (id=531):
syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000240)=[@smc={0x1e, 0x40, {0x86000001, [0x7fff, 0x5, 0xc, 0x8001, 0x800]}}], 0x40}, 0x0, 0x0)
r0 = openat$kvm(0x0, &(0x7f00000001c0), 0x4a00, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3)
ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000100)={0x5, 0x18})
ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f00000000c0)=@arm64_sve_vls={0x606000000015ffff, &(0x7f0000000000)=0x1})
openat$kvm(0x0, &(0x7f0000000080), 0x40201, 0x0)
r3 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x27)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r5, 0x4010ae68, 0xfffffffffffffffe)
syz_kvm_add_vcpu$arm64(r3, &(0x7f00000008c0)={0x0, 0x0}, 0x0, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8a902, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r7 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000bff000/0x400000)=nil)
r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000b80)={0x0, &(0x7f0000000c00)=[@hvc={0x32, 0x40, {0x84000000, [0x23e, 0xc, 0x14ef, 0x6, 0xffff]}}, @irq_setup={0x46, 0x18, {0x4, 0x2e}}, @its_setup={0x82, 0x28, {0xfffffffffffffffd, 0x4, 0x2f1}}, @eret={0xe6, 0x18, 0xd}, @code={0xa, 0xb4, {"0080c088000028d5604394d200c0b0f2a10180d2020080d2030080d2440080d2020000d4e0cd97d20040b0f2410180d2620080d2230080d2840080d2020000d4e0e097d200a0b0f2c10180d2020180d2a30180d2440180d2020000d4007008d5c0208cd20040b0f2e10080d2e20080d2430180d2c40180d2020000d40040601ea01f9dd200e0b0f2610180d2620180d2830080d2240180d2020000d4000040d3"}}, @mrs={0xbe, 0x18, {0x603000000013c2a6}}, @smc={0x1e, 0x40, {0xc4000011, [0x7, 0x1c, 0xfffffffffffffffc, 0xaa5, 0x1000]}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x1, 0x4, 0x7, 0x36c, 0x0, 0x4}}, @mrs={0xbe, 0x18, {0x603000000013e6cc}}, @memwrite={0x6e, 0x30, @generic={0x3000, 0x33e, 0x5778, 0x4}}, @code={0xa, 0xb5, {"a04e90d20080b0f2610080d2420180d2030080d2040180d2020000d4c09884d20040b0f2210180d2df825080d2d20080d2e40080d2020000d4007008d560ee9fd20080b8f2c10180d2820080d2830180d2040080d2020000d4204488d20080b8f2010180d2c20180d2230080d2240180d2020000d440dd9ad20020b8f2a10180d2a20080d2230180d2640080d2020000d4007008d5000840ba000028d5000c40b8"}}, @code={0xa, 0x9c, {"000008d5007008d50084200ea0e888d200c0b8f2410180d2820180d2e30180d2a40180d2020000d4000028d50054002f0000391ee07a9cd200a0b0f2810080d2620180d2630080d2840080d2020000d4200989d20080b8f2410080d2620180d2a30180d2c40180d2020000d4e07195d20040b0f2e10180d2620080d2630080d2040080d2020000d4"}}], 0x365}, &(0x7f0000000bc0)=[@featur1={0x1, 0x48}], 0x1)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
syz_kvm_add_vcpu$arm64(r3, &(0x7f00000000c0)={0x0, &(0x7f0000000540)=[@uexit={0x0, 0x18, 0x2}, @eret={0xe6, 0x18, 0x2}, @mrs={0xbe, 0x18, {0x603000000013c01c}}, @eret={0xe6, 0x18, 0xff}, @msr={0x14, 0x20, {0x603000000013df7d, 0x26}}, @svc={0x122, 0x40, {0x800, [0x9, 0x4, 0xffffffffffffffff, 0x4, 0x7]}}, @eret={0xe6, 0x18, 0x2}, @its_send_cmd={0xaa, 0x28, {0xb, 0x0, 0x4, 0xb, 0x0, 0x2}}, @code={0xa, 0x6c, {"00c0271e000cc03c000008d5000008d5007008d5007008d5000008d580de85d200e0b8f2610080d2c20080d2430080d2040180d2020000d4205889d20000b0f2610080d2e20180d2830180d2c40080d2020000d4000020ab"}}, @mrs={0xbe, 0x18, {0x603000000013c300}}], 0x184}, 0x0, 0x0)
r9 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_GET_DEVICE_ATTR_vm(r10, 0x4018aee2, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0xf61, 0xa42, 0x2}})
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000180)={0x3, <r11=>0xffffffffffffffff})
r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
ioctl$KVM_CHECK_EXTENSION(r12, 0xae03, 0xae)
ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000140)={0x54000, 0x2000})
ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x8, 0x88, 0x0})
syz_kvm_vgic_v3_setup(0xffffffffffffffff, 0xff7ffffffffffffd, 0x360)
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000180)={0x6})
syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil)

17m5.337843022s ago: executing program 7 (id=532):
ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000000)={0x88c, 0xfec00000})
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f0000000080)=@arm64_fp={0x60400000001000ce, &(0x7f0000000040)=0x3})
ioctl$KVM_ARM_VCPU_INIT(r0, 0x4020aeae, &(0x7f00000000c0)={0xecc937ab3f8c7c47, 0x18})
syz_kvm_setup_cpu$arm64(0xffffffffffffffff, r0, &(0x7f0000bfd000/0x400000)=nil, &(0x7f0000000640)=[{0x0, &(0x7f0000000100)=[@mrs={0xbe, 0x18, {0x603000000013f601}}, @its_send_cmd={0xaa, 0x28, {0x5, 0x0, 0x1, 0x8, 0x0, 0xa, 0x6}}, @svc={0x122, 0x40, {0x8400000b, [0x88c, 0x101, 0x401, 0x9]}}, @msr={0x14, 0x20, {0x603000000013df40, 0x8}}, @code={0xa, 0x6c, {"00848ed20000b8f2c10080d2820080d2630180d2240180d2020000d4007008d5000040d480ed85d20020b0f2210080d2a20180d2030080d2040080d2020000d4000040c8007008d5e003002a0034202e000028d50078202e"}}, @irq_setup={0x46, 0x18, {0x3, 0x230}}, @its_setup={0x82, 0x28, {0x4, 0x4, 0x22e}}, @irq_setup={0x46, 0x18, {0x1, 0x190}}, @msr={0x14, 0x20, {0x603000000013c2a5, 0x90}}, @irq_setup={0x46, 0x18, {0x2, 0x1a0}}, @msr={0x14, 0x20, {0x603000000013df7e, 0x20}}, @msr={0x14, 0x20, {0x603000000013e6d8, 0x6}}, @svc={0x122, 0x40, {0x40000000, [0x7, 0x676, 0xcd63, 0x1, 0x3]}}, @msr={0x14, 0x20, {0x603000000013dee0, 0x1}}, @code={0xa, 0x6c, {"007008d500a0206e000381d20040b8f2010180d2c20180d2230180d2640080d2020000d420358ad20000b0f2a10180d2020180d2630080d2640180d2020000d4007008d500a0000d007008d5002c202e007008d5008008d5"}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80a0000, 0xb0, 0x9, 0x3}}, @eret={0xe6, 0x18, 0xb}, @eret={0xe6, 0x18, 0x79bc}, @code={0xa, 0xb4, {"007008d5007008d500000008a0de9ad20000b8f2e10180d2a20180d2830180d2a40080d2020000d4609b8fd200e0b0f2210180d2020080d2230080d2e40180d2020000d4c0c79ed20040b8f2c10080d2420080d2a30180d2a40080d2020000d4e09d83d20060b8f2a10080d2220080d2a30180d2e40080d2020000d40000006a008008d5a09c95d200e0b0f2210080d2e20080d2230180d2040180d2020000d4"}}, @its_setup={0x82, 0x28, {0x0, 0x4, 0x26c}}, @hvc={0x32, 0x40, {0x80008000, [0xff, 0x7fff, 0x1, 0x3, 0xf]}}, @its_setup={0x82, 0x28, {0x2, 0x4, 0xb7}}, @its_setup={0x82, 0x28, {0x2, 0x1, 0x255}}, @mrs={0xbe, 0x18, {0x603000000013df67}}, @its_setup={0x82, 0x28, {0x2, 0x1, 0x3f4}}, @mrs={0xbe, 0x18, {0x603000000013c298}}, @its_setup={0x82, 0x28, {0x2, 0x4, 0x176}}, @msr={0x14, 0x20, {0x603000000013e6c3, 0x7}}], 0x514}], 0x1, 0x0, &(0x7f0000000680)=[@featur1={0x1, 0x50}], 0x1)
r1 = syz_kvm_vgic_v3_setup(0xffffffffffffffff, 0x1, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000700)=@arm64_fp={0x6040000000100066, &(0x7f00000006c0)=0x4})
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x15)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000740)={0x5, 0x2, 0xfec00000, 0x1000, &(0x7f0000ffd000/0x1000)=nil})
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r2, 0x4018aee1, &(0x7f00000007c0)=@attr_pmu_irq={0x0, 0x0, 0x0, &(0x7f0000000780)=0xc110})
r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0xe)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
r5 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000980)={0x0, &(0x7f0000000800)=[@svc={0x122, 0x40, {0x80000001, [0x80000001, 0x1000, 0xfffffffffffffffc, 0x8, 0xc4e]}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xfffc, 0x4, 0x3}}, @smc={0x1e, 0x40, {0x84000053, [0xfffffffffffffffe, 0x5, 0x9]}}, @smc={0x1e, 0x40, {0x84000012, [0x2, 0x0, 0x7, 0x77]}}, @hvc={0x32, 0x40, {0xc3003f15, [0x5, 0x8000, 0x3, 0x4, 0x7]}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80c0000, 0x14, 0x80000001}}], 0x160}, &(0x7f00000009c0)=[@featur1={0x1, 0x93}], 0x1)
ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000a00)=@x86={0x6, 0x3, 0xe, 0x0, 0x9, 0x5, 0x6, 0x6, 0x1, 0x1, 0x8, 0x9, 0x0, 0xe2, 0x80000001, 0xc9, 0xae, 0xff, 0x0, '\x00', 0x92, 0x4b})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0xc2800, 0x0)
ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000a80)={0x9f, "45b8df4049563e426a0055fc85ec01127800c742eef14bfb420b54797a9f521216bf5296ae67cf82db698ec953c944a88d0b92b04dffe241bdfdb5e415739708584ac3642862a526acb4fe8f6b13e53dd7c64b07f4cccadc5294c8c16552e6e6781123cd3f8a209262fcb5cf817c369384db91c6dc28baf2ac657db3cc480f6e28f4dc762c0e2db46a4cc428ea96822ea979a46b6389c635b9b2d0bbdded3c"})
syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000a70000/0x400000)=nil)
ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000b80)=@riscv64_d={0x8030000006000001, &(0x7f0000000b40)=0x6})
ioctl$KVM_GET_VCPU_MMAP_SIZE(r6, 0xae04)
ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000c00)=@riscv64_timer={0x805000000c000003, &(0x7f0000000bc0)=0x3ff})
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x1f)
r8 = eventfd2(0x10001, 0x80000)
ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f0000000c40)={r8, 0xbb87})
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r7, 0x4068aea3, &(0x7f0000000c80)={0xdf, 0x0, 0x9000})
ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000d00)=@arm64={0x1, 0x6, 0x9, '\x00', 0x9})
ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f0000000d40)=0x4)
ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f0000000dc0)=@riscv64_core={0x8030000000200001, &(0x7f0000000d80)=0x9})
r9 = ioctl$KVM_GET_STATS_FD_vm(r3, 0xaece)
ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0x8)

