last executing test programs:

1h21m6.588361233s ago: executing program 0 (id=136):
openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_ARM_VCPU_INIT(r0, 0x4020aeae, &(0x7f0000000040)={0x5})
ioctl$KVM_RUN(r0, 0xae80, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1, 0x10, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x100a83, 0x0)
r2 = eventfd2(0x2, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x1, r2})
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f00000002c0)={0x2, 0x0, [{0x3, 0x1, 0x0, 0x0, @adapter={0x0, 0x0, 0x8, 0x5, 0x3}}, {0x3, 0x5, 0x0, 0x0, @msi={0x1, 0x5, 0x0, 0xcfb}}]})
r4 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r6, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x12, r6, 0x0)
syz_kvm_setup_cpu$arm64(0xffffffffffffffff, r6, &(0x7f0000bfe000/0x400000)=nil, &(0x7f0000000100)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000140)=@x86={0x2, 0x98, 0x9, 0x0, 0x1, 0x7f, 0x0, 0x6, 0x5, 0xc, 0x40, 0x4, 0x0, 0x9, 0x1, 0x6, 0x7, 0xc, 0x2, '\x00', 0xf, 0x1c})
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x3)
ioctl$KVM_ARM_VCPU_INIT(r9, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8})
ioctl$KVM_SET_ONE_REG(r9, 0x4010aeac, &(0x7f0000000240)=@arm64_core={0x6030000000100036, &(0x7f00000002c0)=0x1})
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
mmap$KVM_VCPU(&(0x7f0000f2a000/0x4000)=nil, 0x930, 0xf, 0x32, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x10002, 0x6, 0x1, 0x2000, &(0x7f0000000000/0x2000)=nil})

1h21m4.402076784s ago: executing program 1 (id=137):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x8)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_CAP_ARM_SYSTEM_SUSPEND(r4, 0x4068aea3, &(0x7f00000000c0))
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000000)={0x0, &(0x7f0000000040)=[@smc={0x1e, 0x40, {0x8400000e, [0x99b, 0x100000003, 0x5, 0x101, 0x10]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r7 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000000)={0x0, &(0x7f00000001c0)}, &(0x7f0000000300)=[@featur1={0x1, 0x3f}], 0x1)
ioctl$KVM_GET_ONE_REG(r7, 0x4010aeab, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r7, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

1h20m56.047442509s ago: executing program 1 (id=138):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0)
r1 = eventfd2(0x1, 0x1)
r2 = openat$kvm(0x0, &(0x7f0000000080), 0x40000, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
syz_kvm_vgic_v3_setup(r3, 0x1, 0x100)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000100)={r1, 0x3, 0x2, r1})
ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f00000000c0)={0x1, 0x0, [{0x3, 0x2, 0x0, 0x0, @sint={0x7fff, 0x5}}]})
write$eventfd(r1, &(0x7f0000000000)=0x1000007, 0x8)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r5, 0x401c5820, 0xffff98600fff)
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x80000e, 0x11, r6, 0x0)
mmap$KVM_VCPU(&(0x7f0000005000/0x3000)=nil, 0x0, 0x1, 0x810, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x21)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2)
r10 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r9, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r10, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r9, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x803, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x0, 0x8, 0x13, r6, 0x0)
r11 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
r13 = syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil)
r14 = syz_kvm_add_vcpu$arm64(r13, &(0x7f0000000140)={0x0, &(0x7f0000000300)=[@memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x3380, 0x5, 0xa}}, @uexit={0x0, 0x18, 0xbb}, @its_setup={0x82, 0x28, {0x4, 0x1, 0x234}}, @mrs={0xbe, 0x18, {0x6030000000138074}}, @msr={0x14, 0x20, {0x6030000000138044, 0x7}}, @its_send_cmd={0xaa, 0x28, {0x0, 0x1, 0x1, 0x7, 0x1, 0x2, 0x2}}, @mrs={0xbe, 0x18, {0x603000000013c549}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x18, 0x7, 0x8}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xffe0, 0xc2, 0x4}}, @svc={0x122, 0x40, {0xc4000003, [0x200, 0x0, 0x47c, 0x7ea, 0x66]}}, @eret={0xe6, 0x18}, @msr={0x14, 0x20, {0x65fb, 0x8}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0xffe8, 0x5, 0x9}}, @smc={0x1e, 0x40, {0x84000053, [0x24, 0x800, 0x87, 0x0, 0x7]}}, @svc={0x122, 0x40, {0x80000002, [0x7ff, 0x5, 0x2, 0x7a2, 0x7]}}, @code={0xa, 0x54, {"000c201e0014c0da000008d5008008d500c0c00d0020000d606a98d200a0b0f2a10180d2620080d2e30080d2640180d2020000d40000031e007008d5000028d5"}}, @code={0xa, 0x6c, {"0000403d00329ad20040b0f2410180d2020080d2830080d2640080d2020000d400c4a02e0010000e20be8dd200e0b8f2010180d2a20180d2c30080d2e40180d2020000d400e0200e007008d50034000f008008d50088202e"}}, @irq_setup={0x46, 0x18, {0x2, 0x323}}, @smc={0x1e, 0x40, {0x84000008, [0x407, 0xffffffffee8ce82e, 0x7, 0x9]}}, @mrs={0xbe, 0x18, {0x603000000013df69}}, @its_setup={0x82, 0x28, {0x3, 0x4, 0x1ec}}], 0x3c8}, &(0x7f0000000280)=[@featur1={0x1, 0x29}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r14, 0x4018aee1, &(0x7f00000002c0)=@attr_pmu_init)
ioctl$KVM_RUN(r14, 0xae80, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2c)

1h20m55.95748527s ago: executing program 0 (id=139):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xa8200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x27)
syz_kvm_vgic_v3_setup(r1, 0x4, 0x1a0)
r2 = eventfd2(0x2, 0x80000)
r3 = eventfd2(0xf, 0x80001)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r3, 0x0, 0x2, r2})
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2, 0x8, 0x2, r2})
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r3, 0x0, 0x1})
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x80000000)

1h20m47.516120202s ago: executing program 0 (id=140):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2e)
r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_send_cmd={0xaa, 0x28, {0xc, 0x1, 0x80000, 0x10000, 0x0, 0x101, 0x2}}], 0x28}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r3, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000180)={0x8, <r6=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x25)
r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x2, 0x4, 0x1}}, @its_setup={0x82, 0x28, {0x3, 0x1, 0x3ee}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r8, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000180)={0x8, <r11=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r10, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000180)={0x1, 0x0, 0xdddd0000, 0x1000, &(0x7f0000e8b000/0x1000)=nil, 0xe})
syz_kvm_setup_cpu$arm64(r1, 0xffffffffffffffff, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x30}], 0x1, 0x0, 0x0, 0x0)

1h20m43.788117502s ago: executing program 1 (id=141):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$arm64(r1, 0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000140)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1fe, 0x1, 0x8000000, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000140)={0x4, <r4=>0xffffffffffffffff, 0x1})
r5 = ioctl$KVM_CREATE_VM(r4, 0x894c, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xb701, 0x0)
syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, 0x0, 0x0, 0x0)
r7 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece)
ioctl$KVM_SIGNAL_MSI(r7, 0x4020aea5, &(0x7f0000000200)={0x58000, 0xeeef0000, 0x6, 0xd0d374e9d7001746, 0x1})
ioctl$KVM_CREATE_VCPU(r6, 0xb701, 0xfffffffffffffffe)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1, 0x16831, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x10b042, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f00000000c0)=@arm64_fp_extra={0x60200000001000d5, &(0x7f0000000080)=0x5})
r8 = mmap$KVM_VCPU(&(0x7f0000e4d000/0x4000)=nil, 0x0, 0xb, 0x4031111, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f0000000180)="d4b939cdf0bb06654847d79c17c6b6fff62fec3ef1242b66e2d7333feb80668b26c86797221e17e5291e5af027c4f38f1fe9a0d7894164e731420c647e7bf52ee9ee2946de70a91f", 0x0, 0x48)

1h20m34.608323775s ago: executing program 1 (id=142):
r0 = eventfd2(0x6, 0x800)
r1 = openat$kvm(0x0, &(0x7f0000000280), 0x40000, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r3, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r2, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x8, <r4=>0xffffffffffffffff}) (async)
r5 = eventfd2(0x1, 0x0)
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000100)={0x2, 0x8080000, 0x8, r5}) (async)
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x8, 0x4, &(0x7f0000000200)=0x8080000}) (async)
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000002c0)={0xcae, 0x1000, 0x0, r0})
ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000000140)={0xffffffff, 0xffffffff, 0x4, 0x1}) (async)
r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x8800, 0x0)
ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0xf0) (async)
r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x3e)
r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000000)={0x0, &(0x7f0000000040)=[@smc={0x1e, 0x40, {0x84000008, [0x99b, 0x100000003, 0x5, 0x101, 0x10]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
ioctl$KVM_RUN(r10, 0xae80, 0x0) (async)
ioctl$KVM_IRQ_LINE(r8, 0x4008ae61, &(0x7f0000000100)={0x1, 0x80000})
r11 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0)
r12 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0xd)
ioctl$KVM_IRQ_LINE_STATUS(r12, 0xc008ae67, &(0x7f0000000080)={0xc772, 0x3})

1h20m30.816098521s ago: executing program 0 (id=143):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x3})
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000140)={0x4, <r4=>0xffffffffffffffff, 0x1})
ioctl$KVM_CREATE_VM(r4, 0x800454d2, 0x40)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x4000, 0x13000, 0x1})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x2, 0x25000, 0x1})
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f00000003c0)={0x4, 0xa7e9ea20e9018807, 0x1})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1800, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x2b)
r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000aec000/0x400000)=nil)
r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000040)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f00000000c0)=@x86={0x1, 0x9, 0x5, 0x0, 0x10001, 0x3, 0x80, 0x1, 0x54, 0x7f, 0x3, 0x4, 0x0, 0x1000, 0x626, 0x34, 0x8, 0x2, 0xa5, '\x00', 0x80, 0x8})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
r9 = openat$kvm(0x0, &(0x7f0000000040), 0x800, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x2e)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r12, 0x4068aea3, &(0x7f0000000100)={0xef, 0x0, 0x7})
ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0)
r13 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$arm64(r10, r13, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000100)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r13, 0x4010aeac, &(0x7f0000000140)=@arm64_sve={0x608000000015006a, 0x0})
r14 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r15, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_CLEAR_DIRTY_LOG(r15, 0xc018aec0, 0xfffffffffffffffe)
ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f0000000080)=@arm64={0xd, 0x8, 0x7, '\x00', 0x2d})

1h20m27.620918617s ago: executing program 1 (id=144):
r0 = openat$kvm(0x0, &(0x7f00000007c0), 0x4c4400, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x40, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r4, r5, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000000)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r5, 0x4010aeac, &(0x7f0000000700)=@arm64_sve={0x608000000015014e, &(0x7f0000000140)=0xffa})
r6 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000100)={0x0, &(0x7f0000000000)=[@its_setup={0x82, 0xfc58, {0x1, 0x4, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x3, 0x40000000, 0x10000, 0x0, 0x105, 0x2}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r1, 0xffffffffffffffff, 0x80)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, <r7=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x2, 0x7fffffffffffffff, &(0x7f0000000740)=0x6})
ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f00000006c0)={0x10003, 0x100, 0x200, &(0x7f00000002c0)=[0x5, 0x3, 0x10001, 0x2e576ae9, 0xe, 0x8, 0x324, 0x7, 0x5, 0x0, 0x6, 0x7, 0x4, 0xf68b, 0x7, 0x7, 0xffffffffffff8000, 0x0, 0x0, 0x3, 0x40008, 0x80000000, 0xffffffffffffc4c4, 0xd5, 0x7, 0x400000000006, 0x9, 0x4, 0x2, 0x7fffffff, 0x44a, 0xa, 0x10000, 0x10000000101, 0xff9, 0x1, 0x0, 0x2cb, 0xfffffffffffffff9, 0xfd, 0xd, 0xffffffffffff0001, 0x5, 0x9, 0x4, 0x0, 0x5, 0x368, 0x1, 0x53, 0x7fff, 0x0, 0x10, 0xe, 0x3, 0x7, 0xe, 0x4, 0x5, 0x7, 0x6, 0x505ac127, 0x402, 0x7, 0x1, 0x5, 0x3, 0x800000000000001a, 0xd, 0x5, 0x1, 0x0, 0x0, 0x657f, 0x8, 0x6, 0x100, 0x7, 0x200, 0x4, 0x1, 0x6, 0x5f96, 0x3, 0x4, 0x87, 0x8, 0x6, 0x9, 0x9, 0x9, 0x95a0000, 0x6, 0xffffffffffff0001, 0x4, 0x9, 0x9, 0x7ff, 0x958, 0x3, 0x4, 0x1, 0x5, 0xa8ba, 0x401, 0x0, 0x0, 0x0, 0x1, 0x100000000000000a, 0x5, 0x2, 0x7, 0x3ff, 0x2, 0x5, 0xb, 0x1, 0x7, 0x5, 0x7, 0xb3ee, 0xd, 0x4, 0x6, 0x8001, 0xfe7, 0x20000000002]})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r8 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0xc2881, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil)
r12 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x39)
ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f00000001c0)={0x8, <r14=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r14, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4})
ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_DEVICE_ATTR(r14, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x8, 0x100, &(0x7f0000000080)=0x8000000000000000})
ioctl$KVM_SET_DEVICE_ATTR(r14, 0x4018aee1, &(0x7f0000000280)=@attr_arm64={0x0, 0x4, 0x2, 0x0})
ioctl$KVM_SET_DEVICE_ATTR(r14, 0x4018aee1, &(0x7f0000000300)=@attr_other={0x0, 0x4, 0x1, 0x0})
r15 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000780)={0x0, &(0x7f0000000200)=[@memwrite={0x6e, 0x30, @generic={0xf000, 0x799, 0xa3c, 0x8}}], 0x30}, 0x0, 0x0)
ioctl$KVM_RUN(r15, 0xae80, 0x0)
r16 = syz_kvm_add_vcpu$arm64(r11, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}, 0x0, 0x0)
ioctl$KVM_RUN(r16, 0xae80, 0x0)

1h20m16.209388624s ago: executing program 1 (id=145):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x20000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r4, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r4, 0x0)
r6 = eventfd2(0x0, 0x0)
close(r6)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01)
write$eventfd(r6, &(0x7f0000000180)=0x5, 0xfffffde3)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_vgic_v3_setup(r1, 0x401, 0x40)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0xf5)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x0, <r8=>0xffffffffffffffff})
ioctl$KVM_CAP_ARM_USER_IRQ(r1, 0x4068aea3, &(0x7f0000000140))
ioctl$KVM_GET_DEVICE_ATTR(r8, 0x4018aee2, &(0x7f0000000100)=@attr_arm64={0x0, 0xe, 0x4, &(0x7f00000000c0)=0x10001})

1h20m15.427698679s ago: executing program 0 (id=146):
r0 = openat$kvm(0x0, &(0x7f0000000280), 0x440, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async, rerun: 32)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (rerun: 32)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000100)={0x4, <r5=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000080)=@attr_riscv64=@attr_aplic={0x0, 0x1, @any=0x2, &(0x7f00000000c0)=0x81})
r6 = ioctl$KVM_GET_STATS_FD_cpu(r2, 0xaece)
eventfd2(0x8, 0x801) (async)
r7 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1)
ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000180)={0xc, "11029c14e50eaac9139c4595"}) (async)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000040)={0x5, 0x1, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000bc2000/0x400000)=nil)
r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=[@featur2={0x1, 0x2}], 0x1)
ioctl$KVM_RUN(r11, 0xae80, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000500)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r12 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x2e)
ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r6, 0x4018aee3, &(0x7f00000000c0)=@attr_set_pmu={0x0, 0x0, 0x3, &(0x7f0000000080)=0x9}) (async)
r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x5)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x2) (async)
syz_kvm_setup_cpu$arm64(r12, r13, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000100)=[{0x0, 0x0}], 0x1, 0x0, &(0x7f00000003c0)=[@featur2={0x1, 0x17}], 0x1) (async)
r14 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x601, 0x0)
r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r15, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil})
ioctl$KVM_GET_DIRTY_LOG(r15, 0x4010ae42, &(0x7f00000000c0)={0x0, 0x0, &(0x7f000000f000/0x2000)=nil}) (async, rerun: 64)
r16 = openat$kvm(0x0, &(0x7f0000000140), 0x101000, 0x0) (rerun: 64)
ioctl$KVM_CREATE_VM(r16, 0xae01, 0x0)

1h20m8.768406005s ago: executing program 0 (id=147):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3)
ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8})
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r2, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000300)={0x8001, 0x55e, 0x1}})
r3 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000c61000/0x3000)=nil, r4, 0x0, 0x13, r2, 0x0) (async)
r5 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000100)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x7fff}}], 0x20}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r5, 0x4018aee1, &(0x7f0000000040)=@attr_pmu_init) (async)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34)
syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000bfe000/0x400000)=nil) (async)
ioctl$KVM_DIRTY_TLB(r5, 0x4010aeaa, &(0x7f0000000000)={0x9, 0x2})

1h19m28.932024832s ago: executing program 32 (id=145):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x20000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r4, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r4, 0x0)
r6 = eventfd2(0x0, 0x0)
close(r6)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01)
write$eventfd(r6, &(0x7f0000000180)=0x5, 0xfffffde3)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_vgic_v3_setup(r1, 0x401, 0x40)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0xf5)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x0, <r8=>0xffffffffffffffff})
ioctl$KVM_CAP_ARM_USER_IRQ(r1, 0x4068aea3, &(0x7f0000000140))
ioctl$KVM_GET_DEVICE_ATTR(r8, 0x4018aee2, &(0x7f0000000100)=@attr_arm64={0x0, 0xe, 0x4, &(0x7f00000000c0)=0x10001})

1h19m22.025561628s ago: executing program 33 (id=147):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3)
ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8})
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r2, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000300)={0x8001, 0x55e, 0x1}})
r3 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000c61000/0x3000)=nil, r4, 0x0, 0x13, r2, 0x0) (async)
r5 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000100)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x7fff}}], 0x20}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r5, 0x4018aee1, &(0x7f0000000040)=@attr_pmu_init) (async)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34)
syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000bfe000/0x400000)=nil) (async)
ioctl$KVM_DIRTY_TLB(r5, 0x4010aeaa, &(0x7f0000000000)={0x9, 0x2})

1h10m15.910128712s ago: executing program 2 (id=177):
r0 = eventfd2(0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000080), 0x8600, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x8, <r3=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x8, 0x90, &(0x7f0000000000)=0x10001})
ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, 0x0)
r4 = syz_kvm_add_vcpu$arm64(0x0, 0x0, 0x0, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0)
ioctl$KVM_GET_STATS_FD_vm(r2, 0xaece)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
r8 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r7, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f0000000080)="fb010640000000300000009610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c86bd62627e72f00000000000000000000e5ff00006f81e44153345c9affffffffffffea00", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r7, 0x0)
r9 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04)
mmap$KVM_VCPU(&(0x7f0000c22000/0x4000)=nil, r9, 0x8, 0x80030, r4, 0x0)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01)
ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0)
ioctl$KVM_CAP_ARM_SYSTEM_SUSPEND(0xffffffffffffffff, 0x4068aea3, 0x0)
r10 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2)
mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r12, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r12, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r12, 0x4018aee1, &(0x7f0000000140)=@attr_set_pmu={0x0, 0x0, 0x3, &(0x7f0000000100)=0xd2c})
r13 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
mmap$KVM_VCPU(&(0x7f0000008000/0x3000)=nil, r13, 0x2000004, 0x2011, r0, 0x0)

1h9m59.001745796s ago: executing program 2 (id=179):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0)
ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x90)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0xc0083, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xd7, 0x80000001})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r7 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_GUEST_MEMFD(r9, 0xc040aed4, &(0x7f0000000080)={0x100000000, 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION2(r9, 0x40a0ae49, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x2000, &(0x7f0000e37000/0x2000)=nil, 0x10000, r10})
syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil)
eventfd2(0x2, 0x80000)
r11 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000040)={0x0, 0x0}, 0x0, 0xfffffffffffffdbd)
ioctl$KVM_RUN(r11, 0xae80, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0)
r12 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x2)
r13 = syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000a5a000/0x400000)=nil)
r14 = syz_kvm_add_vcpu$arm64(r13, &(0x7f0000000b80)={0x0, &(0x7f0000000040)=[@smc={0x1e, 0x40, {0x84000012, [0xffffffff, 0x100080001, 0x5, 0x101, 0x10]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1)
ioctl$KVM_RUN(r14, 0xae80, 0x0)
r15 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1})
ioctl$KVM_CREATE_VCPU(r15, 0xae41, 0x1)
write$eventfd(0xffffffffffffffff, &(0x7f0000000000)=0x1ff, 0x8)

1h9m38.756174528s ago: executing program 2 (id=181):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece)
ioctl$KVM_CAP_ARM_SYSTEM_SUSPEND(r1, 0x4068aea3, &(0x7f0000000040))
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r2, 0x401c5820, 0x8000000000000001)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000bc2000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000540)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_arm64(r5, 0x4208ae9b, &(0x7f00000001c0)={0x3, 0x0, {[0x2, 0xd6, 0x504, 0xf2f, 0x2, 0x1000008, 0x1, 0xa4, 0xfb, 0x4b3, 0xc, 0x8, 0x0, 0xf, 0xc], [0x6, 0x3, 0xee, 0x3ff, 0x6, 0x3, 0x4, 0x4, 0x5b, 0x2, 0x6, 0x6f2, 0x3, 0x8000000000008, 0xa38], [0x0, 0x1, 0x100, 0xc2ec, 0x1, 0x5, 0x9, 0x7fff, 0x7, 0x80000000, 0x6, 0xfffffffffffffffb, 0x6, 0x4, 0x4, 0x1], [0x2, 0x8000000089c8, 0xed, 0x0, 0x7, 0x7, 0x7, 0x7, 0x3, 0x2, 0x800001, 0x400, 0x3ff, 0x49e4, 0x0, 0x9]}})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x2, 0x23ac5f9b426ec4b2, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0xdc032, 0xffffffffffffffff, 0x0)

