last executing test programs:

1h28m17.868146216s ago: executing program 0 (id=184):
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x101900, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x26)
syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000b7b000/0x400000)=nil) (async)
openat$kvm(0x0, &(0x7f0000000040), 0x498800, 0x0) (async)
r2 = openat$kvm(0x0, &(0x7f0000000300), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000aba000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000340)={0x0, &(0x7f0000000380)=[@its_setup={0x82, 0x28, {0x1, 0x3, 0x121}}], 0x28}, 0x0, 0x0) (async)
r6 = syz_kvm_add_vcpu$arm64(r4, &(0x7f00000003c0)={0x0, &(0x7f0000000400)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x8000000000000f6}}], 0x28}, 0x0, 0x0) (async)
syz_kvm_vgic_v3_setup(r3, 0xff7ffffffffffffd, 0x360)
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000440)={0x8, <r7=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000480)=@attr_riscv64=@attr_aplic={0x0, 0x1, @valid=0x3cd8, &(0x7f00000000c0)=0x8}) (async)
ioctl$KVM_RUN(r6, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async)
r8 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1)
ioctl$KVM_ARM_VCPU_INIT(r10, 0x4020aeae, &(0x7f0000000080)={0x5, 0x1}) (async)
openat$kvm(0xffffffffffffff9c, 0x0, 0x161642, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, 0xffffffffffffffff, 0x0) (async)
r11 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async)
r12 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
r14 = syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000c00000/0x400000)=nil)
r15 = syz_kvm_add_vcpu$arm64(r14, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0xfffffffffffffffe}}, @msr={0x14, 0x20, {0x603000000013dce1, 0x7}}], 0x40}, &(0x7f0000000200)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r15, 0x4018aee1, &(0x7f0000000240)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000280)={0x2, 0x5, 0x1}})
ioctl$KVM_ARM_VCPU_INIT(0xffffffffffffffff, 0x4020aeae, 0x0) (async)
r16 = syz_kvm_add_vcpu$arm64(r11, &(0x7f00000002c0)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r16, 0x4018aee1, &(0x7f0000000500)=@attr_set_pmu={0x0, 0x0, 0x3, &(0x7f0000000540)=0x8})

1h28m17.269926673s ago: executing program 1 (id=185):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, 0xfffffffffffffffe)
syz_kvm_vgic_v3_setup(r1, 0x4, 0x220)
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x5e3280, 0x0)
r5 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r6 = openat$kvm(0x0, &(0x7f00000001c0), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil)
r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000200)={0x0, &(0x7f0000000280)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x9}}], 0x20}, &(0x7f00000002c0)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r9, 0x4018aee1, &(0x7f0000000300)=@attr_pmu_init)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
r10 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000340)={0x0, &(0x7f0000000380)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x9}}, @msr={0x14, 0x20, {0x603000000013df61, 0x7}}], 0x40}, &(0x7f00000003c0)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r10, 0x4018aee1, &(0x7f0000000400)=@attr_pmu_init)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0x894c, 0x0)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
r11 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r12, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04)
r13 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1800, 0x0)
r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x2b)
r15 = syz_kvm_setup_syzos_vm$arm64(r14, &(0x7f0000aec000/0x400000)=nil)
r16 = syz_kvm_add_vcpu$arm64(r15, &(0x7f0000000100)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r16, 0x4040aea0, &(0x7f0000000140)=@arm64={0x7, 0x0, 0xfc, '\x00', 0x4})
ioctl$KVM_RUN(r16, 0xae80, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r16, 0x4040aea0, &(0x7f0000000180)=@arm64={0xd, 0x8, 0x7, '\x00', 0x2d})

1h28m4.888709755s ago: executing program 0 (id=186):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x28)
write$eventfd(0xffffffffffffffff, &(0x7f00000001c0)=0x3, 0xfdef)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=[@featur2={0x1, 0x2}], 0x1)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000c00)={0x0, &(0x7f00000005c0)=[@memwrite={0x6e, 0x30, @generic={0x10000, 0xfa6, 0x8000, 0xa}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x100, 0x9, 0x8}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xffd0, 0x7, 0x4}}, @code={0xa, 0xe4, {"000008d500f090d20000b0f2e10180d2620180d2830180d2640180d2020000d4c04983d20020b8f2a10080d2820080d2030180d2a40080d2020000d4a0568cd200e0b8f2c10180d2220180d2830080d2640080d2020000d4e07d9dd200c0b8f2c10180d2c20180d2830180d2c40080d2020000d420a382d20020b8f2010080d2420180d2a30080d2640180d2020000d4000008d5007008d5e0f69bd200c0b0f2610080d2020180d2630080d2640080d2020000d480e492d20060b8f2e10180d2220080d2030180d2640180d2020000d4"}}, @irq_setup={0x46, 0x18, {0x1, 0x3b3}}, @its_setup={0x82, 0x28, {0x0, 0x2, 0x3cf}}, @mrs={0xbe, 0x18, {0x603000000013dea0}}, @smc={0x1e, 0x40, {0x80007fff, [0x3, 0x5, 0x4, 0xffff, 0x81]}}, @code={0xa, 0x54, {"0000a09b208b85d200c0b8f2410180d2220080d2e30080d2440080d2020000d4007008d50070000f007008d5007008d5000000ac0098210e0028216e008008d5"}}, @mrs={0xbe, 0x18, {0x6030000000138010}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x590, 0x40, 0x105bbc7, 0x3}}, @hvc={0x32, 0x40, {0x84000050, [0x3, 0xfffffffffffffffe, 0x4, 0xff, 0x6]}}, @smc={0x1e, 0x40, {0x1880ffff, [0x1000, 0x5, 0x78a, 0x80000000, 0x4]}}, @mrs={0xbe, 0x18, {0x603000000013df6b}}, @code={0xa, 0x9c, {"000008d50060400ce0979fd200e0b8f2610080d2c20080d2030080d2640180d2020000d4809c81d200a0b8f2010180d2e20180d2430080d2e40080d2020000d460f88cd200c0b8f2010180d2020080d2e30180d2640180d2020000d40024200e0040bf0dc0f29cd200e0b8f2a10080d2220080d2230180d2640080d2020000d4007008d50000202b"}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x1, 0x3, 0x0, 0x48, 0xa0, 0x3}}, @mrs={0xbe, 0x18, {0x603000000013e600}}, @svc={0x122, 0x40, {0xffff, [0xb08a, 0xc, 0xa17, 0x8, 0xff]}}, @code={0xa, 0x54, {"007008d5000008d5008008d5008008d5000028d5000040790098202e008008d5c0d981d20000b8f2610080d2420080d2630080d2240180d2020000d40090807f"}}, @uexit={0x0, 0x18, 0x6}, @msr={0x14, 0x20, {0x603000000013c019, 0x7}}, @memwrite={0x6e, 0x30, @generic={0x70000, 0x923, 0x7, 0x8}}, @irq_setup={0x46, 0x18, {0x4, 0x3a3}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x0, 0x0, 0x3, 0x8, 0x6, 0x3}}, @smc={0x1e, 0x40, {0x1000000, [0x1, 0xeffe, 0x9, 0x42, 0x2]}}, @uexit={0x0, 0x18, 0x7fff}, @svc={0x122, 0x40, {0xc4000004, [0x0, 0xfffffffffffff0a8, 0x4a, 0x7, 0x9]}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80e0000, 0x14, 0x8, 0x2}}], 0x620}, &(0x7f0000000c40)=[@featur1={0x1, 0xa0}], 0x1)
ioctl$KVM_ARM_SET_DEVICE_ADDR(r6, 0x4010aeab, &(0x7f0000000c80)={0x0, 0xdddd1000})
r7 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
r9 = syz_kvm_vgic_v3_setup(r5, 0x1, 0x40)
ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000280)={0x10001, 0x0, &(0x7f0000e74000/0x4000)=nil})
ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f0000000100)=@attr_other={0x0, 0x1, 0x304, &(0x7f0000000140)=0x83})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r8, 0x4018aee3, &(0x7f0000000180)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000240)={0x87a, 0x1, 0x1}})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000000)=@arm64={0x8, 0x9, 0x9, '\x00', 0x8})
ioctl$KVM_ARM_VCPU_INIT(0xffffffffffffffff, 0x4020aeae, &(0x7f0000000000)={0x5, 0x18})
close(0x5)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0)
ioctl$KVM_S390_VCPU_FAULT(r3, 0x4008ae52, &(0x7f0000000040))

1h28m2.910174234s ago: executing program 1 (id=187):
syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f00000000c0)="f610f5b33c962b62c00d0914345792dd23a78cdac1300e5e167ce3c540e94f06530dc539e8c1d98289a14446bb8d486f0060cb76b4abc705083f72adeea32830e92b6c89e7b929ff", 0x0, 0x48)
ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
eventfd2(0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x5, 0x1, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000bc2000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r4, &(0x7f00000001c0)={0x0, &(0x7f0000000200)=[@svc={0x122, 0x40, {0xc5000020, [0x6, 0x3, 0x1, 0x711ec83f, 0x8000]}}], 0x40}, &(0x7f0000000240)=[@featur1={0x1, 0x43}], 0x1)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000002c0)=[@featur2={0x1, 0x2}], 0x1)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000300)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0xdddd1000, 0x2000, &(0x7f0000fa3000/0x2000)=nil})
r6 = openat$kvm(0x0, &(0x7f0000000340), 0x80, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x2e)
ioctl$KVM_CAP_HALT_POLL(r7, 0x4068aea3, &(0x7f0000000380)={0xdf, 0x0, 0x80000000})
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80100, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x25)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0x7b7, 0x1})
syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000b80)={0x0, 0x0}, &(0x7f00000000c0)=[@featur1={0x1, 0x4}], 0x1)
ioctl$KVM_CREATE_DEVICE(r1, 0xc018aec0, &(0x7f00000000c0)={0x1})

1h27m51.882234489s ago: executing program 0 (id=188):
r0 = openat$kvm(0x0, &(0x7f0000000280), 0x103080, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r2 = syz_kvm_vgic_v3_setup(r1, 0x5, 0x40)
ioctl$KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, &(0x7f00000002c0)=@attr_other={0x0, 0x5, 0x8, &(0x7f0000000300)=0x200a8a})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
munmap$KVM_VCPU(0x0, 0x1000000000)
r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04)
r6 = mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, r5, 0xe, 0x16831, 0xffffffffffffffff, 0x0)
munmap$KVM_VCPU(r6, 0x9)
openat$kvm(0xffffffffffffff9c, 0x0, 0x169642, 0x0)
r7 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r9 = openat$kvm(0x0, &(0x7f0000000340), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil)
r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000380)={0x0, &(0x7f00000003c0)=[@hvc={0x32, 0x40, {0xc4000053, [0x9f, 0x7a000, 0x1000, 0x3, 0x6]}}, @eret={0xe6, 0x18, 0x2d}, @smc={0x1e, 0x40, {0xc4000005, [0x8000000000000000, 0xc, 0x40, 0x8, 0x3]}}, @msr={0x14, 0x20, {0x6030000000138054, 0x4}}, @msr={0x14, 0x20, {0x603000000013e663, 0x8001}}, @eret={0xe6, 0x18, 0x80000001}, @code={0xa, 0x9c, {"000028d5e0a89bd200c0b0f2010080d2220180d2c30180d2840180d2020000d4000028d560468fd200c0b8f2410080d2620180d2430180d2640180d2020000d4007008d5a0b983d20000b8f2610180d2220180d2030180d2440080d2020000d4008008d50000591e000008d5201e9dd20040b0f2a10180d2c20180d2430080d2a40080d2020000d4"}}], 0x18c}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r10, 0x1, 0x0)
ioctl$KVM_RUN(r12, 0xae80, 0x0)
r13 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r14 = syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000c00000/0x400000)=nil)
r15 = syz_kvm_add_vcpu$arm64(r14, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@msr={0x14, 0x20, {0x603000000013c288, 0xfffffffffffffffe}}, @msr={0x14, 0x20, {0x603000000013dce1, 0x7}}], 0x40}, &(0x7f0000000140)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r15, 0x4018aee1, &(0x7f0000000180)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f00000001c0)={0x1, 0x5}})
syz_kvm_vgic_v3_setup(r13, 0xfffffffffffffffd, 0x220)
ioctl$KVM_ARM_VCPU_INIT(0xffffffffffffffff, 0x4020aeae, 0x0)
r16 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000200)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r16, 0x4018aee1, &(0x7f0000000900)=@attr_set_pmu={0x0, 0x0, 0x3, &(0x7f0000000940)=0x8})
syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000700)={0x0, &(0x7f0000000980)=[@msr={0x14, 0x20, {0x603000000013deff, 0x80000000}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x1400, 0x6, 0x2}}, @svc={0x122, 0x40, {0x80000001, [0x5, 0xffffffffffff8118, 0x101, 0x2ed7, 0x2]}}, @svc={0x122, 0x40, {0x8400000e, [0x40001, 0x1, 0x6, 0x2, 0x4]}}, @code={0xa, 0xb4, {"80f889d20020b0f2410180d2220180d2830180d2c40180d2020000d4000028d5003c004e0050005ee0b59cd200e0b8f200f29cd20020b0f2410080d2020180d2c30080d2840080d2020000d4020080d2c30080d2040080d2020000d4007008d5000028d50084006f40f59dd200a0b8f2610180d2c20080d2e30080d2040180d2020000d4c08f97d200e0b0f2810180d2620080d2430180d2c40080d20064202e"}}, @mrs={0xbe, 0x18, {0x6030000000138080}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x0, 0x0, 0x0, 0x1, 0x5, 0x1}}, @hvc={0x32, 0x40, {0x0, [0x8, 0x815, 0x276809dc, 0x3, 0xfffffffffffffff1]}}, @svc={0x122, 0x40, {0x84000013, [0x2, 0x983, 0x8000000000000000, 0x3, 0x1]}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x0, 0x3, 0xd, 0x1, 0x0, 0x1}}, @mrs={0xbe, 0x18, {0x1686}}, @msr={0x14, 0x20, {0x603000000013f099, 0x6}}, @irq_setup={0x46, 0x18, {0x2, 0x2f0}}, @its_setup={0x82, 0x28, {0x104, 0x2, 0x23c}}, @hvc={0x32, 0x40, {0x84000050, [0x82e, 0x6, 0x3, 0x0, 0x1]}}, @uexit={0x0, 0x18, 0x100000000}, @its_setup={0x82, 0x28, {0x0, 0x3, 0x307}}, @hvc={0x32, 0x40, {0x32000000, [0x9, 0xff96, 0x7fff, 0xb7, 0xac]}}, @msr={0x14, 0x20, {0x6030000000138026, 0x3}}], 0x3c4}, &(0x7f0000000740)=[@featur1={0x1, 0xd0}], 0x1)