17m1.604703212s ago: executing program 6 (id=533):
r0 = openat$kvm(0x0, &(0x7f0000000000), 0x200200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3)
ioctl$KVM_ARM_VCPU_INIT(r5, 0x4020aeae, &(0x7f00000002c0)={0x5})
ioctl$KVM_SET_ONE_REG(r5, 0x4010aeac, &(0x7f0000000000)=@arm64_sys={0x603000000013c038, &(0x7f0000000080)=0x1})
r6 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x4}}, @its_send_cmd={0xaa, 0x28, {0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40000005}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x1, 0x100)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r6, 0xae80, 0x0)

16m53.161220514s ago: executing program 7 (id=534):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x4}}], 0x28}, 0x0, 0x0)
r4 = syz_kvm_vgic_v3_setup(r1, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, <r5=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x8, 0x88, &(0x7f0000000000)=0x10})
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000002c0)=@attr_other={0x0, 0x9, 0x5, 0x0})
r6 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil)
r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x2}}, @msr={0x14, 0x20, {0x603000000013dce5, 0x8000}}], 0x40}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
r10 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
r12 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil)
r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000180)={0x0, &(0x7f0000000380)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x7ffc}}, @msr={0x14, 0x20, {0x603000000013dce0, 0x10001}}], 0x40}, &(0x7f0000000000)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r9, 0x4018aee1, &(0x7f0000000280)=@attr_other={0x0, 0x0, 0x7, &(0x7f0000000240)=0x5})
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r13, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
ioctl$KVM_RUN(r13, 0xae80, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r9, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
ioctl$KVM_RUN(r9, 0xae80, 0x0)

16m47.601169253s ago: executing program 6 (id=535):
r0 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0xd000, 0x1000, &(0x7f0000ffc000/0x1000)=nil})
r1 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000240)={0x0, &(0x7f0000000040)=[@mrs={0xbe, 0x18, {0x603000000013df6d}}, @smc={0x1e, 0x40, {0x1000, [0x5, 0x3, 0x735c, 0xc0d, 0x2]}}, @its_send_cmd={0xaa, 0x28, {0xa, 0x1, 0x3, 0xd, 0x0, 0x7, 0x3}}, @smc={0x1e, 0x40, {0x84000012, [0x4, 0x6, 0x7ff, 0x5, 0x5]}}, @svc={0x122, 0x40, {0xc400000d, [0x1, 0x3, 0x5, 0x7, 0x6]}}, @svc={0x122, 0x40, {0x80008000, [0x7ff, 0x7fff, 0x1, 0x5b4, 0x4]}}, @eret={0xe6, 0x18, 0x8}, @uexit={0x0, 0x18, 0x4}, @its_setup={0x82, 0x28, {0x2, 0x0, 0x4e}}, @msr={0x14, 0x20, {0x603000000013c800, 0x200}}, @memwrite={0x6e, 0x30, @generic={0x4000, 0xd3d, 0x81}}], 0x1e8}, &(0x7f0000000280)=[@featur2={0x1, 0x4}], 0x1)
ioctl$KVM_SET_SREGS(r1, 0x4000ae84, &(0x7f00000002c0)={{0x200000, 0x4000, 0x4, 0x97, 0x7, 0x90, 0x1, 0x0, 0xcc, 0x5, 0x2, 0x80}, {0xeeec0000, 0xd000, 0xd, 0xb, 0x6, 0x81, 0x7, 0x9, 0x0, 0x81, 0x4, 0x10}, {0xeeee0000, 0x6000, 0x0, 0x6, 0x3, 0x3, 0xe4, 0x2, 0x9, 0x2, 0xb, 0x4}, {0x9000, 0xb000, 0x10, 0x20, 0x2, 0x82, 0xf, 0x8, 0x17, 0x8, 0x70, 0x80}, {0xffff1000, 0x50000, 0x10, 0x5, 0xc, 0x80, 0x0, 0x5, 0x3, 0x8, 0x38, 0x8e}, {0xffff1000, 0x7000, 0x3, 0x2c, 0x7, 0xb, 0xf8, 0x6, 0x6, 0x7, 0x80, 0x6}, {0x40000, 0x8000000, 0x3, 0x2, 0x5, 0x3, 0x80, 0x2, 0x1, 0x7, 0x6, 0x3}, {0x200000, 0xe000, 0x10, 0xf, 0x7, 0x7, 0x76, 0x7, 0x7, 0x1, 0x8, 0x5}, {0xdddd0000, 0x700}, {0xffffffff, 0xd}, 0x40000000, 0x0, 0x41000, 0x7502b1, 0xa, 0x400, 0x26000, [0x3, 0xfff, 0x2b, 0x9]})
ioctl$KVM_KVMCLOCK_CTRL(r1, 0xaead)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
ioctl$KVM_GET_REGS(r1, 0x8360ae81, &(0x7f0000000400))
ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f00000004c0)={r0, 0xfffff001, 0x1, r0})
ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f0000000500)=0x6)
ioctl$KVM_GET_DEVICE_ATTR_vm(r0, 0x4018aee2, &(0x7f0000000580)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000540)={0x7f, 0x2, 0x1}})
ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f00000005c0)={0xfe, "1bf3814cf3d8749fc316e14b9668014e06d3a4f076907a27e0c324bf3b8aa2f6c41f668b291c4dd293a984ec2b0d4cba911904b7b4ec22d19fd04d8fc06aa19779825763bd598d4a768a92b04949cd946b557487cb57c533a5b985fb33b9e236c6ba0cbcd6d2e271206c03bb55b7af28b150a47966a5580080fc09ce3fa699926e057afa3b8e720accf6cedb1632b43e26ed5544e4ccdf4779837dd4e3f644807b25803c26c60e745f37bd5d8df7a3d6137b7774f826467edd7b517fdb8b7e9fe0f1d870547d5958c975b64909a91d7eed99c647ce57e77f9b16556d7bc1bf6be50d787acaefbc5f148885a6ac2e509e6220fd15b9c61960b1ad0c49ad94"})
syz_kvm_setup_syzos_vm$arm64(r0, &(0x7f0000c00000/0x400000)=nil)
r2 = ioctl$KVM_GET_STATS_FD_cpu(r0, 0xaece)
ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r0, 0x4010ae74, &(0x7f0000000700)={0x9, 0x6, 0x4})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x60000, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x10)
ioctl$KVM_CREATE_GUEST_MEMFD(r0, 0xc040aed4, &(0x7f0000000780)={0x5, 0x6})
ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f00000007c0)={0x6, <r5=>0xffffffffffffffff})
ioctl$KVM_HAS_DEVICE_ATTR(r5, 0x4018aee3, &(0x7f0000000840)=@attr_arm64={0x0, 0x3, 0x3, &(0x7f0000000800)=0x3})
syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_IRQ_LINE_STATUS(r4, 0xc008ae67, &(0x7f0000000880)={0xff, 0xa0})
r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000f51000/0x4000)=nil, r6, 0x2000002, 0x80010, r1, 0x0)
ioctl$KVM_IRQ_LINE(r4, 0x4008ae61, &(0x7f00000008c0)={0x8000, 0x8})
ioctl$KVM_ARM_VCPU_FINALIZE(r1, 0x4004aec2, &(0x7f0000000900)=0x5)
r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x12)
ioctl$KVM_CAP_ARM_SYSTEM_SUSPEND(r7, 0x4068aea3, &(0x7f0000000940))
syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000bff000/0x400000)=nil)
r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1d)
ioctl$KVM_CAP_ARM_USER_IRQ(r8, 0x4068aea3, &(0x7f00000009c0))

16m33.46233303s ago: executing program 6 (id=536):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000040)=[@its_setup={0x82, 0x28, {0x4, 0x3, 0x3ac}}], 0x28}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000240)={0x8, <r4=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000100)={0x0, &(0x7f0000000000)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x1}}, @its_send_cmd={0xaa, 0x28, {0xb, 0x3, 0x40000000, 0x10000, 0x3, 0x105, 0x2}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r6, 0x1, 0x100)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2)
ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000180)={0x0, <r11=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ce5000/0x1000)=nil, 0x930, 0x6, 0x4102932, 0xffffffffffffffff, 0x0)
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
munmap(&(0x7f0000cc9000/0x2000)=nil, 0x2000)
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
munmap(&(0x7f0000011000/0xc00000)=nil, 0xc00000)
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000000)=@attr_arm64={0x0, 0x4, 0x1, 0x0})

16m26.29435305s ago: executing program 7 (id=537):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000180), 0x101300, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_add_vcpu$arm64(0x0, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x116)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000001c0)={0xb, <r3=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000240)=@attr_other={0x0, 0x4, 0x7, &(0x7f00000002c0)=0x3})
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x26)
ioctl$KVM_CAP_HALT_POLL(r4, 0x4068aea3, &(0x7f00000006c0)={0xb6, 0x0, 0x4})
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1b)
syz_kvm_setup_cpu$arm64(r4, 0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000640)=[{0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/489], 0x1ec}], 0x1, 0x0, &(0x7f0000000680)=[@featur1={0x1, 0x24}], 0x1)
r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x4)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
r7 = syz_kvm_vgic_v3_setup(r6, 0x1, 0x100)
ioctl$KVM_CAP_HALT_POLL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000500)={0xb6, 0x0, 0x9})
ioctl$KVM_HAS_DEVICE_ATTR(r7, 0x4018aee3, &(0x7f00000000c0)=@attr_arm64={0x0, 0xd, 0x581a8753b8fe58f0, &(0x7f0000000080)=0x2})
r8 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x29)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x5)
ioctl$KVM_GET_DEVICE_ATTR_vcpu(r10, 0x4018aee2, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2a)
ioctl$KVM_GET_DEVICE_ATTR_vcpu(r10, 0x4018aee2, &(0x7f0000000280)=@attr_pmu_init)
r11 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, &(0x7f0000000100)={0x4, <r13=>0xffffffffffffffff, 0x1})
ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f0000000080)=@attr_riscv64=@attr_aplic={0x0, 0x1, @any=0x2, &(0x7f00000000c0)=0x83})
r14 = eventfd2(0x1, 0x80001)
r15 = eventfd2(0x3ff, 0x0)
ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000000)={r14, 0x6, 0x2, r14})
ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000140)={0x4, 0x7000, 0x8, r15, 0x5})

16m10.168066835s ago: executing program 6 (id=538):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, <r2=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x915, 0x2, &(0x7f0000000000)=0x100000000})
ioctl$KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, &(0x7f0000000280)=@attr_arm64={0x0, 0x8, 0x88, &(0x7f0000000040)=0x1})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x440900, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r4, 0x401c5820, 0x8000000000000001)
r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION2(r7, 0x40a0ae49, &(0x7f0000000240)={0x1ff, 0x5, 0x2, 0x1000, &(0x7f0000ffd000/0x1000)=nil, 0x9})
ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x21)
r8 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1)
mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r10, 0x0)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
r13 = eventfd2(0x5, 0x800)
ioctl$KVM_IOEVENTFD(r12, 0x4040ae79, &(0x7f00000000c0)={0x8000000008000800, 0x0, 0x0, r13, 0x2})
ioctl$KVM_IOEVENTFD(r12, 0x4040ae79, &(0x7f0000000000)={0x1, 0x0, 0x0, r13, 0x2})
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r10, 0x0)
mmap$KVM_VCPU(&(0x7f0000008000/0x4000)=nil, r5, 0x1000003, 0x810, r10, 0x0)
r14 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r15 = ioctl$KVM_CREATE_VM(r14, 0x80111500, 0x20000002)
write$eventfd(r15, &(0x7f0000000000), 0xfffffdef)
openat$kvm(0xffffffffffffff9c, 0x0, 0x210040, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)