1h9m25.06011407s ago: executing program 2 (id=183):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x27)
r2 = syz_kvm_vgic_v3_setup(r1, 0xf, 0x40)
ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f00000001c0)=@attr_arm64={0x0, 0x2, 0x2, 0x0})
syz_kvm_add_vcpu$arm64(0x0, &(0x7f00000004c0)={0x0, &(0x7f0000000340)=[@code={0xa, 0x9c, {"609388d20060b0f2610080d2820080d2e30180d2e40180d2020000d440599fd20000b0f2e10080d2220180d2830180d2c40180d2020000d4008008d5000008d50078284e0000409b608f95d20080b8f2210080d2220080d2030180d2040180d2020000d4007008d540e59dd200e0b8f2a10180d2e20180d2430080d2440180d2020000d4007008d5"}}, @uexit={0x0, 0x18, 0x4c0}, @eret={0xe6, 0x18}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x90, 0x6}}, @memwrite={0x6e, 0x30, @generic={0x25000, 0xd8c, 0x3, 0x2}}, @mrs={0xbe, 0x18, {0x603000000013df72}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x6000, 0x9}}], 0x174}, &(0x7f0000000500)=[@featur1={0x1, 0x61}], 0x1)
r3 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x29)
openat$kvm(0xffffffffffffff9c, 0x0, 0x800, 0x0)
ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
r6 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r5, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0xffffffffffffffa7)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r5, 0x0)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01)
r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x4000800003b)
r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000a9c000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000b80)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={0xffffffffffffffff, 0x400000c3, 0x3})
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1})
r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x2)
r15 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r14, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r15, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r14, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x2000007, 0x30d2a4fbfbea96b8, 0xffffffffffffffff, 0x0)

1h9m7.180015462s ago: executing program 2 (id=186):
r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x82880, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
munmap$KVM_VCPU(0x0, 0x1000000000) (async, rerun: 32)
r3 = mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000e, 0x24132, 0xffffffffffffffff, 0x0) (rerun: 32)
munmap$KVM_VCPU(r3, 0x401)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xe5) (async)
r5 = openat$kvm(0x0, &(0x7f0000000140), 0x101282, 0x0) (async)
r6 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x4eed40, 0x0) (async, rerun: 32)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x0, 0x8032, 0xffffffffffffffff, 0x0) (async, rerun: 32)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0xf, 0x32, 0xffffffffffffffff, 0x0) (async)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x480, 0x0) (async)
ioctl$KVM_CLEAR_DIRTY_LOG(r2, 0xc018aec0, &(0x7f00000007c0)={0x1ff, 0xc0, 0x40, &(0x7f00000003c0)=[0x6, 0x5, 0x42, 0xf, 0x0, 0xe360, 0x49, 0xfff, 0x1, 0x800, 0x1, 0x0, 0x32c, 0x6, 0x0, 0x9, 0xfffffffffffffffd, 0x9, 0x4, 0x3, 0x9, 0xd6, 0x2, 0x13f, 0x401, 0x6, 0x2, 0x3, 0x8000000000000001, 0x0, 0x4, 0x200, 0x9, 0x6, 0xff, 0x5, 0x6, 0x8000000000000000, 0x100000000, 0x9, 0x1, 0x0, 0x2, 0x0, 0x5, 0x7, 0x6, 0x0, 0x2, 0x7, 0x6, 0x7, 0x9, 0x7, 0x9, 0x8, 0x3, 0x6, 0x7ff, 0x6, 0xffffffffffffffff, 0xffff, 0xb, 0x9, 0xb9, 0x8, 0x101, 0x8000000000000000, 0x5, 0xfffffffffffffff7, 0x400, 0xfa, 0x7fff, 0x6, 0x3, 0x6153, 0x9, 0xf3f, 0x0, 0x3, 0x6, 0x6, 0x9, 0xffffffffffffffff, 0x3, 0x80, 0xe, 0x9, 0x5, 0x7, 0x8000000000000001, 0x7f, 0x7, 0x7, 0x9, 0x3, 0x5, 0x80, 0x8000000000000001, 0x7fff, 0x8, 0xcfd8, 0x5b, 0x4, 0x3, 0x10001, 0xa89, 0xfffffffffffffffb, 0x4, 0xd, 0x40, 0x3, 0x0, 0x5390, 0x1ff, 0x7f, 0x2, 0xb, 0xaddf, 0xffff, 0x15d1, 0xaf, 0xdbc5, 0x100000000000001, 0x4b, 0x72d, 0x4, 0xf0]})
ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0xdf)
r9 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04)
r10 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
r12 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil)
r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@smc={0x1e, 0x0, {0x84000053, [0x1000009, 0x8000000000000001, 0xffffffffffffffff, 0x400, 0xfffffffffffff801]}}], 0xc7}, 0x0, 0x0)
ioctl$KVM_RUN(r13, 0xae80, 0x0) (async)
r14 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0)
ioctl$KVM_IRQFD(r15, 0x4020ae76, 0xffffffffffffffff) (async)
mmap$KVM_VCPU(&(0x7f0000c0b000/0x1000)=nil, r9, 0x2000003, 0x11, r7, 0x0) (async, rerun: 32)
r16 = syz_kvm_add_vcpu$arm64(r0, &(0x7f0000000100)={0x0, &(0x7f0000000880)=[@msr={0x14, 0x20, {0x603000000013defc, 0x5a8}}], 0x20}, 0x0, 0x0) (rerun: 32)
ioctl$KVM_RUN(r16, 0xae80, 0x0)

1h8m54.547719563s ago: executing program 2 (id=188):
r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x42002, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x31)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0xfffffffffffffffe)
r4 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r3, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000240)="04198bd844c9e8a7b82d748f0f0244293d28bd940000c2ed44db9969759357abeb8d85c8e856a4606c2e979f98d67e4ff39fb6df9547f6a9506c610dc37b175c8ad3e5952305abf0", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x10, r3, 0x0)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0xa00f2, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0)
mmap$KVM_VCPU(&(0x7f0000c41000/0x3000)=nil, 0x930, 0x280000b, 0x2010, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x0)
mmap$KVM_VCPU(&(0x7f0000d4b000/0x2000)=nil, 0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000027000/0x13000)=nil, 0x0, 0x4, 0x4102932, 0xffffffffffffffff, 0x0)
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@its_setup={0x82, 0x28, {0x4, 0x4, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x0, 0x10002, 0x9, 0x0, 0x104, 0x3}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r5, 0x1, 0x140)
r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CAP_ARM_MTE(r2, 0x4068aea3, &(0x7f00000002c0))
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f00000000c0)={0x8, <r10=>0xffffffffffffffff})
ioctl$KVM_GET_DEVICE_ATTR(r10, 0x4018aee2, &(0x7f0000000140)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000100)=0x4})
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000180)={0x8, <r11=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x22200, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)

1h8m6.587821668s ago: executing program 34 (id=188):
r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x42002, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x31)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0xfffffffffffffffe)
r4 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r3, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000240)="04198bd844c9e8a7b82d748f0f0244293d28bd940000c2ed44db9969759357abeb8d85c8e856a4606c2e979f98d67e4ff39fb6df9547f6a9506c610dc37b175c8ad3e5952305abf0", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x10, r3, 0x0)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0xa00f2, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0)
mmap$KVM_VCPU(&(0x7f0000c41000/0x3000)=nil, 0x930, 0x280000b, 0x2010, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x0)
mmap$KVM_VCPU(&(0x7f0000d4b000/0x2000)=nil, 0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000027000/0x13000)=nil, 0x0, 0x4, 0x4102932, 0xffffffffffffffff, 0x0)
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@its_setup={0x82, 0x28, {0x4, 0x4, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x0, 0x10002, 0x9, 0x0, 0x104, 0x3}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r5, 0x1, 0x140)
r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CAP_ARM_MTE(r2, 0x4068aea3, &(0x7f00000002c0))
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f00000000c0)={0x8, <r10=>0xffffffffffffffff})
ioctl$KVM_GET_DEVICE_ATTR(r10, 0x4018aee2, &(0x7f0000000140)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000100)=0x4})
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000180)={0x8, <r11=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x22200, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)

26m0.681864031s ago: executing program 4 (id=502):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x25)
r2 = eventfd2(0x1, 0x1)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={r2, 0xb, 0x2, r2})
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000001c0)={0x8, <r3=>0xffffffffffffffff})
r4 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000040)={0x40, 0x14000, 0x0, 0xffffffffffffffff, 0x9})
ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000380)})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x5, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION2(r7, 0x40a0ae49, &(0x7f0000000180)={0x101ff, 0x4, 0x6000, 0x2000, &(0x7f0000ffc000/0x2000)=nil, 0x100000000000000})
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000001c0)={0x8, <r8=>0xffffffffffffffff, 0x1})
ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f00000002c0)=@attr_other={0x0, 0x8, 0x100, &(0x7f0000000300)=0xc000000000000000})
ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f00000002c0)=@attr_other={0x0, 0x8, 0x108, &(0x7f0000000000)=0xc000000000000000})
ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x4, 0x2, 0x0})

25m48.107763326s ago: executing program 4 (id=504):
r0 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece)
r1 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000580)={0x0, &(0x7f0000000000)=[@hvc={0x32, 0x40, {0xc4000010, [0x0, 0xfffffffffffffffb, 0x4, 0x5, 0xe]}}, @svc={0x122, 0x40, {0x30000000, [0x76b, 0xfffffffffffffff7, 0x3ff, 0x55, 0x4]}}, @code={0xa, 0xcc, {"0098a10e603995d20080b8f2210080d2a20180d2430080d2040080d2020000d4000028d5c03789d20020b0f2c10180d2a20080d2830180d2e40080d2020000d4c0c594d200e0b8f2810080d2a20180d2030180d2a40080d2020000d40000c02d203f97d200e0b0f2e10180d2820080d2230080d2e40180d2020000d400a4ff0dc05181d20060b8f2e10080d2420180d2430080d2040180d2020000d4a09f9ed20000b8f2210180d2820080d2830180d2040080d2020000d4"}}, @eret={0xe6, 0x18}, @mrs={0xbe, 0x18, {0x603000000013808c}}, @eret={0xe6, 0x18, 0x6}, @msr={0x14, 0x20, {0x603000000013debb, 0xfffffffffffffffe}}, @msr={0x14, 0x20, {0x603000000013deec}}, @msr={0x14, 0x20, {0x603000000013c600, 0x1ff}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x90, 0x5, 0x6}}, @smc={0x1e, 0x40, {0xc4000010, [0x5, 0x7ff, 0x1, 0x1, 0x2]}}, @uexit={0x0, 0x18, 0xa229}, @code={0xa, 0x3c, {"000008d5000028d5008008d500e0600d000080f9000008d5008c007f00609f0d008008d5008008d5"}}, @mrs={0xbe, 0x18, {0x603000000013f687}}, @svc={0x122, 0x40, {0x8000, [0x1, 0x3, 0x7]}}, @code={0xa, 0x54, {"000028d5000000a9007008d5000028d50048284e0004202ea0fb90d200a0b8f2e10080d2820180d2c30080d2e40180d2020000d4000028d5007008d5007008d5"}}, @its_setup={0x82, 0x28, {0x3, 0x1, 0x3ea}}, @svc={0x122, 0x40, {0x84000006, [0x9f, 0x4a, 0x7ff, 0x2, 0x6]}}, @hvc={0x32, 0x40, {0x8400000d, [0xca, 0x8000000000000000, 0x80, 0x2, 0xe]}}, @its_setup={0x82, 0x28, {0x1, 0x2, 0x160}}, @code={0xa, 0x84, {"00e599d200a0b8f2010080d2620080d2430080d2040080d2020000d40078201e0094200e404099d20060b8f2e10080d2620180d2c30180d2240080d2020000d4007008d500a0204e0000002c007008d5000000ca40d39cd200c0b0f2010080d2a20180d2030080d2640180d2020000d4"}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x8, 0x6, 0x2}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x1, 0x4, 0x5, 0x7f, 0x7, 0x3}}, @hvc={0x32, 0x40, {0xc400000d, [0x5, 0x3, 0x8, 0x7]}}, @msr={0x14, 0x20, {0x603000000013df60, 0xffff}}], 0x570}, &(0x7f00000005c0)=[@featur2={0x1, 0x847c7bee8f848ed4}], 0x1)
syz_kvm_setup_cpu$arm64(r0, r1, &(0x7f0000bfe000/0x400000)=nil, &(0x7f0000000ac0)=[{0x0, &(0x7f0000000600)=[@mrs={0xbe, 0x18, {0x603000000013c230}}, @its_setup={0x82, 0x28, {0x4, 0x1, 0x10}}, @smc={0x1e, 0x40, {0x84000007, [0x4, 0xfff, 0xafa, 0x4, 0x756]}}, @its_setup={0x82, 0x28, {0x1, 0x1, 0x83}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x40, 0x2, 0x4}}, @code={0xa, 0x84, {"007008d5c07f9bd20080b0f2a10180d2a20080d2e30180d2840080d2020000d40040251e008008d5c0768cd20060b0f2610180d2e20180d2c30080d2040180d2020000d4004c200e00a0002f00008013007008d5203181d200c0b0f2610180d2220080d2c30180d2240080d2020000d4"}}, @irq_setup={0x46, 0x18, {0x4, 0x2c1}}, @uexit={0x0, 0x18}, @code={0xa, 0x84, {"e0dc82d20020b8f2210080d2e20080d2230180d2440180d2020000d4007008d5008008d5000440f8007008d50200a0d4400184d20000b8f2410180d2e20180d2830080d2e40080d2020000d4000cc0da40fe94d20020b8f2e10080d2020080d2c30080d2040180d2020000d4000008d5"}}, @svc={0x122, 0x40, {0x80, [0x8, 0x0, 0x40, 0x6, 0x4]}}, @msr={0x14, 0x20, {0x603000000013c4d1, 0x6}}, @its_setup={0x82, 0x28, {0x2, 0x4, 0x1d0}}, @smc={0x1e, 0x40, {0x84000007, [0x0, 0x1, 0x8, 0x2, 0x30]}}, @eret={0xe6, 0x18, 0x3}, @its_setup={0x82, 0x28, {0x1, 0x1, 0xa}}, @msr={0x14, 0x20, {0x603000000013deaa, 0x7}}, @irq_setup={0x46, 0x18, {0x0, 0x4e}}, @hvc={0x32, 0x40, {0x80007fff, [0x4, 0x3, 0x4, 0x2, 0x28]}}, @msr={0x14, 0x20, {0x603000000013e64b, 0x9b3f}}, @mrs={0xbe, 0x18, {0x603000000013df52}}, @code={0xa, 0x84, {"001597d20080b8f2c10080d2c20180d2a30080d2440180d2020000d4008008d500b988d20020b0f2e10080d2420180d2c30180d2240080d2020000d400800008007008d5000008d5008008d580eb9ed20080b8f2e10080d2e20180d2030080d2c40080d2020000d40034202e00000018"}}, @svc={0x122, 0x40, {0x84000005, [0x1, 0x7, 0x964e, 0x3, 0x7ff]}}], 0x48c}], 0x1, 0x0, &(0x7f0000000b00)=[@featur1={0x1, 0xb0}], 0x1)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x17)
ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0x0)
r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000b41000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000e00)={0x0, &(0x7f0000000b40)=[@hvc={0x32, 0x40, {0xc400000e, [0x9, 0x1, 0x3, 0x401, 0x1]}}, @msr={0x14, 0x20, {0x603000000013debb, 0x7}}, @svc={0x122, 0x40, {0x3f000000, [0x5, 0x0, 0x8000, 0x5, 0x7]}}, @mrs={0xbe, 0x18, {0x603000000013e534}}, @smc={0x1e, 0x40, {0x5000000, [0x5, 0x2ce, 0x8, 0x2, 0x39aa]}}, @its_setup={0x82, 0x28, {0x4, 0x4, 0x1d}}, @eret={0xe6, 0x18, 0x2}, @its_setup={0x82, 0x28, {0x2, 0x2, 0x2d1}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x0, 0x1, 0xe, 0x3, 0xffffffff}}, @its_setup={0x82, 0x28, {0x2, 0x3, 0x32}}, @msr={0x14, 0x20, {0x603000000013c522, 0x8000000000000001}}, @mrs={0xbe, 0x18, {0x603000000013dce8}}, @uexit={0x0, 0x18, 0x80000000}, @mrs={0xbe, 0x18, {0x603000000013df77}}, @eret={0xe6, 0x18, 0x8}, @uexit={0x0, 0x18, 0xfffffffffffffffa}, @msr={0x14, 0x20, {0x603000000013c662, 0x7}}, @smc={0x1e, 0x40, {0x20, [0x7, 0x0, 0x1000, 0x6, 0x4]}}], 0x2a8}, &(0x7f0000000e40)=[@featur1={0x1, 0x63}], 0x1)
write$eventfd(r0, &(0x7f0000000e80)=0x3, 0x8)
ioctl$KVM_CAP_ARM_USER_IRQ(r2, 0x4068aea3, &(0x7f0000000ec0))
r5 = ioctl$KVM_GET_STATS_FD_cpu(r4, 0xaece)
ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000f40)={r0, 0x0, 0x3, r0})
r6 = eventfd2(0x4, 0x1)
ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000f80)={r5, 0x3, 0x1, r6})
ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000000fc0)={0x6, 0x8})
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001000), 0xc080, 0x0)
r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r7, 0xae04)
mmap$KVM_VCPU(&(0x7f0000f72000/0x4000)=nil, r8, 0x9, 0x8010, r4, 0x0)
r9 = syz_kvm_vgic_v3_setup(r5, 0x4, 0x0)
ioctl$KVM_CAP_ARM_SYSTEM_SUSPEND(r2, 0x4068aea3, &(0x7f0000001040))
ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000001100)=@attr_other={0x0, 0x3, 0x9, &(0x7f00000010c0)=0x2})
ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000001140)={0x8})
r10 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f00000015c0)={0x0, &(0x7f0000001180)=[@code={0xa, 0x84, {"007008d5c06784d200c0b8f2010080d2c20080d2630180d2440080d2020000d40000599e0000c068000008d5809d9ed20060b8f2c10080d2c20180d2630080d2240180d2020000d40024c01a00039fd200c0b8f2410180d2e20180d2a30180d2c40180d2020000d40098a12e007008d5"}}, @its_setup={0x82, 0x28, {0x4, 0x1, 0x271}}, @its_setup={0x82, 0x28, {0x0, 0x3, 0x134}}, @its_setup={0x82, 0x28, {0x4, 0x4, 0x3f4}}, @its_send_cmd={0xaa, 0x28, {0x7, 0x1, 0x2, 0xf, 0xfff, 0x5, 0x4}}, @msr={0x14, 0x20, {0x603000000013df50, 0x5}}, @its_setup={0x82, 0x28, {0x2, 0x1, 0x88}}, @irq_setup={0x46, 0x18, {0x4, 0x209}}, @eret={0xe6, 0x18, 0x2}, @uexit={0x0, 0x18, 0x70000000}, @its_send_cmd={0xaa, 0x28, {0x7, 0x1, 0x3, 0x9, 0xe, 0x3dbd3781}}, @msr={0x14, 0x20, {0x603000000013c4cc, 0x9}}, @code={0xa, 0xcc, {"002c200e004e9cd200a0b8f2e10080d2020080d2e30180d2440180d2020000d40000c038c02d96d20040b8f2210180d2220080d2830180d2c40080d2020000d400c0e21e0820601e609c8cd200a0b8f2810080d2c20080d2a30180d2240180d2020000d420c29cd20040b0f2410180d2c20180d2e30080d2240180d2020000d4a05882d200e0b0f2e10080d2420180d2a30180d2a40080d2020000d420a989d200c0b8f2410180d2620180d2e30180d2e40080d2020000d4"}}, @smc={0x1e, 0x40, {0xb600000a, [0x8, 0x9, 0xe95, 0xe, 0xffff]}}, @mrs={0xbe, 0x18, {0x603000000013c109}}, @irq_setup={0x46, 0x18, {0x0, 0x2a6}}, @smc={0x1e, 0x40, {0x1000000, [0x5, 0x2, 0x7, 0x10001, 0x2]}}, @mrs={0xbe, 0x18, {0x603000000013806c}}, @irq_setup={0x46, 0x18, {0x4, 0x170}}, @msr={0x14, 0x20, {0x603000000013c01d, 0x7}}, @smc={0x1e, 0x40, {0x6000000, [0xf6, 0x0, 0x401, 0x3ff, 0x1]}}], 0x408}, &(0x7f0000001600)=[@featur2={0x1, 0x72}], 0x1)
syz_kvm_vgic_v3_setup(r2, 0x1, 0x20)
ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000001640)={0x10200, 0x0, &(0x7f0000d7d000/0x1000)=nil})
ioctl$KVM_RUN(r11, 0xae80, 0x0)
ioctl$KVM_CLEAR_DIRTY_LOG(r2, 0xc018aec0, &(0x7f0000001a80)={0x3, 0x3c0, 0xc0, &(0x7f0000001680)=[0xf, 0x6, 0x1, 0x8, 0x5, 0x9, 0x3, 0x800, 0x8, 0x7f, 0x3f, 0x8000000000000000, 0x10000, 0x97, 0x1, 0x6d2, 0x7f, 0x2, 0x2ef, 0x0, 0x0, 0x3, 0xdfd, 0x2, 0x8, 0x2, 0x2, 0x7ff, 0x4, 0x1, 0x0, 0x4, 0xd, 0x5, 0x6, 0x8, 0x10, 0x3, 0x491, 0x7, 0x5, 0x9, 0xfff, 0x800, 0xfffffffffffff525, 0x81, 0x7, 0x3, 0xd8, 0xf, 0x0, 0x90, 0x80, 0x10000, 0x5, 0x0, 0xfffffffffffffffa, 0x3, 0x6, 0x1, 0x10, 0x6ec5, 0x5, 0x2, 0xd8e5, 0x1, 0x0, 0x2, 0x2, 0x7fffffffffffffff, 0x3, 0x60d, 0x10000, 0xfffffffffffff001, 0x9f2, 0x81, 0x5, 0x7, 0x401, 0x4, 0x220c, 0x8df, 0xb6ea, 0x1, 0xd, 0xe75, 0xf, 0x4, 0xfffffffffffffeff, 0x8, 0x8001, 0x5, 0x5, 0x4, 0x5, 0x7fffffffffffffff, 0x4, 0xdee8, 0x456d, 0x0, 0x5, 0x0, 0x0, 0x1c000000000000, 0x1, 0x1, 0x8, 0xd732, 0x1, 0xffffffff, 0xfff, 0x7e02be1, 0x5, 0x0, 0x3, 0xa, 0x32, 0x9, 0x2, 0x4, 0x2, 0x4, 0x5, 0x7, 0x5e83, 0x7, 0x8, 0xfff]})
ioctl$KVM_IRQ_LINE_STATUS(r11, 0xc008ae67, &(0x7f0000001ac0)={0x571, 0xba92})
ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f0000001b40)=@attr_other={0x0, 0xfffffffd, 0x3, &(0x7f0000001b00)})
ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000001b80)={0x100, 0x100})