1h27m42.984991115s ago: executing program 0 (id=189):
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x9000000)
mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) (async)
munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) (async)
munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) (async)
munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000) (async)
munmap(&(0x7f0000e76000/0x12000)=nil, 0x12000)
munmap(&(0x7f0000800000/0x800000)=nil, 0x800000)
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}, 0x0, 0x0) (async)
syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) (async)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, <r4=>0xffffffffffffffff}) (async)
r5 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = openat$kvm(0x0, &(0x7f00000002c0), 0x183000, 0x0) (async)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000440)=@attr_arm64={0x0, 0x2, 0x0, &(0x7f0000000480)=0x1100000000000004})
ioctl$KVM_GET_SREGS(r3, 0x8000ae83, &(0x7f0000000600)) (async)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=[@featur2], 0x1)
ioctl$KVM_SET_ONE_REG(r10, 0x4010aeac, &(0x7f0000000380)=@arm64_fw={0x6030000000140000, &(0x7f00000003c0)=0x10000}) (async)
r11 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r6, r11, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x38) (async)
ioctl$KVM_SET_ONE_REG(r11, 0x4010aeac, &(0x7f0000000200)=@arm64_sys={0x603000000013df01, &(0x7f0000000280)=0xfffffffffffffff9})
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000240)=0x8080000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1h27m42.820645421s ago: executing program 1 (id=190):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3)
ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000000)={0x5, 0x18})
ioctl$KVM_ARM_VCPU_FINALIZE(r2, 0x4004aec2, &(0x7f00000001c0)=0x4)
ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000080)={0x1})
openat$kvm(0x0, 0x0, 0x0, 0x0)
close(0x4)
close(0x5)

1h27m37.551469024s ago: executing program 1 (id=191):
syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000040)=[@irq_setup={0x46, 0x18, {0x3, 0x15c}}], 0x18}, 0x0, 0x0) (async)
syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000040)=[@irq_setup={0x46, 0x18, {0x3, 0x15c}}], 0x18}, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xc0189436, 0x20000001)
openat$kvm(0x0, 0x0, 0x0, 0x0) (async)
openat$kvm(0x0, 0x0, 0x0, 0x0)
openat$kvm(0x0, 0x0, 0x0, 0x0) (async)
openat$kvm(0x0, 0x0, 0x0, 0x0)
openat$kvm(0x0, &(0x7f0000000180), 0x0, 0x0) (async)
r1 = openat$kvm(0x0, &(0x7f0000000180), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) (async)
r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f00000001c0)={0x0, &(0x7f0000000200)=[@its_setup={0x82, 0x28, {0x0, 0x4, 0x2}}], 0x28}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r2, 0x1, 0x100)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x25)
syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) (async)
r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000280)={0x0, &(0x7f00000002c0)=[@its_setup={0x82, 0x28, {0x2, 0x4, 0x1}}, @its_setup={0x82, 0x28, {0x3, 0x1, 0x3ee}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r6, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000340)={0x8, <r9=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f0000000380)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f00000003c0)=0x8080000})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000400)={0x8, <r10=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f0000000440)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000480)=0x8080000})
syz_kvm_setup_cpu$arm64(r6, r8, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000680)=[{0x0, &(0x7f00000004c0)=[@hvc={0x32, 0x40, {0x80008000, [0x2ed4, 0x9, 0x9, 0x5, 0x9]}}, @its_send_cmd={0xaa, 0x28, {0xe, 0x1, 0x2, 0x8, 0x1, 0x5}}, @smc={0x1e, 0x40, {0xc4000010, [0x8001, 0x1, 0xa44, 0x5, 0x8]}}, @irq_setup={0x46, 0x18, {0x1, 0x2a0}}, @uexit={0x0, 0x18, 0x2}, @eret={0xe6, 0x18, 0x7}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x1400, 0x9, 0x3}}, @its_setup={0x82, 0x28, {0x3, 0x3, 0x1c5}}, @irq_setup={0x46, 0x18, {0x3, 0x22d}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x20020, 0x0, 0x1}}, @mrs={0xbe, 0x18, {0x603000000013dcf3}}], 0x1a8}], 0x1, 0x0, &(0x7f00000006c0)=[@featur1={0x1, 0x4}], 0x1) (async)
syz_kvm_setup_cpu$arm64(r6, r8, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000680)=[{0x0, &(0x7f00000004c0)=[@hvc={0x32, 0x40, {0x80008000, [0x2ed4, 0x9, 0x9, 0x5, 0x9]}}, @its_send_cmd={0xaa, 0x28, {0xe, 0x1, 0x2, 0x8, 0x1, 0x5}}, @smc={0x1e, 0x40, {0xc4000010, [0x8001, 0x1, 0xa44, 0x5, 0x8]}}, @irq_setup={0x46, 0x18, {0x1, 0x2a0}}, @uexit={0x0, 0x18, 0x2}, @eret={0xe6, 0x18, 0x7}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x1400, 0x9, 0x3}}, @its_setup={0x82, 0x28, {0x3, 0x3, 0x1c5}}, @irq_setup={0x46, 0x18, {0x3, 0x22d}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x20020, 0x0, 0x1}}, @mrs={0xbe, 0x18, {0x603000000013dcf3}}], 0x1a8}], 0x1, 0x0, &(0x7f00000006c0)=[@featur1={0x1, 0x4}], 0x1)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

1h27m35.387088769s ago: executing program 0 (id=192):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000180), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
ioctl$KVM_ARM_VCPU_INIT(r3, 0x4020aeae, &(0x7f00000001c0)={0x5, 0x1}) (async)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x3f) (async)
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x8040ae9f, 0xfffffffffffffffe) (async)
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000200)={0x60000, 0x1000})
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000002c0)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee1, 0x0) (async)
ioctl$KVM_GET_ONE_REG(r7, 0x4010aeab, &(0x7f0000000300)=@arm64_sys={0x603000000013dce8, &(0x7f0000000340)=0x5}) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x20) (async)
openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0) (async)
r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2b)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r8, r9, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000100)=[{0x0, 0x0}], 0x1, 0x0, &(0x7f00000003c0)=[@featur2={0x1, 0x17}], 0x1)
openat$kvm(0x0, 0x0, 0x0, 0x0) (async)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x2502, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x25)
r12 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000400)={0x0, &(0x7f0000000440)=[@its_setup={0x82, 0x28, {0x2, 0x4, 0x1}}], 0x28}, 0x0, 0x0) (async)
syz_kvm_vgic_v3_setup(r11, 0x1, 0x100) (async)
ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0) (async)
r13 = openat$kvm(0x0, &(0x7f0000000480), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0)

1h27m25.744551866s ago: executing program 1 (id=193):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x400000000000012b)
ioctl$KVM_SET_DEVICE_ATTR_vm(r1, 0x4018aee1, &(0x7f00000005c0)=@attr_other={0x0, 0x1, 0xfffffffffffffffa, 0x0})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x38000, 0x0)

1h27m23.671087916s ago: executing program 0 (id=194):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000040)=@x86={0x11, 0x8, 0xf, 0x0, 0x5, 0x6, 0x6, 0x4, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x8, 0x0, 0x0, 0x3, 0x5, 0x8, '\x00', 0x41, 0x2})
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000080)={0xffffffffffffffff, 0xc8, 0x2})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000240), 0x101300, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
syz_kvm_add_vcpu$arm64(0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000280)={0x7, <r7=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f00000002c0)=@attr_arm64={0x0, 0x0, 0x2, &(0x7f00000004c0)=0x400000080a0000})
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000100)={0x4, <r8=>0xffffffffffffffff, 0x1})
ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000380)={0x4, 0x0, [{0x1, 0x1, 0x0, 0x0, @msi={0x6aadaf14, 0x3, 0xffff, 0x1}}, {0x0, 0x5, 0x1, 0x0, @adapter={0xd4ff}}, {0x0, 0x0, 0x0, 0x0, @msi={0x80, 0x0, 0x0, 0x5}}, {0x400000, 0x0, 0x0, 0x0, @adapter={0x1, 0x1000000, 0x10101, 0x7f, 0xb2a}}]})
write$eventfd(r8, &(0x7f0000000480)=0x3, 0x50)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x34)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x0, 0x100010, r9, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x300080, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000540)={0xffffffffffffffff, 0xc8})
openat$kvm(0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f0000000580)={0x4, 0xffffffffffffffff, 0x1})
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000005c0)=@x86={0x19, 0x9b, 0xf, 0x0, 0x5, 0x48, 0x82, 0x42, 0x48, 0x86, 0xdd, 0x5, 0x0, 0x100001, 0x132, 0x9, 0x3, 0xa, 0x8, '\x00', 0x5, 0x80000008})

1h27m22.051893853s ago: executing program 1 (id=195):
r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r1 = openat$kvm(0x0, &(0x7f0000000200), 0x105200, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$kvm(0x0, &(0x7f0000000080), 0x101000, 0x0)
r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_vgic_v3_setup(r4, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000600)={0x8})
ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000640)={0xcaf, 0xffff1000, 0x0, 0xffffffffffffffff, 0x1})
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000680)={0xffffffffffffffff, 0x800, 0x1})
r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x3)
ioctl$KVM_ARM_VCPU_INIT(r6, 0x4020aeae, &(0x7f0000000240)={0x5, 0x18})
ioctl$KVM_GET_ONE_REG(r6, 0x4010aeab, &(0x7f0000000280)=@arm64_sve={0x6080000000150300, 0x0})
syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r0, &(0x7f00000000c0)={0x0, &(0x7f00000002c0)=[@memwrite={0x6e, 0x30, @vgic_gicr={0x80a0000, 0xa0, 0x8001, 0x3}}], 0x30}, 0x0, 0x0)
r8 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r9 = openat$kvm(0x0, &(0x7f0000000480), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = syz_kvm_vgic_v3_setup(r10, 0x3, 0xc0)
ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f00000004c0)=@attr_arm64={0x0, 0x0, 0x1, &(0x7f0000000500)=0x8})
r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40201, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r13, 0x4008ae6a, &(0x7f0000000300)={0x7, 0x0, [{0x5, 0x0, 0x0, 0x0, @irqchip={0xa7}}, {0x4, 0x4, 0x1, 0x0, @msi={0xdb15, 0x800, 0x5, 0xb}}, {0x4, 0x2, 0x1, 0x0, @adapter={0x5, 0x0, 0x80, 0xbb63, 0xc}}, {0x9, 0x1, 0x0, 0x0, @msi={0x303c, 0x2, 0x200, 0x9}}, {0x1, 0x4, 0x0, 0x0, @msi={0xab, 0xffffffff, 0x6, 0x1}}, {0x9, 0x2, 0x0, 0x0, @adapter={0x670, 0x2, 0x3ff, 0x0, 0xfffffffd}}, {0x7, 0x4, 0x0, 0x0, @irqchip={0x9, 0x7}}]})
r14 = syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r14, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000100)=[@featur1={0x1, 0x8}], 0x1)
r15 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000140)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r15, 0x4018aee1, &(0x7f0000000180)=@attr_other={0x0, 0x2, 0x3, &(0x7f00000001c0)})
syz_kvm_vgic_v3_setup(0xffffffffffffffff, 0x2, 0x3c0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