16m0.832123087s ago: executing program 7 (id=539):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x33)
r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000040)={0x1000200001fe0000, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0x2000, &(0x7f0000ffc000/0x2000)=nil, 0x100000000000000, r2})
close(r1)
close(r2)

15m22.384476028s ago: executing program 38 (id=538):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, <r2=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x915, 0x2, &(0x7f0000000000)=0x100000000})
ioctl$KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, &(0x7f0000000280)=@attr_arm64={0x0, 0x8, 0x88, &(0x7f0000000040)=0x1})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x440900, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r4, 0x401c5820, 0x8000000000000001)
r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION2(r7, 0x40a0ae49, &(0x7f0000000240)={0x1ff, 0x5, 0x2, 0x1000, &(0x7f0000ffd000/0x1000)=nil, 0x9})
ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x21)
r8 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1)
mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r10, 0x0)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
r13 = eventfd2(0x5, 0x800)
ioctl$KVM_IOEVENTFD(r12, 0x4040ae79, &(0x7f00000000c0)={0x8000000008000800, 0x0, 0x0, r13, 0x2})
ioctl$KVM_IOEVENTFD(r12, 0x4040ae79, &(0x7f0000000000)={0x1, 0x0, 0x0, r13, 0x2})
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r10, 0x0)
mmap$KVM_VCPU(&(0x7f0000008000/0x4000)=nil, r5, 0x1000003, 0x810, r10, 0x0)
r14 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r15 = ioctl$KVM_CREATE_VM(r14, 0x80111500, 0x20000002)
write$eventfd(r15, &(0x7f0000000000), 0xfffffdef)
openat$kvm(0xffffffffffffff9c, 0x0, 0x210040, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)

15m13.210767617s ago: executing program 39 (id=539):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x33)
r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000040)={0x1000200001fe0000, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0x2000, &(0x7f0000ffc000/0x2000)=nil, 0x100000000000000, r2})
close(r1)
close(r2)

2m45.101487004s ago: executing program 9 (id=564):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2b)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000aec000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000040)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000080)=0x4)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x3})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000140)={0x4, <r6=>0xffffffffffffffff, 0x1})
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x9b, 0xf, 0x0, 0x5, 0x8, 0x82, 0x46, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x100001, 0xffc0000, 0x0, 0x3, 0xa, 0x8, '\x00', 0x1, 0x93})
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4000ae84, &(0x7f0000000200)={{0x0, 0x1000, 0x1, 0x3a, 0x0, 0x9, 0xba, 0xc, 0x2, 0x6, 0x0, 0xa0}, {0xeeef0000, 0x0, 0xd, 0x1, 0xfc, 0x1, 0x5, 0xc, 0x7, 0x4, 0x6, 0x6}, {0x0, 0x58000, 0x8, 0x9, 0x6, 0x7, 0x3, 0xdb, 0x8, 0x1, 0x1}, {0x2, 0xe000, 0x0, 0x55, 0x7f, 0x80, 0x4, 0x4, 0xa, 0x1, 0x5, 0x9}, {0x6000, 0x0, 0x0, 0x38, 0x0, 0x6, 0x8, 0x1, 0x81, 0x93, 0x7f, 0x8}, {0xdddd1000, 0x41000, 0xd, 0x5, 0x9, 0x5, 0x2, 0x8, 0x81, 0xf, 0x5, 0xfe}, {0xffff1000, 0xb000, 0x14, 0x1, 0x1, 0x7b, 0xfd, 0x9, 0x6a, 0xe, 0x8, 0xd1}, {0xeeef0000, 0x7000, 0x4, 0x3, 0x0, 0x0, 0x7, 0xfa, 0x10, 0x8, 0x2, 0x1}, {0xeeee0000, 0x2}, {0x200000, 0xc71}, 0x20000002, 0x0, 0x1000, 0x8, 0x8, 0x8000, 0x7000, [0x3, 0x8000000000000000, 0x89, 0x1]})
write$eventfd(r6, &(0x7f00000001c0)=0x3, 0xfdef)
ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000100)=@arm64_sve={0x60800000001503ad, 0x0})

2m22.540035513s ago: executing program 8 (id=566):
openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0)
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, <r2=>0xffffffffffffffff, 0x1})
write$eventfd(r2, &(0x7f00000001c0)=0x8100000001, 0x51a8)
munmap(&(0x7f0000eed000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000e51000/0x4000)=nil, 0x4000)
mmap$KVM_VCPU(&(0x7f0000c79000/0x4000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0)

2m22.08153121s ago: executing program 9 (id=567):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r3 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000b80)={0x0, &(0x7f00000003c0)=[@msr={0x14, 0x20, {0x6030000000138045, 0x9}}], 0x20}, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000000)={0x1, 0x0, &(0x7f0000ffb000/0x3000)=nil})
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x5, 0x1, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xd7, 0x80000001})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0xfffffffffffffffe)
ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000140)={0x4, <r10=>0xffffffffffffffff, 0x1})
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x14)
r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0)
ioctl$KVM_ARM_VCPU_INIT(r13, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8})
ioctl$KVM_ARM_VCPU_FINALIZE(r13, 0x4004aec2, &(0x7f0000000000)=0x4)
r14 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1)
r15 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x0, 0x80000f, 0x10010, r13, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r15, 0x20, &(0x7f0000000280)="d6011813013c360000000000f4ff8000802346cbd98762c7795582ba3948ecff090001000000000000000000040000000100", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r14, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r10, 0x40305828, &(0x7f0000000040)=@attr_other={0x0, 0x7, 0xfffffffffffffff7, 0x0})
r16 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000bc2000/0x400000)=nil)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000500)={0x10000, 0x1, 0x0, 0x2000, &(0x7f0000fca000/0x2000)=nil})
syz_kvm_add_vcpu$arm64(r16, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)

2m3.214582181s ago: executing program 8 (id=568):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x19)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x84880, 0x0)

1m56.985616871s ago: executing program 9 (id=569):
r0 = openat$kvm(0x0, &(0x7f0000000280), 0x103080, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x2, 0x3, 0x100000, 0x2000, &(0x7f000000f000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xcccc0000, 0x1000, &(0x7f0000f15000/0x1000)=nil})
syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000bfe000/0x400000)=nil)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000200)={0x1fd, 0x0, 0xb000, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x2710, 0x3, 0x200000, 0x1000, &(0x7f0000ffd000/0x1000)=nil})
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r4, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x2, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r5 = syz_kvm_vgic_v3_setup(r1, 0x1, 0x40)
ioctl$KVM_GET_DEVICE_ATTR(r5, 0x4018aee2, &(0x7f0000000100)=@attr_arm64={0x0, 0x5, 0x3, 0x0})
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0)
openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r6 = openat$kvm(0x0, &(0x7f00000001c0), 0x264080, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil)
r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}, 0x0, 0x0)
r10 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000100)={0x0, &(0x7f0000000140)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r7, 0x2, 0x100)
r11 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r6, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r11, 0x3, 0x11, r9, 0x0)
r12 = mmap$KVM_VCPU(&(0x7f000000a000/0x1000)=nil, r11, 0x3, 0x11, r10, 0x0)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
syz_kvm_assert_syzos_uexit$arm64(r10, r12, 0xffffffffffffffff)
ioctl$KVM_IRQ_LINE(r7, 0x4008ae61, &(0x7f0000000180)={0x1010023, 0x1})
ioctl$KVM_RUN(r9, 0xae80, 0x0)

1m49.614312742s ago: executing program 8 (id=570):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async, rerun: 32)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (rerun: 32)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
r8 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r7, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f00000001c0)="fb0149dd833be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8faa767969d22627e700", 0x0, 0x48) (async)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r7, 0x0) (async)
r9 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a97f2, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, 0x0) (async)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000140)={0x0, &(0x7f0000000000)=[@msr={0x14, 0x0, {0x603000000013df11, 0x3}}], 0x28}, 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r9, 0x401c5820, 0x20000007)
ioctl$KVM_GET_VCPU_EVENTS(r4, 0x8040ae9f, &(0x7f0000000000)=@arm64) (async, rerun: 64)
r10 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) (rerun: 64)
mmap$KVM_VCPU(&(0x7f0000ffc000/0x3000)=nil, r10, 0x1, 0x12, r3, 0x0)
r11 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x2000)=nil, r11, 0x1000001, 0x12, r3, 0x0) (async)
r12 = openat$kvm(0x0, &(0x7f0000000040), 0x2000, 0x0)
ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) (async)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee1, 0xffffffffffffffff) (async)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, r11, 0x1000009, 0x8010, 0xffffffffffffffff, 0x0)

1m34.903065119s ago: executing program 9 (id=571):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$KVM_VCPU(&(0x7f0000c0c000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x2}}], 0x20}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee1, 0x0)
r4 = eventfd2(0xfffffffa, 0x80001)
write$eventfd(r4, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1m31.41423959s ago: executing program 8 (id=572):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(0xffffffffffffffff)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000140)={0x4, <r3=>0xffffffffffffffff, 0x1})
syz_kvm_setup_cpu$arm64(r2, r3, &(0x7f00006b2000/0x400000)=nil, &(0x7f0000000340)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION2(r4, 0x40a0ae49, &(0x7f0000000240)={0x10003, 0x1, 0x50000, 0x1000, &(0x7f0000dd9000/0x1000)=nil, 0x9})
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x4}}, @its_send_cmd={0xaa, 0x28, {0xb, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40000005}}], 0x50}, 0x0, 0x0)
r7 = syz_kvm_vgic_v3_setup(r4, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000180)={0x8, <r8=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x4, 0x3, 0x0})

1m14.32980838s ago: executing program 9 (id=573):
ioctl$KVM_SET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee1, 0x0)
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@msr={0x14, 0x20, {0x603000000013e21b, 0x6}}, @its_send_cmd={0xaa, 0x28, {0x9, 0xfe, 0x3, 0x0, 0x8007, 0x0, 0x40000005}}], 0x48}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x8, <r4=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1m10.781473739s ago: executing program 8 (id=574):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x5, 0xffffffffffffffff, 0x1})
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x4}}], 0x28}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, <r4=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x163800, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x3)
ioctl$KVM_ARM_VCPU_INIT(r7, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8})
ioctl$KVM_SET_ONE_REG(r7, 0x4010aeac, &(0x7f0000000000)=@arm64_fp_extra={0x60200000001000d5, 0xfffffffffffffffe})
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x2, 0x4f832, 0xffffffffffffffff, 0x1000000)
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x8, 0x88, &(0x7f0000000000)=0x10})

59.19235361s ago: executing program 9 (id=575):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x40000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x1, 0x100)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x1, 0x0, [{0x4, 0x2, 0x0, 0x0, @irqchip={0x6, 0x8}}]})
r2 = eventfd2(0x4, 0x80000)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2, 0x3, 0x0, r2})
r3 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x34)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r6, 0x4018aee1, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
eventfd2(0x3, 0x0)
openat$kvm(0x0, 0x0, 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1)
ioctl$KVM_GET_ONE_REG(r8, 0x4010aeab, &(0x7f00000000c0)=@arm64_sve_vls={0x606000000015ffff, 0x0})
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
close(0x4)
r9 = openat$kvm(0x0, &(0x7f0000000080), 0x8600, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000180)={0x8, <r11=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x8, 0x90, &(0x7f0000000000)=0x10001})
close(0x5)

50.170920364s ago: executing program 8 (id=576):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x28)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=[@featur2={0x1, 0x2}], 0x1)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x7f)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000000)=@arm64={0x3, 0xe0, 0xb4, '\x00', 0x1})
r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x35)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r5, 0x0, 0x0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r6, 0x4018aee1, 0x0)
r7 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
syz_kvm_setup_cpu$arm64(r8, r6, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000480)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
r11 = syz_kvm_vgic_v3_setup(r8, 0x1, 0x100)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x5, 0x0, &(0x7f0000000000)=0x8})
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)