25m38.298333179s ago: executing program 4 (id=506):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000001c0)={0x8, <r3=>0xffffffffffffffff})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_ARM_VCPU_INIT(r6, 0x4020aeae, &(0x7f0000000140)={0x5, 0x8})
ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, &(0x7f0000000040)=@arm64_core={0x6030000000100012, &(0x7f0000000000)=0x1})
r7 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x2e)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x6)
syz_kvm_setup_cpu$arm64(r8, r9, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x30}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r9, 0x4010aeac, &(0x7f00000002c0)=@arm64_core={0x603000000010003c, &(0x7f0000000240)=0x8000000003b93})
mmap$KVM_VCPU(&(0x7f0000001000/0x2000)=nil, 0x0, 0x6, 0x10, r9, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000380)})
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1800, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x2b)
r12 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000aec000/0x400000)=nil)
r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000040)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_RUN(r13, 0xae80, 0x0)
ioctl$KVM_GET_ONE_REG(r13, 0x4010aeab, &(0x7f0000000280)=@arm64_sys={0x603000000013c006, &(0x7f0000000200)})
ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000300)=@attr_other={0x0, 0x8, 0x108, &(0x7f0000000000)=0xc000000000000000})
ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x4, 0x2, 0x0})
ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000100)=@attr_arm64={0x0, 0x7, 0x5, &(0x7f0000000000)=0x2})
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r14 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0)
r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x2e)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1, 0x16831, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_GUEST_MEMFD(r15, 0xc040aed4, &(0x7f0000000000)={0x10001, 0x6})

25m32.005632986s ago: executing program 3 (id=507):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x6)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f0000000000)={0x7ff, 0x6})
ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f0000000040)={0x1, 0xd})
ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f0000000080)={0x1, 0x6})
r1 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece)
ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f00000000c0)={0x2000, 0x7000, 0x1, r1})
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x23)
syz_kvm_vgic_v3_setup(r2, 0x2, 0x0)
syz_kvm_setup_cpu$arm64(0xffffffffffffffff, r1, &(0x7f0000bff000/0x400000)=nil, &(0x7f0000000700)=[{0x0, &(0x7f0000000100)=[@mrs={0xbe, 0x18, {0x603000000013df44}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x0, 0x2, 0xd, 0x7, 0x5, 0x4}}, @irq_setup={0x46, 0x18, {0x0, 0x1b7}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x1, 0x3, 0xe, 0x4609, 0x1, 0x4}}, @smc={0x1e, 0x40, {0x8400000a, [0x780, 0x101, 0x7, 0x5, 0x8000]}}, @mrs={0xbe, 0x18, {0x6030000000138034}}, @its_setup={0x82, 0x28, {0x3, 0x0, 0x3f9}}, @eret={0xe6, 0x18, 0xc482}, @svc={0x122, 0x40, {0x84000003, [0x7fffffff, 0x80000001, 0xfffffffffffffffa, 0x7, 0x2]}}, @msr={0x14, 0x20, {0x603000000013c4f1, 0xb1c}}, @its_send_cmd={0xaa, 0x28, {0xe, 0x0, 0x0, 0x9, 0x2, 0x30, 0x1}}, @msr={0x14, 0x20, {0x603000000013df60, 0x8}}, @smc={0x1e, 0x40, {0xc4000005, [0x400, 0x8, 0x2, 0x6, 0x8]}}, @code={0xa, 0x9c, {"000028d5606192d20060b8f2810080d2420180d2030080d2e40080d2020000d40004601e0000000c20e095d20000b0f2c10080d2220080d2030080d2a40080d2020000d4000040d30014005fc0509cd200a0b0f2610180d2220180d2a30080d2c40180d2020000d4000c407c207e89d20080b0f2210080d2620180d2e30180d2a40080d2020000d4"}}, @smc={0x1e, 0x40, {0x32000000, [0x6, 0x5, 0x3, 0x2, 0xffffffffffffffff]}}, @code={0xa, 0x9c, {"604580d20000b8f2a10180d2820080d2a30180d2840180d2020000d4000008d5000008d5e0a786d200c0b8f2210080d2020080d2e30080d2240180d2020000d40094007fc0e29fd20000b0f2e10180d2620180d2230080d2440180d2020000d4000028d5000028d540fb8ed20020b0f2c10180d2220080d2830180d2c40180d2020000d400000013"}}, @irq_setup={0x46, 0x18, {0x4, 0x1d1}}, @msr={0x14, 0x20, {0x6030000000138010, 0x7}}, @mrs={0xbe, 0x18, {0x603000000013debb}}, @smc={0x1e, 0x40, {0x30000000, [0x50c7, 0x4, 0xfffffffffffffffb, 0xec, 0x8]}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x4, 0xf, 0x3}}, @eret={0xe6, 0x18, 0x800}, @mrs={0xbe, 0x18, {0x5b19}}, @irq_setup={0x46, 0x18, {0x0, 0xdc}}, @smc={0x1e, 0x40, {0x40000000, [0x7, 0xce, 0x2]}}, @msr={0x14, 0x20, {0x603000000013df6a, 0x6}}, @code={0xa, 0xcc, {"20b593d200e0b0f2c10080d2c20180d2430180d2440180d2020000d4008008d50004801a00804008008008d5e06483d200a0b8f2810180d2e20080d2c30080d2c40180d2020000d4e09e93d20040b0f2410180d2420080d2630080d2e40180d2020000d4604598d200c0b8f2c10080d2a20180d2430080d2a40180d2020000d4206b95d200a0b0f2810080d2620080d2030080d2a40180d2020000d480b59ed20020b0f2e10180d2e20180d2030180d2840180d2020000d4"}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x18, 0xccd, 0x3}}, @mrs={0xbe, 0x18, {0x603000000013892c}}], 0x5f4}], 0x1, 0x0, &(0x7f0000000740)=[@featur2={0x1, 0x44}], 0x1)
ioctl$KVM_CAP_ARM_SYSTEM_SUSPEND(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000780))
ioctl$KVM_ARM_SET_COUNTER_OFFSET(r2, 0x4010aeb5, &(0x7f0000000800)={0x0, 0x1})
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x30)
ioctl$KVM_CAP_PTP_KVM(r3, 0x4068aea3, &(0x7f0000000840))
syz_kvm_setup_syzos_vm$arm64(r0, &(0x7f0000c00000/0x400000)=nil)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
ioctl$KVM_SET_GUEST_DEBUG_arm64(r4, 0x4208ae9b, &(0x7f00000008c0)={0x10000, 0x0, {[0x7, 0x800, 0x7, 0x6, 0x3, 0x9, 0x0, 0x4, 0x40, 0x3, 0x8, 0xffffffffd4ed355e, 0x3, 0x80, 0x80, 0x1ff], [0x5, 0x81d9, 0x17, 0x10000, 0x56350172, 0x1, 0xfffffffffffffffc, 0x4, 0x6, 0x4, 0x6, 0xf75f, 0x4, 0x3, 0x5, 0x9], [0x0, 0x81, 0x3, 0xb82, 0x765f, 0x2, 0x5, 0x5, 0x7fff, 0x7, 0x1, 0x7ff, 0x8000, 0x9, 0x7f, 0x8], [0x0, 0x3, 0x8, 0xbf8e, 0x9, 0x0, 0x5, 0x10000, 0xa2d, 0x2, 0x310, 0xa5, 0x8000000000000000, 0x5, 0x0, 0x2]}})
ioctl$KVM_CHECK_EXTENSION_VM(r3, 0xae03, 0x3)
ioctl$KVM_SET_GUEST_DEBUG_arm64(r1, 0x4208ae9b, &(0x7f0000000b00)={0x0, 0x0, {[0xa3d6, 0x0, 0xffffffff, 0xcc25, 0xb, 0x400, 0x0, 0xe, 0x5afa, 0xff, 0xe, 0x7fffffff, 0x401, 0x8, 0x7, 0x2], [0x0, 0x3, 0x3, 0x9, 0xffffffffffffffff, 0x10001, 0x7ff80000000, 0x8, 0x6, 0xb6a, 0x1fd, 0x1, 0x1, 0x101, 0x2, 0x60], [0x2, 0x60000, 0x512, 0x0, 0x5, 0x3, 0x6, 0x4, 0x5, 0xc, 0x6b4397c4, 0x2, 0x1, 0x6, 0x1, 0xc7], [0x685d, 0x81, 0x9, 0xa, 0x101, 0x2, 0x8, 0x2, 0xff, 0xfffffffffffffff8, 0x1000000000000000, 0x3, 0x6, 0x541, 0x3a71, 0x3ff]}})
r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1b)
ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000d40)={0x6, 0x0, [{0x9e, 0x1, 0x0, 0x0, @adapter={0x2, 0x8000000000000001, 0x5, 0xae6, 0x400}}, {0x7f, 0x2, 0x0, 0x0, @irqchip={0x3, 0x2}}, {0x1, 0x5, 0x0, 0x0, @sint={0x8, 0x10001}}, {0x6, 0x2, 0x1, 0x0, @irqchip={0x2, 0x8}}, {0x4, 0x5, 0x0, 0x0, @sint={0xfff, 0xe}}, {0xfffffeff, 0x2, 0x0, 0x0, @irqchip={0x5, 0x1}}]})
ioctl$KVM_CAP_ARM_SYSTEM_SUSPEND(r5, 0x4068aea3, &(0x7f0000000e80))
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_PPC_ALLOCATE_HTAB(r2, 0xc004aea7, &(0x7f0000000f00)=0x400)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r5, 0x4010ae68, &(0x7f0000000f40)={0xdddd1000, 0xf000, 0x1})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
write$eventfd(r1, &(0x7f0000000f80)=0x7, 0x8)
ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000001000)=@attr_arm64={0x0, 0x5, 0x4, &(0x7f0000000fc0)=0x3})
r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04)
mmap$KVM_VCPU(&(0x7f0000ffa000/0x4000)=nil, r6, 0x2000008, 0x13, r4, 0x0)
write$eventfd(r1, &(0x7f0000001040)=0x91, 0x8)

25m21.690524749s ago: executing program 3 (id=508):
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
eventfd2(0xba88, 0x80401)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x555555555555814})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000140)={0x4, <r4=>0xffffffffffffffff, 0x1})
r5 = ioctl$KVM_CREATE_VM(r4, 0x894c, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xb701, 0x0)
ioctl$KVM_CREATE_VCPU(r6, 0x8004b706, 0x2)

25m8.439253523s ago: executing program 3 (id=509):
openat$kvm(0x0, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CAP_ARM_MTE(r0, 0x4068aea3, &(0x7f0000000140))
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2)
r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r3, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@irq_setup={0x46, 0x18, {0x2, 0x16c}}], 0x18}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r2, 0xfffffffffffffff6, 0x100)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$KVM_CAP_ARM_MTE(r2, 0x4068aea3, &(0x7f0000000000))
ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
r4 = openat$kvm(0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x2a)
mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x7480082f6a2eeab9, 0x30d2a4fbfbea96b8, 0xffffffffffffffff, 0x0)
openat$kvm(0x0, 0x0, 0x0, 0x0)

25m6.151138377s ago: executing program 4 (id=510):
ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0x2, 0x1000000000000)
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x20000000)
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, 0x0)
openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async)
r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0)
ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000000)={0x1, 0x6000, 0x9fff, 0xffffffffffffffff, 0x8})
syz_kvm_add_vcpu$arm64(0x0, &(0x7f00000004c0)={0x0, &(0x7f00000000c0)=[@its_setup={0x82, 0x28, {0x3, 0x4, 0x151}}, @eret={0xe6, 0x18, 0xf8}, @its_setup={0x82, 0x28, {0x4, 0x2, 0x107}}, @mrs={0xbe, 0x18, {0x603000000013800f}}, @code={0xa, 0x9c, {"c0aa8ad20020b0f2410180d2620180d2e30180d2840080d2020000d4e0069ad20000b8f2a10180d2420180d2230080d2e40080d2020000d4a07c99d20040b0f2c10080d2820180d2030180d2e40180d2020000d4007008d500d8307e407d95d200a0b0f2610080d2420180d2830080d2440180d2020000d40080400c0084600d007008d500a0000f"}}, @code={0xa, 0xfc, {"40b48dd20060b8f2010080d2620180d2a30080d2640180d2020000d4000840fae0489bd20060b8f2610180d2620180d2630080d2840180d2020000d480d986d200c0b0f2610180d2620080d2e30080d2440180d2020000d4e0878bd200a0b0f2610180d2a20180d2030080d2640080d2020000d4205a90d20040b0f2a10080d2e20180d2c30180d2040180d2020000d460ca94d200a0b8f2c10080d2e20180d2030180d2640080d2020000d420db95d200a0b8f2610180d2820180d2c30180d2a40080d2020000d4000000f2e0ef95d20080b0f2810180d2020180d2c30080d2240180d2020000d4"}}, @uexit={0x0, 0x18, 0x8}, @svc={0x122, 0x40, {0x3000000, [0x94c6, 0x96, 0x5, 0x2, 0xd]}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x1, 0x0, 0xb, 0xffff7e61, 0x2}}, @irq_setup={0x46, 0x18, {0x1, 0x106}}, @eret={0xe6, 0x18, 0xf43c}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x24220c7c441be6d7, 0x8000, 0x2}}, @msr={0x14, 0x20, {0x603000000013e660, 0x4}}, @its_send_cmd={0xaa, 0x28, {0x4, 0x1, 0x3, 0x5, 0x43d, 0x401, 0x2}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80a0000, 0x100, 0xfffffffffffffffd, 0x1}}, @smc={0x1e, 0x40, {0x84000004, [0x2, 0x4, 0x3, 0x3, 0x101]}}, @its_setup={0x82, 0x28, {0x2, 0x3, 0x22}}], 0x3d8}, &(0x7f0000000500)=[@featur1={0x1, 0x11}], 0x1) (async)
r4 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f00000004c0)={0x0, &(0x7f00000000c0)=[@its_setup={0x82, 0x28, {0x3, 0x4, 0x151}}, @eret={0xe6, 0x18, 0xf8}, @its_setup={0x82, 0x28, {0x4, 0x2, 0x107}}, @mrs={0xbe, 0x18, {0x603000000013800f}}, @code={0xa, 0x9c, {"c0aa8ad20020b0f2410180d2620180d2e30180d2840080d2020000d4e0069ad20000b8f2a10180d2420180d2230080d2e40080d2020000d4a07c99d20040b0f2c10080d2820180d2030180d2e40180d2020000d4007008d500d8307e407d95d200a0b0f2610080d2420180d2830080d2440180d2020000d40080400c0084600d007008d500a0000f"}}, @code={0xa, 0xfc, {"40b48dd20060b8f2010080d2620180d2a30080d2640180d2020000d4000840fae0489bd20060b8f2610180d2620180d2630080d2840180d2020000d480d986d200c0b0f2610180d2620080d2e30080d2440180d2020000d4e0878bd200a0b0f2610180d2a20180d2030080d2640080d2020000d4205a90d20040b0f2a10080d2e20180d2c30180d2040180d2020000d460ca94d200a0b8f2c10080d2e20180d2030180d2640080d2020000d420db95d200a0b8f2610180d2820180d2c30180d2a40080d2020000d4000000f2e0ef95d20080b0f2810180d2020180d2c30080d2240180d2020000d4"}}, @uexit={0x0, 0x18, 0x8}, @svc={0x122, 0x40, {0x3000000, [0x94c6, 0x96, 0x5, 0x2, 0xd]}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x1, 0x0, 0xb, 0xffff7e61, 0x2}}, @irq_setup={0x46, 0x18, {0x1, 0x106}}, @eret={0xe6, 0x18, 0xf43c}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x24220c7c441be6d7, 0x8000, 0x2}}, @msr={0x14, 0x20, {0x603000000013e660, 0x4}}, @its_send_cmd={0xaa, 0x28, {0x4, 0x1, 0x3, 0x5, 0x43d, 0x401, 0x2}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80a0000, 0x100, 0xfffffffffffffffd, 0x1}}, @smc={0x1e, 0x40, {0x84000004, [0x2, 0x4, 0x3, 0x3, 0x101]}}, @its_setup={0x82, 0x28, {0x2, 0x3, 0x22}}], 0x3d8}, &(0x7f0000000500)=[@featur1={0x1, 0x11}], 0x1)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

24m55.480639161s ago: executing program 3 (id=511):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3)
ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000100)={0x5, 0x18})
ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000000)={0x5, 0x3})
ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f00000000c0)=@arm64_sve_vls={0x606000000015ffff, 0x0})
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) (async)
ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000100)={0x5, 0x18}) (async)
ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000000)={0x5, 0x3}) (async)
ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f00000000c0)=@arm64_sve_vls={0x606000000015ffff, 0x0}) (async)

24m51.74165786s ago: executing program 4 (id=512):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x101e40, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x28)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000b75000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[@hvc={0x32, 0x40, {0x84000051, [0x8000000084000052, 0xa, 0x4009, 0x2, 0x7fff]}}], 0x40}, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_GET_STATS_FD_cpu(r3, 0xaece)
r5 = ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r4, 0x4, 0x2, r5})
r6 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil)
r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x6030000000138017, 0x8000}}, @msr={0x14, 0x20, {0x603000000013c230, 0x8000}}], 0x40}, 0x0, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
ioctl$KVM_KVMCLOCK_CTRL(r9, 0xaead)

24m41.669094128s ago: executing program 3 (id=513):
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) (async)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) (async)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0) (async)
syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, <r2=>0xffffffffffffffff, 0x1})
openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0)
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000eed000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000e51000/0x4000)=nil, 0x4000) (async)
munmap(&(0x7f0000e51000/0x4000)=nil, 0x4000)
mmap$KVM_VCPU(&(0x7f0000c79000/0x4000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0)
write$eventfd(r2, &(0x7f00000001c0)=0xffffff7f, 0xff25)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ce5000/0x1000)=nil, 0x930, 0x6, 0x4102932, 0xffffffffffffffff, 0x0)
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
munmap(&(0x7f0000cc9000/0x2000)=nil, 0x2000) (async)
munmap(&(0x7f0000cc9000/0x2000)=nil, 0x2000)
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil)

24m36.429538355s ago: executing program 4 (id=514):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x33)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x9, 0xffffffffffffffff, 0x1})
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000040)={0x7, 0x101})
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000bfd000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000080)={0x0, &(0x7f0000000600)=[@memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x4, 0x4, 0x4}}], 0x30}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r5, 0x2, 0x100)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r8 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r10, 0x4018aee1, &(0x7f0000000040)=@attr_irq_timer={0x0, 0x1, 0x1, 0x0})
ioctl$KVM_ARM_VCPU_INIT(r10, 0x4020aeae, &(0x7f0000000140)={0x3, 0x5a})

24m26.925863351s ago: executing program 3 (id=515):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x6030000000138017, 0x8000}}, @msr={0x14, 0x20, {0x603000000013c230, 0x8000}}], 0x40}, 0x0, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
r7 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r6, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48)
syz_memcpy_off$KVM_EXIT_MMIO(r7, 0x20, &(0x7f0000000000)="4620e7659b58f0d982fa135282a0e74ac7f771f42796b89b", 0x0, 0x18)

23m49.659562411s ago: executing program 35 (id=514):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x33)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x9, 0xffffffffffffffff, 0x1})
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000040)={0x7, 0x101})
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000bfd000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000080)={0x0, &(0x7f0000000600)=[@memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x4, 0x4, 0x4}}], 0x30}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r5, 0x2, 0x100)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r8 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r10, 0x4018aee1, &(0x7f0000000040)=@attr_irq_timer={0x0, 0x1, 0x1, 0x0})
ioctl$KVM_ARM_VCPU_INIT(r10, 0x4020aeae, &(0x7f0000000140)={0x3, 0x5a})

23m37.628299715s ago: executing program 36 (id=515):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x6030000000138017, 0x8000}}, @msr={0x14, 0x20, {0x603000000013c230, 0x8000}}], 0x40}, 0x0, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
r7 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r6, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48)
syz_memcpy_off$KVM_EXIT_MMIO(r7, 0x20, &(0x7f0000000000)="4620e7659b58f0d982fa135282a0e74ac7f771f42796b89b", 0x0, 0x18)