1h26m37.86960382s ago: executing program 32 (id=194):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000040)=@x86={0x11, 0x8, 0xf, 0x0, 0x5, 0x6, 0x6, 0x4, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x8, 0x0, 0x0, 0x3, 0x5, 0x8, '\x00', 0x41, 0x2})
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000080)={0xffffffffffffffff, 0xc8, 0x2})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000240), 0x101300, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
syz_kvm_add_vcpu$arm64(0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000280)={0x7, <r7=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f00000002c0)=@attr_arm64={0x0, 0x0, 0x2, &(0x7f00000004c0)=0x400000080a0000})
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000100)={0x4, <r8=>0xffffffffffffffff, 0x1})
ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000380)={0x4, 0x0, [{0x1, 0x1, 0x0, 0x0, @msi={0x6aadaf14, 0x3, 0xffff, 0x1}}, {0x0, 0x5, 0x1, 0x0, @adapter={0xd4ff}}, {0x0, 0x0, 0x0, 0x0, @msi={0x80, 0x0, 0x0, 0x5}}, {0x400000, 0x0, 0x0, 0x0, @adapter={0x1, 0x1000000, 0x10101, 0x7f, 0xb2a}}]})
write$eventfd(r8, &(0x7f0000000480)=0x3, 0x50)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x34)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x0, 0x100010, r9, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x300080, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000540)={0xffffffffffffffff, 0xc8})
openat$kvm(0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f0000000580)={0x4, 0xffffffffffffffff, 0x1})
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000005c0)=@x86={0x19, 0x9b, 0xf, 0x0, 0x5, 0x48, 0x82, 0x42, 0x48, 0x86, 0xdd, 0x5, 0x0, 0x100001, 0x132, 0x9, 0x3, 0xa, 0x8, '\x00', 0x5, 0x80000008})

1h26m35.039408503s ago: executing program 33 (id=195):
r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r1 = openat$kvm(0x0, &(0x7f0000000200), 0x105200, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$kvm(0x0, &(0x7f0000000080), 0x101000, 0x0)
r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_vgic_v3_setup(r4, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000600)={0x8})
ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000640)={0xcaf, 0xffff1000, 0x0, 0xffffffffffffffff, 0x1})
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000680)={0xffffffffffffffff, 0x800, 0x1})
r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x3)
ioctl$KVM_ARM_VCPU_INIT(r6, 0x4020aeae, &(0x7f0000000240)={0x5, 0x18})
ioctl$KVM_GET_ONE_REG(r6, 0x4010aeab, &(0x7f0000000280)=@arm64_sve={0x6080000000150300, 0x0})
syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r0, &(0x7f00000000c0)={0x0, &(0x7f00000002c0)=[@memwrite={0x6e, 0x30, @vgic_gicr={0x80a0000, 0xa0, 0x8001, 0x3}}], 0x30}, 0x0, 0x0)
r8 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r9 = openat$kvm(0x0, &(0x7f0000000480), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = syz_kvm_vgic_v3_setup(r10, 0x3, 0xc0)
ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f00000004c0)=@attr_arm64={0x0, 0x0, 0x1, &(0x7f0000000500)=0x8})
r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40201, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r13, 0x4008ae6a, &(0x7f0000000300)={0x7, 0x0, [{0x5, 0x0, 0x0, 0x0, @irqchip={0xa7}}, {0x4, 0x4, 0x1, 0x0, @msi={0xdb15, 0x800, 0x5, 0xb}}, {0x4, 0x2, 0x1, 0x0, @adapter={0x5, 0x0, 0x80, 0xbb63, 0xc}}, {0x9, 0x1, 0x0, 0x0, @msi={0x303c, 0x2, 0x200, 0x9}}, {0x1, 0x4, 0x0, 0x0, @msi={0xab, 0xffffffff, 0x6, 0x1}}, {0x9, 0x2, 0x0, 0x0, @adapter={0x670, 0x2, 0x3ff, 0x0, 0xfffffffd}}, {0x7, 0x4, 0x0, 0x0, @irqchip={0x9, 0x7}}]})
r14 = syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r14, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000100)=[@featur1={0x1, 0x8}], 0x1)
r15 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000140)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r15, 0x4018aee1, &(0x7f0000000180)=@attr_other={0x0, 0x2, 0x3, &(0x7f00000001c0)})
syz_kvm_vgic_v3_setup(0xffffffffffffffff, 0x2, 0x3c0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

49m24.73798636s ago: executing program 2 (id=499):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0xc8, 0x5})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x4, <r5=>0xffffffffffffffff, 0x1})
ioctl$KVM_CREATE_VM(r5, 0x401054d5, 0x20000000000f)
r6 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000380)=[@its_setup={0x82, 0x28, {0x3, 0x1, 0x39d}}], 0x28}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r1, 0xffffffffffbffffc, 0x120)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, <r7=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x4f832, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x4, 0x4, 0x0})

49m13.898008608s ago: executing program 2 (id=501):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x0, 0x40032, 0xffffffffffffffff, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r4 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r3, 0x0)
r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x1000)=nil, r5, 0x1, 0x11, r3, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000000)="a15ff6981f8c16dd2826d007a90c74f9da660be5e69b79928891c26ab20f367e9848e7528a3cf34be30b90a73b99025af99d1df98ee525259d75c02cea0bce88d4d1978f68ab07f6", 0x0, 0x48)
r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04)
mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, r6, 0x8, 0x13, r3, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, r6, 0x0, 0x1010, r3, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0)

49m7.860784237s ago: executing program 2 (id=503):
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x77)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2a)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000300)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000340)=@arm64_fw={0x6030000000140000, &(0x7f0000000380)=0x2})
r4 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000140)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_ARM_VCPU_FINALIZE(r7, 0x4004aec2, &(0x7f0000000180)=0x4)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0xc8})
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0xc8})
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x181900, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0)
syz_kvm_vgic_v3_setup(0xffffffffffffffff, 0x1, 0x80)
ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000280)={0x4, <r10=>0xffffffffffffffff, 0x1})
ioctl$KVM_CREATE_VM(r10, 0x400454cc, 0x110c230020)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x181b03, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
ioctl$KVM_CREATE_VM(r11, 0xae01, 0x32)
ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, &(0x7f00000000c0)={0x4, <r13=>0xffffffffffffffff, 0x1})
ioctl$KVM_CREATE_VM(r13, 0x400454de, 0x800000110c23000a)
r14 = openat$kvm(0x0, &(0x7f0000000080), 0x2a040, 0x0)
ioctl$KVM_CHECK_EXTENSION(r14, 0xae03, 0xd8)

49m0.028197586s ago: executing program 3 (id=504):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vm(r2, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x57fd, 0x2}})
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04)
r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x14)
ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r6, 0x4068aea3, &(0x7f0000000080)={0xe4, 0x0, 0x3ff})
mmap$KVM_VCPU(&(0x7f0000c0c000/0x2000)=nil, r5, 0x0, 0x80031, 0xffffffffffffffff, 0x0)
r7 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x2}}], 0x20}, 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000)
munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000)
munmap(&(0x7f000075a000/0xb000)=nil, 0xb000)
munmap(&(0x7f0000482000/0x2000)=nil, 0x2000)
munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000)
munmap(&(0x7f0000e76000/0x12000)=nil, 0x12000)
r8 = openat$kvm(0x0, &(0x7f0000000240), 0x8280, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000280)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
r11 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r10, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r11, 0x20, &(0x7f0000000300)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r10, 0x0)
r12 = eventfd2(0x0, 0x0)
close(r12)

48m26.588111271s ago: executing program 3 (id=505):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0)
r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3})
r3 = openat$kvm(0x0, &(0x7f00000000c0), 0x2900, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x80000000035)
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000100)=@x86={0x11, 0x8, 0xf, 0x0, 0x5, 0x6, 0x6, 0x6, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x9, 0x0, 0x0, 0x3, 0x5, 0x8, '\x00', 0x1, 0x2})
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x1})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000200)={0x4, <r6=>0xffffffffffffffff, 0x1})
ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000240)={0x4, 0x0, [{0x1, 0x1, 0x0, 0x0, @adapter={0x8000000000000001, 0x8, 0x2, 0xa, 0x10}}, {0x9, 0x3, 0x1, 0x0, @adapter={0xd4ff}}, {0x0, 0x0, 0x0, 0x0, @msi={0x80, 0x0, 0x0, 0x7}}, {0x0, 0x0, 0x0, 0x0, @adapter={0x1, 0x5, 0x101, 0x7f, 0xb2a}}]})
write$eventfd(r6, &(0x7f0000000340)=0x3, 0x50)
r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vm(r8, 0x4018aee1, &(0x7f0000000080)=@attr_arm64={0x0, 0x0, 0x0, 0xffffffffffffffff})
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x2000003, 0x12, r2, 0x200001fe0000)

48m25.788555566s ago: executing program 2 (id=506):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000)
munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x9000000)
mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0)
r2 = eventfd2(0x5, 0x800)
write$eventfd(r2, 0x0, 0x0)
munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000)
munmap(&(0x7f000075a000/0xb000)=nil, 0xb000)
munmap(&(0x7f0000e76000/0x12000)=nil, 0x12000)
mmap$KVM_VCPU(&(0x7f0000f1a000/0x4000)=nil, 0x930, 0x0, 0x9032, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4360ae82, 0x0)
mmap$KVM_VCPU(&(0x7f00001a1000/0x3000)=nil, 0x0, 0xa, 0x10010, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000011000/0xc00000)=nil, 0xc00000)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
munmap(&(0x7f0000d8f000/0x4000)=nil, 0x4000)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x3000000, 0x4d832, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r3, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@its_setup={0x82, 0x28, {0x3, 0x4, 0x2}}, @its_send_cmd={0xaa, 0x28, {0x4, 0x0, 0x40000000, 0x10000, 0x0, 0x0, 0x1}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x1, 0x100)

48m16.510150648s ago: executing program 3 (id=507):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
munmap$KVM_VCPU(0x0, 0x1000000000)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
mmap$KVM_VCPU(&(0x7f0000ff9000/0x4000)=nil, 0x0, 0x1, 0x30, r1, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f0000000040)={0x200001fe0000, 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION2(r3, 0x40a0ae49, &(0x7f0000000080)={0x4, 0x4, 0x6000, 0xa7000, &(0x7f0000ffc000/0x2000)=nil, 0x4000, r4})
close(0x5)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2a)
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async)
munmap$KVM_VCPU(0x0, 0x1000000000) (async)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) (async)
mmap$KVM_VCPU(&(0x7f0000ff9000/0x4000)=nil, 0x0, 0x1, 0x30, r1, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f0000000040)={0x200001fe0000, 0x3}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION2(r3, 0x40a0ae49, &(0x7f0000000080)={0x4, 0x4, 0x6000, 0xa7000, &(0x7f0000ffc000/0x2000)=nil, 0x4000, r4}) (async)
close(0x5) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2a) (async)

48m10.993202754s ago: executing program 2 (id=508):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000700)={0x7, 0x0}) (async)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f0000000240)={0x200002f}) (async)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1a)
ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r4, 0x4068aea3, &(0x7f0000000140)={0xa8, 0x0, 0x1})
ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0)
r5 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000080)={0x0, &(0x7f0000000000)=[@irq_setup={0x5, 0x18, {0x1, 0x2c2}}], 0x12}, 0x0, 0x0) (async, rerun: 64)
syz_kvm_vgic_v3_setup(r3, 0x1, 0x100)
ioctl$KVM_RUN(r6, 0xae80, 0x0) (async)
ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, &(0x7f0000000100)={0x1000020, 0x1}) (async, rerun: 32)

48m6.048605782s ago: executing program 3 (id=509):
r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r1 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r0, &(0x7f0000000200)={0x0, &(0x7f0000000500)=[@mrs={0xbe, 0x18, {0x6030000000138056}}], 0x18}, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000000)=@x86={0x1, 0x80, 0x7, 0x0, 0x0, 0x2, 0x6e, 0xf8, 0x46, 0x3, 0x8, 0xb9, 0x0, 0x8d0, 0xffffff80, 0x4, 0x5, 0xec, 0x9, '\x00', 0xff, 0x80000001})
ioctl$KVM_CAP_HALT_POLL(r2, 0x4068aea3, &(0x7f0000000240)={0xb6, 0x0, 0xfffffffffffffffd})
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@hvc={0x32, 0x40, {0xc5000021, [0x1, 0x5, 0x5, 0xfff, 0xdfd5]}}], 0x40}, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r8 = openat$kvm(0x0, &(0x7f0000000100), 0x220000, 0x0)
ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000180)=@arm64_core={0x603000000010004a, &(0x7f00000001c0)=0x7f1})
ioctl$KVM_CREATE_VM(r8, 0x401c5820, 0x20000000)
syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000300)={0x0, &(0x7f0000000000)=[@hvc={0x32, 0x40, {0x40000000, [0x8000000000c, 0x1000000000000, 0x6, 0x800000006, 0x800]}}], 0x40}, 0x0, 0x18)
ioctl$KVM_ARM_VCPU_INIT(0xffffffffffffffff, 0x4020aeae, &(0x7f0000000000)={0x5, 0x18})
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0)