11.790459704s ago: executing program 40 (id=575):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x40000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x1, 0x100)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x1, 0x0, [{0x4, 0x2, 0x0, 0x0, @irqchip={0x6, 0x8}}]})
r2 = eventfd2(0x4, 0x80000)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2, 0x3, 0x0, r2})
r3 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x34)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r6, 0x4018aee1, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
eventfd2(0x3, 0x0)
openat$kvm(0x0, 0x0, 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1)
ioctl$KVM_GET_ONE_REG(r8, 0x4010aeab, &(0x7f00000000c0)=@arm64_sve_vls={0x606000000015ffff, 0x0})
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
close(0x4)
r9 = openat$kvm(0x0, &(0x7f0000000080), 0x8600, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000180)={0x8, <r11=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x8, 0x90, &(0x7f0000000000)=0x10001})
close(0x5)

0s ago: executing program 41 (id=576):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x28)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=[@featur2={0x1, 0x2}], 0x1)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x7f)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000000)=@arm64={0x3, 0xe0, 0xb4, '\x00', 0x1})
r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x35)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r5, 0x0, 0x0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r6, 0x4018aee1, 0x0)
r7 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
syz_kvm_setup_cpu$arm64(r8, r6, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000480)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
r11 = syz_kvm_vgic_v3_setup(r8, 0x1, 0x100)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x5, 0x0, &(0x7f0000000000)=0x8})
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)

kernel console output (not intermixed with test programs):