15m4.732560712s ago: executing program 6 (id=525):
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x98cab519dcbd881c, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000)
munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x0, 0x100000f, 0x2010, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x9000000)
mmap$KVM_VCPU(&(0x7f0000e19000/0x1000)=nil, 0x930, 0x0, 0x810, 0xffffffffffffffff, 0x0)
r0 = eventfd2(0x5, 0x80000)
write$eventfd(r0, &(0x7f0000000000)=0xffffffffffffffff, 0x8)
munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000)
munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000e76000/0x12000)=nil, 0x12000)
mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x8e47da152fa46862, 0x1010, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000f1a000/0x4000)=nil, 0x930, 0x0, 0x9032, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4360ae82, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffc000/0x3000)=nil, 0x0, 0x300000a, 0x4030031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000)
munmap(&(0x7f000095e000/0x3000)=nil, 0x3000)
r1 = eventfd2(0x1, 0x1)
r2 = openat$kvm(0x0, &(0x7f0000000140), 0x341040, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
syz_kvm_vgic_v3_setup(r3, 0x1, 0x100)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000100)={r1, 0x3, 0x0, r0})
ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f00000000c0)={0x1, 0x0, [{0x3, 0x2, 0x1, 0x0, @msi={0x7, 0x9ca0, 0x7, 0xffffff5e}}]})
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000040)={0x2})
write$eventfd(r1, &(0x7f0000000000)=0x1000007, 0x8)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x2000)=nil, 0x930, 0x4, 0x8032, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)

14m50.312763768s ago: executing program 6 (id=526):
openat$kvm(0x0, 0xfffffffffffffffe, 0x0, 0x0)
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r4, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x81}], 0x1)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x20200, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
r7 = syz_kvm_vgic_v3_setup(r6, 0x3, 0x40)
ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000000)=@attr_other={0x0, 0x6, 0x382bc664, &(0x7f0000000100)=0xd31f})
r8 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013c65d, 0xfffdffffc1af0ec0}}], 0x20}, 0x0, 0xffffffffffffff92)
syz_kvm_add_vcpu$arm64(r3, 0x0, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x3, 0xa0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)

14m45.058069242s ago: executing program 5 (id=527):
r0 = mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
munmap(&(0x7f0000d05000/0x3000)=nil, 0x3000) (async)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) (async)
r5 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000b7c000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000040)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r6, 0x4018aee1, &(0x7f0000000000)=@attr_other={0x0, 0x6, 0x0, &(0x7f0000000080)=0x5}) (async)
ioctl$KVM_RUN(r6, 0xae80, 0x0) (async)
munmap$KVM_VCPU(r0, 0x2)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x2000001, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x0)

14m27.013115668s ago: executing program 6 (id=528):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000c01000/0x4000)=nil, r1, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x2041, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04)
r7 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r6, 0x3, 0x11, r5, 0x40000)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4a85400005a9610fbff67521cf66f8fd22627e7000000f700000000000000f200", 0x0, 0x48)
r8 = eventfd2(0x0, 0x0)
close(r8)
write$eventfd(r8, 0x0, 0x0)
write$eventfd(r8, &(0x7f0000000000)=0x18, 0x8)
r9 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000400)={0x0, &(0x7f0000000080)=[@its_send_cmd={0xaa, 0x28, {0x3, 0x0, 0x3, 0x5, 0x6, 0xf436, 0x1}}, @hvc={0x32, 0x40, {0x1000, [0x9, 0x1, 0x9, 0x9, 0x3]}}, @uexit={0x0, 0x18, 0x5}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80a0000, 0xc0, 0x6}}, @svc={0x122, 0x40, {0x80007fff, [0x21, 0x1, 0xfde, 0x4, 0x1000]}}, @svc={0x122, 0x40, {0x62000008, [0x7fff, 0x628, 0x0, 0x100, 0x6]}}, @mrs={0xbe, 0x18, {0x603000000013c001}}, @hvc={0x32, 0x40, {0x20, [0xd, 0x80000001, 0x3, 0x1, 0x3]}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x0, 0x1, 0xd, 0x5, 0x3, 0x2}}, @uexit={0x0, 0x18, 0xbb}, @msr={0x14, 0x20, {0x603000000013804d, 0x7}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x1, 0x0, 0xd, 0xa, 0x3, 0x2}}, @msr={0x14, 0x20, {0x603000000013deaf, 0x8151}}, @svc={0x122, 0x40, {0x84000005, [0x2e, 0x7f, 0x0, 0x2, 0x3]}}, @code={0xa, 0xb4, {"a0bf99d20080b8f2810080d2e20080d2430180d2040180d2020000d4a04381d200e0b8f2a10080d2c20180d2e30080d2a40080d2020000d40084800d202080d200a0b0f2a10180d2420080d2030080d2040180d2020000d460cb94d20040b8f2810180d2e20080d2a30180d2840080d2020000d4008008d500000053007008d500a4600da0a78ed200e0b0f2e10080d2820080d2630180d2440180d2020000d4"}}, @msr={0x14, 0x20, {0x603000000013c660, 0x101}}, @uexit={0x0, 0x18, 0x4}], 0x35c}, &(0x7f0000000440)=[@featur1={0x1, 0x4}], 0x1)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) (async)
mmap$KVM_VCPU(&(0x7f0000c01000/0x4000)=nil, r1, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) (async)
openat$kvm(0x0, &(0x7f0000000040), 0x2041, 0x0) (async)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) (async)
syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) (async)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) (async)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r6, 0x3, 0x11, r5, 0x40000) (async)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4a85400005a9610fbff67521cf66f8fd22627e7000000f700000000000000f200", 0x0, 0x48) (async)
eventfd2(0x0, 0x0) (async)
close(r8) (async)
write$eventfd(r8, 0x0, 0x0) (async)
write$eventfd(r8, &(0x7f0000000000)=0x18, 0x8) (async)
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async)
syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000400)={0x0, &(0x7f0000000080)=[@its_send_cmd={0xaa, 0x28, {0x3, 0x0, 0x3, 0x5, 0x6, 0xf436, 0x1}}, @hvc={0x32, 0x40, {0x1000, [0x9, 0x1, 0x9, 0x9, 0x3]}}, @uexit={0x0, 0x18, 0x5}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80a0000, 0xc0, 0x6}}, @svc={0x122, 0x40, {0x80007fff, [0x21, 0x1, 0xfde, 0x4, 0x1000]}}, @svc={0x122, 0x40, {0x62000008, [0x7fff, 0x628, 0x0, 0x100, 0x6]}}, @mrs={0xbe, 0x18, {0x603000000013c001}}, @hvc={0x32, 0x40, {0x20, [0xd, 0x80000001, 0x3, 0x1, 0x3]}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x0, 0x1, 0xd, 0x5, 0x3, 0x2}}, @uexit={0x0, 0x18, 0xbb}, @msr={0x14, 0x20, {0x603000000013804d, 0x7}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x1, 0x0, 0xd, 0xa, 0x3, 0x2}}, @msr={0x14, 0x20, {0x603000000013deaf, 0x8151}}, @svc={0x122, 0x40, {0x84000005, [0x2e, 0x7f, 0x0, 0x2, 0x3]}}, @code={0xa, 0xb4, {"a0bf99d20080b8f2810080d2e20080d2430180d2040180d2020000d4a04381d200e0b8f2a10080d2c20180d2e30080d2a40080d2020000d40084800d202080d200a0b0f2a10180d2420080d2030080d2040180d2020000d460cb94d20040b8f2810180d2e20080d2a30180d2840080d2020000d4008008d500000053007008d500a4600da0a78ed200e0b0f2e10080d2820080d2630180d2440180d2020000d4"}}, @msr={0x14, 0x20, {0x603000000013c660, 0x101}}, @uexit={0x0, 0x18, 0x4}], 0x35c}, &(0x7f0000000440)=[@featur1={0x1, 0x4}], 0x1) (async)

14m25.988455805s ago: executing program 5 (id=529):
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0xc8})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0xa}) (async)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0xa, <r2=>0xffffffffffffffff})
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x5000, 0x58000, 0x8, 0x45, 0x8, 0xc, 0x3, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x54000, 0x0, 0xff, 0x42, 0x5, 0x75, 0x6, 0xa, 0x4, 0x2, 0xff}, {0x0, 0x70000, 0x9, 0x5, 0x70, 0x7, 0x0, 0x9, 0x5, 0xa6, 0x5, 0x5}, {0x80a0000, 0x5000, 0x10, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xf000, 0x5000, 0xf, 0x3, 0x6, 0x7, 0xaf, 0x8, 0x9, 0x9, 0xf7, 0x97}, {0xeeefa000, 0xdddd0000, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x100000, 0xffe, 0xf, 0xd3, 0x4, 0x6, 0x7, 0x7, 0x2, 0x81, 0x40, 0x70}, {0x8000000, 0x4000, 0x4, 0x5, 0x9, 0x5, 0x9, 0x6, 0x2, 0xa, 0xb0, 0x81}, {0xeeee0000, 0x2e}, {0x8000000, 0x7}, 0x80000039, 0x0, 0x3000, 0x2024, 0x8, 0x0, 0xffff1000, [0xd, 0x4, 0x8, 0x8]})
write$eventfd(r2, &(0x7f00000001c0)=0x9, 0x5d) (async)
write$eventfd(r2, &(0x7f00000001c0)=0x9, 0x5d)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xf)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
mmap$KVM_VCPU(&(0x7f0000dd4000/0x3000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) (async)
r7 = mmap$KVM_VCPU(&(0x7f0000dd4000/0x3000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32) (async)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32)
r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r8, 0x0) (async)
r9 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r8, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r9, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r8, 0x0)
r10 = eventfd2(0x0, 0x0)
close(r10)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) (async)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async)
r11 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r12, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r12, 0x0)
mmap$KVM_VCPU(&(0x7f0000002000/0x2000)=nil, 0x930, 0x0, 0x10, 0xffffffffffffffff, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000002000/0x2000)=nil, 0x930, 0x0, 0x10, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f000000c000/0x4000)=nil, 0x0, 0x1, 0x13, r12, 0x0)
write$eventfd(r10, &(0x7f0000000180)=0x400005, 0x8)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f00000000c0)=@arm64_ccsidr={0x60a0000000110007, &(0x7f0000000240)=0x9})

14m7.841314884s ago: executing program 6 (id=530):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000100)={0x4, 0x401})
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000040)=[@eret={0xe6, 0x18}], 0x18}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x1, 0x100)
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_ARM_SET_COUNTER_OFFSET(r5, 0x8030aeb4, 0xfffffffffffffffe)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000240)={0x8, <r6=>0xffffffffffffffff})
r7 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r10, 0x4018aee1, &(0x7f0000000000)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0x20e4586c})
r11 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2)
ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x2, 0x0, &(0x7f0000000000)=0x1100000000000000})
ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
munmap(&(0x7f0000011000/0xc00000)=nil, 0xc00000)
ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000000)=@attr_arm64={0x0, 0x4, 0x1, 0x0})
r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x3)
ioctl$KVM_ARM_VCPU_INIT(r14, 0x4020aeae, &(0x7f0000000080)={0x0, 0x8})
ioctl$KVM_ARM_VCPU_FINALIZE(r14, 0x4004aec2, &(0x7f0000000000)=0x4)

14m7.041696109s ago: executing program 5 (id=531):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3e)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x10002, 0x4, 0xeeef0000, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r1 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000040)=[@its_send_cmd={0xaa, 0x28, {0x4, 0x1, 0x0, 0x10, 0x2, 0x8, 0x2}}], 0x28}, &(0x7f00000000c0)=[@featur1={0x1, 0x98}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r1, 0x4018aee1, &(0x7f0000000140)=@attr_set_pmu={0x0, 0x0, 0x3, &(0x7f0000000100)=0x2})
ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f0000000180)={0x81, "a4facd96fd6646436c7def4fe962ad5338d17e0292426e0e05e9944629ba77cba018294886ca00e371208accc221e896f8a2b3109e519dc715bccd12ccd66ffb644afb584d81aafff9df33d266523d5bb15550079dbca4d0f83eea9f6e0ac31f1d396c6352e0c3500a3baddebf52c9f2d50e137c3b0aad0d2024f98e77793e020e"}) (async)
r2 = ioctl$KVM_GET_STATS_FD_vm(r0, 0xaece)
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000280)=@attr_other={0x0, 0x9, 0x6597be97, &(0x7f0000000240)=0x7fff}) (async)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x3)
syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000bff000/0x400000)=nil) (async)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
syz_kvm_setup_cpu$arm64(r3, r4, &(0x7f0000bfd000/0x400000)=nil, &(0x7f0000000740)=[{0x0, &(0x7f00000002c0)=[@svc={0x122, 0x40, {0x84000005, [0xd0d, 0x3, 0x1, 0x6, 0x7]}}, @irq_setup={0x46, 0x18, {0x2, 0x157}}, @svc={0x122, 0x40, {0x31000000, [0x1c2, 0x8, 0x4, 0x7ff, 0x2]}}, @eret={0xe6, 0x18, 0xffffffffffffffff}, @irq_setup={0x46, 0x18, {0x3, 0x2b1}}, @its_setup={0x82, 0x28, {0x1, 0x2, 0x3e0}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0xf10, 0x9, 0xa}}, @msr={0x14, 0x20, {0x603000000013dead, 0xad1}}, @smc={0x1e, 0x40, {0x0, [0x6, 0x5, 0x618, 0x9, 0x273]}}, @smc={0x1e, 0x40, {0x30000000, [0xeb17, 0xffffffffffffffff, 0x8, 0x1, 0xffffffffffffff7f]}}, @hvc={0x32, 0x40, {0x84000001, [0x10, 0x5, 0x1ff, 0x10, 0x9]}}, @mrs={0xbe, 0x18, {0x603000000013c667}}, @irq_setup={0x46, 0x18, {0x4, 0x18a}}, @its_setup={0x82, 0x28, {0x0, 0x0, 0x146}}, @mrs={0xbe, 0x18, {0x603000000013de98}}, @code={0xa, 0x54, {"0054205e007008d50058000e0000407a007008d50000a00d80268ed200a0b0f2810080d2620180d2e30080d2640080d2020000d4007008d5007c009b008008d5"}}, @eret={0xe6, 0x18, 0xc}, @eret={0xe6, 0x18, 0x80000000}, @code={0xa, 0x6c, {"0040ff0d000008d50000c038007008d50000402cc0d886d20060b0f2e10180d2220180d2430180d2240080d2020000d40000803d80429fd20020b0f2210080d2a20080d2030080d2840180d2020000d4007008d5000c00fc"}}, @its_send_cmd={0xaa, 0x28, {0xe, 0x0, 0x2, 0x1, 0x2, 0x61, 0x2}}, @mrs={0xbe, 0x18, {0x603000000013e518}}, @msr={0x14, 0x20, {0x603000000013dce4, 0x8000000000000001}}, @eret={0xe6, 0x18, 0xc}, @irq_setup={0x46, 0x18, {0x3, 0x380}}, @mrs={0xbe, 0x18, {0x603000000013df6c}}, @svc={0x122, 0x40, {0x8400000a, [0x0, 0xb, 0x51, 0x5, 0x36]}}, @irq_setup={0x46, 0x18, {0x1, 0xa6}}, @uexit={0x0, 0x18, 0x9}], 0x478}], 0x1, 0x0, &(0x7f0000000780)=[@featur1={0x1, 0x4}], 0x1) (async)
ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000800)=@arm64_sve={0x60800000001500a7, &(0x7f00000007c0)=0x1}) (async)
r5 = ioctl$KVM_GET_STATS_FD_vm(r3, 0xaece) (async)
ioctl$KVM_SET_DEVICE_ATTR_vm(r3, 0x4018aee1, &(0x7f0000000880)=@attr_other={0x0, 0x6, 0x8000, &(0x7f0000000840)=0x1}) (async)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000008c0), 0x101000, 0x0) (async)
eventfd2(0xfffffffc, 0x80000) (async)
ioctl$KVM_GET_REGS(r2, 0x8360ae81, &(0x7f0000000900))
ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x3) (async)
r7 = syz_kvm_setup_syzos_vm$arm64(r0, &(0x7f0000c00000/0x400000)=nil)
r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000f00)={0x0, &(0x7f00000009c0)=[@smc={0x1e, 0x40, {0x84000010, [0xfffffffffffffffc, 0xfffffffffffffff9, 0x8, 0x4, 0x4]}}, @msr={0x14, 0x20, {0x603000000013c524, 0x9bb1}}, @irq_setup={0x46, 0x18, {0x4, 0x15f}}, @its_setup={0x82, 0x28, {0x4, 0x1, 0x32d}}, @smc={0x1e, 0x40, {0xc5000021, [0x7, 0x9, 0xb5, 0x200, 0x100000001]}}, @mrs={0xbe, 0x18, {0x603000000013805f}}, @svc={0x122, 0x40, {0x84000004, [0x6, 0x80000000, 0x9, 0x7, 0xfff]}}, @hvc={0x32, 0x40, {0x84000010, [0x6, 0x10000000000000, 0x40, 0x6, 0x6]}}, @svc={0x122, 0x40, {0x800, [0x1, 0xc000000000000, 0x6f19, 0x4, 0x3892]}}, @code={0xa, 0xb4, {"000028d5000008d520a197d20060b0f2e10180d2c20180d2c30080d2a40180d2020000d40070000ca0ac94d20080b0f2e10080d2e20180d2230080d2640080d2020000d460019ed200c0b8f2e10180d2620180d2630080d2640180d2020000d40000c06c606988d20060b0f2e10180d2820080d2230180d2a40080d2020000d40000001ae0d797d200e0b0f2c10080d2c20080d2230080d2840080d2020000d4"}}, @irq_setup={0x46, 0x18, {0x4, 0xdf}}, @svc={0x122, 0x40, {0xc4000004, [0x2, 0x0, 0x16c, 0xf8e4, 0xfffffffffffffffd]}}, @svc={0x122, 0x40, {0x84000006, [0x5, 0x9, 0x7, 0x9, 0x8df8]}}, @mrs={0xbe, 0x18, {0x603000000013c685}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x0, 0x0, 0x3, 0x6, 0x9, 0x2}}, @smc={0x1e, 0x40, {0x84000006, [0x1, 0x7ff, 0x0, 0x1ff, 0x6]}}, @uexit={0x0, 0x18, 0x143d}, @msr={0x14, 0x20, {0x603000000013c298, 0x7fffffffffffffff}}, @uexit={0x0, 0x18, 0x1}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xffe4, 0x3, 0x3}}, @uexit={0x0, 0x18, 0x3}, @irq_setup={0x46, 0x18, {0x0, 0x32c}}, @hvc={0x32, 0x40, {0xc5000020, [0x2, 0x0, 0x6, 0xff, 0x2]}}, @its_setup={0x82, 0x28, {0x4, 0x0, 0x3bc}}, @mrs={0xbe, 0x18, {0x603000000013e64b}}, @mrs={0xbe, 0x18, {0x603000000013dce1}}, @hvc={0x32, 0x40, {0x6300087b, [0x5, 0x0, 0x80, 0xe23, 0x9]}}, @eret={0xe6, 0x18, 0x40000000000000}], 0x524}, &(0x7f0000000f40)=[@featur1={0x1, 0x1}], 0x1)
syz_kvm_setup_cpu$arm64(r0, r2, &(0x7f0000954000/0x400000)=nil, &(0x7f00000013c0)=[{0x0, &(0x7f0000000f80)=[@irq_setup={0x46, 0x18, {0x4, 0x2bf}}, @uexit={0x0, 0x18, 0x2}, @its_send_cmd={0xaa, 0x28, {0x8, 0x1, 0x1, 0xb, 0x5b0}}, @svc={0x122, 0x40, {0xc400000c, [0x1, 0x5, 0x219, 0x3, 0x4]}}, @code={0xa, 0x6c, {"008008d5e02f83d20060b8f2a10180d2220180d2e30180d2640080d2020000d40000c0da000028d50040400d007008d5000000f1c08994d20040b8f2410080d2e20080d2e30180d2a40180d2020000d40088a10e1020601e"}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x8100000, 0x80, 0x67100000000, 0x1}}, @its_setup={0x82, 0x28, {0x0, 0x4, 0x240}}, @its_setup={0x82, 0x28, {0x0, 0x3, 0x21b}}, @uexit={0x0, 0x18, 0xf60}, @mrs={0xbe, 0x18, {0x603000000013de90}}, @its_setup={0x82, 0x28, {0x4, 0x4, 0x3f5}}, @mrs={0xbe, 0x18, {0x603000000013deb3}}, @msr={0x14, 0x20, {0x6030000000130203, 0x100000001}}, @hvc={0x32, 0x40, {0xc400000d, [0x8001, 0x6, 0xffffffffffffffff, 0xe, 0xa1c4]}}, @mrs={0xbe, 0x18, {0x1350}}, @irq_setup={0x46, 0x18, {0x2, 0x292}}, @hvc={0x32, 0x40, {0xc4000011, [0x4, 0x4, 0x6, 0x1, 0xfffffffffffffff8]}}, @eret={0xe6, 0x18, 0x6}, @irq_setup={0x46, 0x18, {0x3, 0x29c}}, @its_setup={0x82, 0x28, {0x2, 0x1, 0x1bb}}, @uexit={0x0, 0x18, 0xb74b}, @svc={0x122, 0x40, {0x84000010, [0xffffffff, 0x5fb3, 0x8, 0x5, 0x97]}}, @svc={0x122, 0x40, {0x3f000000, [0x2, 0x1, 0x3, 0x2, 0xedf]}}, @eret={0xe6, 0x18, 0x7}, @svc={0x122, 0x40, {0x8, [0x2, 0x4, 0x6c4d, 0x5, 0x5c]}}], 0x40c}], 0x1, 0x0, &(0x7f0000001400)=[@featur1={0x1, 0xd0}], 0x1) (async)
r9 = mmap$KVM_VCPU(&(0x7f00009f1000/0x4000)=nil, 0x0, 0x3000000, 0x30, r8, 0x0)
munmap$KVM_VCPU(r9, 0x1f) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000001440), 0x20000, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000001480)={0x0, 0x0, 0x200000, 0x1000, &(0x7f0000000000/0x1000)=nil}) (async)
ioctl$KVM_CAP_HALT_POLL(r3, 0x4068aea3, &(0x7f00000014c0)={0xb6, 0x0, 0x8})
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001540), 0x104100, 0x0)
ioctl$KVM_CREATE_VM(r10, 0xae01, 0x2e) (async)
ioctl$KVM_ARM_PREFERRED_TARGET(r1, 0x8020aeaf, &(0x7f0000001580))
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r4, 0x4018aee1, &(0x7f0000001600)=@attr_irq_timer={0x0, 0x1, 0x0, &(0x7f00000015c0)=0x18})