48m1.966504151s ago: executing program 2 (id=510):
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_S390_VCPU_FAULT(r0, 0x4008ae52, &(0x7f0000000080)=0x9)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000380)={0xffffffffffffffff, 0xc8})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000400)={0x4, <r6=>0xffffffffffffffff, 0x1})
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000440)=@x86={0x4, 0x7, 0x6, 0x0, 0x10000, 0xc0, 0x2, 0x30, 0x30, 0x9, 0x5, 0x7f, 0x0, 0x8, 0xff, 0x10, 0x1, 0xf, 0x3, '\x00', 0x9, 0x7})
write$eventfd(r6, &(0x7f0000000480)=0x9, 0x5d)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x33)
syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000b46000/0x400000)=nil)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000011000/0x3000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0)
r7 = mmap$KVM_VCPU(&(0x7f0000002000/0x4000)=nil, 0x0, 0x1000002, 0x2010, r0, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f0000000280)="37e68986ad644f5dc57bbc1ff382863b67f3eee57a32ec911d95f88f3dd8ea716e4a29cefbd440b2ecf83f57baf33b0c97182970a47ef45c954e42f2055384921830f6e273d2eb30", 0x0, 0x2a2019ac5ed2a1ef)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0)
r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r8, r9, &(0x7f0000bfe000/0x400000)=nil, &(0x7f00000006c0)=[{0x0, 0x0, 0x4b0}], 0x1, 0x0, &(0x7f0000000700)=[@featur1={0x1, 0x80}], 0x1)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r11 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r10, 0xae04)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, r11, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0)
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r12 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x1)

47m49.95194781s ago: executing program 3 (id=511):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x12001, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x8, <r2=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000180)=0x8080000})
ioctl$KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, &(0x7f0000000080)=@attr_other={0x0, 0x8, 0x8, 0xffffffffffffffff})

47m43.639331506s ago: executing program 3 (id=512):
r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000001c0)={0x8, <r2=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000100))
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async, rerun: 64)
ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000140)=@arm64_sys={0x603000000013df66, &(0x7f0000000000)=0x80000001}) (async, rerun: 64)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, 0x0) (async)
r3 = openat$kvm(0x0, &(0x7f0000000180), 0x101800, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) (async)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000400)={0xffffffffffffffff, 0xc8}) (async)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x181900, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000480)={0x4, <r9=>0xffffffffffffffff, 0x1})
ioctl$KVM_CREATE_VM(r9, 0x800454d7, 0x20000003)
r10 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async)
syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000340)={0x0, 0x0}, 0x0, 0x0) (async)
r12 = openat$kvm(0x0, 0x0, 0x80, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x2e)
r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x5)
syz_kvm_setup_cpu$arm64(r13, r14, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64)
ioctl$KVM_SET_ONE_REG(r11, 0x4010aeac, &(0x7f0000000380)=@arm64_core={0x6030000000100042, &(0x7f00000003c0)=0x801b}) (rerun: 64)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000200)={0x7, <r15=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r15, 0x4018aee1, &(0x7f00000002c0)=@attr_arm64={0x0, 0x4, 0x3, 0x0})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})

47m15.818904679s ago: executing program 34 (id=510):
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_S390_VCPU_FAULT(r0, 0x4008ae52, &(0x7f0000000080)=0x9)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000380)={0xffffffffffffffff, 0xc8})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000400)={0x4, <r6=>0xffffffffffffffff, 0x1})
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000440)=@x86={0x4, 0x7, 0x6, 0x0, 0x10000, 0xc0, 0x2, 0x30, 0x30, 0x9, 0x5, 0x7f, 0x0, 0x8, 0xff, 0x10, 0x1, 0xf, 0x3, '\x00', 0x9, 0x7})
write$eventfd(r6, &(0x7f0000000480)=0x9, 0x5d)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x33)
syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000b46000/0x400000)=nil)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000011000/0x3000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0)
r7 = mmap$KVM_VCPU(&(0x7f0000002000/0x4000)=nil, 0x0, 0x1000002, 0x2010, r0, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f0000000280)="37e68986ad644f5dc57bbc1ff382863b67f3eee57a32ec911d95f88f3dd8ea716e4a29cefbd440b2ecf83f57baf33b0c97182970a47ef45c954e42f2055384921830f6e273d2eb30", 0x0, 0x2a2019ac5ed2a1ef)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0)
r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r8, r9, &(0x7f0000bfe000/0x400000)=nil, &(0x7f00000006c0)=[{0x0, 0x0, 0x4b0}], 0x1, 0x0, &(0x7f0000000700)=[@featur1={0x1, 0x80}], 0x1)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r11 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r10, 0xae04)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, r11, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0)
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r12 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x1)

46m56.728539924s ago: executing program 35 (id=512):
r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000001c0)={0x8, <r2=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000100))
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async, rerun: 64)
ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000140)=@arm64_sys={0x603000000013df66, &(0x7f0000000000)=0x80000001}) (async, rerun: 64)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, 0x0) (async)
r3 = openat$kvm(0x0, &(0x7f0000000180), 0x101800, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) (async)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000400)={0xffffffffffffffff, 0xc8}) (async)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x181900, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000480)={0x4, <r9=>0xffffffffffffffff, 0x1})
ioctl$KVM_CREATE_VM(r9, 0x800454d7, 0x20000003)
r10 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async)
syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000340)={0x0, 0x0}, 0x0, 0x0) (async)
r12 = openat$kvm(0x0, 0x0, 0x80, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x2e)
r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x5)
syz_kvm_setup_cpu$arm64(r13, r14, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64)
ioctl$KVM_SET_ONE_REG(r11, 0x4010aeac, &(0x7f0000000380)=@arm64_core={0x6030000000100042, &(0x7f00000003c0)=0x801b}) (rerun: 64)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000200)={0x7, <r15=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r15, 0x4018aee1, &(0x7f00000002c0)=@attr_arm64={0x0, 0x4, 0x3, 0x0})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})

32m7.766966909s ago: executing program 5 (id=573):
ioctl$KVM_ARM_VCPU_INIT(0xffffffffffffffff, 0x4020aeae, &(0x7f0000000000)={0x1, 0x40})
r0 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[@svc={0x122, 0x40, {0x84000009, [0xce2, 0xff, 0x5, 0x5, 0x4]}}, @irq_setup={0x46, 0x18, {0x4, 0x350}}, @memwrite={0x6e, 0x30, @generic={0x7000, 0xbc3, 0x0, 0x4}}, @hvc={0x32, 0x40, {0x2000051, [0xc90, 0x3, 0x4, 0x8, 0x8]}}], 0xc8}, &(0x7f0000000180)=[@featur1={0x1, 0x1}], 0x1)
ioctl$KVM_SET_REGS(r0, 0x4360ae82, &(0x7f00000001c0)={[0x7, 0x1, 0x95, 0x6, 0xff, 0x5, 0x5, 0x9, 0x6, 0x651, 0x2, 0x101, 0x7fffffff, 0x1, 0x4], 0x1d000, 0x24400})
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_GET_DEVICE_ATTR_vcpu(r1, 0x4018aee2, &(0x7f00000002c0)=@attr_pmu_irq={0x0, 0x0, 0x0, &(0x7f0000000280)=0x1})
ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r1, 0x4018aee3, &(0x7f0000000340)=@attr_set_pmu={0x0, 0x0, 0x3, &(0x7f0000000300)=0xd4a7})
ioctl$KVM_GET_DEVICE_ATTR_vcpu(r0, 0x4018aee2, &(0x7f00000003c0)=@attr_set_pmu={0x0, 0x0, 0x3, &(0x7f0000000380)=0x4})
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x37)
syz_kvm_setup_cpu$arm64(r2, r0, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000780)=[{0x0, &(0x7f0000000400)=[@memwrite={0x6e, 0x30, @generic={0xd000, 0x48a, 0xb, 0x4}}, @hvc={0x32, 0x40, {0x84000009, [0x401, 0xb0, 0x7fffffff, 0x5, 0x9]}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x0, 0x4, 0x4}}, @its_send_cmd={0xaa, 0x28, {0xb, 0x1, 0x0, 0xc, 0xfff, 0x4}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80c0000, 0x200, 0x3d, 0x5}}, @hvc={0x32, 0x40, {0x80000000, [0x0, 0x1, 0x7, 0x101, 0x9]}}, @memwrite={0x6e, 0x30, @generic={0x5000, 0x722, 0x100, 0x2}}, @uexit={0x0, 0x18, 0x5}, @its_send_cmd={0xaa, 0x28, {0xe, 0x1, 0x1, 0x9, 0x8, 0x5, 0x2}}, @svc={0x122, 0x40, {0x84000053, [0x8, 0xfffffffffffffff9, 0x2, 0x7]}}, @code={0xa, 0x84, {"0100a0d4007008d5007008d5000028d500a8212e007008d540378ad20000b0f2a10180d2820080d2c30080d2440180d2020000d4007008d5604e88d200e0b8f2e10180d2820180d2830080d2040180d2020000d4a0989cd20080b8f2610180d2c20080d2030180d2a40080d2020000d4"}}, @mrs={0xbe, 0x18, {0x603000000013deef}}, @mrs={0xbe, 0x18, {0x603000000013e65d}}, @svc={0x122, 0x40, {0x200, [0x9, 0x2, 0x9, 0x0, 0xb5]}}, @eret={0xe6, 0x18, 0xae}, @its_setup={0x82, 0x28, {0x0, 0x1, 0x269}}, @msr={0x14, 0x20, {0x603000000013df11, 0x2}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x0, 0x2, 0xa, 0x40, 0x3e, 0x4}}], 0x364}], 0x1, 0x0, &(0x7f00000007c0)=[@featur1={0x1, 0x52}], 0x1)
syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r3 = ioctl$KVM_GET_STATS_FD_vm(r2, 0xaece)
ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000840)=@attr_arm64={0x0, 0x5, 0x1, &(0x7f0000000800)=0x6})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04)
mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, r4, 0x4, 0x2010, r3, 0x0)
ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r1, 0x4018aee3, &(0x7f0000000880)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0xdde9})
mmap$KVM_VCPU(&(0x7f0000e6c000/0x11000)=nil, r4, 0x1000000, 0x8010, r3, 0x0)
ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f00000008c0)={0xdddd0000, 0x41000, 0x3, 0x0, 0x80000000})
r5 = eventfd2(0x0, 0x80001)
r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x3a)
syz_kvm_vgic_v3_setup(r6, 0x2, 0x300)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x13)
r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3c)
ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000900)={0x1, 0xffffffffffffffff, 0x1})
ioctl$KVM_ARM_PREFERRED_TARGET(r0, 0x8020aeaf, &(0x7f0000000940))
r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1e)
write$eventfd(r5, &(0x7f0000000980)=0x7, 0x8)
mmap$KVM_VCPU(&(0x7f0000fed000/0x2000)=nil, r4, 0x2000000, 0x10010, r1, 0x0)
ioctl$KVM_ARM_VCPU_FINALIZE(r3, 0x4004aec2, &(0x7f00000009c0)=0x1)
ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000a00)={0x2})
close(r6)

31m59.603603964s ago: executing program 5 (id=574):
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = mmap$KVM_VCPU(&(0x7f000000f000/0x1000)=nil, 0x930, 0x280000b, 0x8010, r2, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29)
r4 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r5 = openat$kvm(0x0, &(0x7f0000000000), 0x100800, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = eventfd2(0xfffffffa, 0x80001)
ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000100)={0x80, 0x50000, 0x0, r7})
syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f00000001c0)={0x10000, 0x4000})
r8 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000200)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r9, 0x4020940d, 0xfffffffffffff4c2)
r10 = eventfd2(0x0, 0x0)
close(r10)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01)
write$eventfd(r10, &(0x7f0000000180)=0x5, 0xfffffde3)
r11 = openat$kvm(0x0, &(0x7f0000000240), 0x4a080, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x2)
r13 = syz_kvm_vgic_v3_setup(r12, 0x1, 0x40)
ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f0000000280)=@attr_arm64={0x0, 0x6, 0x2, 0xffffffffffffffff})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0)