[  361.390927][ T3211] 8021q: adding VLAN 0 to HW filter on device bond0
[  369.922529][   T24] audit: type=1400 audit(369.160:77): avc:  denied  { write } for  pid=3277 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  373.393057][   T24] audit: type=1400 audit(372.610:78): avc:  denied  { write } for  pid=3282 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  386.810497][   T24] audit: type=1400 audit(386.010:79): avc:  denied  { write } for  pid=3287 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  391.542532][   T24] audit: type=1400 audit(390.730:80): avc:  denied  { write } for  pid=3290 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  401.572474][   T24] audit: type=1400 audit(400.800:81): avc:  denied  { write } for  pid=3295 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  405.005412][   T24] audit: type=1400 audit(404.250:82): avc:  denied  { write } for  pid=3298 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  407.337970][ T3211] eql: remember to turn off Van-Jacobson compression on your slave devices
[  414.463718][   T24] audit: type=1400 audit(413.660:83): avc:  denied  { write } for  pid=3303 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  417.913870][   T24] audit: type=1400 audit(417.150:84): avc:  denied  { write } for  pid=3306 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  428.353899][   T24] audit: type=1400 audit(427.550:85): avc:  denied  { write } for  pid=3311 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  431.793607][   T24] audit: type=1400 audit(431.030:86): avc:  denied  { write } for  pid=3314 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  436.738282][   T24] audit: type=1400 audit(435.980:87): avc:  denied  { write } for  pid=3316 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  440.205616][   T24] audit: type=1400 audit(439.450:88): avc:  denied  { write } for  pid=3319 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  451.185393][   T24] audit: type=1400 audit(450.430:89): avc:  denied  { write } for  pid=3324 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  455.763259][   T24] audit: type=1400 audit(455.000:90): avc:  denied  { write } for  pid=3327 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  462.683655][   T24] audit: type=1400 audit(461.920:91): avc:  denied  { write } for  pid=3330 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  466.168220][   T24] audit: type=1400 audit(465.400:92): avc:  denied  { write } for  pid=3333 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  484.772967][   T24] audit: type=1400 audit(484.010:93): avc:  denied  { write } for  pid=3343 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  488.312848][   T24] audit: type=1400 audit(487.540:94): avc:  denied  { write } for  pid=3346 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  500.570246][   T24] audit: type=1400 audit(499.810:95): avc:  denied  { write } for  pid=3352 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  504.193691][   T24] audit: type=1400 audit(503.430:96): avc:  denied  { write } for  pid=3355 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  515.815568][   T24] audit: type=1400 audit(515.060:97): avc:  denied  { write } for  pid=3359 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  519.882620][   T24] audit: type=1400 audit(519.120:98): avc:  denied  { write } for  pid=3362 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
Warning: Permanently added '[localhost]:5501' (ED25519) to the list of known hosts.
[  555.777942][   T24] audit: type=1400 audit(555.020:99): avc:  denied  { name_bind } for  pid=3367 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  556.555587][   T24] audit: type=1400 audit(555.790:100): avc:  denied  { execute } for  pid=3368 comm="sh" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[  556.575605][   T24] audit: type=1400 audit(555.810:101): avc:  denied  { execute_no_trans } for  pid=3368 comm="sh" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[  581.776843][   T24] audit: type=1400 audit(581.020:102): avc:  denied  { mounton } for  pid=3368 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[  581.815753][   T24] audit: type=1400 audit(581.050:103): avc:  denied  { mount } for  pid=3368 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  581.897951][ T3368] cgroup: Unknown subsys name 'net'
[  581.947715][   T24] audit: type=1400 audit(581.190:104): avc:  denied  { unmount } for  pid=3368 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  582.308797][ T3368] cgroup: Unknown subsys name 'cpuset'
[  582.416223][ T3368] cgroup: Unknown subsys name 'rlimit'
[  583.165629][   T24] audit: type=1400 audit(582.410:105): avc:  denied  { setattr } for  pid=3368 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  583.193633][   T24] audit: type=1400 audit(582.420:106): avc:  denied  { mounton } for  pid=3368 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[  583.213151][   T24] audit: type=1400 audit(582.450:107): avc:  denied  { mount } for  pid=3368 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[  584.130542][ T3371] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[  584.150368][   T24] audit: type=1400 audit(583.390:108): avc:  denied  { relabelto } for  pid=3371 comm="mkswap" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[  584.176333][   T24] audit: type=1400 audit(583.420:109): avc:  denied  { write } for  pid=3371 comm="mkswap" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
Setting up swapspace version 1, size = 127995904 bytes
[  584.349761][   T24] audit: type=1400 audit(583.590:110): avc:  denied  { read } for  pid=3368 comm="syz-executor" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[  584.367661][   T24] audit: type=1400 audit(583.610:111): avc:  denied  { open } for  pid=3368 comm="syz-executor" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[  584.412702][ T3368] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[  588.664176][   T24] audit: type=1400 audit(587.900:112): avc:  denied  { write } for  pid=3372 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  590.868251][   T24] audit: type=1400 audit(590.110:113): avc:  denied  { write } for  pid=3375 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  641.675747][   T24] audit: type=1400 audit(640.920:114): avc:  denied  { execmem } for  pid=3377 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  645.079942][   T24] audit: type=1400 audit(644.320:115): avc:  denied  { read } for  pid=3379 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  645.108722][   T24] audit: type=1400 audit(644.350:116): avc:  denied  { open } for  pid=3379 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  645.187388][   T24] audit: type=1400 audit(644.410:117): avc:  denied  { mounton } for  pid=3379 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  645.405441][   T24] audit: type=1400 audit(644.650:118): avc:  denied  { module_request } for  pid=3380 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  646.334358][   T24] audit: type=1400 audit(645.570:119): avc:  denied  { sys_module } for  pid=3380 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  666.250148][ T3379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  666.474726][ T3379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  666.528886][ T3380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  666.728220][ T3380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  677.290196][ T3379] hsr_slave_0: entered promiscuous mode
[  677.348507][ T3379] hsr_slave_1: entered promiscuous mode
[  678.115741][ T3380] hsr_slave_0: entered promiscuous mode
[  678.146843][ T3380] hsr_slave_1: entered promiscuous mode
[  678.173518][ T3380] debugfs: 'hsr0' already exists in 'hsr'
[  678.183039][ T3380] Cannot create hsr debugfs directory
[  683.504408][   T24] audit: type=1400 audit(682.740:120): avc:  denied  { create } for  pid=3379 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  683.538997][   T24] audit: type=1400 audit(682.780:121): avc:  denied  { write } for  pid=3379 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  683.583154][   T24] audit: type=1400 audit(682.820:122): avc:  denied  { read } for  pid=3379 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  683.729074][ T3379] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  684.017034][ T3379] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  684.145797][ T3379] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  684.375496][ T3379] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  684.455732][ T3379] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  684.583385][ T3379] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  684.730679][ T3379] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  684.805412][ T3379] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  686.130925][ T3380] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  686.310231][ T3380] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  686.379883][ T3380] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  686.514314][ T3380] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  686.573753][ T3380] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  686.667544][ T3380] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  686.793785][ T3380] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  686.954228][ T3380] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  700.396365][ T3379] 8021q: adding VLAN 0 to HW filter on device bond0
[  703.170816][ T3380] 8021q: adding VLAN 0 to HW filter on device bond0
[  744.694884][ T3379] veth0_vlan: entered promiscuous mode
[  745.138452][ T3379] veth1_vlan: entered promiscuous mode
[  746.583578][ T3380] veth0_vlan: entered promiscuous mode
[  747.175914][ T3380] veth1_vlan: entered promiscuous mode
[  747.437179][ T3379] veth0_macvtap: entered promiscuous mode
[  747.943661][ T3379] veth1_macvtap: entered promiscuous mode
[  749.534332][ T3380] veth0_macvtap: entered promiscuous mode
[  750.090017][ T3380] veth1_macvtap: entered promiscuous mode
[  750.173606][   T48] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  750.199463][   T48] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  750.201743][   T48] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  750.202617][   T48] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  752.937873][   T24] audit: type=1400 audit(752.170:123): avc:  denied  { mount } for  pid=3379 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  753.208115][   T24] audit: type=1400 audit(752.450:124): avc:  denied  { mounton } for  pid=3379 comm="syz-executor" path="/syzkaller.TSmGpk/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  753.334497][ T3463] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  753.340200][ T3463] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  753.428979][ T3463] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  753.452746][ T3463] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  753.472809][   T24] audit: type=1400 audit(752.710:125): avc:  denied  { mount } for  pid=3379 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  753.885070][   T24] audit: type=1400 audit(753.120:126): avc:  denied  { mounton } for  pid=3379 comm="syz-executor" path="/syzkaller.TSmGpk/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  754.083256][   T24] audit: type=1400 audit(753.280:127): avc:  denied  { mounton } for  pid=3379 comm="syz-executor" path="/syzkaller.TSmGpk/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  754.964130][   T24] audit: type=1400 audit(754.170:128): avc:  denied  { unmount } for  pid=3379 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  755.292290][   T24] audit: type=1400 audit(754.530:129): avc:  denied  { mounton } for  pid=3379 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1544 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[  755.423415][   T24] audit: type=1400 audit(754.650:130): avc:  denied  { mount } for  pid=3379 comm="syz-executor" name="/" dev="gadgetfs" ino=3763 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  755.809152][   T24] audit: type=1400 audit(755.050:131): avc:  denied  { mount } for  pid=3379 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  755.986130][   T24] audit: type=1400 audit(755.210:132): avc:  denied  { mounton } for  pid=3379 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[  757.505317][ T3379] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  759.335212][   T24] kauditd_printk_skb: 1 callbacks suppressed
[  759.382750][   T24] audit: type=1400 audit(758.570:134): avc:  denied  { read write } for  pid=3379 comm="syz-executor" name="loop0" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  759.410027][   T24] audit: type=1400 audit(758.650:135): avc:  denied  { open } for  pid=3379 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  759.458752][   T24] audit: type=1400 audit(758.700:136): avc:  denied  { ioctl } for  pid=3379 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=636 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  771.269528][   T24] audit: type=1400 audit(770.510:137): avc:  denied  { read } for  pid=3533 comm="syz.1.2" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  771.324791][   T24] audit: type=1400 audit(770.550:138): avc:  denied  { open } for  pid=3533 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  771.573673][   T24] audit: type=1400 audit(770.810:139): avc:  denied  { ioctl } for  pid=3533 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  780.058573][   T24] audit: type=1400 audit(779.260:140): avc:  denied  { write } for  pid=3540 comm="syz.1.4" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  780.948912][   T24] audit: type=1400 audit(780.180:141): avc:  denied  { execute } for  pid=3543 comm="syz.0.5" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=3919 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  790.804275][   T24] audit: type=1400 audit(790.000:142): avc:  denied  { append } for  pid=3550 comm="syz.0.7" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  803.702953][   T24] audit: type=1400 audit(802.930:143): avc:  denied  { execute } for  pid=3556 comm="syz.1.9" path="/4/T" dev="tmpfs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  821.934215][ T3569] kvm [3569]: Failed to find VMA for hva 0x20dde000
[  881.956294][   T24] audit: type=1400 audit(881.190:144): avc:  denied  { write } for  pid=3617 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  890.460815][   T24] audit: type=1400 audit(889.700:145): avc:  denied  { write } for  pid=3629 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  914.068006][   T24] audit: type=1400 audit(913.310:146): avc:  denied  { ioctl } for  pid=3640 comm="syz.1.32" path="net:[4026532628]" dev="nsfs" ino=4026532628 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 1044.016916][   T24] audit: type=1400 audit(1043.150:147): avc:  denied  { create } for  pid=3718 comm="syz.0.59" anonclass=[kvm-gmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1044.693718][   T24] audit: type=1400 audit(1043.860:148): avc:  denied  { map } for  pid=3718 comm="syz.0.59" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=6848 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1044.703252][   T24] audit: type=1400 audit(1043.930:149): avc:  denied  { read } for  pid=3718 comm="syz.0.59" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=6848 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1084.463947][   T24] audit: type=1400 audit(1083.650:150): avc:  denied  { setattr } for  pid=3741 comm="syz.0.67" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1116.393020][   T24] audit: type=1400 audit(1115.620:151): avc:  denied  { map } for  pid=3761 comm="syz.1.74" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1116.445620][   T24] audit: type=1400 audit(1115.670:152): avc:  denied  { execute } for  pid=3761 comm="syz.1.74" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1158.758306][ T3782] kvm [3782]: Failed to find VMA for hva 0x203b0000
[ 1267.669763][   T24] audit: type=1400 audit(1266.850:153): avc:  denied  { mmap_zero } for  pid=3867 comm="syz.1.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1
[ 1289.437056][ T3880] kvm [3880]: Failed to find VMA for hva 0x20c79000
[ 1302.868952][ T3889] kvm [3889]: Failed to find VMA for hva 0x20dde000
[ 1430.570092][ T3964] kvm [3964]: Failed to find VMA for hva 0x20c01000
[ 1446.528925][   T24] audit: type=1400 audit(1445.690:154): avc:  denied  { write } for  pid=3970 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1454.048837][   T24] audit: type=1400 audit(1453.240:155): avc:  denied  { write } for  pid=3975 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1860.236628][ T4235] KVM: debugfs: duplicate directory 4235-8