13m52.354425383s ago: executing program 5 (id=532):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2e)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x3, 0x3, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil})
close(0x4)
r1 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f00000005c0)={0x0, &(0x7f0000000080)=[@msr={0x14, 0x20, {0x603000000013c523, 0x8a2}}, @hvc={0x32, 0x40, {0x84000013, [0xd5, 0xdaba, 0x5f, 0x7, 0x4]}}, @svc={0x122, 0x40, {0x1, [0x0, 0xfffffffffffff000, 0x7fffffffffffffff, 0x8, 0x9]}}, @uexit={0x0, 0x18, 0xffffffffffffffc0}, @hvc={0x32, 0x40, {0x70000073, [0x8000000000000001, 0x6, 0x5, 0x9, 0x80000000]}}, @uexit={0x0, 0x18, 0xe}, @smc={0x1e, 0x40, {0xc400000c, [0xbe, 0x401, 0x4803, 0x7d, 0x40c]}}, @msr={0x14, 0x20, {0x603000000013801e, 0x6c}}, @eret={0xe6, 0x18}, @mrs={0xbe, 0x18, {0x603000000013f2b0}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x8100000, 0x380, 0x2, 0x2}}, @uexit={0x0, 0x18, 0x81}, @svc={0x122, 0x40, {0xffff, [0x4, 0x8, 0x4, 0x5, 0x7fffffffffffffff]}}, @eret={0xe6, 0x18, 0x4}, @hvc={0x32, 0x40, {0x40000003, [0x80000001, 0xd79, 0x83b2, 0x0, 0x4]}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80e0000, 0x40, 0xfffffffffffffffc, 0x4}}, @msr={0x14, 0x20, {0x603000000013c4f6, 0x5}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x4, 0x3, 0x10, 0x101, 0x5, 0x1}}, @msr={0x14, 0x20, {0x603000000013c641, 0x3}}, @code={0xa, 0xb4, {"802a8cd20040b8f2610080d2620080d2830180d2040080d2020000d40000004bc07f98d20020b0f2410080d2420080d2630080d2c40180d2020000d40088a10ea09590d20020b0f2a10180d2420180d2a30080d2440080d2020000d4007008d5a0ed9ad20040b8f2810180d2420180d2230080d2a40180d2020000d4000c007c000028d500788bd200e0b8f2810080d2420180d2a30180d2640180d2020000d4"}}, @memwrite={0x6e, 0x30, @generic={0xffffffff, 0x378, 0x7, 0x4}}, @hvc={0x32, 0x40, {0xc4000007, [0xfffffffffffffff2, 0x10000, 0x1262, 0x2, 0xa7f3]}}, @its_send_cmd={0xaa, 0x28, {0xa, 0x1, 0x2, 0x3, 0x9, 0xf0, 0x1}}, @msr={0x14, 0x20, {0x603000000013803d, 0xfffffffffffff13c}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x1400, 0x307d, 0x18}}, @uexit={0x0, 0x18, 0xa}, @its_setup={0x82, 0x28, {0x3, 0x2, 0x1a}}, @hvc={0x32, 0x40, {0x4, [0x9, 0x2, 0xcb30, 0xd65a, 0x1]}}], 0x534}, &(0x7f0000000600)=[@featur1={0x1, 0x2}], 0x1)
mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x2000007, 0x30d2a4fbfbea96b8, r1, 0x0)

13m41.825777461s ago: executing program 6 (id=533):
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) (async)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x240000, 0x0)
ioctl$KVM_CREATE_VM(r4, 0x80111500, 0x20000000) (async)
r5 = ioctl$KVM_CREATE_VM(r4, 0x80111500, 0x20000000)
ioctl$KVM_CREATE_VM(r5, 0x5761, 0x2000001c)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000180)=0x8080000})
ioctl$KVM_CHECK_EXTENSION_VM(r7, 0xae03, 0x4000000000009) (async)
ioctl$KVM_CHECK_EXTENSION_VM(r7, 0xae03, 0x4000000000009)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000000c0)=@attr_other={0x0, 0x6, 0x2, &(0x7f00000001c0)=0x1})
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) (async)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
mmap$KVM_VCPU(&(0x7f0000ff1000/0x3000)=nil, 0x0, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000ff1000/0x3000)=nil, 0x0, 0x100000d, 0x32, 0xffffffffffffffff, 0x0)
r8 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0)
r9 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r8, 0xae04)
mmap$KVM_VCPU(&(0x7f0000c63000/0x3000)=nil, r9, 0x380000c, 0x810, r3, 0x0)
r10 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, r9, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0)
r12 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000bfe000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r12, 0x0, &(0x7f0000000bc0)=[@featur1={0x1, 0x4}], 0x1) (async)
r13 = syz_kvm_add_vcpu$arm64(r12, 0x0, &(0x7f0000000bc0)=[@featur1={0x1, 0x4}], 0x1)
ioctl$KVM_SET_ONE_REG(r13, 0x4010aeac, &(0x7f0000000000)=@arm64_fw={0x6030000000140000, &(0x7f0000000200)=0x10003})
mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0)
syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) (async, rerun: 64)
syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) (rerun: 64)
syz_kvm_vgic_v3_setup(r11, 0x1, 0x3a0)
ioctl$KVM_CHECK_EXTENSION(r6, 0x40086602, 0x110e02ffff)
syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000100)={0x0, &(0x7f0000000140)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}, 0x0, 0x0) (async)
syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000100)={0x0, &(0x7f0000000140)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}, 0x0, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)

13m26.635791279s ago: executing program 5 (id=534):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x7fff}}], 0x20}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000040)={0x1, 0x5})
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000000)={0x8, "a78a3e6b9a32f5b7"})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) (async)
syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x7fff}}], 0x20}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) (async)
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000040)={0x1, 0x5}) (async)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000000)={0x8, "a78a3e6b9a32f5b7"}) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)

13m14.26231164s ago: executing program 6 (id=535):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x480, 0x0) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x480, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xdf)
munmap$KVM_VCPU(0x0, 0x1000000000)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0)
openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x31) (async)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x31)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0x80111500, 0x1a)
close(r3)
r4 = ioctl$KVM_GET_STATS_FD_vm(r2, 0xaece)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0x80111500, 0x22)
ioctl$KVM_CREATE_VM(r6, 0x541b, 0x20) (async)
ioctl$KVM_CREATE_VM(r6, 0x541b, 0x20)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r10 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f0000000140)={0x5}) (async)
ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f0000000140)={0x5})
write$eventfd(r4, &(0x7f00000001c0)=0xfffffffffffffdff, 0xffffffffffffff5b)
ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) (async)
r12 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r13, 0x4360ae82, &(0x7f0000000240)={[0x1, 0xffffffffffffffff, 0x1000, 0x3, 0x3, 0x158, 0xfffe, 0xc0, 0x1, 0x1, 0xfffffffffffffffb, 0xfffe, 0x0, 0xfbfc, 0x200, 0xfffffffffffffffb], 0x0, 0x1000})
ioctl$KVM_ARM_VCPU_INIT(r8, 0x4020aeae, &(0x7f0000000040)={0x5})
openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) (async)
r14 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0)
r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0)
r16 = ioctl$KVM_CREATE_VCPU(r15, 0xae41, 0x2)
mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r16, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r16, 0x0)

13m8.892360552s ago: executing program 5 (id=536):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4)
r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r5, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
r6 = syz_kvm_vgic_v3_setup(r4, 0x1, 0x100)
ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x8, 0x2, &(0x7f0000000140)=0x1})
ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8})
ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f00000000c0)=@arm64_sys={0x603000000013dce0, &(0x7f0000000000)=0x43ff})
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r2, 0x4018aee1, &(0x7f00000000c0)=@attr_pmu_init)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
close(0x4)
close(0x5)

12m25.938378712s ago: executing program 37 (id=535):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x480, 0x0) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x480, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xdf)
munmap$KVM_VCPU(0x0, 0x1000000000)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0)
openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x31) (async)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x31)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0x80111500, 0x1a)
close(r3)
r4 = ioctl$KVM_GET_STATS_FD_vm(r2, 0xaece)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0x80111500, 0x22)
ioctl$KVM_CREATE_VM(r6, 0x541b, 0x20) (async)
ioctl$KVM_CREATE_VM(r6, 0x541b, 0x20)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r10 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f0000000140)={0x5}) (async)
ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f0000000140)={0x5})
write$eventfd(r4, &(0x7f00000001c0)=0xfffffffffffffdff, 0xffffffffffffff5b)
ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) (async)
r12 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r13, 0x4360ae82, &(0x7f0000000240)={[0x1, 0xffffffffffffffff, 0x1000, 0x3, 0x3, 0x158, 0xfffe, 0xc0, 0x1, 0x1, 0xfffffffffffffffb, 0xfffe, 0x0, 0xfbfc, 0x200, 0xfffffffffffffffb], 0x0, 0x1000})
ioctl$KVM_ARM_VCPU_INIT(r8, 0x4020aeae, &(0x7f0000000040)={0x5})
openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) (async)
r14 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0)
r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0)
r16 = ioctl$KVM_CREATE_VCPU(r15, 0xae41, 0x2)
mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r16, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r16, 0x0)

12m18.260210078s ago: executing program 38 (id=536):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4)
r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r5, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
r6 = syz_kvm_vgic_v3_setup(r4, 0x1, 0x100)
ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x8, 0x2, &(0x7f0000000140)=0x1})
ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8})
ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f00000000c0)=@arm64_sys={0x603000000013dce0, &(0x7f0000000000)=0x43ff})
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r2, 0x4018aee1, &(0x7f00000000c0)=@attr_pmu_init)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
close(0x4)
close(0x5)

2m52.556064737s ago: executing program 7 (id=537):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000027000/0x13000)=nil, 0x930, 0x3, 0x4102932, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1, 0x16831, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000500)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x27)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x3, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x0, 0x3, 0x0, 0x6, 0x2, 0x9}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r3, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000180)={0x8, <r6=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r5, 0xae80, 0x0)

2m50.109650756s ago: executing program 8 (id=538):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x23)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x46cc00, 0x0)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x3, 0x8003, 0x10000000004}}], 0x28}, 0x0, 0x0)
ioctl$KVM_GET_MP_STATE(r3, 0x8004ae98, &(0x7f0000000000))
ioctl$KVM_RUN(r3, 0xae80, 0x0)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000140)=@x86={0x3, 0xd3, 0xcc, 0x0, 0x8, 0x0, 0x3, 0x8, 0x3c, 0xf8, 0x10, 0xf, 0x0, 0x964, 0x1, 0x1, 0x2, 0xc1, 0x7, '\x00', 0xf, 0x9})

2m32.925975966s ago: executing program 8 (id=539):
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_SREGS(r0, 0x4000ae84, &(0x7f0000000000)={{0x6000, 0x5000, 0xf, 0x3e, 0x0, 0x1, 0x6, 0x8, 0x7, 0xfe, 0x8, 0x95}, {0x7000, 0xdddd1000, 0xe, 0x2b, 0x4, 0x6, 0x66, 0x8, 0x9, 0xf, 0x2a, 0x3}, {0x2, 0x10000, 0x10, 0xde, 0x7f, 0xf9, 0xa, 0x3, 0x80, 0xb, 0x6, 0xf}, {0xb000, 0x2, 0x0, 0xe, 0x9, 0x4, 0x6, 0xf4, 0x4, 0x40, 0x1, 0x80}, {0x9000, 0x9000, 0xb, 0x4, 0x5, 0x6, 0x8, 0x0, 0x2c, 0x7, 0xcc, 0xe}, {0x80a0000, 0xeeef0000, 0xb, 0x30, 0x0, 0x48, 0xff, 0x4, 0x1, 0x4, 0x5, 0x3}, {0xdddd1000, 0x58000, 0xf, 0x0, 0x2, 0xa, 0x2, 0x0, 0x7, 0x3, 0x8, 0x3}, {0x1, 0x0, 0x3, 0x0, 0x5, 0x10, 0x5, 0x0, 0x4, 0x6, 0x4, 0x9}, {0xdddd1000, 0x7}, {0xc000, 0xa01}, 0xa004000f, 0x0, 0xfec00000, 0x220008, 0x1, 0xc001, 0x5000, [0xef6, 0x8000, 0x7, 0x2]})
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2a)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1c)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x1})
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000180)={0x54000, 0x1b000, 0x1})
r3 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f00000002c0)={0x0, &(0x7f00000001c0)=[@mrs={0xbe, 0x18, {0x603000000013c031}}, @irq_setup={0x46, 0x18, {0x7, 0xfa}}, @irq_setup={0x46, 0x18, {0x1, 0x307}}, @smc={0x1e, 0x40, {0x2000000, [0x5, 0x2cdc, 0x1, 0x401, 0x800]}}, @smc={0x1e, 0x40, {0x80008000, [0x1, 0x6, 0x7fff, 0x81, 0x2]}}], 0xc8}, &(0x7f0000000300)=[@featur1={0x1, 0x15}], 0x1)
ioctl$KVM_GET_SREGS(r3, 0x8000ae83, &(0x7f0000000340))
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x200, 0x0)
ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f00000004c0)={0xa8, 0x0, 0x1})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x2e)
r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
ioctl$KVM_GET_REGS(r6, 0x8360ae81, &(0x7f0000000580))
r7 = ioctl$KVM_GET_STATS_FD_cpu(r3, 0xaece)
ioctl$KVM_GET_API_VERSION(r5, 0xae00, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_arm64(r3, 0x4208ae9b, &(0x7f0000000640)={0x10001, 0x0, {[0x6, 0x9, 0x5, 0x4, 0x10001, 0xe, 0xfffffffffffffffd, 0x4, 0x1, 0x6, 0xad2, 0x0, 0x7, 0x2, 0xdbfa, 0x4], [0x1ff, 0x6, 0x8, 0x0, 0x3, 0x37b0, 0x0, 0x2664, 0x3, 0x0, 0x7f, 0x800, 0x200, 0x8, 0x0, 0xfffffffffffffffb], [0x7, 0xb, 0x7, 0x1000, 0x0, 0x9, 0x3, 0x3, 0x7, 0xfffffffffffffff7, 0xb, 0x6, 0x200, 0x6, 0x81, 0x6], [0x8, 0x7, 0x90, 0x0, 0xfff, 0x3, 0x80000001, 0x0, 0x8, 0xd, 0x2a3, 0x0, 0x8000000000000000, 0x0, 0xf, 0xd]}})
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000880), 0x400, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0xb)
ioctl$KVM_CLEAR_DIRTY_LOG(r0, 0xc018aec0, &(0x7f0000000cc0)={0x4, 0x100, 0x1c0, &(0x7f00000008c0)=[0x4, 0x100000001, 0x1, 0x40, 0x1, 0x1, 0x9c46, 0xf1, 0x2b, 0x800, 0x5, 0xfffffffffffffff8, 0x34, 0x2, 0xc0000000000, 0x3ff, 0x3, 0x6, 0x204, 0xa2, 0x6, 0xd, 0xcaae, 0xfffffffffffffffa, 0x7, 0x80000001, 0xf, 0x3ff, 0x2, 0x6617, 0x97e8, 0x9, 0x4, 0x7ff, 0x2, 0x6, 0xba, 0x7, 0xba, 0xd, 0xd, 0x1, 0x7, 0x1, 0x4, 0x0, 0x3d, 0x3, 0xcca, 0x5, 0x9, 0x9, 0x7, 0xeee5, 0x3, 0x0, 0x127, 0x0, 0xfffffffffffffff9, 0x7, 0xc, 0x4, 0x9, 0x8, 0x0, 0x40, 0x9, 0x6, 0xfffffffffffffff8, 0x79d1, 0x9a8, 0x5540, 0x3, 0x5, 0x2, 0x6, 0x681, 0x9, 0xdc, 0xfffffffffffff413, 0x9, 0xd0c, 0xd9a6, 0x5, 0x7, 0xa, 0xfffffffffffffff8, 0x800, 0x80, 0x2, 0x1, 0xa00, 0x3, 0x8, 0x3, 0x206, 0x1, 0xf833, 0x1, 0xf00000000000, 0x3, 0xc49f, 0x465, 0x4, 0xa6, 0x8, 0x5, 0x4, 0x4, 0x9, 0x0, 0x9, 0x7b68, 0x3, 0x3, 0x5, 0x101, 0x826, 0x0, 0xf, 0x97, 0x100000001, 0x4, 0x0, 0x2, 0x78f6, 0x3, 0xa]})
ioctl$KVM_GET_ONE_REG(r4, 0x4010aeab, &(0x7f0000000d40)=@arm64_sve={0x60800000001502f2, &(0x7f0000000d00)=0x1})
ioctl$KVM_GET_API_VERSION(r8, 0xae00, 0x0)
ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x0)
ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x7)
syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000bfe000/0x400000)=nil)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000d80), 0x40100, 0x0)
ioctl$KVM_GET_API_VERSION(r10, 0xae00, 0x0)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000dc0), 0x200000, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r11, 0xae04)
ioctl$KVM_GET_MP_STATE(r6, 0x8004ae98, &(0x7f0000000e00))

2m30.469332144s ago: executing program 7 (id=540):
r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$arm64(r1, 0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil, &(0x7f0000000600)=[{0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x2e0}], 0x1, 0x0, &(0x7f0000000640)=[@featur1={0x1, 0x88}], 0x1) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r2, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000080)="fb0149dd033be3abf408020000001b0000005a9610fbff67521ce16f8f1f449a7ab2aa76c829d2262f00000000000000000200df38000000000000000020001e91114900", 0x0, 0xfda9) (async)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) (async)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0x600657af12600f2, 0x0) (async)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
write$eventfd(r5, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000140)={0x2, 0x0, [{0x3, 0x1, 0x0, 0x0, @msi={0x0, 0x3, 0x92, 0x2}}, {0x3, 0x2, 0x0, 0x0, @msi={0x2, 0x7, 0xb, 0x5}}]})

2m0.402561559s ago: executing program 8 (id=541):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x26900, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vm(r1, 0x4018aee1, &(0x7f00000000c0)=@attr_other={0x0, 0xf6, 0xffffffffffff5a3f, 0x0})
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f0000000040)={0xdf, 0x0, 0x7000})
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, 0x0)
r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x0, 0x0})
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x4, <r5=>0xffffffffffffffff, 0x1})
r6 = ioctl$KVM_CREATE_VM(r5, 0x894c, 0x0)
ioctl$KVM_CREATE_VCPU(r6, 0x40305829, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000140)={0x4, <r9=>0xffffffffffffffff, 0x1})
ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x7)
ioctl$KVM_CREATE_VM(r9, 0x894c, 0x0)
ioctl$KVM_CAP_ARM_MTE(r1, 0x4068aea3, &(0x7f0000000140))

2m0.002807994s ago: executing program 7 (id=542):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x108082, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x3000007, 0x4010, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x9000000)
mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000)
munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000)
munmap(&(0x7f000075a000/0xb000)=nil, 0xb000)
munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000482000/0x2000)=nil, 0x2000)
munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000)
munmap(&(0x7f0000e76000/0x12000)=nil, 0x12000)
mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x24132, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000f1a000/0x4000)=nil, 0x930, 0x0, 0x9032, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000fed000/0x3000)=nil, 0x930, 0x0, 0x4030031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04)
mmap$KVM_VCPU(&(0x7f000064b000/0x4000)=nil, r2, 0x100000d, 0x9032, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000667000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1})

1m36.470032655s ago: executing program 8 (id=543):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x28) (async)
write$eventfd(0xffffffffffffffff, &(0x7f00000001c0)=0x3, 0xfdef)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=[@featur2={0x1, 0x2}], 0x1)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000000)=@arm64={0x8, 0x9, 0x9, '\x00', 0x8})
r4 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x3c)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f00000001c0)={0x8, <r6=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4})
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) (async)
ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x8, 0x100, &(0x7f0000000080)=0x8000000000000000})
ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000280)=@attr_arm64={0x0, 0x4, 0x2, 0x0}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x1ff, 0x2, 0x30000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000300)=@attr_other={0x0, 0x4, 0x1, 0x0}) (async)
ioctl$KVM_ARM_VCPU_INIT(0xffffffffffffffff, 0x4020aeae, &(0x7f0000000000)={0x5, 0x18}) (async)
close(0x5) (async)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) (async, rerun: 32)
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) (rerun: 32)