31m47.786475982s ago: executing program 4 (id=575):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x25)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000001c0)={0x8, <r2=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000380)}) (async)
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000380)})
ioctl$KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, &(0x7f0000000180)=@attr_arm64={0x0, 0x2, 0x3, &(0x7f0000000040)=0x7f})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x5, 0x1, 0x1000000, 0x1000, &(0x7f0000000000/0x1000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x5, 0x1, 0x1000000, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000002c0)=@attr_other={0x0, 0x8, 0x108, &(0x7f0000000000)=0xc000000000000000})
r3 = openat$kvm(0x0, &(0x7f0000000200), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) (async)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000240)={0x0, 0x0}, 0x0, 0x0) (async)
syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000240)={0x0, 0x0}, 0x0, 0x0)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000280)={0x0, 0x0}, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000340)={0xffffffffffffffff, 0xc8, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f00000003c0)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil})
ioctl$KVM_CLEAR_DIRTY_LOG(r8, 0xc018aec0, &(0x7f0000000400)={0x0, 0x240, 0x380, 0x0})
syz_kvm_vgic_v3_setup(r4, 0x1, 0x40) (async)
r9 = syz_kvm_vgic_v3_setup(r4, 0x1, 0x40)
close(r6)
close(0x4) (async)
close(0x4)
close(r9)
close(0x5)
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x4, 0x1, 0x0})

31m46.682311424s ago: executing program 5 (id=576):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async, rerun: 32)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x40080, 0x0) (rerun: 32)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
openat$kvm(0x0, 0x0, 0x0, 0x0) (async)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000240)={0x0, 0x0}, 0x0, 0x0) (async)
r7 = openat$kvm(0x0, &(0x7f0000000300), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async, rerun: 64)
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) (rerun: 64)
r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000340)={0x0, 0x0}, 0x0, 0x0) (async, rerun: 32)
syz_kvm_vgic_v3_setup(r8, 0x1, 0x180) (rerun: 32)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r10, 0x4018aee1, &(0x7f0000000380)=@attr_irq_timer={0x0, 0x1, 0x0, &(0x7f00000003c0)=0x80019})
r11 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000280)={0x0, &(0x7f00000002c0)=[@msr={0x14, 0x20, {0x603000000013c65d, 0x3}}], 0x20}, 0x0, 0x0)
ioctl$KVM_RUN(r11, 0xae80, 0x0) (async)
syz_kvm_vgic_v3_setup(r4, 0x3, 0xa0) (async)
r12 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}, 0x0, 0x0) (async)
syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) (async)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, <r14=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r14, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) (async, rerun: 64)
ioctl$KVM_RUN(r13, 0xae80, 0x0) (rerun: 64)

31m32.53904954s ago: executing program 4 (id=577):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x171642, 0x0)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000380)=@attr_pmu_init)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r3 = openat$kvm(0x0, &(0x7f00000003c0), 0x2002, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000500)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, &(0x7f0000000540)=@arm64_sve_vls={0x606000000015ffff, 0x0})
r7 = openat$kvm(0x0, &(0x7f0000000200), 0x208002, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000400)={0x0, &(0x7f0000000440)=[@hvc={0x32, 0x0, {0x84000001, [0x9, 0x8, 0x5, 0x603c8354, 0x200]}}], 0x40}, &(0x7f0000000480)=[@featur1={0x1, 0x4}], 0x1)
ioctl$KVM_IRQ_LINE(r8, 0x4008ae61, &(0x7f00000004c0)={0x0, 0x100})
ioctl$KVM_RUN(r10, 0xae80, 0x0)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x29)
ioctl$KVM_CAP_ARM_INJECT_SERROR_ESR(r1, 0x4068aea3, &(0x7f0000000300))
r13 = syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000bfe000/0x400000)=nil)
r14 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_ARM_VCPU_INIT(r14, 0x4020aeae, 0x0)
syz_kvm_add_vcpu$arm64(r13, &(0x7f0000000280)={0x0, 0x0, 0xfffffffffffffef3}, 0x0, 0x2d)
syz_kvm_vgic_v3_setup(r12, 0x4, 0x80)
ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f0000000140)={0x9f, 0x3b24})
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f0000000040)={0xdf, 0x0, 0x20000})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r15 = openat$kvm(0x0, &(0x7f00000000c0), 0x80, 0x0)
ioctl$KVM_CREATE_VM(r15, 0xae01, 0x2e)

31m22.669431427s ago: executing program 5 (id=578):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x400, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f0000000000)=[@mrs={0xbe, 0x18, {0x603000000013dce2}}], 0x18}, 0x0, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1)
r6 = openat$kvm(0x0, &(0x7f0000000380), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r7, 0x4008ae6a, &(0x7f00000003c0)={0x2, 0x0, [{0x0, 0x2, 0x0, 0x0, @sint={0x6, 0x5}}, {0x0, 0x2, 0x0, 0x0, @irqchip={0xb4a, 0x6}}]})
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000280)=@attr_arm64={0x0, 0x0, 0x3, 0x0})
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) (async)
r8 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_CREATE_GUEST_MEMFD(r9, 0xc040aed4, &(0x7f0000000300)={0x8, 0x3})
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000440)={0xffffffffffffffff, 0xc8, 0x3})
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x181900, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f00000004c0)={0x4, <r12=>0xffffffffffffffff, 0x1})
ioctl$KVM_CREATE_VM(r12, 0x801054db, 0x110d230008)
r13 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r14, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_ARM_VCPU_INIT(r3, 0x4020aeae, &(0x7f0000000340)={0x4, 0x21})
r15 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000100)={0x0, &(0x7f00000001c0)}, &(0x7f0000000200)=[@featur1={0x1, 0x4}], 0x1)
ioctl$KVM_RUN(r15, 0xae80, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r16 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r16, 0x401c5820, 0x8000000000000001)

31m7.77865635s ago: executing program 4 (id=579):
r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r2, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29)
r4 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r5, r6, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000140)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, &(0x7f00000001c0)=@arm64_core={0x6030000000100042, &(0x7f0000000200)=0xc5c4})
ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000240)=@arm64={0x0, 0x4, 0x42, '\x00', 0x2})
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0)
r7 = eventfd2(0x0, 0x0)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01)
r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000000000/0x4000)=nil, r8, 0x3000009, 0x11, r2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000001640), 0x0, 0x0)
write$eventfd(r7, &(0x7f0000000180)=0x5, 0xfffffde3)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0)

30m57.192042239s ago: executing program 5 (id=580):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x2a)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000002c0)={0xffffffffffffffff, 0xc8, 0x1})
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
openat$kvm(0x0, 0x0, 0x800, 0x0)
ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000340)={0x4, <r9=>0xffffffffffffffff, 0x1})
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000380)=@x86={0x11, 0x8, 0xf, 0x0, 0x5, 0xff, 0x86, 0x9, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x0, 0x4, 0x0, 0x3, 0x5, 0x8, '\x00', 0x9, 0x93})
write$eventfd(r9, &(0x7f00000003c0)=0x3, 0xfdef)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0)
syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
r10 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000200)={0x0, &(0x7f0000000400)=[@code={0xa, 0x9c, {"80018ed20060b8f2410180d2020080d2c30180d2640080d2020000d4000020ab007008d500d983d20060b0f2010080d2a20180d2630080d2440080d2020000d40060202e007008d50014005f60f89fd200c0b0f2210180d2420180d2a30080d2040080d2020000d4000040f940de9ad20040b8f2e10080d2e20080d2230080d2440080d2020000d4"}}], 0x9c}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
ioctl$KVM_ARM_SET_COUNTER_OFFSET(r3, 0x4010aeb5, &(0x7f00000000c0)={0x3, 0x2})
r11 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3)
ioctl$KVM_ARM_VCPU_INIT(r11, 0x4020aeae, &(0x7f0000000100)={0x5, 0x8})
ioctl$KVM_SET_ONE_REG(r11, 0x4010aeac, &(0x7f0000000140)=@arm64_core={0x6030000000100020, &(0x7f0000000180)=0xffffffff})
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x40, 0xeeef0000, 0x0, 0xffffffffffffffff, 0x9})

30m54.686697276s ago: executing program 4 (id=581):
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_PRE_FAULT_MEMORY(r0, 0xc040aed5, &(0x7f0000000000)={0xe000})
r1 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000040)={0x10003, 0x4, 0x30000, 0x1000, &(0x7f0000ffd000/0x1000)=nil, 0x0, r1})
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x9, 0xffffffffffffffff, 0x1})
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x18)
r3 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000140)={0x10000, 0x2})
ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x0, 0x1000, &(0x7f0000ffd000/0x1000)=nil, 0x0, r3})
ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000240)={0x7, 0x0, [{0xfffffffd, 0x3, 0x0, 0x0, @sint={0x7, 0x10000}}, {0x7ff, 0x5, 0x0, 0x0, @msi={0xfffffff9, 0x0, 0x7, 0x30ad}}, {0x8, 0x2, 0x1, 0x0, @adapter={0x7, 0x800, 0xb, 0x6, 0xfffffffc}}, {0x2, 0x1, 0x74a5162cd1e663ba, 0x0, @msi={0x0, 0x7, 0xffffffff}}, {0x7ff, 0x3, 0x1, 0x0, @msi={0x1ae, 0xc4d3, 0x3, 0x81}}, {0x100, 0x1, 0x0, 0x0, @adapter={0x8, 0x1, 0x1000, 0xb, 0x8}}, {0x7fffffff, 0x5, 0x1, 0x0, @adapter={0x7, 0xf0d, 0x400, 0x1, 0xfffffff8}}]})
ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000003c0)={0x104000, 0x1})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
close(r4)
ioctl$KVM_CAP_PTP_KVM(r1, 0x4068aea3, &(0x7f0000000400))
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
r5 = mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x0, 0x2000000, 0x30, r0, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000000480)="a52821b73b3a6b192feaddacb10b4741b482cfd041edfb5fcf6520712bee5fcdeaa65f65e4c6de1799f5cd1ada190ea70dcf9fdcd2cd223bbfcbbdd670100cdcd2314538081e63ca", 0x0, 0x48)
r6 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f00000006c0)={0x0, &(0x7f0000000500)=[@memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x18, 0x1800, 0x2}}, @hvc={0x32, 0x40, {0x0, [0x1, 0x7, 0x1ff, 0x681, 0x2]}}, @smc={0x1e, 0x40, {0x3000000, [0x8, 0x7, 0x10, 0x4, 0x1a7c]}}, @mrs={0xbe, 0x18, {0x6030000000139820}}, @msr={0x14, 0x20, {0x603000000013c2b0, 0x1000}}, @its_setup={0x82, 0x28, {0x4, 0x2, 0xd2}}, @its_setup={0x82, 0x28, {0x2, 0x0, 0x2b2}}, @msr={0x14, 0x20, {0x603000000013804d, 0x5}}, @code={0xa, 0x54, {"0000389e0038202e00008078002c98d200a0b0f2410080d2c20180d2030180d2840180d2020000d4000000110000c0da000008d5007008d5000028d50000800d"}}], 0x1ac}, &(0x7f0000000700)=[@featur1={0x1, 0x4}], 0x1)
r7 = ioctl$KVM_GET_STATS_FD_cpu(r6, 0xaece)
ioctl$KVM_CLEAR_DIRTY_LOG(r2, 0xc018aec0, &(0x7f0000000b40)={0x1fe, 0x300, 0x200, &(0x7f0000000740)=[0x4, 0x2, 0xffffffffffffffff, 0x553, 0x1, 0x0, 0x0, 0x47, 0x3ff, 0x5, 0x9, 0x9d38, 0x8, 0x1ff, 0x6, 0x9, 0x7, 0x0, 0x101, 0x2, 0x5, 0x2, 0xffffffffffffffff, 0xe, 0xe, 0x7, 0x6, 0xffffffffffffff00, 0x689fc7fb, 0x7, 0x6, 0xc, 0x6, 0x7, 0x10001, 0x5139, 0xba, 0x7, 0x6, 0x7fffffff, 0x0, 0xd, 0x2, 0x5, 0x7fffffff, 0x100000000, 0x4, 0x6, 0x2, 0x4, 0x2, 0x0, 0xec03, 0x6, 0x6, 0x7f, 0x8, 0x3, 0x4, 0x5, 0x7, 0x7fffffffffffffff, 0x7, 0x2, 0x3, 0x10000, 0x200, 0x8, 0x0, 0x53421e72, 0x3, 0x9, 0x75d851e2, 0x6, 0x7, 0x4, 0x7fff, 0x100, 0x6fd, 0x100000000, 0x5, 0xffffffff, 0x1000000000000, 0xfffffffffffffffa, 0x4, 0x6, 0x2e2a, 0x42a, 0x2, 0x4, 0xf1, 0x9, 0x10000, 0x6, 0xb, 0x2, 0x5, 0x1a5, 0x1000000, 0x1, 0x5, 0x8000000000000001, 0x6, 0x3, 0x5, 0x64b8, 0x0, 0x6e9d, 0x0, 0xffffffffffffffff, 0x9c, 0x2, 0x0, 0x9, 0x3, 0x40, 0x1000, 0x5, 0x8000000000000001, 0x80000001, 0x7fffffffffffffff, 0x5, 0x43, 0x1, 0x5, 0x9, 0x8, 0xc299]})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000b80), 0x40000, 0x0)
ioctl$KVM_ARM_VCPU_INIT(r6, 0x4020aeae, &(0x7f0000000bc0)={0x2, 0x20})
ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000c00))
ioctl$KVM_GET_VCPU_MMAP_SIZE(r7, 0xae04)
syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_setup_cpu$arm64(r2, r4, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000fc0)=[{0x0, &(0x7f0000000c80)=[@eret={0xe6, 0x18, 0xfffffffffffffffd}, @mrs={0xbe, 0x18, {0x603000000013dea5}}, @svc={0x122, 0x40, {0x80008000, [0x6, 0x6, 0x3, 0xffffffffffffffff, 0x2]}}, @code={0xa, 0xb4, {"007008d500809f0c605298d20060b8f2a10080d2220180d2a30180d2e40180d2020000d4a08988d20020b8f2a10180d2620080d2030180d2440080d2020000d4a0a49dd200a0b8f2610180d2620180d2a30180d2a40180d2020000d4000028d5008008d540359bd200a0b8f2410180d2220180d2c30080d2440080d2020000d400c0201e80009dd20080b0f2c10180d2220080d2630180d2840080d2020000d4"}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x0, 0x2, 0x7, 0x64ee, 0x9, 0x2}}, @code={0xa, 0x9c, {"60cf90d200a0b0f2a10080d2020080d2430080d2240180d2020000d400800088e0df82d200a0b8f2a10180d2e20080d2c30080d2c40080d2020000d4a0059bd20020b0f2210080d2220080d2630180d2640080d2020000d400c8307e000c00bce0db8fd200e0b8f2610180d2820180d2e30080d2e40080d2020000d4000440b800c8210e000028d5"}}, @code={0xa, 0xb4, {"0000781e007008d500009f0d40b09fd20020b0f2810180d2a20180d2c30180d2840080d2020000d460da90d20000b0f2a10180d2820080d2a30080d2040180d2020000d4804682d200c0b0f2010080d2e20080d2030180d2a40180d2020000d400fca09b008008d520da86d200c0b8f2e10180d2420080d2630180d2a40180d2020000d4401684d200e0b8f2410080d2020080d2430180d2c40180d2020000d4"}}, @uexit={0x0, 0x18, 0x1ff}, @uexit={0x0, 0x18, 0x80000000}, @its_send_cmd={0xaa, 0x28, {0xf, 0x1, 0x3, 0x10, 0x8, 0x5, 0x1}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xfffc, 0x6, 0xc}}], 0x324}], 0x1, 0x0, &(0x7f0000001000)=[@featur2={0x1, 0x2}], 0x1)
ioctl$KVM_SET_SIGNAL_MASK(r4, 0x4004ae8b, &(0x7f0000001040)={0x77, "ba70ef2c841b7aae43253330af200c26f883168c8911d4bdf4f49b8dda318334b7699291d620a697c826f86469039107b61f023adcc890e6d082ec01f97abed4ca0e01a105062563e80e03c837f9ae6b04bc43b51160d2d65caf8dcf812305d8269c554b1a4f9164c3a71946fd9a6c28b1c333ff7369de"})
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x4)
ioctl$KVM_CAP_PTP_KVM(r8, 0x4068aea3, &(0x7f00000010c0))