[ 1935.315279][   T24] audit: type=1400 audit(1934.560:156): avc:  denied  { write } for  pid=4283 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1943.316886][   T24] audit: type=1400 audit(1942.560:157): avc:  denied  { write } for  pid=4290 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1985.229315][   T24] audit: type=1400 audit(1984.470:158): avc:  denied  { execute } for  pid=4299 comm="syz-executor" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[ 1985.266881][   T24] audit: type=1400 audit(1984.510:159): avc:  denied  { execute_no_trans } for  pid=4299 comm="syz-executor" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[ 2043.555856][ T4301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2044.634746][ T4301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2046.315706][ T4303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2046.574218][ T4303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2069.292920][ T4301] hsr_slave_0: entered promiscuous mode
[ 2069.335990][ T4301] hsr_slave_1: entered promiscuous mode
[ 2069.403115][ T4301] debugfs: 'hsr0' already exists in 'hsr'
[ 2069.406278][ T4301] Cannot create hsr debugfs directory
[ 2071.896589][ T4303] hsr_slave_0: entered promiscuous mode
[ 2072.006692][ T4303] hsr_slave_1: entered promiscuous mode
[ 2072.074642][ T4303] debugfs: 'hsr0' already exists in 'hsr'
[ 2072.104117][ T4303] Cannot create hsr debugfs directory
[ 2073.166911][ T3463] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2074.683239][ T3463] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2075.705263][ T3463] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2076.351018][ T3463] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2087.123318][ T3463] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2087.199279][ T3463] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2087.306591][ T3463] bond0 (unregistering): Released all slaves
[ 2088.673268][ T3463] hsr_slave_0: left promiscuous mode
[ 2088.736807][ T3463] hsr_slave_1: left promiscuous mode
[ 2089.046918][ T3463] veth1_macvtap: left promiscuous mode
[ 2089.063085][ T3463] veth0_macvtap: left promiscuous mode
[ 2089.068470][ T3463] veth1_vlan: left promiscuous mode
[ 2089.084373][ T3463] veth0_vlan: left promiscuous mode
[ 2103.169819][ T4301] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 2103.743517][ T4301] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 2103.934821][ T4301] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 2104.440470][ T4301] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 2104.499757][ T4301] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 2104.765962][ T4301] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 2104.954763][ T4301] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 2105.588029][ T4301] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 2108.088549][ T3463] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2109.640949][ T3463] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2111.340897][ T3463] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2113.154022][   T24] audit: type=1400 audit(2112.360:160): avc:  denied  { write } for  pid=4381 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2113.306033][ T3463] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2113.853822][ T4303] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 2114.186198][ T4303] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 2114.287896][ T4303] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 2114.637572][ T4303] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 2114.775532][ T4303] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 2115.120099][ T4303] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 2115.296187][ T4303] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 2115.707796][ T4303] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 2121.384860][   T24] audit: type=1400 audit(2120.610:161): avc:  denied  { write } for  pid=4393 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2127.977034][ T3463] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2128.075141][ T3463] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2128.118655][ T3463] bond0 (unregistering): Released all slaves
[ 2128.608655][ T3211] 8021q: adding VLAN 0 to HW filter on device eth1
[ 2129.405054][ T3463] hsr_slave_0: left promiscuous mode
[ 2129.633602][ T3463] hsr_slave_1: left promiscuous mode
[ 2130.208251][ T3463] veth1_macvtap: left promiscuous mode
[ 2130.233844][ T3463] veth0_macvtap: left promiscuous mode
[ 2130.253772][ T3463] veth1_vlan: left promiscuous mode
[ 2130.286493][ T3463] veth0_vlan: left promiscuous mode
[ 2148.280977][ T4301] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2153.080644][ T4303] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2156.253738][   T24] audit: type=1400 audit(2155.480:162): avc:  denied  { write } for  pid=4411 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2161.702414][   T24] audit: type=1400 audit(2160.930:163): avc:  denied  { write } for  pid=4420 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2167.209240][ T3211] 8021q: adding VLAN 0 to HW filter on device eth2
[ 2181.992432][   T24] audit: type=1400 audit(2181.220:164): avc:  denied  { write } for  pid=4433 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2187.193485][   T24] audit: type=1400 audit(2186.400:165): avc:  denied  { write } for  pid=4442 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2190.529366][ T3211] 8021q: adding VLAN 0 to HW filter on device eth3
[ 2194.783167][   T24] audit: type=1400 audit(2194.010:166): avc:  denied  { write } for  pid=4450 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2200.070342][   T24] audit: type=1400 audit(2199.300:167): avc:  denied  { write } for  pid=4461 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2214.058599][   T24] audit: type=1400 audit(2213.300:168): avc:  denied  { write } for  pid=4475 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2219.374490][   T24] audit: type=1400 audit(2218.610:169): avc:  denied  { write } for  pid=4484 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2221.824154][ T4301] veth0_vlan: entered promiscuous mode
[ 2222.546128][ T4301] veth1_vlan: entered promiscuous mode
[ 2224.857314][ T3211] 8021q: adding VLAN 0 to HW filter on device eth4
[ 2225.566365][ T4301] veth0_macvtap: entered promiscuous mode
[ 2225.958898][ T4301] veth1_macvtap: entered promiscuous mode
[ 2229.498485][ T3931] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2229.516213][ T3931] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2229.524672][ T3931] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2229.756266][ T3931] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2230.195560][ T4303] veth0_vlan: entered promiscuous mode
[ 2232.119293][ T4303] veth1_vlan: entered promiscuous mode
[ 2236.625604][ T4303] veth0_macvtap: entered promiscuous mode
[ 2237.220041][ T4303] veth1_macvtap: entered promiscuous mode
[ 2240.652938][   T48] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2240.654524][   T48] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2240.710979][   T48] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2240.842902][ T3463] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2241.687277][   T24] audit: type=1400 audit(2240.920:170): avc:  denied  { write } for  pid=4493 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2250.043569][   T24] audit: type=1400 audit(2249.270:171): avc:  denied  { write } for  pid=4500 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2255.508622][ T3211] 8021q: adding VLAN 0 to HW filter on device eth5
[ 2271.844967][   T24] audit: type=1400 audit(2271.030:172): avc:  denied  { write } for  pid=4518 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2279.445151][   T24] audit: type=1400 audit(2278.690:173): avc:  denied  { write } for  pid=4530 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2285.888713][ T3211] 8021q: adding VLAN 0 to HW filter on device eth6
[ 2305.836590][   T24] audit: type=1400 audit(2305.060:174): avc:  denied  { write } for  pid=4543 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2314.693601][   T24] audit: type=1400 audit(2313.920:175): avc:  denied  { write } for  pid=4556 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2320.450757][ T3211] 8021q: adding VLAN 0 to HW filter on device eth7
[ 2337.820803][   T24] audit: type=1400 audit(2337.060:176): avc:  denied  { write } for  pid=4570 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2348.329753][   T24] audit: type=1400 audit(2347.570:177): avc:  denied  { write } for  pid=4579 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2355.747713][ T3211] 8021q: adding VLAN 0 to HW filter on device eth8
[ 2411.712967][   T24] audit: type=1400 audit(2410.930:178): avc:  denied  { write } for  pid=4622 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2422.033467][   T24] audit: type=1400 audit(2421.250:179): avc:  denied  { write } for  pid=4633 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2437.432650][   T24] audit: type=1400 audit(2436.580:180): avc:  denied  { write } for  pid=4642 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2446.494684][   T24] audit: type=1400 audit(2445.610:181): avc:  denied  { write } for  pid=4651 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2459.088622][   T24] audit: type=1400 audit(2458.320:182): avc:  denied  { ioctl } for  pid=4656 comm="syz.2.283" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=21534 ioctlcmd=0xae6a scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 2471.199633][   T24] audit: type=1400 audit(2470.420:183): avc:  denied  { write } for  pid=4666 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2482.809827][   T24] audit: type=1400 audit(2482.040:184): avc:  denied  { write } for  pid=4674 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2501.676786][   T24] audit: type=1400 audit(2500.920:185): avc:  denied  { write } for  pid=4692 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2510.088925][   T24] audit: type=1400 audit(2509.330:186): avc:  denied  { write } for  pid=4702 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2523.984782][   T24] audit: type=1400 audit(2523.210:187): avc:  denied  { write } for  pid=4708 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2533.877982][   T24] audit: type=1400 audit(2533.110:188): avc:  denied  { write } for  pid=4718 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2551.442677][   T24] audit: type=1400 audit(2550.640:189): avc:  denied  { write } for  pid=4728 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2560.008300][   T24] audit: type=1400 audit(2559.180:190): avc:  denied  { write } for  pid=4742 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2595.254436][   T24] audit: type=1400 audit(2594.490:191): avc:  denied  { write } for  pid=4763 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2605.594669][   T24] audit: type=1400 audit(2604.710:192): avc:  denied  { write } for  pid=4773 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2626.926194][   T24] audit: type=1400 audit(2626.150:193): avc:  denied  { write } for  pid=4791 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2635.917034][   T24] audit: type=1400 audit(2635.140:194): avc:  denied  { write } for  pid=4796 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2652.905732][   T24] audit: type=1400 audit(2652.110:195): avc:  denied  { write } for  pid=4807 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2663.016062][   T24] audit: type=1400 audit(2662.180:196): avc:  denied  { write } for  pid=4815 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2794.938619][ T4880] kvm [4880]: Failed to find VMA for hva 0x20dde000
[ 2998.605388][   T24] audit: type=1400 audit(2997.840:197): avc:  denied  { write } for  pid=4987 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 3008.602583][   T24] audit: type=1400 audit(3007.830:198): avc:  denied  { write } for  pid=4997 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 3142.889316][ T4233] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3144.900435][ T4233] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3146.244437][ T4233] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3147.539728][ T4233] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3161.537564][ T4233] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3161.630842][ T4233] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3161.699307][ T4233] bond0 (unregistering): Released all slaves
[ 3162.695214][ T4233] hsr_slave_0: left promiscuous mode
[ 3162.776952][ T4233] hsr_slave_1: left promiscuous mode
[ 3163.016240][ T4233] veth1_macvtap: left promiscuous mode
[ 3163.019690][ T4233] veth0_macvtap: left promiscuous mode
[ 3163.034476][ T4233] veth1_vlan: left promiscuous mode
[ 3163.057151][ T4233] veth0_vlan: left promiscuous mode
[ 3181.829287][ T4233] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3184.938335][ T4233] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3186.526798][ T4233] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3188.025935][   T24] audit: type=1400 audit(3187.260:199): avc:  denied  { write } for  pid=5078 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 3188.100217][ T4233] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3196.262816][   T24] audit: type=1400 audit(3195.490:200): avc:  denied  { write } for  pid=5086 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 3204.790272][ T4233] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3204.924315][ T4233] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3204.967592][ T4233] bond0 (unregistering): Released all slaves
[ 3205.388625][ T3211] 8021q: adding VLAN 0 to HW filter on device eth9
[ 3206.094622][ T4233] hsr_slave_0: left promiscuous mode
[ 3206.200001][ T4233] hsr_slave_1: left promiscuous mode
[ 3206.504864][ T4233] veth1_macvtap: left promiscuous mode
[ 3206.517914][ T4233] veth0_macvtap: left promiscuous mode
[ 3206.525164][ T4233] veth1_vlan: left promiscuous mode
[ 3206.540873][ T4233] veth0_vlan: left promiscuous mode
[ 3219.954307][ T5038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3220.308229][ T5038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3229.983894][   T24] audit: type=1400 audit(3229.220:201): avc:  denied  { write } for  pid=5106 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 3234.704969][   T24] audit: type=1400 audit(3233.940:202): avc:  denied  { write } for  pid=5115 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 3237.217386][ T5049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3237.419696][ T5049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3238.166928][ T3211] 8021q: adding VLAN 0 to HW filter on device eth10
[ 3240.736656][ T5038] hsr_slave_0: entered promiscuous mode
[ 3240.786980][ T5038] hsr_slave_1: entered promiscuous mode
[ 3251.505372][   T24] audit: type=1400 audit(3250.740:203): avc:  denied  { write } for  pid=5128 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 3257.697954][ T5038] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 3258.065875][ T5038] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 3258.224638][ T5038] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 3258.530601][ T5038] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 3258.599877][ T5038] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 3258.713245][   T24] audit: type=1400 audit(3257.950:204): avc:  denied  { write } for  pid=5135 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 3258.887265][ T5038] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 3258.975542][ T5038] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 3259.248028][ T5038] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 3263.889589][ T3211] 8021q: adding VLAN 0 to HW filter on device eth11
[ 3264.328104][ T5049] hsr_slave_0: entered promiscuous mode
[ 3264.386298][ T5049] hsr_slave_1: entered promiscuous mode
[ 3264.445727][ T5049] debugfs: 'hsr0' already exists in 'hsr'
[ 3264.458821][ T5049] Cannot create hsr debugfs directory
[ 3276.444878][   T24] audit: type=1400 audit(3275.670:205): avc:  denied  { write } for  pid=5152 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 3280.313179][ T5049] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 3280.596445][ T5049] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 3280.783322][ T5049] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 3280.980582][ T5049] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 3281.153447][ T5049] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 3281.336215][ T5049] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 3281.519886][ T5049] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 3281.752951][   T24] audit: type=1400 audit(3280.990:206): avc:  denied  { write } for  pid=5157 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 3281.826901][ T5049] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 3283.296651][ T5038] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3286.529517][ T3211] 8021q: adding VLAN 0 to HW filter on device eth12
[ 3299.319819][   T24] audit: type=1400 audit(3298.560:207): avc:  denied  { write } for  pid=5176 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 3305.396902][   T24] audit: type=1400 audit(3304.640:208): avc:  denied  { write } for  pid=5183 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 3307.059277][ T5049] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3310.927958][ T3211] 8021q: adding VLAN 0 to HW filter on device eth13