1m32.61982087s ago: executing program 7 (id=544):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2c)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xffe8, 0x3, 0x2}}, @mrs={0xbe, 0x18, {0x603000000013c801}}], 0x48}, 0x0, 0x0) (async)
r4 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x7fff}}, @msr={0x14, 0x20, {0x603000000013df61, 0x7}}], 0x40}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r7, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) (async)
ioctl$KVM_RUN(r7, 0xae80, 0x0) (async, rerun: 64)
ioctl$KVM_RUN(r7, 0xae80, 0x0) (async, rerun: 64)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, 0x0) (async, rerun: 32)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) (async, rerun: 32)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1m13.855354981s ago: executing program 8 (id=545):
mmap$KVM_VCPU(&(0x7f0000011000/0x3000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0)
r0 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000b00)={0x0, &(0x7f00000007c0)=[@mrs={0xbe, 0x18, {0x603000000013e721}}, @eret={0xe6, 0x18, 0x3}, @svc={0x122, 0x40, {0x8400000f, [0x2, 0x2, 0x2, 0x2, 0x400]}}, @irq_setup={0x46, 0x18, {0x2, 0x3a7}}, @memwrite={0x6e, 0x30, @generic={0x80a0000, 0xcf4, 0x0, 0x2}}, @msr={0x14, 0x20, {0x603000000013df19, 0x2ef1}}, @its_setup={0x82, 0x28, {0x4, 0x2, 0x34d}}, @mrs={0xbe, 0x18, {0x603000000013e290}}, @its_setup={0x82, 0x28, {0x1, 0x2, 0x295}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80e0000, 0x14, 0x9, 0x1}}, @mrs={0xbe, 0x18, {0x603000000013d801}}, @code={0xa, 0xcc, {"e08e96d20080b0f2410180d2420180d2c30180d2240080d2020000d40008200e409f97d20040b0f2a10080d2020180d2630080d2240180d2020000d400da94d20020b8f2010180d2e20180d2830080d2840080d2020000d4009f91d200e0b0f2e10080d2a20180d2a30080d2c40080d2020000d4007008d5603b9cd20000b8f2e10180d2420180d2830180d2040180d2020000d4007008d5007008d580e18fd20080b8f2610080d2220180d2030180d2a40180d2020000d4"}}, @its_setup={0x82, 0x28, {0x4, 0x4, 0x3dd}}, @its_send_cmd={0xaa, 0x28, {0xb, 0x1, 0x1, 0x4, 0x8, 0xffffff00, 0x3}}, @hvc={0x32, 0x40, {0x84000052, [0x28d6, 0x4, 0xf, 0x0, 0x3]}}, @hvc={0x32, 0x40, {0x84000012, [0x1, 0x7, 0x200, 0xa695, 0x7]}}], 0x324}, &(0x7f0000000b40)=[@featur2], 0x1)
r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
r2 = mmap$KVM_VCPU(&(0x7f0000002000/0x4000)=nil, r1, 0xe, 0x10, r0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1800, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x34)
r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r4, r5, &(0x7f00008e9000/0x400000)=nil, &(0x7f0000000740)=[{0x0, &(0x7f00000002c0)=[@its_send_cmd={0xaa, 0x28, {0x6, 0x6, 0x4, 0xa, 0xf000000, 0xffffff81, 0x3}}, @its_send_cmd={0xaa, 0x28, {0xa, 0x0, 0x4, 0xd, 0x8, 0xfffff22b, 0x4}}, @eret={0xe6, 0x18, 0x7}, @its_setup={0x82, 0x28, {0x2, 0x1, 0x14a}}, @uexit={0x0, 0x18, 0x3ff}, @smc={0x1e, 0x40, {0x84000050, [0x10001, 0x2, 0x0, 0x2, 0xff]}}, @svc={0x122, 0x40, {0x0, [0x2, 0x9, 0x101, 0x6, 0x2]}}, @its_setup={0x82, 0x28, {0x4, 0x2, 0x4a}}, @uexit={0x0, 0x18, 0x100}, @eret={0xe6, 0x18, 0xffffffff}, @irq_setup={0x46, 0x18, {0x2, 0x363}}, @svc={0x122, 0x40, {0x8400000b, [0x6, 0x6, 0x5, 0x1, 0x4864]}}, @code={0xa, 0x84, {"007008d50044c01a007008d5c0c094d20080b0f2c10180d2220080d2030080d2640080d2020000d440749dd200c0b0f2210080d2420080d2e30180d2a40080d2020000d40060002f007008d5e0ee81d200a0b0f2810080d2420080d2030180d2c40080d2020000d40084004f0020bf0d"}}, @mrs={0xbe, 0x18, {0x60300000001383c6}}, @eret={0xe6, 0x18, 0x3}, @smc={0x1e, 0x40, {0xc400000e, [0x7fff, 0xffffffff80000001, 0x8000000000000000, 0x4, 0x5]}}, @msr={0x14, 0x20, {0x603000000013801c, 0x80000000}}, @code={0xa, 0xb4, {"203b9ed20000b0f2610080d2a20080d2430180d2440180d2020000d4005c94d20060b8f2810180d2c20080d2230080d2a40080d2020000d400a8205ec01889d20060b0f2210080d2a20180d2430180d2240180d2020000d4000c40380000209b602f8bd200a0b0f2410080d2020080d2630080d2840080d2020000d40000806d403c83d20000b0f2a10080d2e20080d2230180d2c40180d2020000d4008008d5"}}, @its_setup={0x82, 0x28, {0x1, 0x3, 0x3b1}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x1, 0x3, 0x10, 0x4, 0x401}}, @hvc={0x32, 0x40, {0x4000, [0xfffffffffffffff1, 0x80000000, 0x0, 0x5, 0xc]}}, @eret={0xe6, 0x18, 0x7}], 0x448}], 0x1, 0x0, &(0x7f0000000780)=[@featur1={0x1, 0x42}], 0x1)
r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x2b)
r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000aec000/0x400000)=nil)
r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000040)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_GET_ONE_REG(r8, 0x4010aeab, &(0x7f0000000280)=@arm64_sys={0x603000000013c006, &(0x7f0000000200)})
syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000240)="37e68986ad644f5dc57bbc1ff382863b67f3eee57a32ec911d95f88f3dd8ea716e4a29cefbd440b2ecf83f57baf33b0c97182970a47ef45c954e42f2055384921830f6e273d2eb30", 0x0, 0x2a2019ac5ed2a1ef)
r9 = eventfd2(0x229, 0x80000)
r10 = eventfd2(0x0, 0x0)
close(r10)
write$eventfd(r10, 0x0, 0x0)
ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000080)={r9, 0xe0bb, 0x3, r10})
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0)

1m7.105543806s ago: executing program 7 (id=546):
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x100000c, 0x6832, 0xffffffffffffffff, 0x0)
r0 = eventfd2(0xfffffffa, 0x80001)
r1 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f00000001c0)="f21bc75509bf71c9d70236fc044842da63ff2f677e80ab404d37b2e3f137a13bc2b875c2357c6e1100000000000000000000000000000000000000000000000000ff00", 0x0, 0x48)
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000001c0)={0x5000, 0x102000, 0x20081})
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x4, <r5=>0xffffffffffffffff, 0x1})
write$eventfd(r5, &(0x7f00000001c0)=0x8100000001, 0x51a8)
r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ARM_VCPU_INIT(r6, 0x4020aeae, &(0x7f0000000100)={0x5, 0x12})
ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, &(0x7f00000000c0)=@arm64_sys={0x603000000013c024, &(0x7f0000000140)=0x4})
write$eventfd(r0, &(0x7f0000000200)=0x8, 0x8)

49.258513026s ago: executing program 7 (id=547):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2e)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000100)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
r3 = openat$kvm(0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000080), 0x308000, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r6, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
r7 = syz_kvm_vgic_v3_setup(r5, 0x2, 0xe0)
ioctl$KVM_GET_DEVICE_ATTR(r7, 0x4018aee2, &(0x7f0000000100)=@attr_other={0x0, 0x1, 0x6534, 0x0})
eventfd2(0xfff, 0x800)
openat$kvm(0xffffffffffffff9c, 0x0, 0x389901, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@arm64={0xc, 0xe7, 0x8})
eventfd2(0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000001c0)=@x86={0x1, 0x8, 0xb, 0x0, 0x2, 0x6, 0x6, 0x9, 0x8, 0x8, 0x6, 0x2, 0x0, 0x200, 0x6, 0xe2, 0x1, 0xa, 0x0, '\x00', 0x10, 0x6})
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x2000001, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x0)

24.588534143s ago: executing program 39 (id=545):
mmap$KVM_VCPU(&(0x7f0000011000/0x3000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0)
r0 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000b00)={0x0, &(0x7f00000007c0)=[@mrs={0xbe, 0x18, {0x603000000013e721}}, @eret={0xe6, 0x18, 0x3}, @svc={0x122, 0x40, {0x8400000f, [0x2, 0x2, 0x2, 0x2, 0x400]}}, @irq_setup={0x46, 0x18, {0x2, 0x3a7}}, @memwrite={0x6e, 0x30, @generic={0x80a0000, 0xcf4, 0x0, 0x2}}, @msr={0x14, 0x20, {0x603000000013df19, 0x2ef1}}, @its_setup={0x82, 0x28, {0x4, 0x2, 0x34d}}, @mrs={0xbe, 0x18, {0x603000000013e290}}, @its_setup={0x82, 0x28, {0x1, 0x2, 0x295}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80e0000, 0x14, 0x9, 0x1}}, @mrs={0xbe, 0x18, {0x603000000013d801}}, @code={0xa, 0xcc, {"e08e96d20080b0f2410180d2420180d2c30180d2240080d2020000d40008200e409f97d20040b0f2a10080d2020180d2630080d2240180d2020000d400da94d20020b8f2010180d2e20180d2830080d2840080d2020000d4009f91d200e0b0f2e10080d2a20180d2a30080d2c40080d2020000d4007008d5603b9cd20000b8f2e10180d2420180d2830180d2040180d2020000d4007008d5007008d580e18fd20080b8f2610080d2220180d2030180d2a40180d2020000d4"}}, @its_setup={0x82, 0x28, {0x4, 0x4, 0x3dd}}, @its_send_cmd={0xaa, 0x28, {0xb, 0x1, 0x1, 0x4, 0x8, 0xffffff00, 0x3}}, @hvc={0x32, 0x40, {0x84000052, [0x28d6, 0x4, 0xf, 0x0, 0x3]}}, @hvc={0x32, 0x40, {0x84000012, [0x1, 0x7, 0x200, 0xa695, 0x7]}}], 0x324}, &(0x7f0000000b40)=[@featur2], 0x1)
r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
r2 = mmap$KVM_VCPU(&(0x7f0000002000/0x4000)=nil, r1, 0xe, 0x10, r0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1800, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x34)
r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r4, r5, &(0x7f00008e9000/0x400000)=nil, &(0x7f0000000740)=[{0x0, &(0x7f00000002c0)=[@its_send_cmd={0xaa, 0x28, {0x6, 0x6, 0x4, 0xa, 0xf000000, 0xffffff81, 0x3}}, @its_send_cmd={0xaa, 0x28, {0xa, 0x0, 0x4, 0xd, 0x8, 0xfffff22b, 0x4}}, @eret={0xe6, 0x18, 0x7}, @its_setup={0x82, 0x28, {0x2, 0x1, 0x14a}}, @uexit={0x0, 0x18, 0x3ff}, @smc={0x1e, 0x40, {0x84000050, [0x10001, 0x2, 0x0, 0x2, 0xff]}}, @svc={0x122, 0x40, {0x0, [0x2, 0x9, 0x101, 0x6, 0x2]}}, @its_setup={0x82, 0x28, {0x4, 0x2, 0x4a}}, @uexit={0x0, 0x18, 0x100}, @eret={0xe6, 0x18, 0xffffffff}, @irq_setup={0x46, 0x18, {0x2, 0x363}}, @svc={0x122, 0x40, {0x8400000b, [0x6, 0x6, 0x5, 0x1, 0x4864]}}, @code={0xa, 0x84, {"007008d50044c01a007008d5c0c094d20080b0f2c10180d2220080d2030080d2640080d2020000d440749dd200c0b0f2210080d2420080d2e30180d2a40080d2020000d40060002f007008d5e0ee81d200a0b0f2810080d2420080d2030180d2c40080d2020000d40084004f0020bf0d"}}, @mrs={0xbe, 0x18, {0x60300000001383c6}}, @eret={0xe6, 0x18, 0x3}, @smc={0x1e, 0x40, {0xc400000e, [0x7fff, 0xffffffff80000001, 0x8000000000000000, 0x4, 0x5]}}, @msr={0x14, 0x20, {0x603000000013801c, 0x80000000}}, @code={0xa, 0xb4, {"203b9ed20000b0f2610080d2a20080d2430180d2440180d2020000d4005c94d20060b8f2810180d2c20080d2230080d2a40080d2020000d400a8205ec01889d20060b0f2210080d2a20180d2430180d2240180d2020000d4000c40380000209b602f8bd200a0b0f2410080d2020080d2630080d2840080d2020000d40000806d403c83d20000b0f2a10080d2e20080d2230180d2c40180d2020000d4008008d5"}}, @its_setup={0x82, 0x28, {0x1, 0x3, 0x3b1}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x1, 0x3, 0x10, 0x4, 0x401}}, @hvc={0x32, 0x40, {0x4000, [0xfffffffffffffff1, 0x80000000, 0x0, 0x5, 0xc]}}, @eret={0xe6, 0x18, 0x7}], 0x448}], 0x1, 0x0, &(0x7f0000000780)=[@featur1={0x1, 0x42}], 0x1)
r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x2b)
r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000aec000/0x400000)=nil)
r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000040)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_GET_ONE_REG(r8, 0x4010aeab, &(0x7f0000000280)=@arm64_sys={0x603000000013c006, &(0x7f0000000200)})
syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000240)="37e68986ad644f5dc57bbc1ff382863b67f3eee57a32ec911d95f88f3dd8ea716e4a29cefbd440b2ecf83f57baf33b0c97182970a47ef45c954e42f2055384921830f6e273d2eb30", 0x0, 0x2a2019ac5ed2a1ef)
r9 = eventfd2(0x229, 0x80000)
r10 = eventfd2(0x0, 0x0)
close(r10)
write$eventfd(r10, 0x0, 0x0)
ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000080)={r9, 0xe0bb, 0x3, r10})
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0)

0s ago: executing program 40 (id=547):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2e)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000100)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
r3 = openat$kvm(0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000080), 0x308000, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r6, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
r7 = syz_kvm_vgic_v3_setup(r5, 0x2, 0xe0)
ioctl$KVM_GET_DEVICE_ATTR(r7, 0x4018aee2, &(0x7f0000000100)=@attr_other={0x0, 0x1, 0x6534, 0x0})
eventfd2(0xfff, 0x800)
openat$kvm(0xffffffffffffff9c, 0x0, 0x389901, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@arm64={0xc, 0xe7, 0x8})
eventfd2(0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000001c0)=@x86={0x1, 0x8, 0xb, 0x0, 0x2, 0x6, 0x6, 0x9, 0x8, 0x8, 0x6, 0x2, 0x0, 0x200, 0x6, 0xe2, 0x1, 0xa, 0x0, '\x00', 0x10, 0x6})
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x2000001, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