30m46.371126036s ago: executing program 4 (id=582):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4)
ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8})
ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000380)=@arm64_sve={0x6080000000150165, 0x0})
ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, &(0x7f0000000000)={0x2, [0xca, 0x3]})

30m40.699035864s ago: executing program 5 (id=583):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r4 = eventfd2(0xfffffffa, 0x80001)
ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000140)={0x80, 0x4, 0x0, r4})
r5 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000240)={0x1, 0x37d03030d7a92616})
ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000280)={0x1ffc, 0x2000})
ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f0000000300)={0xd, 0x101, 0x5})
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f00000002c0)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r7 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x33)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r8, 0x4010ae68, &(0x7f0000000040)={0xeeee0000, 0x3000})
r9 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000000)={0x0, &(0x7f0000000100)}, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
syz_kvm_vgic_v3_setup(r1, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, <r10=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80800, 0x0)
ioctl$KVM_CREATE_VM(r11, 0xae01, 0x5)
ioctl$KVM_RUN(r9, 0xae80, 0x0)

30m35.238924269s ago: executing program 4 (id=584):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000000c0)={0x3, <r2=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000180)=@attr_riscv64=@attr_aplic={0x0, 0x1, @valid=0x2000, &(0x7f0000000140)=0x4})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xeeee0000, 0x1000, &(0x7f0000fd1000/0x1000)=nil})
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r5, 0x0)
syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x1ff, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil})

29m53.856651784s ago: executing program 36 (id=583):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r4 = eventfd2(0xfffffffa, 0x80001)
ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000140)={0x80, 0x4, 0x0, r4})
r5 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000240)={0x1, 0x37d03030d7a92616})
ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000280)={0x1ffc, 0x2000})
ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f0000000300)={0xd, 0x101, 0x5})
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f00000002c0)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r7 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x33)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r8, 0x4010ae68, &(0x7f0000000040)={0xeeee0000, 0x3000})
r9 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000000)={0x0, &(0x7f0000000100)}, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
syz_kvm_vgic_v3_setup(r1, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, <r10=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80800, 0x0)
ioctl$KVM_CREATE_VM(r11, 0xae01, 0x5)
ioctl$KVM_RUN(r9, 0xae80, 0x0)

29m46.762852894s ago: executing program 37 (id=584):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000000c0)={0x3, <r2=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000180)=@attr_riscv64=@attr_aplic={0x0, 0x1, @valid=0x2000, &(0x7f0000000140)=0x4})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xeeee0000, 0x1000, &(0x7f0000fd1000/0x1000)=nil})
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r5, 0x0)
syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x1ff, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil})

13m32.712723482s ago: executing program 6 (id=633):
r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0)
r1 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x88302, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x2a)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0)
syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r1, &(0x7f00000005c0)={0x0, &(0x7f0000000600)=[@msr={0x14, 0x20, {0x603000000013dea0, 0x8}}], 0x20}, &(0x7f0000000640)=[@featur1={0x1, 0x4}], 0x1)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x28)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000300)={0x0, &(0x7f0000000340)=[@msr={0x14, 0x20, {0x1fad, 0x9}}], 0x20}, 0x0, 0x0)
r7 = eventfd2(0x3, 0x0)
write$eventfd(r7, &(0x7f0000000000)=0xfffffffffffffffc, 0x8)
write$eventfd(r7, &(0x7f0000000040)=0x8c49, 0x8)
r8 = openat$kvm(0x0, &(0x7f0000000080), 0x101e40, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x1})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x40)
ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000240)={0x4, <r10=>0xffffffffffffffff, 0x1})
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000280)=@x86={0x11, 0x9, 0xf, 0x0, 0x5, 0x6, 0x6, 0x6, 0x47, 0x8a, 0xdd, 0xcc, 0x0, 0xce, 0x5, 0x4, 0x3, 0xf8, 0x8, '\x00', 0x1, 0x400000000002})
write$eventfd(r10, &(0x7f0000000380)=0x6, 0x8)
r11 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[@hvc={0x32, 0xffffffffffffff51, {0x84000051, [0x84000056, 0xa, 0x4009, 0x0, 0x7f]}}], 0x67}, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x2c)
ioctl$KVM_SET_DEVICE_ATTR_vm(0xffffffffffffffff, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000180)={0x4, 0x2}})
openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x20c483, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
ioctl$KVM_CREATE_GUEST_MEMFD(r13, 0xc040aed4, &(0x7f0000000440)={0x200001fe0000, 0x3})

13m7.616244625s ago: executing program 6 (id=635):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}, @its_setup={0x82, 0x28, {0x1, 0x1, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x3}}], 0x68}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, <r4=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000240)=@attr_arm64={0x0, 0x4, 0x0, 0x0})
r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
r6 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r5, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_kvm_assert_syzos_uexit$arm64(r3, r6, 0xfffffffffffffffe)
r7 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_REGISTER_COALESCED_MMIO(r8, 0x4010ae67, &(0x7f0000000040)={0x80a0000, 0x17000})
r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000280)={0x0, &(0x7f00000002c0)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x1}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r8, 0xfffffffffffffffd, 0x60)
syz_kvm_setup_cpu$arm64(r1, r10, &(0x7f0000b11000/0x400000)=nil, &(0x7f0000000680)=[{0x0, &(0x7f0000000400)=[@its_setup={0x82, 0x28, {0x0, 0x1, 0xd8}}, @eret={0xe6, 0x18, 0x1}, @its_setup={0x82, 0x28, {0x4, 0x1, 0x110}}, @eret={0xe6, 0x18, 0x7}, @code={0xa, 0x6c, {"007008d50000005e008020c80068601e60c59fd20080b0f2410080d2220080d2230180d2240180d2020000d4007008d50000800d007008d51f00006b402188d200a0b0f2010080d2620180d2430080d2e40180d2020000d4"}}, @its_setup={0x82, 0x28, {0x4, 0x0, 0x1b5}}, @msr={0x14, 0x20, {0x603000000013e101, 0x8001}}, @msr={0x14, 0x20, {0x603000000013deac, 0x7f}}, @msr={0x14, 0x20, {0x603000000013df05, 0x65a41796}}, @mrs={0xbe, 0x18, {0x603000000013c65f}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x10040, 0xfffffffffffffffa, 0x6}}, @uexit={0x0, 0x18, 0x510}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xffe8, 0x7f, 0x6}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80a0000, 0x288, 0x4, 0x2}}, @uexit={0x0, 0x18, 0x3ff}], 0x24c}], 0x1, 0x0, &(0x7f00000006c0)=[@featur2={0x1, 0x4e}], 0x1)
ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000340)={0x8, <r11=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f0000000380)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f00000003c0)=0x8080000})
ioctl$KVM_RUN(r10, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_kvm_assert_syzos_uexit$arm64(r3, r6, 0xffffffffffffffff)

12m50.278370033s ago: executing program 6 (id=637):
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000080)={0xffffffffffffffff, 0x1c8, 0x1})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x181900, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$kvm(0x0, &(0x7f00000001c0), 0x846ef1cd52193323, 0x0)
ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000200)=@arm64_core={0x603000000010004a, &(0x7f0000000480)=0xfffffffffffffffc})
r2 = ioctl$KVM_CREATE_VM(r0, 0x401c5820, 0x13)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x6, <r3=>0xffffffffffffffff, 0x1})
ioctl$KVM_GET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000340)=@attr_set_pmu={0x0, 0x0, 0x3, &(0x7f0000000300)=0x3})
ioctl$KVM_CREATE_VM(r1, 0x400454da, 0x35)
r4 = openat$kvm(0x0, &(0x7f0000000400), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
ioctl$KVM_ARM_VCPU_INIT(r6, 0x4020aeae, &(0x7f0000000440)={0x5, 0x1})
ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, &(0x7f0000000540)=@arm64_fp={0x604000000010007e, &(0x7f00000002c0)=0x1})
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x503000, 0x0)
ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x3)
r8 = openat$kvm(0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r8, 0x40086602, 0x110e22ffff)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000380)={0xffffffffffffffff, 0xc8})
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x181900, 0x0)
ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400082, 0x0)
r10 = openat$kvm(0x0, &(0x7f00000004c0), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x11)
r12 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil)
r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000040)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000000000)=0x9)
syz_kvm_vgic_v3_setup(r11, 0x1, 0x100)
ioctl$KVM_GET_DEVICE_ATTR(r3, 0x4018aee2, &(0x7f0000000140)=@attr_riscv64=@attr_imsic={0x0, 0x1, 0x8000005, &(0x7f0000000580)=0xae9})
ioctl$KVM_CREATE_VM(r13, 0xae01, 0x38)