[ 3328.433907][   T24] audit: type=1400 audit(3327.670:209): avc:  denied  { write } for  pid=5196 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 3337.128546][   T24] audit: type=1400 audit(3336.330:210): avc:  denied  { write } for  pid=5206 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 3341.728278][ T3211] 8021q: adding VLAN 0 to HW filter on device eth14
[ 3359.083942][   T24] audit: type=1400 audit(3358.310:211): avc:  denied  { write } for  pid=5225 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 3365.675390][   T24] audit: type=1400 audit(3364.910:212): avc:  denied  { write } for  pid=5235 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 3371.237502][ T3211] 8021q: adding VLAN 0 to HW filter on device eth15
[ 3391.583655][   T24] audit: type=1400 audit(3390.820:213): avc:  denied  { write } for  pid=5254 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 3397.524672][ T5038] veth0_vlan: entered promiscuous mode
[ 3398.206682][ T5038] veth1_vlan: entered promiscuous mode
[ 3399.774233][   T24] audit: type=1400 audit(3399.000:214): avc:  denied  { write } for  pid=5263 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 3402.005673][ T5038] veth0_macvtap: entered promiscuous mode
[ 3402.839061][ T5038] veth1_macvtap: entered promiscuous mode
[ 3405.197591][ T3211] 8021q: adding VLAN 0 to HW filter on device eth16
[ 3406.012404][ T4942] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 3406.044444][ T3463] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 3406.054921][ T3463] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 3406.055932][ T3463] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 3425.698050][ T5049] veth0_vlan: entered promiscuous mode
[ 3426.796106][ T5049] veth1_vlan: entered promiscuous mode
[ 3430.798632][ T5049] veth0_macvtap: entered promiscuous mode
[ 3431.746080][ T5049] veth1_macvtap: entered promiscuous mode
[ 3436.478446][ T4345] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 3436.642463][ T3422] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 3436.643768][ T3422] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 3436.804239][ T3422] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 3443.657154][   T24] audit: type=1400 audit(3442.900:215): avc:  denied  { write } for  pid=5286 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 3455.946411][   T24] audit: type=1400 audit(3455.150:216): avc:  denied  { write } for  pid=5297 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 3495.822433][   T24] audit: type=1400 audit(3495.040:217): avc:  denied  { write } for  pid=5324 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 3507.587079][   T24] audit: type=1400 audit(3506.740:218): avc:  denied  { write } for  pid=5336 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 3526.265848][   T24] audit: type=1400 audit(3525.510:219): avc:  denied  { write } for  pid=5345 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 3536.156393][   T24] audit: type=1400 audit(3535.380:220): avc:  denied  { write } for  pid=5354 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 3567.594679][   T24] audit: type=1400 audit(3566.810:221): avc:  denied  { write } for  pid=5368 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 3579.272683][   T24] audit: type=1400 audit(3578.510:222): avc:  denied  { write } for  pid=5379 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 3607.623706][   T24] audit: type=1400 audit(3606.850:223): avc:  denied  { write } for  pid=5396 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 3619.241089][   T24] audit: type=1400 audit(3618.370:224): avc:  denied  { write } for  pid=5407 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 3647.773238][   T24] audit: type=1400 audit(3646.990:225): avc:  denied  { write } for  pid=5418 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 3657.425370][   T24] audit: type=1400 audit(3656.650:226): avc:  denied  { write } for  pid=5429 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 3684.459806][   T24] audit: type=1400 audit(3683.700:227): avc:  denied  { write } for  pid=5439 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 3696.090245][   T24] audit: type=1400 audit(3695.190:228): avc:  denied  { write } for  pid=5449 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 3718.928554][   T24] audit: type=1400 audit(3718.170:229): avc:  denied  { write } for  pid=5460 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 3729.615660][   T24] audit: type=1400 audit(3728.840:230): avc:  denied  { write } for  pid=5471 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 3756.922868][   T24] audit: type=1400 audit(3756.150:231): avc:  denied  { write } for  pid=5485 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 3768.124460][   T24] audit: type=1400 audit(3767.330:232): avc:  denied  { write } for  pid=5495 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4124.515008][   T24] audit: type=1400 audit(4123.740:233): avc:  denied  { write } for  pid=5666 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4133.272517][   T24] audit: type=1400 audit(4132.490:234): avc:  denied  { write } for  pid=5673 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4199.247798][ T5668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 4199.638473][ T5668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 4210.687919][ T5677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 4211.044516][ T5677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 4235.033154][ T5668] hsr_slave_0: entered promiscuous mode
[ 4235.080923][ T5668] hsr_slave_1: entered promiscuous mode
[ 4235.239136][ T5668] debugfs: 'hsr0' already exists in 'hsr'
[ 4235.252571][ T5668] Cannot create hsr debugfs directory
[ 4247.335509][ T5677] hsr_slave_0: entered promiscuous mode
[ 4247.387311][ T5677] hsr_slave_1: entered promiscuous mode
[ 4247.419779][ T5677] debugfs: 'hsr0' already exists in 'hsr'
[ 4247.495024][ T5677] Cannot create hsr debugfs directory
[ 4257.193217][ T5668] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 4257.537955][ T5668] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 4258.205914][ T5668] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 4258.455354][ T5668] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 4259.688370][ T5668] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 4259.907709][ T5668] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 4260.888819][ T5668] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 4261.166498][ T5668] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 4271.474647][ T5677] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 4271.885993][ T5677] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 4272.076404][ T5677] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 4272.746572][ T5677] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 4272.997556][ T5677] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 4273.619321][ T5677] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 4274.072752][ T5677] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 4274.520895][ T5677] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 4300.616848][ T5668] 8021q: adding VLAN 0 to HW filter on device bond0
[ 4310.760994][ T5677] 8021q: adding VLAN 0 to HW filter on device bond0
[ 4331.213677][ T5748] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4333.249487][ T5748] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4335.059334][ T5748] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4336.809525][ T5748] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4357.974572][ T5748] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 4358.396026][ T5748] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 4358.650138][ T5748] bond0 (unregistering): Released all slaves
[ 4360.367035][ T5748] hsr_slave_0: left promiscuous mode
[ 4360.464442][ T5748] hsr_slave_1: left promiscuous mode
[ 4360.662458][ T5748] veth1_macvtap: left promiscuous mode
[ 4360.665779][ T5748] veth0_macvtap: left promiscuous mode
[ 4360.678591][ T5748] veth1_vlan: left promiscuous mode
[ 4360.720045][ T5748] veth0_vlan: left promiscuous mode
[ 4384.796480][ T5748] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4386.977219][ T5748] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4388.973174][ T5748] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4390.745329][ T5748] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4403.645234][   T24] audit: type=1400 audit(4402.880:235): avc:  denied  { write } for  pid=5792 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4413.074031][   T24] audit: type=1400 audit(4412.180:236): avc:  denied  { write } for  pid=5801 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4414.743593][ T5748] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 4415.113108][ T5748] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 4415.338969][ T5748] bond0 (unregistering): Released all slaves
[ 4418.817215][ T5748] hsr_slave_0: left promiscuous mode
[ 4419.145272][ T5748] hsr_slave_1: left promiscuous mode
[ 4419.749687][ T5748] veth1_macvtap: left promiscuous mode
[ 4419.793459][ T5748] veth0_macvtap: left promiscuous mode
[ 4419.815601][ T5748] veth1_vlan: left promiscuous mode
[ 4419.824258][ T5748] veth0_vlan: left promiscuous mode
[ 4436.226931][ T3211] 8021q: adding VLAN 0 to HW filter on device eth17
[ 4454.383691][   T24] audit: type=1400 audit(4453.620:237): avc:  denied  { write } for  pid=5814 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4463.223089][   T24] audit: type=1400 audit(4462.410:238): avc:  denied  { write } for  pid=5823 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4469.357057][ T3211] 8021q: adding VLAN 0 to HW filter on device eth18
[ 4486.504436][   T24] audit: type=1400 audit(4485.660:239): avc:  denied  { write } for  pid=5839 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4493.704059][   T24] audit: type=1400 audit(4492.880:240): avc:  denied  { write } for  pid=5850 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4499.058294][ T3211] 8021q: adding VLAN 0 to HW filter on device eth19
[ 4506.473030][   T24] audit: type=1400 audit(4505.710:241): avc:  denied  { write } for  pid=5857 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4515.013141][   T24] audit: type=1400 audit(4514.240:242): avc:  denied  { write } for  pid=5867 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4518.395847][ T5668] veth0_vlan: entered promiscuous mode
[ 4520.006119][ T5677] veth0_vlan: entered promiscuous mode
[ 4520.717628][ T5668] veth1_vlan: entered promiscuous mode
[ 4522.015423][ T5677] veth1_vlan: entered promiscuous mode
[ 4526.199499][ T5668] veth0_macvtap: entered promiscuous mode
[ 4527.690628][ T5668] veth1_macvtap: entered promiscuous mode
[ 4527.849025][ T5677] veth0_macvtap: entered promiscuous mode
[ 4528.744378][ T5677] veth1_macvtap: entered promiscuous mode
[ 4533.879180][ T4374] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 4533.914645][ T4942] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 4533.922805][ T4942] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 4533.923654][ T4942] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 4535.439203][ T5056] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 4535.490389][ T5187] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 4535.587583][ T5187] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 4535.814109][ T5187] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 4542.133088][   T24] audit: type=1400 audit(4541.360:243): avc:  denied  { write } for  pid=5873 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4551.848552][   T24] audit: type=1400 audit(4551.080:244): avc:  denied  { write } for  pid=5878 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4560.089078][ T3211] 8021q: adding VLAN 0 to HW filter on device eth20
[ 4588.316814][   T24] audit: type=1400 audit(4587.560:245): avc:  denied  { write } for  pid=5896 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4601.594833][   T24] audit: type=1400 audit(4600.780:246): avc:  denied  { write } for  pid=5911 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4609.958507][ T3211] 8021q: adding VLAN 0 to HW filter on device eth21
[ 4634.506181][   T24] audit: type=1400 audit(4633.710:247): avc:  denied  { write } for  pid=5926 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4647.098533][   T24] audit: type=1400 audit(4646.330:248): avc:  denied  { write } for  pid=5941 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4655.918312][ T3211] 8021q: adding VLAN 0 to HW filter on device eth22
[ 4683.703539][   T24] audit: type=1400 audit(4682.900:249): avc:  denied  { write } for  pid=5955 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4696.026215][   T24] audit: type=1400 audit(4695.250:250): avc:  denied  { write } for  pid=5965 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4705.090357][ T3211] 8021q: adding VLAN 0 to HW filter on device eth23
[ 4734.654687][   T24] audit: type=1400 audit(4733.780:251): avc:  denied  { write } for  pid=5977 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4746.575094][   T24] audit: type=1400 audit(4745.800:252): avc:  denied  { write } for  pid=5984 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4755.099409][ T3211] 8021q: adding VLAN 0 to HW filter on device eth24
[ 4772.283934][   T24] audit: type=1400 audit(4771.500:253): avc:  denied  { write } for  pid=5992 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4785.372250][   T24] audit: type=1400 audit(4784.520:254): avc:  denied  { write } for  pid=6002 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4847.863868][   T24] audit: type=1400 audit(4847.070:255): avc:  denied  { write } for  pid=6031 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4860.647945][   T24] audit: type=1400 audit(4859.870:256): avc:  denied  { write } for  pid=6045 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4896.624876][   T24] audit: type=1400 audit(4895.850:257): avc:  denied  { write } for  pid=6063 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4910.338707][   T24] audit: type=1400 audit(4909.580:258): avc:  denied  { write } for  pid=6071 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4939.213627][   T24] audit: type=1400 audit(4938.440:259): avc:  denied  { write } for  pid=6085 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4952.847104][   T24] audit: type=1400 audit(4952.070:260): avc:  denied  { write } for  pid=6098 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5012.376666][   T24] audit: type=1400 audit(5011.470:261): avc:  denied  { write } for  pid=6123 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5025.973265][   T24] audit: type=1400 audit(5025.200:262): avc:  denied  { write } for  pid=6136 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5074.552778][   T24] audit: type=1400 audit(5073.790:263): avc:  denied  { write } for  pid=6163 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5088.483136][   T24] audit: type=1400 audit(5087.680:264): avc:  denied  { write } for  pid=6172 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5110.383249][   T24] audit: type=1400 audit(5109.620:265): avc:  denied  { write } for  pid=6182 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5123.287100][   T24] audit: type=1400 audit(5122.510:266): avc:  denied  { write } for  pid=6191 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5155.192738][   T24] audit: type=1400 audit(5154.420:267): avc:  denied  { write } for  pid=6204 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5167.866890][   T24] audit: type=1400 audit(5167.070:268): avc:  denied  { write } for  pid=6213 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5192.973383][   T24] audit: type=1400 audit(5192.200:269): avc:  denied  { write } for  pid=6223 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5201.984353][   T24] audit: type=1400 audit(5201.190:270): avc:  denied  { write } for  pid=6226 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5217.903300][   T24] audit: type=1400 audit(5217.110:271): avc:  denied  { write } for  pid=6229 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5226.018896][   T24] audit: type=1400 audit(5225.260:272): avc:  denied  { write } for  pid=6234 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5320.114867][ T6236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 5320.538926][ T6236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 5328.346196][ T6241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 5328.715342][ T6241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 5352.518093][ T3463] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5354.057592][ T3463] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5355.729013][ T3463] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5357.677404][ T3463] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5367.008375][ T6236] hsr_slave_0: entered promiscuous mode
[ 5367.158215][ T6236] hsr_slave_1: entered promiscuous mode
[ 5382.175164][ T3463] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 5382.344311][ T3463] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 5382.527002][ T3463] bond0 (unregistering): Released all slaves