[  390.757054][   T24] audit: type=1400 audit(389.970:74): avc:  denied  { read } for  pid=3210 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[  401.329270][   T24] audit: type=1400 audit(400.500:75): avc:  denied  { write } for  pid=3265 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  405.631005][   T24] audit: type=1400 audit(404.840:76): avc:  denied  { write } for  pid=3268 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  408.486295][ T3210] 8021q: adding VLAN 0 to HW filter on device bond0
[  415.670058][   T24] audit: type=1400 audit(414.880:77): avc:  denied  { write } for  pid=3272 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  419.532897][   T24] audit: type=1400 audit(418.730:78): avc:  denied  { write } for  pid=3275 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  431.583512][   T24] audit: type=1400 audit(430.740:79): avc:  denied  { write } for  pid=3280 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  435.561149][   T24] audit: type=1400 audit(434.770:80): avc:  denied  { write } for  pid=3283 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  445.716723][   T24] audit: type=1400 audit(444.930:81): avc:  denied  { write } for  pid=3288 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  449.748737][   T24] audit: type=1400 audit(448.960:82): avc:  denied  { write } for  pid=3291 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  453.140568][ T3210] eql: remember to turn off Van-Jacobson compression on your slave devices
[  465.976192][   T24] audit: type=1400 audit(465.160:83): avc:  denied  { write } for  pid=3297 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  469.773625][   T24] audit: type=1400 audit(468.950:84): avc:  denied  { write } for  pid=3300 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  479.604108][   T24] audit: type=1400 audit(478.780:85): avc:  denied  { write } for  pid=3304 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  483.554556][   T24] audit: type=1400 audit(482.760:86): avc:  denied  { write } for  pid=3307 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  488.937763][   T24] audit: type=1400 audit(488.150:87): avc:  denied  { write } for  pid=3309 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  492.911577][   T24] audit: type=1400 audit(492.120:88): avc:  denied  { write } for  pid=3312 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  501.074235][   T24] audit: type=1400 audit(500.280:89): avc:  denied  { write } for  pid=3316 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  504.904112][   T24] audit: type=1400 audit(504.080:90): avc:  denied  { write } for  pid=3319 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  512.598922][   T24] audit: type=1400 audit(511.800:91): avc:  denied  { write } for  pid=3322 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  517.652905][   T24] audit: type=1400 audit(516.850:92): avc:  denied  { write } for  pid=3325 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  529.150814][   T24] audit: type=1400 audit(528.360:93): avc:  denied  { write } for  pid=3329 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  533.128815][   T24] audit: type=1400 audit(532.340:94): avc:  denied  { write } for  pid=3332 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  556.749927][   T24] audit: type=1400 audit(555.960:95): avc:  denied  { write } for  pid=3344 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  560.540338][   T24] audit: type=1400 audit(559.750:96): avc:  denied  { write } for  pid=3347 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  568.581687][   T24] audit: type=1400 audit(567.790:97): avc:  denied  { write } for  pid=3350 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  572.603550][   T24] audit: type=1400 audit(571.790:98): avc:  denied  { write } for  pid=3353 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  589.580172][   T24] audit: type=1400 audit(588.790:99): avc:  denied  { write } for  pid=3358 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  593.428799][   T24] audit: type=1400 audit(592.630:100): avc:  denied  { write } for  pid=3361 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
Warning: Permanently added '[localhost]:5284' (ED25519) to the list of known hosts.
[  614.958779][   T24] audit: type=1400 audit(614.170:101): avc:  denied  { name_bind } for  pid=3366 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  616.964491][   T24] audit: type=1400 audit(616.160:102): avc:  denied  { execute } for  pid=3367 comm="sh" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[  616.999946][   T24] audit: type=1400 audit(616.210:103): avc:  denied  { execute_no_trans } for  pid=3367 comm="sh" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[  648.209377][   T24] audit: type=1400 audit(647.420:104): avc:  denied  { mounton } for  pid=3367 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[  648.248875][   T24] audit: type=1400 audit(647.460:105): avc:  denied  { mount } for  pid=3367 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  648.345007][ T3367] cgroup: Unknown subsys name 'net'
[  648.399022][   T24] audit: type=1400 audit(647.610:106): avc:  denied  { unmount } for  pid=3367 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  648.830230][ T3367] cgroup: Unknown subsys name 'cpuset'
[  648.958086][ T3367] cgroup: Unknown subsys name 'rlimit'
[  649.816576][   T24] audit: type=1400 audit(649.030:107): avc:  denied  { setattr } for  pid=3367 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  649.835534][   T24] audit: type=1400 audit(649.040:108): avc:  denied  { mounton } for  pid=3367 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[  649.859826][   T24] audit: type=1400 audit(649.070:109): avc:  denied  { mount } for  pid=3367 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[  650.916476][ T3371] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[  650.934953][   T24] audit: type=1400 audit(650.140:110): avc:  denied  { relabelto } for  pid=3371 comm="mkswap" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[  650.963538][   T24] audit: type=1400 audit(650.160:111): avc:  denied  { write } for  pid=3371 comm="mkswap" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
Setting up swapspace version 1, size = 127995904 bytes
[  651.150667][   T24] audit: type=1400 audit(650.360:112): avc:  denied  { read } for  pid=3367 comm="syz-executor" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[  651.168606][   T24] audit: type=1400 audit(650.380:113): avc:  denied  { open } for  pid=3367 comm="syz-executor" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[  651.217367][ T3367] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[  711.857962][   T24] audit: type=1400 audit(711.070:114): avc:  denied  { execmem } for  pid=3372 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  715.647726][   T24] audit: type=1400 audit(714.860:115): avc:  denied  { read } for  pid=3374 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  715.664974][   T24] audit: type=1400 audit(714.870:116): avc:  denied  { read } for  pid=3375 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  715.696265][   T24] audit: type=1400 audit(714.910:117): avc:  denied  { open } for  pid=3375 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  715.753702][   T24] audit: type=1400 audit(714.960:118): avc:  denied  { mounton } for  pid=3374 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  715.991096][   T24] audit: type=1400 audit(715.200:119): avc:  denied  { module_request } for  pid=3374 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  716.023385][   T24] audit: type=1400 audit(715.220:120): avc:  denied  { module_request } for  pid=3375 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  717.016588][   T24] audit: type=1400 audit(716.230:121): avc:  denied  { sys_module } for  pid=3375 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  739.595835][ T3375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  740.035781][ T3375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  740.109975][ T3374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  740.351293][ T3374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  752.543871][ T3375] hsr_slave_0: entered promiscuous mode
[  752.572987][ T3375] hsr_slave_1: entered promiscuous mode
[  753.458992][ T3374] hsr_slave_0: entered promiscuous mode
[  753.520357][ T3374] hsr_slave_1: entered promiscuous mode
[  753.568700][ T3374] debugfs: 'hsr0' already exists in 'hsr'
[  753.573770][ T3374] Cannot create hsr debugfs directory
[  761.974397][   T24] audit: type=1400 audit(761.180:122): avc:  denied  { create } for  pid=3375 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  762.053852][   T24] audit: type=1400 audit(761.220:123): avc:  denied  { write } for  pid=3375 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  762.144947][   T24] audit: type=1400 audit(761.350:124): avc:  denied  { read } for  pid=3375 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  762.387531][ T3375] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  762.774862][ T3375] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  762.896833][ T3375] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  763.235851][ T3375] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  763.330476][ T3375] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  763.658617][ T3375] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  763.720016][ T3375] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  763.935629][ T3375] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  766.916863][ T3374] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  767.226857][ T3374] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  767.315930][ T3374] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  767.624364][ T3374] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  767.680081][ T3374] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  767.877015][ T3374] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  767.961283][ T3374] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  768.227621][ T3374] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  779.340254][ T3375] 8021q: adding VLAN 0 to HW filter on device bond0
[  782.928827][ T3374] 8021q: adding VLAN 0 to HW filter on device bond0
[  834.902969][ T3375] veth0_vlan: entered promiscuous mode
[  835.370789][ T3375] veth1_vlan: entered promiscuous mode
[  837.424498][ T3375] veth0_macvtap: entered promiscuous mode
[  837.786939][ T3375] veth1_macvtap: entered promiscuous mode
[  839.819271][ T3374] veth0_vlan: entered promiscuous mode
[  840.244971][ T3477] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  840.368994][ T3477] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  840.374736][ T3477] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  840.447933][ T3477] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  840.835475][ T3374] veth1_vlan: entered promiscuous mode
[  842.847235][   T24] audit: type=1400 audit(842.030:125): avc:  denied  { mount } for  pid=3375 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  843.167990][   T24] audit: type=1400 audit(842.380:126): avc:  denied  { mounton } for  pid=3375 comm="syz-executor" path="/syzkaller.kkpzfj/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  843.297448][   T24] audit: type=1400 audit(842.510:127): avc:  denied  { mount } for  pid=3375 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  843.616099][   T24] audit: type=1400 audit(842.820:128): avc:  denied  { mounton } for  pid=3375 comm="syz-executor" path="/syzkaller.kkpzfj/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  843.757096][   T24] audit: type=1400 audit(842.940:129): avc:  denied  { mounton } for  pid=3375 comm="syz-executor" path="/syzkaller.kkpzfj/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  843.845776][ T3374] veth0_macvtap: entered promiscuous mode
[  844.114350][ T3374] veth1_macvtap: entered promiscuous mode
[  844.263550][   T24] audit: type=1400 audit(843.460:130): avc:  denied  { unmount } for  pid=3375 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  844.621487][   T24] audit: type=1400 audit(843.830:131): avc:  denied  { mounton } for  pid=3375 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1548 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[  844.781655][   T24] audit: type=1400 audit(843.980:132): avc:  denied  { mount } for  pid=3375 comm="syz-executor" name="/" dev="gadgetfs" ino=3742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  845.205002][   T24] audit: type=1400 audit(844.340:133): avc:  denied  { mount } for  pid=3375 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  845.301647][   T24] audit: type=1400 audit(844.510:134): avc:  denied  { mounton } for  pid=3375 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[  846.906491][   T21] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  846.928433][   T21] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  846.933364][   T21] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  846.934169][   T21] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  847.140110][ T3375] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  848.986862][   T24] kauditd_printk_skb: 1 callbacks suppressed
[  848.993942][   T24] audit: type=1400 audit(848.180:136): avc:  denied  { read write } for  pid=3375 comm="syz-executor" name="loop0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  849.073374][   T24] audit: type=1400 audit(848.270:137): avc:  denied  { open } for  pid=3375 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  849.093871][   T24] audit: type=1400 audit(848.300:138): avc:  denied  { ioctl } for  pid=3375 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=638 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  859.144206][   T24] audit: type=1400 audit(858.350:139): avc:  denied  { read } for  pid=3528 comm="syz.0.1" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  859.215997][   T24] audit: type=1400 audit(858.350:140): avc:  denied  { open } for  pid=3528 comm="syz.0.1" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  859.289224][   T24] audit: type=1400 audit(858.500:141): avc:  denied  { ioctl } for  pid=3528 comm="syz.0.1" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae04 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  875.309629][   T24] audit: type=1400 audit(874.450:142): avc:  denied  { append } for  pid=3539 comm="syz.1.5" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  877.446711][   T24] audit: type=1400 audit(876.590:143): avc:  denied  { ioctl } for  pid=3540 comm="syz.0.4" path="net:[4026532627]" dev="nsfs" ino=4026532627 ioctlcmd=0xb705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  877.611533][ T3541] KVM: debugfs: duplicate directory 3541-5
[  911.080600][   T24] audit: type=1400 audit(910.290:144): avc:  denied  { write } for  pid=3557 comm="syz.1.10" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  919.206575][   T24] audit: type=1400 audit(918.410:145): avc:  denied  { execute } for  pid=3561 comm="syz.0.12" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=4270 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  994.469752][   T24] audit: type=1400 audit(993.640:146): avc:  denied  { setattr } for  pid=3620 comm="syz.0.28" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1066.295324][   T24] audit: type=1400 audit(1065.500:147): avc:  denied  { write } for  pid=3666 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1076.216316][   T24] audit: type=1400 audit(1075.420:148): avc:  denied  { write } for  pid=3673 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1119.971696][   T24] audit: type=1400 audit(1119.180:149): avc:  denied  { create } for  pid=3704 comm="syz.1.55" anonclass=[kvm-gmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1220.498693][ T3772] kvm [3772]: Failed to find VMA for hva 0x21016000
[ 1354.834603][   T24] audit: type=1400 audit(1354.040:150): avc:  denied  { write } for  pid=3855 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1363.744344][   T24] audit: type=1400 audit(1362.940:151): avc:  denied  { write } for  pid=3865 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1514.630673][   T24] audit: type=1400 audit(1513.840:152): avc:  denied  { map } for  pid=3948 comm="syz.1.130" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1514.704552][   T24] audit: type=1400 audit(1513.900:153): avc:  denied  { execute } for  pid=3948 comm="syz.1.130" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1696.891577][ T4006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1697.360512][ T4006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1710.549103][ T4013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1710.806644][ T4013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1722.033583][ T4006] hsr_slave_0: entered promiscuous mode
[ 1722.067319][ T4006] hsr_slave_1: entered promiscuous mode
[ 1722.113898][ T4006] debugfs: 'hsr0' already exists in 'hsr'
[ 1722.117937][ T4006] Cannot create hsr debugfs directory
[ 1740.013974][ T4013] hsr_slave_0: entered promiscuous mode
[ 1740.096672][ T4013] hsr_slave_1: entered promiscuous mode
[ 1740.183256][ T4013] debugfs: 'hsr0' already exists in 'hsr'
[ 1740.194224][ T4013] Cannot create hsr debugfs directory
[ 1744.540934][ T4006] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1744.877767][ T4006] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1745.954978][ T4006] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1746.127800][ T4006] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1746.874831][ T4006] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1747.047649][ T4006] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1747.629517][ T4006] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1747.845654][ T4006] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1760.149379][ T4013] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1760.615315][ T4013] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1760.794544][ T4013] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1761.050438][ T4013] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1761.259197][ T4013] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1761.638558][ T4013] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1761.720592][ T4013] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1762.048929][ T4013] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1767.158719][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1768.839386][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1770.093849][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1771.905909][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1788.935932][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1789.146244][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1789.295847][   T12] bond0 (unregistering): Released all slaves
[ 1792.365014][   T12] hsr_slave_0: left promiscuous mode
[ 1792.706359][   T12] hsr_slave_1: left promiscuous mode
[ 1793.314496][   T12] veth1_macvtap: left promiscuous mode
[ 1793.324731][   T12] veth0_macvtap: left promiscuous mode
[ 1793.344260][   T12] veth1_vlan: left promiscuous mode
[ 1793.376285][   T12] veth0_vlan: left promiscuous mode
[ 1817.589188][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1818.398230][ T4006] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1819.134660][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1820.374674][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1821.506736][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1823.746188][ T4013] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1825.671225][   T24] audit: type=1400 audit(1824.810:154): avc:  denied  { write } for  pid=4108 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1834.194670][   T24] audit: type=1400 audit(1833.380:155): avc:  denied  { write } for  pid=4118 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1839.580548][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1839.684191][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1839.740027][   T12] bond0 (unregistering): Released all slaves
[ 1840.416611][ T3210] 8021q: adding VLAN 0 to HW filter on device eth1
[ 1841.205633][   T12] hsr_slave_0: left promiscuous mode
[ 1841.297272][   T12] hsr_slave_1: left promiscuous mode
[ 1841.703013][   T12] veth1_macvtap: left promiscuous mode
[ 1841.704230][   T12] veth0_macvtap: left promiscuous mode
[ 1841.724602][   T12] veth1_vlan: left promiscuous mode
[ 1841.732411][   T12] veth0_vlan: left promiscuous mode
[ 1869.608049][   T24] audit: type=1400 audit(1868.810:156): avc:  denied  { write } for  pid=4129 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1875.551154][   T24] audit: type=1400 audit(1874.720:157): avc:  denied  { write } for  pid=4134 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1890.913360][   T24] audit: type=1400 audit(1890.120:158): avc:  denied  { write } for  pid=4146 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1896.720582][   T24] audit: type=1400 audit(1895.910:159): avc:  denied  { write } for  pid=4155 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1900.648968][ T3210] 8021q: adding VLAN 0 to HW filter on device eth2
[ 1912.871499][   T24] audit: type=1400 audit(1912.080:160): avc:  denied  { write } for  pid=4171 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1920.199399][   T24] audit: type=1400 audit(1919.350:161): avc:  denied  { write } for  pid=4180 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1925.900493][ T3210] 8021q: adding VLAN 0 to HW filter on device eth3
[ 1938.895345][   T24] audit: type=1400 audit(1938.090:162): avc:  denied  { write } for  pid=4194 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1939.507230][ T4006] veth0_vlan: entered promiscuous mode
[ 1940.262886][ T4013] veth0_vlan: entered promiscuous mode
[ 1940.759295][ T4006] veth1_vlan: entered promiscuous mode
[ 1941.941504][ T4013] veth1_vlan: entered promiscuous mode
[ 1945.017700][ T4006] veth0_macvtap: entered promiscuous mode
[ 1945.719473][   T24] audit: type=1400 audit(1944.930:163): avc:  denied  { write } for  pid=4199 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1945.815504][ T4006] veth1_macvtap: entered promiscuous mode
[ 1946.477120][ T4013] veth0_macvtap: entered promiscuous mode
[ 1947.337093][ T4013] veth1_macvtap: entered promiscuous mode
[ 1950.134574][ T3457] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1950.151419][ T3457] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1950.159017][ T3457] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1950.345592][ T3457] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1950.467072][ T3210] 8021q: adding VLAN 0 to HW filter on device eth4
[ 1951.392879][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1951.397075][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1951.409509][ T3477] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1951.455523][ T3477] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1965.244906][   T24] audit: type=1400 audit(1964.400:164): avc:  denied  { write } for  pid=4205 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1975.801356][   T24] audit: type=1400 audit(1975.010:165): avc:  denied  { write } for  pid=4216 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1983.594041][ T3210] 8021q: adding VLAN 0 to HW filter on device eth5
[ 2004.878593][   T24] audit: type=1400 audit(2003.990:166): avc:  denied  { write } for  pid=4225 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2015.368119][   T24] audit: type=1400 audit(2014.580:167): avc:  denied  { write } for  pid=4236 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2020.417318][ T3210] 8021q: adding VLAN 0 to HW filter on device eth6
[ 2026.335090][   T24] audit: type=1400 audit(2025.510:168): avc:  denied  { write } for  pid=4241 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2032.583161][   T24] audit: type=1400 audit(2031.770:169): avc:  denied  { write } for  pid=4244 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2063.101515][   T24] audit: type=1400 audit(2062.290:170): avc:  denied  { write } for  pid=4261 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2073.556547][   T24] audit: type=1400 audit(2072.760:171): avc:  denied  { write } for  pid=4272 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2080.324584][ T3210] 8021q: adding VLAN 0 to HW filter on device eth7
[ 2101.760058][   T24] audit: type=1400 audit(2100.970:172): avc:  denied  { write } for  pid=4292 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2113.410797][   T24] audit: type=1400 audit(2112.620:173): avc:  denied  { write } for  pid=4302 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2122.009600][ T3210] 8021q: adding VLAN 0 to HW filter on device eth8
[ 2190.898431][   T24] audit: type=1400 audit(2190.110:174): avc:  denied  { write } for  pid=4347 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2201.289579][   T24] audit: type=1400 audit(2200.360:175): avc:  denied  { write } for  pid=4356 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2225.714461][   T24] audit: type=1400 audit(2224.910:176): avc:  denied  { write } for  pid=4370 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2237.257697][   T24] audit: type=1400 audit(2236.440:177): avc:  denied  { write } for  pid=4377 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2267.375300][   T24] audit: type=1400 audit(2266.580:178): avc:  denied  { write } for  pid=4395 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2278.955094][   T24] audit: type=1400 audit(2278.160:179): avc:  denied  { write } for  pid=4409 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2299.768963][   T24] audit: type=1400 audit(2298.980:180): avc:  denied  { write } for  pid=4418 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2305.391173][   T24] audit: type=1400 audit(2304.600:181): avc:  denied  { write } for  pid=4421 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2313.488420][   T24] audit: type=1400 audit(2312.700:182): avc:  denied  { write } for  pid=4424 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2323.581557][   T24] audit: type=1400 audit(2322.790:183): avc:  denied  { write } for  pid=4429 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2339.726875][ T3420] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2342.868966][ T3420] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2344.093374][   T24] audit: type=1400 audit(2343.290:184): avc:  denied  { write } for  pid=4439 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2345.340319][ T3420] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2347.429846][ T3420] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2357.046256][   T24] audit: type=1400 audit(2356.130:185): avc:  denied  { write } for  pid=4449 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2376.094282][ T3420] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2376.476066][ T3420] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2376.716422][ T3420] bond0 (unregistering): Released all slaves
[ 2378.954276][ T3420] hsr_slave_0: left promiscuous mode
[ 2379.116369][ T3420] hsr_slave_1: left promiscuous mode
[ 2379.965697][ T3420] veth1_macvtap: left promiscuous mode
[ 2379.971181][ T3420] veth0_macvtap: left promiscuous mode
[ 2380.015853][ T3420] veth1_vlan: left promiscuous mode
[ 2380.025036][ T3420] veth0_vlan: left promiscuous mode
[ 2387.396785][   T24] audit: type=1400 audit(2386.590:186): avc:  denied  { write } for  pid=4464 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2397.156315][   T24] audit: type=1400 audit(2396.360:187): avc:  denied  { write } for  pid=4472 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2436.257887][   T24] audit: type=1400 audit(2435.460:188): avc:  denied  { execute } for  pid=4485 comm="syz.3.198" path=2F32382F10FBFF67525673312B0104 dev="tmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[ 2440.995735][   T24] audit: type=1400 audit(2440.130:189): avc:  denied  { write } for  pid=4488 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2449.238794][   T24] audit: type=1400 audit(2448.450:190): avc:  denied  { write } for  pid=4499 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2455.940025][ T3210] 8021q: adding VLAN 0 to HW filter on device eth9
[ 2479.258168][ T4438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2479.648140][ T4438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2483.284260][   T24] audit: type=1400 audit(2482.460:191): avc:  denied  { write } for  pid=4523 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2491.491510][   T24] audit: type=1400 audit(2490.690:192): avc:  denied  { write } for  pid=4531 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2497.260611][ T3210] 8021q: adding VLAN 0 to HW filter on device eth10
[ 2515.529305][ T4438] hsr_slave_0: entered promiscuous mode
[ 2515.707580][ T4438] hsr_slave_1: entered promiscuous mode
[ 2516.775317][   T24] audit: type=1400 audit(2515.920:193): avc:  denied  { write } for  pid=4551 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2526.104098][   T24] audit: type=1400 audit(2525.190:194): avc:  denied  { write } for  pid=4556 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2534.054137][ T3210] 8021q: adding VLAN 0 to HW filter on device eth11
[ 2540.929111][ T4438] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 2541.335821][ T4438] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 2541.440124][ T4438] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 2541.805355][ T4438] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 2541.955433][ T4438] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 2542.238247][ T4438] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 2542.438008][ T4438] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 2542.730434][ T4438] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 2543.094263][   T24] audit: type=1400 audit(2542.200:195): avc:  denied  { write } for  pid=4562 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2552.351680][   T24] audit: type=1400 audit(2551.560:196): avc:  denied  { write } for  pid=4575 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2575.658250][ T4438] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2587.423822][   T24] audit: type=1400 audit(2586.600:197): avc:  denied  { write } for  pid=4594 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2598.973698][   T24] audit: type=1400 audit(2598.020:198): avc:  denied  { write } for  pid=4602 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2607.166817][ T3210] 8021q: adding VLAN 0 to HW filter on device eth12
[ 2620.453135][   T24] audit: type=1400 audit(2619.650:199): avc:  denied  { write } for  pid=4616 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2630.155567][   T24] audit: type=1400 audit(2629.340:200): avc:  denied  { write } for  pid=4627 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2698.126063][   T24] audit: type=1400 audit(2697.220:201): avc:  denied  { write } for  pid=4672 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2710.044909][   T24] audit: type=1400 audit(2709.160:202): avc:  denied  { write } for  pid=4686 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2728.238014][   T24] audit: type=1400 audit(2727.450:203): avc:  denied  { write } for  pid=4694 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2735.437735][ T4438] veth0_vlan: entered promiscuous mode
[ 2736.730660][ T4438] veth1_vlan: entered promiscuous mode
[ 2738.759727][   T24] audit: type=1400 audit(2737.960:204): avc:  denied  { write } for  pid=4706 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2740.328219][ T4438] veth0_macvtap: entered promiscuous mode