12m45.838909148s ago: executing program 7 (id=638):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000280)={0x0, &(0x7f0000000480)=[@mrs={0xbe, 0x18, {0x603000000013f288}}, @memwrite={0x6e, 0x45, @vgic_gicd={0x8000000, 0x2000, 0x76b, 0xc}}, @code={0xa, 0x9c, {"805984d20060b0f2a10180d2620180d2630180d2a40180d2020000d400b4202e0090802f20cd9ad20020b0f2e10080d2820080d2230180d2640180d2020000d460b786d20000b8f2210080d2e20080d2230080d2c40080d2020000d400d4a07e0060df0ca0769fd20020b0f2c10180d2220080d2430080d2640180d2020000d4007008d50004202e"}}, @its_setup={0x82, 0x28, {0x0, 0x3, 0x800}}, @code={0xa, 0x84, {"20e693d200c0b8f2010180d2220180d2830080d2a40180d2020000d40060202e1f0020ab00a4000d000cc038a09b89d200c0b0f2a10080d2a20080d2430180d2440180d2020000d400c0206e00ae8ed20080b8f2e10180d2620180d2e30180d2840180d2020000d4000028d5000028d5"}}, @code={0xa, 0x84, {"008008d560928dd200c0b8f2410080d2020180d2230080d2a40080d2020000d40000800c0040600d000040b8007008d5e0129dd20040b0f2e10180d2220080d2430180d2240180d2020000d4007008d500e4207e405592d20040b0f2810180d2220080d2c30180d2640180d2020000d4"}}, @its_setup={0x82, 0x28, {0xffffffffffffffff, 0x3, 0xbf}}, @svc={0x122, 0x40, {0xc400000e, [0x98, 0x184, 0x4800, 0x9, 0x7]}}, @irq_setup={0x46, 0x0, {0x2, 0x263}}, @hvc={0x32, 0x40, {0x0, [0x2, 0x80000001, 0x1, 0xfffffffffffffffe, 0x3091]}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x300, 0x6, 0x9}}, @code={0xa, 0x6c, {"000028d5007008d5007c202e007008d5007008d5c0f687d200a0b8f2210180d2620180d2e30180d2a40180d2020000d4403b8dd200e0b8f2010080d2c20180d2c30080d2240080d2020000d41f0000f1004c200e008008d5"}}, @eret={0xe6, 0x18, 0x1}], 0x3b0}, 0x0, 0x0)
r6 = syz_kvm_vgic_v3_setup(r3, 0x1, 0x100)
r7 = openat$kvm(0x0, &(0x7f0000000300), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000340)={0x0, &(0x7f0000000380)=[@mrs={0xbe, 0x18, {0x603000000013df63}}], 0x18}, 0x0, 0x0)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f00000003c0)=@x86={0xf0, 0x1, 0xfc, 0x0, 0x5, 0x9, 0x4, 0x3, 0xf, 0x6, 0x0, 0x3, 0x0, 0x84d, 0x10, 0x2b, 0x9, 0x4, 0xdf, '\x00', 0x9, 0x6})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000400)=@attr_other={0x0, 0x5, 0x7, &(0x7f0000000440)=0x7fffffffffffffff})
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
r13 = ioctl$KVM_CREATE_GUEST_MEMFD(r12, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3})
r14 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r15 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r16 = ioctl$KVM_CREATE_VM(r15, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r16, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_SET_DEVICE_ATTR_vm(r16, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)={0x5, 0x28, 0x1}})
r17 = syz_kvm_add_vcpu$arm64(r14, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[@smc={0x1e, 0x40, {0x1000, [0x8, 0x7, 0xa, 0x0, 0x3]}}], 0x40}, 0x0, 0x0)
ioctl$KVM_RUN(r17, 0xae80, 0x0)
r18 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, r18, 0x2000003, 0x2013, r13, 0x0)
r19 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04)
mmap$KVM_VCPU(&(0x7f0000007000/0x2000)=nil, r19, 0x3000003, 0x2011, r13, 0x0)

12m33.618967863s ago: executing program 6 (id=639):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8800, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = eventfd2(0x40000000, 0x80000)
ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000001c0)={0x0, 0x0, 0x2, r4, 0x3})
ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000200)={0x5, 0x0, 0x0, r4, 0xa})
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0xc8})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f00000003c0)={0x6000, 0x8000})
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, 0x0)
ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f00000000c0)={0x4, <r7=>0xffffffffffffffff, 0x1})
r8 = openat$kvm(0x0, &(0x7f0000000300), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil)
r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000340)={0x0, &(0x7f0000000380)=[@msr={0x14, 0x20, {0x603000000013dcea, 0x8000}}], 0x20}, 0x0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r11, 0x4018aee1, 0x0)
ioctl$KVM_HAS_DEVICE_ATTR_vm(r9, 0x4018aee3, 0x0)
ioctl$KVM_RUN(r11, 0xae80, 0x0)
write$eventfd(r7, &(0x7f0000000100)=0x3, 0x10)
r12 = openat$kvm(0x0, &(0x7f0000000400), 0x0, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
r14 = syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000c00000/0x400000)=nil)
r15 = syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000c00000/0x400000)=nil)
r16 = syz_kvm_add_vcpu$arm64(r15, &(0x7f0000000440)={0x0, 0x0}, &(0x7f0000000480)=[@featur1={0x1, 0x4}], 0x1)
ioctl$KVM_SET_ONE_REG(r16, 0x4010aeac, &(0x7f00000004c0)=@arm64_fw={0x6030000000140000, &(0x7f0000000500)=0x10001})
r17 = syz_kvm_add_vcpu$arm64(r14, &(0x7f0000000540)={0x0, &(0x7f0000000580)=[@smc={0x1e, 0x40, {0x8400000a, [0x3, 0x6e, 0x7f, 0x9, 0x9]}}], 0x40}, &(0x7f00000005c0)=[@featur1={0x1, 0x4}], 0x1)
ioctl$KVM_RUN(r17, 0xae80, 0x0)

12m22.25640602s ago: executing program 7 (id=640):
mmap$KVM_VCPU(&(0x7f0000e88000/0x2000)=nil, 0x50000, 0x2000002, 0x10031, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000e89000/0x1000)=nil, 0x1000) (fail_nth: 3)

12m9.526589195s ago: executing program 7 (id=641):
r0 = mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0)
r1 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece)
ioctl$KVM_SET_SREGS(r1, 0x4000ae84, &(0x7f0000000180)={{0xdddd0000, 0x5000, 0xa, 0x8, 0xa5, 0x2, 0xc1, 0x6, 0x0, 0xff, 0x7, 0x8}, {0x70000, 0x4, 0xe, 0x4, 0xff, 0x3, 0x2, 0x8, 0x9, 0x37, 0x8, 0x2}, {0x1000, 0xdddd1000, 0x9, 0x5, 0x3, 0x4, 0x1, 0x4, 0x16, 0xce, 0x1, 0x7a}, {0xd000, 0x133329000, 0x3, 0x8, 0xbd, 0x0, 0xff, 0x1, 0x90, 0x5, 0x2, 0x26}, {0x6000, 0x25000, 0x9, 0x4, 0x4, 0x0, 0x3, 0xc, 0xe, 0x0, 0xa3, 0x50}, {0x26000, 0xffff1000, 0x4, 0xd, 0x81, 0x6, 0x59, 0x6, 0x6, 0x5, 0xf, 0xc6}, {0x4, 0xb000, 0x0, 0x4, 0x6, 0x7, 0x4, 0x40, 0x80, 0x3, 0x6, 0x3e}, {0xd000, 0xe000, 0xb, 0x9, 0x5, 0x9, 0xd, 0x1, 0x4, 0x0, 0x9, 0x8}, {0xfec00000}, {0xffffffff, 0xa}, 0x40000000, 0x0, 0x2ffc, 0xf91912760f60380b, 0xf, 0x8100, 0xfec00000, [0x508, 0x4cd, 0xa, 0x200]}) (async)
r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0x80111500, 0x20000000)
ioctl$KVM_CREATE_VM(r4, 0x541b, 0x2000001c) (async)
r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
r6 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000140)={0x8, <r8=>0xffffffffffffffff})
ioctl$KVM_GET_DEVICE_ATTR(r8, 0x4018aee2, &(0x7f0000000600)=@attr_arm64={0x0, 0x0, 0x1, 0x0})
r9 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f00000000c0)={0x0, &(0x7f00000002c0)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x4}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000004}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r5, 0x1, 0x100) (async)
r11 = openat$kvm(0x0, &(0x7f0000000480), 0x2002, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0xfffffffffffffffd) (async)
r13 = eventfd2(0x2, 0x0)
ioctl$KVM_IOEVENTFD(r12, 0x4040ae79, &(0x7f00000004c0)={0x5, 0x8000000, 0x8, r13, 0x7}) (async)
ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000500)={r13, 0x3000000, 0x3, r1}) (async)
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000340)={0x8, <r14=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r14, 0x4018aee1, &(0x7f0000000380)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f00000003c0)=0x8080000}) (async)
ioctl$KVM_RUN(r10, 0xae80, 0x0) (async)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000000)="37e68984ac644f5dc57bbc1ff382863b67f3eee57a32ec911d95f88f3dd8ea716e4a29cefbd440b2ecf83f05baf33b0c9718290200000000000000f2055384921830f6e273d2eb30", 0x0, 0x48) (async)
ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f0000000440)=@riscv64_v={0x8030000009000014, &(0x7f0000000400)=0xdbf}) (async)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000580)="746abf250f7959c813e4adfb369b808022e69fe80cfadce4a1259e77bab54ac9749537b3d016bb7f745a6e22d2f9ff443f19467748a3fe02c239457600", 0x0, 0x48)

12m8.329047634s ago: executing program 6 (id=642):
r0 = openat$kvm(0x0, &(0x7f0000000000), 0x80, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000340), 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b6565d2f1, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x0, 0x1000000, 0x30, 0xffffffffffffffff, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_vgic_v3_setup(r2, 0x2, 0x100)
r3 = eventfd2(0x10000, 0x0)
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r3, 0x3, 0x2})
r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1d)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x6)
r6 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000140)={0x4, <r8=>0xffffffffffffffff})
r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1c)
ioctl$KVM_SET_GSI_ROUTING(r9, 0x4008ae6a, &(0x7f00000001c0)={0x7, 0x0, [{0x5, 0x1, 0x1, 0x0, @irqchip={0x4, 0x2}}, {0xc, 0x4, 0x1, 0x0, @adapter={0x7, 0x3, 0x8001, 0x44f9, 0x7}}, {0x8, 0x5, 0x1, 0x0, @msi={0x6, 0x80000000, 0xc00, 0x4}}, {0x8, 0x1, 0x0, 0x0, @adapter={0x305e, 0x7, 0x1, 0x0, 0x1000}}, {0x80000000, 0x3, 0x1, 0x0, @adapter={0x10001, 0x1, 0x80000000, 0x800, 0x9}}, {0x0, 0x4, 0x1, 0x0, @adapter={0x7, 0x7f, 0x800, 0x80000001, 0x7}}, {0x335, 0x2, 0x1, 0x0, @irqchip={0x4, 0x834a}}]})
write$eventfd(r8, &(0x7f0000000180)=0xfffffffffffffdff, 0x8)
ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f0000000040)={0x10000, 0x10000, 0x1000000})
munmap$KVM_VCPU(0x0, 0x1000000000)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
syz_kvm_vgic_v3_setup(r11, 0xff7fffffffffffff, 0x360)
ioctl$KVM_SIGNAL_MSI(r11, 0x4020aea5, &(0x7f0000000400)={0x9000, 0x2000, 0x401, 0x0, 0x7d})
ioctl$KVM_CAP_DIRTY_LOG_RING(r11, 0x4068aea3, &(0x7f0000000440)={0xc0, 0x0, 0x40000})
r12 = syz_kvm_vgic_v3_setup(r4, 0x2, 0x180)
ioctl$KVM_SET_DEVICE_ATTR(r12, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x1, 0x0, &(0x7f0000000080)=0x5})
r13 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece)
close(r13)
mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x8, 0x20031, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xc, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x20000000)

11m53.426501614s ago: executing program 7 (id=643):
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000)
r0 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1800, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2b)
r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000aec000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000140)=@arm64={0x7, 0x0, 0xfc, '\x00', 0x4})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000180)=@arm64={0xd, 0x8, 0x7, '\x00', 0x2d})
mmap$KVM_VCPU(&(0x7f0000ffc000/0x1000)=nil, r0, 0x1000000, 0x116010, r4, 0x0)
r5 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f00000001c0)="d5f5f543d3681d26b4d9f0ffffffff7b41345c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc0000000000000000000100", 0x0, 0x48)
r6 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32)
r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0)
syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000bfe000/0x400000)=nil)