[ 5383.833888][ T3463] hsr_slave_0: left promiscuous mode
[ 5383.932620][ T3463] hsr_slave_1: left promiscuous mode
[ 5384.245446][ T3463] veth1_macvtap: left promiscuous mode
[ 5384.248776][ T3463] veth0_macvtap: left promiscuous mode
[ 5384.259548][ T3463] veth1_vlan: left promiscuous mode
[ 5384.284083][ T3463] veth0_vlan: left promiscuous mode
[ 5403.665499][ T6241] hsr_slave_0: entered promiscuous mode
[ 5403.690025][ T6241] hsr_slave_1: entered promiscuous mode
[ 5403.709901][ T6241] debugfs: 'hsr0' already exists in 'hsr'
[ 5403.763673][ T6241] Cannot create hsr debugfs directory
[ 5409.274493][ T4942] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5411.125972][ T4942] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5412.889706][ T4942] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5416.219646][ T4942] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5424.452905][   T24] audit: type=1400 audit(5423.660:273): avc:  denied  { write } for  pid=6310 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5429.684358][ T6236] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 5430.268031][ T6236] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 5430.351037][ T6236] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 5430.826225][ T6236] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 5434.563706][   T24] audit: type=1400 audit(5433.800:274): avc:  denied  { write } for  pid=6315 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5445.380137][ T4942] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 5445.699894][ T4942] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 5445.885263][ T4942] bond0 (unregistering): Released all slaves
[ 5446.465944][ T6236] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 5446.926042][ T6236] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 5447.410552][ T3211] 8021q: adding VLAN 0 to HW filter on device eth25
[ 5447.614076][ T6236] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 5448.118291][ T6236] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 5448.917140][ T4942] hsr_slave_0: left promiscuous mode
[ 5449.133764][ T4942] hsr_slave_1: left promiscuous mode
[ 5450.019027][ T4942] veth1_macvtap: left promiscuous mode
[ 5450.073576][ T4942] veth0_macvtap: left promiscuous mode
[ 5450.086096][ T4942] veth1_vlan: left promiscuous mode
[ 5450.098830][ T4942] veth0_vlan: left promiscuous mode
[ 5475.588441][ T6241] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 5476.125590][ T6241] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 5476.308378][ T6241] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 5476.626163][ T6241] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 5476.700592][ T6241] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 5477.149117][ T6241] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 5477.418382][ T6241] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 5477.926917][ T6241] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 5495.383338][   T24] audit: type=1400 audit(5494.600:275): avc:  denied  { write } for  pid=6340 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5506.737052][   T24] audit: type=1400 audit(5505.900:276): avc:  denied  { write } for  pid=6350 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5507.496674][ T6236] 8021q: adding VLAN 0 to HW filter on device bond0
[ 5513.628714][ T3211] 8021q: adding VLAN 0 to HW filter on device eth26
[ 5514.288537][ T6241] 8021q: adding VLAN 0 to HW filter on device bond0
[ 5526.586162][   T24] audit: type=1400 audit(5525.820:277): avc:  denied  { write } for  pid=6356 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5536.793741][   T24] audit: type=1400 audit(5536.000:278): avc:  denied  { write } for  pid=6366 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5570.272732][   T24] audit: type=1400 audit(5569.490:279): avc:  denied  { write } for  pid=6380 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5579.723152][   T24] audit: type=1400 audit(5578.950:280): avc:  denied  { write } for  pid=6391 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5585.838471][ T3211] 8021q: adding VLAN 0 to HW filter on device eth27
[ 5610.654516][   T24] audit: type=1400 audit(5609.870:281): avc:  denied  { write } for  pid=6408 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5621.247136][   T24] audit: type=1400 audit(5620.460:282): avc:  denied  { write } for  pid=6419 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5628.844218][ T3211] 8021q: adding VLAN 0 to HW filter on device eth28
[ 5650.055611][   T24] audit: type=1400 audit(5649.250:283): avc:  denied  { write } for  pid=6434 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5657.653476][ T6236] veth0_vlan: entered promiscuous mode
[ 5659.029113][ T6236] veth1_vlan: entered promiscuous mode
[ 5660.738982][   T24] audit: type=1400 audit(5659.940:284): avc:  denied  { write } for  pid=6444 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5663.669204][ T6236] veth0_macvtap: entered promiscuous mode
[ 5665.336992][ T6236] veth1_macvtap: entered promiscuous mode
[ 5667.405604][ T6241] veth0_vlan: entered promiscuous mode
[ 5668.560013][ T3211] 8021q: adding VLAN 0 to HW filter on device eth29
[ 5669.859037][ T6241] veth1_vlan: entered promiscuous mode
[ 5673.233588][ T4374] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 5673.495129][ T5749] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 5673.535453][ T5056] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 5673.555556][ T6372] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 5678.348119][ T6241] veth0_macvtap: entered promiscuous mode
[ 5680.009635][ T6241] veth1_macvtap: entered promiscuous mode
[ 5686.263445][ T6372] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 5686.276594][ T6372] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 5686.288456][ T6372] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 5686.324642][ T6372] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 5702.453112][   T24] audit: type=1400 audit(5701.680:285): avc:  denied  { write } for  pid=6449 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5716.835924][   T24] audit: type=1400 audit(5716.030:286): avc:  denied  { write } for  pid=6461 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5727.774579][ T3211] 8021q: adding VLAN 0 to HW filter on device eth30
[ 5762.835506][   T24] audit: type=1400 audit(5761.980:287): avc:  denied  { write } for  pid=6478 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5777.202973][   T24] audit: type=1400 audit(5776.440:288): avc:  denied  { write } for  pid=6490 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5786.786874][ T3211] 8021q: adding VLAN 0 to HW filter on device eth31
[ 5825.695595][   T24] audit: type=1400 audit(5824.910:289): avc:  denied  { write } for  pid=6505 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5840.066994][   T24] audit: type=1400 audit(5839.300:290): avc:  denied  { write } for  pid=6516 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5850.166683][ T3211] 8021q: adding VLAN 0 to HW filter on device eth32
[ 5943.230238][   T24] audit: type=1400 audit(5942.470:291): avc:  denied  { write } for  pid=6558 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5957.142781][   T24] audit: type=1400 audit(5956.350:292): avc:  denied  { write } for  pid=6568 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6017.413168][   T24] audit: type=1400 audit(6016.590:293): avc:  denied  { write } for  pid=6598 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6032.735893][   T24] audit: type=1400 audit(6031.960:294): avc:  denied  { write } for  pid=6607 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6062.482920][   T24] audit: type=1400 audit(6061.670:295): avc:  denied  { write } for  pid=6618 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6075.933134][   T24] audit: type=1400 audit(6075.170:296): avc:  denied  { write } for  pid=6630 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6108.342801][   T24] audit: type=1400 audit(6107.560:297): avc:  denied  { write } for  pid=6642 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6118.094531][   T24] audit: type=1400 audit(6117.310:298): avc:  denied  { write } for  pid=6645 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6146.603172][   T24] audit: type=1400 audit(6145.790:299): avc:  denied  { write } for  pid=6650 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6160.256513][   T24] audit: type=1400 audit(6159.500:300): avc:  denied  { write } for  pid=6658 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6184.415092][   T24] audit: type=1400 audit(6183.650:301): avc:  denied  { write } for  pid=6668 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6196.422582][   T24] audit: type=1400 audit(6195.620:302): avc:  denied  { write } for  pid=6678 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6227.886284][   T24] audit: type=1400 audit(6227.100:303): avc:  denied  { write } for  pid=6686 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6241.007142][   T24] audit: type=1400 audit(6240.210:304): avc:  denied  { write } for  pid=6696 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6271.763378][ T6653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 6272.404762][ T6653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 6292.378263][ T6660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 6293.078141][ T6660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 6304.896323][   T24] audit: type=1400 audit(6304.120:305): avc:  denied  { write } for  pid=6724 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6316.564899][   T24] audit: type=1400 audit(6315.750:306): avc:  denied  { write } for  pid=6734 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6329.749221][ T6653] hsr_slave_0: entered promiscuous mode
[ 6329.918712][ T6653] hsr_slave_1: entered promiscuous mode
[ 6330.086438][ T6653] debugfs: 'hsr0' already exists in 'hsr'
[ 6330.123473][ T6653] Cannot create hsr debugfs directory
[ 6343.889888][   T24] audit: type=1400 audit(6343.120:307): avc:  denied  { write } for  pid=6741 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6355.600971][ T6660] hsr_slave_0: entered promiscuous mode
[ 6355.789921][ T6660] hsr_slave_1: entered promiscuous mode
[ 6355.974332][ T6660] debugfs: 'hsr0' already exists in 'hsr'
[ 6355.993211][ T6660] Cannot create hsr debugfs directory
[ 6356.252785][   T24] audit: type=1400 audit(6355.490:308): avc:  denied  { write } for  pid=6747 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6389.893911][   T24] audit: type=1400 audit(6389.090:309): avc:  denied  { write } for  pid=6754 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6400.377778][ T6653] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 6401.076551][ T6653] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 6401.319328][ T6653] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 6401.917130][ T6653] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 6403.224569][   T24] audit: type=1400 audit(6402.440:310): avc:  denied  { write } for  pid=6759 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6405.465921][ T6653] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 6406.270695][ T6653] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 6406.677963][ T6653] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 6407.259353][ T6653] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 6429.108100][ T6660] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 6429.646653][ T6660] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 6429.781091][ T6660] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 6430.610065][ T6660] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 6430.854279][ T6660] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 6431.196934][ T6660] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 6431.425105][ T6660] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 6431.986731][ T6660] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 6433.572947][   T24] audit: type=1400 audit(6432.810:311): avc:  denied  { write } for  pid=6770 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6447.826610][   T24] audit: type=1400 audit(6447.000:312): avc:  denied  { write } for  pid=6785 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6464.866249][ T6653] 8021q: adding VLAN 0 to HW filter on device bond0
[ 6473.464036][   T24] audit: type=1400 audit(6472.540:313): avc:  denied  { write } for  pid=6791 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6480.155929][ T6660] 8021q: adding VLAN 0 to HW filter on device bond0
[ 6488.564334][   T24] audit: type=1400 audit(6487.770:314): avc:  denied  { write } for  pid=6800 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6513.493430][   T24] audit: type=1400 audit(6512.710:315): avc:  denied  { write } for  pid=6807 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6529.662798][   T24] audit: type=1400 audit(6528.870:316): avc:  denied  { write } for  pid=6816 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6540.785972][   T26] INFO: task syz.8.576:6637 blocked for more than 430 seconds.
[ 6540.814468][   T26]       Not tainted syzkaller #0
[ 6540.872664][   T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 6540.873527][   T26] task:syz.8.576       state:D stack:0     pid:6637  tgid:6637  ppid:6236   task_flags:0x400040 flags:0x00000011
[ 6540.876624][   T26] Call trace:
[ 6540.877138][   T26]  __switch_to+0x5e0/0xb70 (T)
[ 6540.879326][   T26]  __schedule+0x1e0c/0x38cc
[ 6540.879882][   T26]  schedule+0x1b4/0x274
[ 6540.880348][   T26]  schedule_timeout+0x68/0x1e4
[ 6540.880829][   T26]  wait_for_completion+0x1b8/0x414
[ 6541.045268][   T26]  __synchronize_srcu+0x1c8/0x208
[ 6541.063558][   T26]  synchronize_srcu+0x668/0x8dc
[ 6541.064478][   T26]  mmu_notifier_unregister+0x33c/0x444
[ 6541.065042][   T26]  kvm_put_kvm+0x69c/0xbbc
[ 6541.065592][   T26]  kvm_vm_release+0x58/0x78
[ 6541.066075][   T26]  __fput+0x4ac/0x978
[ 6541.066503][   T26]  ____fput+0x20/0x30
[ 6541.066931][   T26]  task_work_run+0x1b8/0x250
[ 6541.067475][   T26]  exit_to_user_mode_loop+0x110/0x188
[ 6541.068014][   T26]  el0_svc+0x18c/0x240
[ 6541.068515][   T26]  el0t_64_sync_handler+0x84/0x12c
[ 6541.069010][   T26]  el0t_64_sync+0x198/0x19c
[ 6541.070709][   T26] 
[ 6541.070709][   T26] Showing all locks held in the system:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 6541.276436][   T26] 1 lock held by khungtaskd/26:
[ 6541.315025][   T26]  #0: ffff800087e73598 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x4c/0x188
[ 6541.317932][   T26] 1 lock held by klogd/3174:
[ 6541.318333][   T26] 1 lock held by dhcpcd/3211:
[ 6541.318666][   T26] 2 locks held by getty/3240:
[ 6541.319022][   T26]  #0: 93f00000124a60a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c
[ 6541.320752][   T26]  #1: 87ff80008cbbb2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x314/0x11f8
[ 6541.448457][   T26] 2 locks held by syz-executor/3368:
[ 6541.448795][   T26] 3 locks held by kworker/u4:7/3463:
[ 6541.449160][   T26] 3 locks held by kworker/u4:9/5052:
[ 6541.449518][   T26] 2 locks held by kworker/u4:5/5748:
[ 6541.449833][   T26] 2 locks held by kworker/u4:13/5749:
[ 6541.450156][   T26]  #0: d8f000000d034140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x958/0x154c
[ 6541.584551][   T26]  #1: ffff80008f277ce8 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x978/0x154c
[ 6541.586451][   T26] 2 locks held by kworker/u4:1/6061:
[ 6541.586774][   T26]  #0: d8f000000d034140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x958/0x154c
[ 6541.588474][   T26]  #1: ffff80008f7c7ce8 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x978/0x154c
[ 6541.590285][   T26] 3 locks held by kworker/u4:4/6240:
[ 6541.590608][   T26] 3 locks held by kworker/u4:6/6247:
[ 6541.590952][   T26] 3 locks held by kworker/u4:12/6296:
[ 6541.733178][   T26] 2 locks held by syz.9.575/6633:
[ 6541.733915][   T26] 3 locks held by kworker/u4:3/6657:
[ 6541.734327][   T26] 3 locks held by modprobe/6822:
[ 6541.734639][   T26] 1 lock held by modprobe/6823:
[ 6541.772812][   T26] 
[ 6541.773481][   T26] =============================================
[ 6541.773481][   T26] 
[ 6541.774502][   T26] Kernel panic - not syncing: hung_task: blocked tasks
[ 6541.779903][   T26] CPU: 0 UID: 0 PID: 26 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT 
[ 6541.781614][   T26] Hardware name: linux,dummy-virt (DT)
[ 6541.782680][   T26] Call trace:
[ 6541.783506][   T26]  show_stack+0x2c/0x3c (C)
[ 6541.784667][   T26]  __dump_stack+0x30/0x40
[ 6541.785775][   T26]  dump_stack_lvl+0x30/0x12c
[ 6541.786922][   T26]  dump_stack+0x1c/0x28
[ 6541.787959][   T26]  vpanic+0x4cc/0x844
[ 6541.788902][   T26]  vpanic+0x0/0x844
[ 6541.789866][   T26]  hung_task_panic+0x0/0x2c
[ 6541.790897][   T26]  kthread+0x4cc/0x514
[ 6541.791898][   T26]  ret_from_fork+0x10/0x20
[ 6541.793824][   T26] Kernel Offset: disabled
[ 6541.794714][   T26] CPU features: 0x00000000,00d1802f,df1847a1,057ffe1f
[ 6541.796062][   T26] Memory Limit: none
[ 6541.798419][   T26] Rebooting in 86400 seconds..