[ 2741.075106][ T4438] veth1_macvtap: entered promiscuous mode
[ 2745.130390][ T4688] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2745.136476][ T4688] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2745.137419][ T4688] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2745.138205][ T4688] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2765.887512][   T24] audit: type=1400 audit(2765.070:205): avc:  denied  { write } for  pid=4718 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2778.635265][   T24] audit: type=1400 audit(2777.780:206): avc:  denied  { write } for  pid=4725 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2799.699555][   T24] audit: type=1400 audit(2798.910:207): avc:  denied  { write } for  pid=4735 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2810.693576][   T24] audit: type=1400 audit(2809.900:208): avc:  denied  { write } for  pid=4744 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2841.150245][   T24] audit: type=1400 audit(2840.350:209): avc:  denied  { write } for  pid=4757 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2853.001027][   T24] audit: type=1400 audit(2852.110:210): avc:  denied  { write } for  pid=4765 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2863.091350][   T24] audit: type=1400 audit(2862.300:211): avc:  denied  { execute } for  pid=4768 comm="syz.4.230" path="/sys/kernel/debug/kcov" dev="debugfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=file permissive=1
[ 2884.174526][ T4781] FAULT_INJECTION: forcing a failure.
[ 2884.174526][ T4781] name fail_usercopy, interval 1, probability 0, space 0, times 1
[ 2884.258004][ T4781] CPU: 0 UID: 0 PID: 4781 Comm: syz.4.234 Not tainted syzkaller #0 PREEMPT 
[ 2884.258693][ T4781] Hardware name: linux,dummy-virt (DT)
[ 2884.259157][ T4781] Call trace:
[ 2884.259549][ T4781]  show_stack+0x2c/0x3c (C)
[ 2884.261565][ T4781]  __dump_stack+0x30/0x40
[ 2884.261972][ T4781]  dump_stack_lvl+0xd8/0x12c
[ 2884.262291][ T4781]  dump_stack+0x1c/0x28
[ 2884.262638][ T4781]  should_fail_ex+0x56c/0x6d8
[ 2884.262920][ T4781]  should_fail+0x14/0x24
[ 2884.263177][ T4781]  should_fail_usercopy+0x20/0x30
[ 2884.263468][ T4781]  simple_read_from_buffer+0xd0/0x294
[ 2884.263768][ T4781]  proc_fail_nth_read+0x184/0x214
[ 2884.264037][ T4781]  vfs_read+0x220/0x9d8
[ 2884.264327][ T4781]  ksys_read+0x108/0x1fc
[ 2884.264650][ T4781]  __arm64_sys_read+0x98/0xcc
[ 2884.264953][ T4781]  invoke_syscall+0x94/0x1ec
[ 2884.265233][ T4781]  el0_svc_common+0x120/0x2f4
[ 2884.265537][ T4781]  do_el0_svc+0x58/0x74
[ 2884.265830][ T4781]  el0_svc+0x64/0x240
[ 2884.266077][ T4781]  el0t_64_sync_handler+0x84/0x12c
[ 2884.266326][ T4781]  el0t_64_sync+0x198/0x19c
[ 2974.518408][ T4825] kvm [4825]: Failed to find VMA for hva 0x20c01000
[ 3116.235152][   T24] audit: type=1400 audit(3115.440:212): avc:  denied  { write } for  pid=4898 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 3129.317152][   T24] audit: type=1400 audit(3128.510:213): avc:  denied  { write } for  pid=4907 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 3543.085641][   T24] audit: type=1400 audit(3542.270:214): avc:  denied  { write } for  pid=5112 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 3555.813897][   T24] audit: type=1400 audit(3555.010:215): avc:  denied  { write } for  pid=5123 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 3809.275929][   T24] audit: type=1400 audit(3808.490:216): avc:  denied  { write } for  pid=5256 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 3820.255610][   T24] audit: type=1400 audit(3819.450:217): avc:  denied  { write } for  pid=5263 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4235.929305][   T24] audit: type=1400 audit(4235.140:218): avc:  denied  { write } for  pid=5451 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4247.398655][   T24] audit: type=1400 audit(4246.550:219): avc:  denied  { write } for  pid=5461 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4456.791438][   T24] audit: type=1400 audit(4455.910:220): avc:  denied  { write } for  pid=5556 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4469.203816][   T24] audit: type=1400 audit(4468.380:221): avc:  denied  { write } for  pid=5565 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4656.223446][   T24] audit: type=1400 audit(4655.320:222): avc:  denied  { write } for  pid=5665 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4667.083305][   T24] audit: type=1400 audit(4666.290:223): avc:  denied  { write } for  pid=5673 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4911.473313][   T24] audit: type=1400 audit(4910.680:224): avc:  denied  { write } for  pid=5781 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4924.097057][   T24] audit: type=1400 audit(4923.290:225): avc:  denied  { write } for  pid=5790 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5068.691557][ T5219] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5070.156853][ T5219] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5071.495444][ T5219] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5072.668985][ T5804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 5073.154678][ T5219] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5073.789025][ T5804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 5090.808964][ T5219] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 5090.953968][ T5219] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 5091.015361][ T5219] bond0 (unregistering): Released all slaves
[ 5093.656085][ T5219] hsr_slave_0: left promiscuous mode
[ 5093.846372][ T5219] hsr_slave_1: left promiscuous mode
[ 5094.528919][ T5219] veth1_macvtap: left promiscuous mode
[ 5094.581607][ T5219] veth0_macvtap: left promiscuous mode
[ 5094.604340][ T5219] veth1_vlan: left promiscuous mode
[ 5094.608906][ T5219] veth0_vlan: left promiscuous mode
[ 5120.296427][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 5120.735772][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 5125.494608][ T5219] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5127.224696][ T5219] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5128.678776][ T5219] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5130.278713][ T5219] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5138.592936][   T24] audit: type=1400 audit(5137.800:226): avc:  denied  { write } for  pid=5867 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5145.104371][   T24] audit: type=1400 audit(5144.290:227): avc:  denied  { write } for  pid=5876 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5147.180752][ T5219] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 5147.355564][ T5219] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 5147.554630][ T5219] bond0 (unregistering): Released all slaves
[ 5149.665009][ T5219] hsr_slave_0: left promiscuous mode
[ 5149.743844][ T5219] hsr_slave_1: left promiscuous mode
[ 5150.158657][ T5219] veth1_macvtap: left promiscuous mode
[ 5150.164363][ T5219] veth0_macvtap: left promiscuous mode
[ 5150.174172][ T5219] veth1_vlan: left promiscuous mode
[ 5150.181172][ T5219] veth0_vlan: left promiscuous mode
[ 5166.929671][ T3210] 8021q: adding VLAN 0 to HW filter on device eth13
[ 5169.686020][ T5804] hsr_slave_0: entered promiscuous mode
[ 5169.730117][ T5804] hsr_slave_1: entered promiscuous mode
[ 5185.077219][   T24] audit: type=1400 audit(5184.290:228): avc:  denied  { write } for  pid=5885 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5187.050246][ T5810] hsr_slave_0: entered promiscuous mode
[ 5187.154797][ T5810] hsr_slave_1: entered promiscuous mode
[ 5187.189005][ T5810] debugfs: 'hsr0' already exists in 'hsr'
[ 5187.210433][ T5810] Cannot create hsr debugfs directory
[ 5190.629162][ T5804] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 5191.001190][   T24] audit: type=1400 audit(5190.110:229): avc:  denied  { write } for  pid=5889 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5191.068440][ T5804] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 5192.119413][ T5804] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 5192.320543][ T5804] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 5192.906739][ T5804] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 5193.136317][ T5804] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 5193.596504][ T5804] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 5193.798998][ T5804] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 5195.251384][ T3210] 8021q: adding VLAN 0 to HW filter on device eth14
[ 5204.729761][ T5810] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 5205.100107][ T5810] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 5205.220086][ T5810] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 5205.467826][ T5810] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 5205.580588][ T5810] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 5205.856308][ T5810] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 5205.993990][ T5810] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 5206.299754][ T5810] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 5214.345888][   T24] audit: type=1400 audit(5213.540:230): avc:  denied  { write } for  pid=5905 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5223.580717][   T24] audit: type=1400 audit(5222.790:231): avc:  denied  { write } for  pid=5921 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5224.667138][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0
[ 5231.077890][ T3210] 8021q: adding VLAN 0 to HW filter on device eth15
[ 5238.800325][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0
[ 5254.365622][   T24] audit: type=1400 audit(5253.570:232): avc:  denied  { write } for  pid=5936 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5263.974168][   T24] audit: type=1400 audit(5263.170:233): avc:  denied  { write } for  pid=5944 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5271.500382][ T3210] 8021q: adding VLAN 0 to HW filter on device eth16
[ 5292.784955][   T24] audit: type=1400 audit(5291.990:234): avc:  denied  { write } for  pid=5959 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5303.004244][   T24] audit: type=1400 audit(5302.190:235): avc:  denied  { write } for  pid=5968 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5310.387103][ T3210] 8021q: adding VLAN 0 to HW filter on device eth17
[ 5329.635826][   T24] audit: type=1400 audit(5328.840:236): avc:  denied  { write } for  pid=5984 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5338.313691][   T24] audit: type=1400 audit(5337.450:237): avc:  denied  { write } for  pid=5995 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5344.937696][ T3210] 8021q: adding VLAN 0 to HW filter on device eth18
[ 5357.443109][   T24] audit: type=1400 audit(5356.540:238): avc:  denied  { write } for  pid=6004 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5369.087848][   T24] audit: type=1400 audit(5368.290:239): avc:  denied  { write } for  pid=6013 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5375.647044][ T5804] veth0_vlan: entered promiscuous mode
[ 5376.958323][ T5804] veth1_vlan: entered promiscuous mode
[ 5381.016817][ T5804] veth0_macvtap: entered promiscuous mode
[ 5381.690702][ T5804] veth1_macvtap: entered promiscuous mode
[ 5385.593746][ T4688] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 5385.617647][ T5929] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 5385.634651][ T5384] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 5385.654221][ T5384] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 5392.055009][ T5810] veth0_vlan: entered promiscuous mode
[ 5393.814789][ T5810] veth1_vlan: entered promiscuous mode
[ 5397.569795][ T5810] veth0_macvtap: entered promiscuous mode
[ 5398.526524][ T5810] veth1_macvtap: entered promiscuous mode
[ 5401.243962][   T24] audit: type=1400 audit(5400.400:240): avc:  denied  { write } for  pid=6025 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5403.589551][ T5812] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 5403.590725][ T5812] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 5403.633549][ T5812] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 5403.675195][ T5812] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 5416.996298][   T24] audit: type=1400 audit(5416.180:241): avc:  denied  { write } for  pid=6033 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5426.931000][ T3210] 8021q: adding VLAN 0 to HW filter on device eth19
[ 5459.385617][   T24] audit: type=1400 audit(5458.580:242): avc:  denied  { write } for  pid=6047 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5474.748715][   T24] audit: type=1400 audit(5473.950:243): avc:  denied  { write } for  pid=6058 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5484.435471][ T3210] 8021q: adding VLAN 0 to HW filter on device eth20
[ 5566.304874][   T24] audit: type=1400 audit(5565.500:244): avc:  denied  { write } for  pid=6101 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5580.195902][   T24] audit: type=1400 audit(5579.360:245): avc:  denied  { write } for  pid=6113 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5618.819914][   T24] audit: type=1400 audit(5618.020:246): avc:  denied  { write } for  pid=6129 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5633.238618][   T24] audit: type=1400 audit(5632.430:247): avc:  denied  { write } for  pid=6143 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5657.358886][   T24] audit: type=1400 audit(5656.570:248): avc:  denied  { write } for  pid=6148 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5668.643488][   T24] audit: type=1400 audit(5667.850:249): avc:  denied  { write } for  pid=6152 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5686.553286][   T24] audit: type=1400 audit(5685.760:250): avc:  denied  { write } for  pid=6156 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5697.809973][   T24] audit: type=1400 audit(5697.000:251): avc:  denied  { write } for  pid=6162 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5729.133898][   T24] audit: type=1400 audit(5728.180:252): avc:  denied  { write } for  pid=6178 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5742.471241][   T24] audit: type=1400 audit(5741.670:253): avc:  denied  { write } for  pid=6186 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5748.009108][ T5384] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5750.908740][ T5384] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5752.520942][ T5384] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5755.027546][ T5384] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5765.174891][   T24] audit: type=1400 audit(5764.370:254): avc:  denied  { write } for  pid=6191 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5779.909694][   T24] audit: type=1400 audit(5779.110:255): avc:  denied  { write } for  pid=6204 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5791.388921][ T5384] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 5791.749184][ T5384] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 5792.046240][ T5384] bond0 (unregistering): Released all slaves
[ 5794.764417][ T5384] hsr_slave_0: left promiscuous mode
[ 5794.934576][ T5384] hsr_slave_1: left promiscuous mode
[ 5795.633309][ T5384] veth1_macvtap: left promiscuous mode
[ 5795.677099][ T5384] veth0_macvtap: left promiscuous mode
[ 5795.696975][ T5384] veth1_vlan: left promiscuous mode
[ 5795.727415][ T5384] veth0_vlan: left promiscuous mode
[ 5824.098193][ T5929] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5828.990375][ T5929] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5833.616572][ T5929] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5840.038755][   T24] audit: type=1400 audit(5839.240:256): avc:  denied  { write } for  pid=6218 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5840.345778][ T5929] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5852.745895][   T24] audit: type=1400 audit(5851.930:257): avc:  denied  { write } for  pid=6228 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5864.328657][ T5929] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 5864.486754][ T5929] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 5864.596772][ T5929] bond0 (unregistering): Released all slaves
[ 5865.360310][ T3210] 8021q: adding VLAN 0 to HW filter on device eth21
[ 5868.425825][ T5929] hsr_slave_0: left promiscuous mode
[ 5868.771576][ T5929] hsr_slave_1: left promiscuous mode
[ 5869.594186][ T5929] veth1_macvtap: left promiscuous mode
[ 5869.603908][ T5929] veth0_macvtap: left promiscuous mode
[ 5869.614527][ T5929] veth1_vlan: left promiscuous mode
[ 5869.651076][ T5929] veth0_vlan: left promiscuous mode
[ 5892.709710][ T6158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 5894.605528][ T6158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 5899.200125][ T6161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 5899.767934][ T6161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 5901.736035][   T24] audit: type=1400 audit(5900.880:258): avc:  denied  { write } for  pid=6241 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5911.295878][   T24] audit: type=1400 audit(5910.450:259): avc:  denied  { write } for  pid=6249 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5930.819552][ T6158] hsr_slave_0: entered promiscuous mode
[ 5930.926517][ T6158] hsr_slave_1: entered promiscuous mode
[ 5934.746921][   T24] audit: type=1400 audit(5933.960:260): avc:  denied  { write } for  pid=6265 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5935.831001][ T6161] hsr_slave_0: entered promiscuous mode
[ 5935.897885][ T6161] hsr_slave_1: entered promiscuous mode
[ 5935.960504][ T6161] debugfs: 'hsr0' already exists in 'hsr'
[ 5936.030574][ T6161] Cannot create hsr debugfs directory
[ 5941.596584][   T24] audit: type=1400 audit(5940.810:261): avc:  denied  { write } for  pid=6270 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5946.548100][ T3210] 8021q: adding VLAN 0 to HW filter on device eth22
[ 5958.493301][ T6158] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 5959.210308][ T6158] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 5959.455336][ T6158] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 5960.170323][ T6158] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 5960.528823][ T6158] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 5961.210501][ T6158] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 5962.595893][ T6158] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 5963.360623][ T6158] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 5969.356409][ T6161] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 5969.907691][ T6161] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 5970.060922][ T6161] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 5970.657110][ T6161] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 5970.988834][ T6161] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 5971.386665][ T6161] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 5971.986337][ T6161] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 5972.476368][ T6161] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 5973.788630][   T24] audit: type=1400 audit(5973.000:262): avc:  denied  { write } for  pid=6277 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5984.256753][   T24] audit: type=1400 audit(5983.470:263): avc:  denied  { write } for  pid=6297 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5991.034462][ T3210] 8021q: adding VLAN 0 to HW filter on device eth23
[ 6008.509338][ T6158] 8021q: adding VLAN 0 to HW filter on device bond0
[ 6012.617568][ T6161] 8021q: adding VLAN 0 to HW filter on device bond0
[ 6017.907038][   T24] audit: type=1400 audit(6017.110:264): avc:  denied  { write } for  pid=6309 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6030.034261][   T24] audit: type=1400 audit(6029.120:265): avc:  denied  { write } for  pid=6318 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6038.258682][ T3210] 8021q: adding VLAN 0 to HW filter on device eth24
[ 6062.935388][   T24] audit: type=1400 audit(6062.120:266): avc:  denied  { write } for  pid=6329 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6075.865116][   T24] audit: type=1400 audit(6074.900:267): avc:  denied  { write } for  pid=6339 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6084.439071][ T3210] 8021q: adding VLAN 0 to HW filter on device eth25
[ 6101.176280][   T24] audit: type=1400 audit(6100.360:268): avc:  denied  { write } for  pid=6348 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6112.574273][   T24] audit: type=1400 audit(6111.760:269): avc:  denied  { write } for  pid=6359 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6145.313583][   T24] audit: type=1400 audit(6144.490:270): avc:  denied  { write } for  pid=6374 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6157.507935][   T24] audit: type=1400 audit(6156.700:271): avc:  denied  { write } for  pid=6385 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6166.685965][ T3210] 8021q: adding VLAN 0 to HW filter on device eth26
[ 6192.087791][ T6158] veth0_vlan: entered promiscuous mode
[ 6194.116836][   T24] audit: type=1400 audit(6193.310:272): avc:  denied  { write } for  pid=6401 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6195.178052][ T6158] veth1_vlan: entered promiscuous mode
[ 6196.505791][ T6161] veth0_vlan: entered promiscuous mode
[ 6199.604027][ T6161] veth1_vlan: entered promiscuous mode
[ 6203.711135][ T6158] veth0_macvtap: entered promiscuous mode
[ 6205.138349][ T6158] veth1_macvtap: entered promiscuous mode
[ 6207.395535][   T24] audit: type=1400 audit(6206.470:273): avc:  denied  { write } for  pid=6406 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6208.790956][ T6161] veth0_macvtap: entered promiscuous mode
[ 6210.920912][ T6161] veth1_macvtap: entered promiscuous mode
[ 6214.117618][ T5925] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 6214.161077][ T5925] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 6214.675377][ T6003] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 6214.743877][ T6168] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 6216.790689][ T3210] 8021q: adding VLAN 0 to HW filter on device eth27
[ 6219.362878][ T6003] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 6219.743559][ T6003] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 6219.969115][ T5384] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 6219.988911][ T5929] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 6250.061677][   T24] audit: type=1400 audit(6249.230:274): avc:  denied  { write } for  pid=6411 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6268.147571][   T24] audit: type=1400 audit(6267.220:275): avc:  denied  { write } for  pid=6425 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6279.410273][ T3210] 8021q: adding VLAN 0 to HW filter on device eth28
[ 6341.304616][   T24] audit: type=1400 audit(6340.360:276): avc:  denied  { write } for  pid=6456 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6358.352894][   T24] audit: type=1400 audit(6357.420:277): avc:  denied  { write } for  pid=6464 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6387.208809][   T24] audit: type=1400 audit(6386.400:278): avc:  denied  { write } for  pid=6471 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6400.715211][   T24] audit: type=1400 audit(6399.910:279): avc:  denied  { write } for  pid=6475 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6506.155233][   T24] audit: type=1400 audit(6505.350:280): avc:  denied  { write } for  pid=6513 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6521.293910][   T24] audit: type=1400 audit(6520.460:281): avc:  denied  { write } for  pid=6525 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6549.930507][ T6476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 6550.701205][ T6476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 6550.710871][   T24] audit: type=1400 audit(6549.920:282): avc:  denied  { write } for  pid=6533 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6566.496457][   T24] audit: type=1400 audit(6565.680:283): avc:  denied  { write } for  pid=6544 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6574.551580][ T6485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 6575.317336][ T6485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 6603.814939][   T24] audit: type=1400 audit(6602.940:284): avc:  denied  { write } for  pid=6555 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6615.669129][ T6476] hsr_slave_0: entered promiscuous mode
[ 6615.949206][ T6476] hsr_slave_1: entered promiscuous mode
[ 6616.087378][ T6476] debugfs: 'hsr0' already exists in 'hsr'
[ 6616.108417][ T6476] Cannot create hsr debugfs directory
[ 6618.737357][   T24] audit: type=1400 audit(6617.950:285): avc:  denied  { write } for  pid=6564 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6644.056999][   T24] audit: type=1400 audit(6643.220:286): avc:  denied  { write } for  pid=6570 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6649.620554][ T6485] hsr_slave_0: entered promiscuous mode
[ 6650.179319][ T6485] hsr_slave_1: entered promiscuous mode
[ 6650.388223][ T6485] debugfs: 'hsr0' already exists in 'hsr'
[ 6650.434354][ T6485] Cannot create hsr debugfs directory
[ 6658.563346][   T24] audit: type=1400 audit(6657.740:287): avc:  denied  { write } for  pid=6574 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6665.234643][ T6476] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 6665.936139][ T6476] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 6667.664420][ T6476] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 6668.157243][ T6476] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 6668.280699][ T6476] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 6668.986718][ T6476] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 6670.509553][ T6476] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 6671.076592][ T6476] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 6692.418756][   T24] audit: type=1400 audit(6691.600:288): avc:  denied  { write } for  pid=6582 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6711.387283][   T24] audit: type=1400 audit(6710.450:289): avc:  denied  { write } for  pid=6594 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6717.023842][ T6485] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 6717.729692][ T6485] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 6717.881318][ T6485] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 6718.721612][ T6485] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 6719.045336][ T6485] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 6719.701622][ T6485] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 6720.224526][ T6485] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 6721.069705][ T6485] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 6745.640677][ T6476] 8021q: adding VLAN 0 to HW filter on device bond0
[ 6753.869903][   T24] audit: type=1400 audit(6752.910:290): avc:  denied  { write } for  pid=6610 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6770.925902][   T24] audit: type=1400 audit(6770.000:291): avc:  denied  { write } for  pid=6620 comm="rm" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6779.046052][ T6485] 8021q: adding VLAN 0 to HW filter on device bond0
[ 6800.375153][   T24] audit: type=1400 audit(6799.480:292): avc:  denied  { write } for  pid=6627 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=68 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6812.185092][   T26] INFO: task syz.7.547:6466 blocked for more than 430 seconds.
[ 6812.215276][   T26]       Not tainted syzkaller #0
[ 6812.273647][   T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 6812.274526][   T26] task:syz.7.547       state:D stack:0     pid:6466  tgid:6466  ppid:6158   task_flags:0x400040 flags:0x00000011
[ 6812.275778][   T26] Call trace:
[ 6812.276165][   T26]  __switch_to+0x5e0/0xb70 (T)
[ 6812.276846][   T26]  __schedule+0x1e0c/0x38cc
[ 6812.277384][   T26]  schedule+0x1b4/0x274
[ 6812.277922][   T26]  schedule_timeout+0x68/0x1e4
[ 6812.278909][   T26]  wait_for_completion+0x1b8/0x414
[ 6812.279344][   T26]  __synchronize_srcu+0x1c8/0x208
[ 6812.279868][   T26]  synchronize_srcu+0x668/0x8dc
[ 6812.280319][   T26]  mmu_notifier_unregister+0x33c/0x444
[ 6812.280840][   T26]  kvm_put_kvm+0x69c/0xbbc
[ 6812.281323][   T26]  kvm_vm_release+0x58/0x78
[ 6812.446275][   T26]  __fput+0x4ac/0x978
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 6812.492967][   T26]  ____fput+0x20/0x30
[ 6812.493861][   T26]  task_work_run+0x1b8/0x250
[ 6812.494489][   T26]  exit_to_user_mode_loop+0x110/0x188
[ 6812.495543][   T26]  el0_svc+0x18c/0x240
[ 6812.496066][   T26]  el0t_64_sync_handler+0x84/0x12c
[ 6812.496560][   T26]  el0t_64_sync+0x198/0x19c
[ 6812.498111][   T26] 
[ 6812.498111][   T26] Showing all locks held in the system:
[ 6812.498630][   T26] 1 lock held by khungtaskd/26:
[ 6812.499017][   T26]  #0: ffff800087e43318 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x4c/0x188
[ 6812.501644][   T26] 2 locks held by getty/3238:
[ 6812.676738][   T26]  #0: 0ef00000126d20a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c
[ 6812.679192][   T26]  #1: 96ff80008cb8b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x314/0x11f8
[ 6812.680976][   T26] 1 lock held by sshd-session/3366:
[ 6812.681299][   T26] 2 locks held by syz-executor/3367:
[ 6812.681637][   T26] 3 locks held by kworker/u4:7/3477:
[ 6812.813322][   T26] 3 locks held by kworker/u4:11/4688:
[ 6812.813819][   T26] 3 locks held by kworker/u4:3/5219:
[ 6812.814130][   T26] 3 locks held by kworker/u4:0/5384:
[ 6812.814441][   T26] 2 locks held by kworker/0:2/5584:
[ 6812.814761][   T26] 2 locks held by kworker/u4:8/5812:
[ 6812.815042][   T26]  #0: f7f000000d036140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x958/0x154c
[ 6812.816920][   T26]  #1: ffff8000a30d7ce8 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x978/0x154c
[ 6812.818574][   T26] 3 locks held by kworker/u4:12/5929:
[ 6812.818888][   T26] 3 locks held by kworker/u4:13/6003:
[ 6812.819198][   T26] 3 locks held by kworker/u4:2/6168:
[ 6812.819519][   T26] 2 locks held by kworker/u4:4/6174:
[ 6812.819837][   T26]  #0: f7f000000d036140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x958/0x154c
[ 6812.821480][   T26]  #1: ffff8000a9757ce8 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x978/0x154c
[ 6812.964884][   T26] 2 locks held by syz.8.545/6458:
[ 6812.965276][   T26] 4 locks held by modprobe/6634:
[ 6812.965609][   T26] 1 lock held by modprobe/6635:
[ 6812.965914][   T26] 4 locks held by rm/6636:
[ 6812.966359][   T26] 
[ 6812.966671][   T26] =============================================
[ 6812.966671][   T26] 
[ 6812.967637][   T26] Kernel panic - not syncing: hung_task: blocked tasks
[ 6812.976026][   T26] CPU: 0 UID: 0 PID: 26 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT 
[ 6812.977327][   T26] Hardware name: linux,dummy-virt (DT)
[ 6812.978174][   T26] Call trace:
[ 6812.978810][   T26]  show_stack+0x2c/0x3c (C)
[ 6812.979809][   T26]  __dump_stack+0x30/0x40
[ 6812.980795][   T26]  dump_stack_lvl+0x30/0x12c
[ 6812.981744][   T26]  dump_stack+0x1c/0x28
[ 6812.982693][   T26]  vpanic+0x4cc/0x844
[ 6812.983508][   T26]  vpanic+0x0/0x844
[ 6812.984321][   T26]  hung_task_panic+0x0/0x2c
[ 6812.985204][   T26]  kthread+0x4cc/0x514
[ 6812.986096][   T26]  ret_from_fork+0x10/0x20
[ 6812.987858][   T26] Kernel Offset: disabled
[ 6812.988616][   T26] CPU features: 0x00000000,0034600b,f7c647a1,057ffe1f
[ 6812.989717][   T26] Memory Limit: none
[ 6812.992013][   T26] Rebooting in 86400 seconds..