11m50.768986007s ago: executing program 6 (id=644):
r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) (async)
r3 = openat$kvm(0x0, &(0x7f0000000000), 0x800, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x2e)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async, rerun: 64)
r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34) (rerun: 64)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r6, r7, &(0x7f0000bfe000/0x400000)=nil, &(0x7f00000001c0)=[{0x0, 0x0, 0x4b0}], 0x1, 0x0, &(0x7f0000000200)=[@featur1={0x1, 0x80}], 0x1) (async)
syz_kvm_setup_cpu$arm64(0xffffffffffffffff, r7, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000240)=[{0x0, &(0x7f0000000300)}], 0x1, 0x0, &(0x7f00000003c0)=[@featur1={0x1, 0x6}], 0x1) (async)
syz_kvm_setup_cpu$arm64(r4, r5, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) (async)
r8 = openat$kvm(0xffffffffffffff9c, 0x0, 0x42, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_CREATE_GUEST_MEMFD(r9, 0xc040aed4, 0x0) (async)
ioctl$KVM_SET_ONE_REG(r5, 0x4010aeac, &(0x7f0000000080)=@arm64_ccsidr={0x6020000000110001, 0x0}) (async, rerun: 64)
r10 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[@msr={0x14, 0x20, {0x603000000013df60, 0x8000}}, @msr={0x14, 0x20, {0x603000000013df7f, 0x8000}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x8}], 0x1) (rerun: 64)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r10, 0x4018aee1, &(0x7f00000002c0)=@attr_pmu_init) (async, rerun: 32)
ioctl$KVM_RUN(r10, 0xae80, 0x0) (rerun: 32)

11m35.19335851s ago: executing program 7 (id=645):
mmap$KVM_VCPU(&(0x7f0000e88000/0x2000)=nil, 0x50000, 0x2000002, 0x10031, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000e89000/0x1000)=nil, 0x1000) (fail_nth: 4)

11m22.77807179s ago: executing program 7 (id=646):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r2 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000280)={0x7}) (async)
r4 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000780)={0x0, 0x6000, 0x0, r4}) (async)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async)
r7 = eventfd2(0x8, 0x80800)
ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000800)={0x8000000000000000, 0x0, 0x2, r7, 0x3}) (async)
ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000840)={0x4, 0xd000, 0x8, r7, 0xa}) (async)
ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000880)={0x8000, 0x0, 0x2, r7, 0x3}) (async)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000007c0)={r7, 0xc6, 0x1, r4})
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000080)={0x4, <r10=>0xffffffffffffffff, 0x1})
ioctl$KVM_HAS_DEVICE_ATTR(r10, 0x4018aee3, &(0x7f00000000c0)=@attr_other={0x0, 0x7, 0x8, &(0x7f0000000100)=0x3}) (async)
r11 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) (async)
r12 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_CLEAR_DIRTY_LOG(r9, 0xc018aec0, &(0x7f0000000740)={0x10002, 0x1c0, 0x0, &(0x7f0000000340)=[0x5, 0x3cdf73e0, 0x9, 0x10, 0xfffffffffffffff2, 0xfffffffffffffffd, 0x2, 0x32, 0x8, 0x5, 0x100000001, 0x8a02, 0x7, 0xf9, 0x4, 0x100, 0x5, 0x9, 0x1c0, 0xffff, 0x2, 0x9, 0x100000001, 0x8000000000000001, 0xe, 0x1e, 0x7, 0x7ef, 0x10000, 0x4, 0x7, 0x2, 0x8, 0x1, 0xfffffffffffffffe, 0xff, 0x9, 0x9de6, 0x5, 0xa, 0x401, 0x6, 0x6, 0x1, 0x2, 0x7fffffff, 0x4, 0x3, 0x3, 0x4, 0xfffffffffffffff3, 0x2, 0xfffffffffffffffb, 0x5, 0x1, 0x800, 0x6f09, 0xce7b, 0x8, 0x7ff, 0xfffffffffffffffb, 0x0, 0x38aa, 0x9, 0xffffffffffffffff, 0x400, 0xfff, 0x401, 0x7fff, 0x1, 0x2, 0x0, 0x7, 0x9, 0xbf, 0x800, 0x4, 0x3, 0x3, 0x6, 0x101, 0x80000001, 0x6, 0x487, 0x7cc2f64e, 0x6, 0x8, 0xffffffff, 0x7, 0x4, 0x6b, 0x2, 0x0, 0xa8, 0x4, 0xfffffffffffffffc, 0x5, 0x40, 0x8, 0xffffffffffffffff, 0x7fffffffffffffff, 0x7ff, 0xffffffff, 0x7fff, 0x94f, 0x4, 0x9, 0x1, 0x4, 0x6, 0x0, 0x6, 0x84, 0xa2, 0x6, 0x9, 0x4, 0x5, 0x0, 0x8, 0x1, 0x5, 0x3, 0x1ff, 0x7fffffff, 0x900000000000, 0x6, 0x1]}) (async)
syz_kvm_add_vcpu$arm64(r12, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x81}], 0x1)
r13 = openat$kvm(0x0, &(0x7f00000008c0), 0x0, 0x0)
r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000900)={0x8, <r15=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r15, 0x4018aee1, &(0x7f0000000940)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000980)=0x8080000}) (async)
ioctl$KVM_GET_DEVICE_ATTR(r15, 0x4018aee2, &(0x7f00000009c0)=@attr_other={0x0, 0x8, 0x90, 0xffffffffffffffff})
r16 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r16, 0xae03, 0x80)
syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013c65d, 0xfffdffffc1af0ec0}}], 0x20}, 0x0, 0xffffffffffffff92)

11m2.736336952s ago: executing program 38 (id=644):
r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) (async)
r3 = openat$kvm(0x0, &(0x7f0000000000), 0x800, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x2e)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async, rerun: 64)
r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34) (rerun: 64)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r6, r7, &(0x7f0000bfe000/0x400000)=nil, &(0x7f00000001c0)=[{0x0, 0x0, 0x4b0}], 0x1, 0x0, &(0x7f0000000200)=[@featur1={0x1, 0x80}], 0x1) (async)
syz_kvm_setup_cpu$arm64(0xffffffffffffffff, r7, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000240)=[{0x0, &(0x7f0000000300)}], 0x1, 0x0, &(0x7f00000003c0)=[@featur1={0x1, 0x6}], 0x1) (async)
syz_kvm_setup_cpu$arm64(r4, r5, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) (async)
r8 = openat$kvm(0xffffffffffffff9c, 0x0, 0x42, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_CREATE_GUEST_MEMFD(r9, 0xc040aed4, 0x0) (async)
ioctl$KVM_SET_ONE_REG(r5, 0x4010aeac, &(0x7f0000000080)=@arm64_ccsidr={0x6020000000110001, 0x0}) (async, rerun: 64)
r10 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[@msr={0x14, 0x20, {0x603000000013df60, 0x8000}}, @msr={0x14, 0x20, {0x603000000013df7f, 0x8000}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x8}], 0x1) (rerun: 64)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r10, 0x4018aee1, &(0x7f00000002c0)=@attr_pmu_init) (async, rerun: 32)
ioctl$KVM_RUN(r10, 0xae80, 0x0) (rerun: 32)

10m34.429825269s ago: executing program 39 (id=646):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r2 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000280)={0x7}) (async)
r4 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000780)={0x0, 0x6000, 0x0, r4}) (async)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async)
r7 = eventfd2(0x8, 0x80800)
ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000800)={0x8000000000000000, 0x0, 0x2, r7, 0x3}) (async)
ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000840)={0x4, 0xd000, 0x8, r7, 0xa}) (async)
ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000880)={0x8000, 0x0, 0x2, r7, 0x3}) (async)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000007c0)={r7, 0xc6, 0x1, r4})
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000080)={0x4, <r10=>0xffffffffffffffff, 0x1})
ioctl$KVM_HAS_DEVICE_ATTR(r10, 0x4018aee3, &(0x7f00000000c0)=@attr_other={0x0, 0x7, 0x8, &(0x7f0000000100)=0x3}) (async)
r11 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) (async)
r12 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_CLEAR_DIRTY_LOG(r9, 0xc018aec0, &(0x7f0000000740)={0x10002, 0x1c0, 0x0, &(0x7f0000000340)=[0x5, 0x3cdf73e0, 0x9, 0x10, 0xfffffffffffffff2, 0xfffffffffffffffd, 0x2, 0x32, 0x8, 0x5, 0x100000001, 0x8a02, 0x7, 0xf9, 0x4, 0x100, 0x5, 0x9, 0x1c0, 0xffff, 0x2, 0x9, 0x100000001, 0x8000000000000001, 0xe, 0x1e, 0x7, 0x7ef, 0x10000, 0x4, 0x7, 0x2, 0x8, 0x1, 0xfffffffffffffffe, 0xff, 0x9, 0x9de6, 0x5, 0xa, 0x401, 0x6, 0x6, 0x1, 0x2, 0x7fffffff, 0x4, 0x3, 0x3, 0x4, 0xfffffffffffffff3, 0x2, 0xfffffffffffffffb, 0x5, 0x1, 0x800, 0x6f09, 0xce7b, 0x8, 0x7ff, 0xfffffffffffffffb, 0x0, 0x38aa, 0x9, 0xffffffffffffffff, 0x400, 0xfff, 0x401, 0x7fff, 0x1, 0x2, 0x0, 0x7, 0x9, 0xbf, 0x800, 0x4, 0x3, 0x3, 0x6, 0x101, 0x80000001, 0x6, 0x487, 0x7cc2f64e, 0x6, 0x8, 0xffffffff, 0x7, 0x4, 0x6b, 0x2, 0x0, 0xa8, 0x4, 0xfffffffffffffffc, 0x5, 0x40, 0x8, 0xffffffffffffffff, 0x7fffffffffffffff, 0x7ff, 0xffffffff, 0x7fff, 0x94f, 0x4, 0x9, 0x1, 0x4, 0x6, 0x0, 0x6, 0x84, 0xa2, 0x6, 0x9, 0x4, 0x5, 0x0, 0x8, 0x1, 0x5, 0x3, 0x1ff, 0x7fffffff, 0x900000000000, 0x6, 0x1]}) (async)
syz_kvm_add_vcpu$arm64(r12, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x81}], 0x1)
r13 = openat$kvm(0x0, &(0x7f00000008c0), 0x0, 0x0)
r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000900)={0x8, <r15=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r15, 0x4018aee1, &(0x7f0000000940)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000980)=0x8080000}) (async)
ioctl$KVM_GET_DEVICE_ATTR(r15, 0x4018aee2, &(0x7f00000009c0)=@attr_other={0x0, 0x8, 0x90, 0xffffffffffffffff})
r16 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r16, 0xae03, 0x80)
syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013c65d, 0xfffdffffc1af0ec0}}], 0x20}, 0x0, 0xffffffffffffff92)

2m4.549920028s ago: executing program 8 (id=647):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0xb, <r2=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000002c0)=@attr_arm64={0x0, 0x4, 0x0, 0x0})
r3 = eventfd2(0x8801, 0x800)
r4 = eventfd2(0x3ff, 0x0)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r4, 0x5, 0x2, r4})
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={r4, 0x5, 0x2, r3})

1m23.580324295s ago: executing program 9 (id=648):
mmap$KVM_VCPU(&(0x7f0000e88000/0x2000)=nil, 0x50000, 0x2000002, 0x10031, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000e89000/0x1000)=nil, 0xf00)

1m15.760360629s ago: executing program 40 (id=647):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0xb, <r2=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000002c0)=@attr_arm64={0x0, 0x4, 0x0, 0x0})
r3 = eventfd2(0x8801, 0x800)
r4 = eventfd2(0x3ff, 0x0)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r4, 0x5, 0x2, r4})
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={r4, 0x5, 0x2, r3})

1m9.068962941s ago: executing program 9 (id=650):
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x1, <r0=>0xffffffffffffffff, 0xff2d317e2e58cec6})
ioctl$KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, &(0x7f0000000080)=@attr_riscv64=@attr_imsic={0x0, 0x1, 0xfffffffffffffff8, &(0x7f0000000040)=0x21381a63}) (async)
r1 = eventfd2(0xfffffff9, 0x1000) (async)
r2 = eventfd2(0x3, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000000c0)={r1, 0x1, 0x1, r2}) (async)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1e)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x1, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) (async)
ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f0000000140)={0x9, 0x3}) (async)
ioctl$KVM_CAP_ARM_MTE(r3, 0x4068aea3, &(0x7f0000000180))
r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2)
ioctl$KVM_CLEAR_DIRTY_LOG(r4, 0xc018aec0, &(0x7f0000000600)={0x10004, 0x300, 0x80, &(0x7f0000000200)=[0x8d7, 0x2, 0x8e, 0xc51e, 0x8, 0x8000000000000000, 0xec53, 0x6, 0x13, 0x6d, 0x0, 0xf59, 0x9, 0x5, 0xad7, 0x1, 0x6, 0x4, 0x3, 0x200, 0x67, 0x3, 0x6, 0xd6, 0x1000, 0x4, 0x7, 0x1, 0x4, 0x7, 0x24, 0xfe68, 0xffffffffffffff63, 0x9, 0x7, 0x635c, 0x23d5, 0xad, 0x8, 0x1, 0x6, 0x0, 0x401, 0x5, 0x1, 0x8, 0xfffffffffffffffd, 0x8000000000000000, 0x10000, 0xd, 0x40, 0xfffffffffffffffc, 0xfff, 0x40, 0x80000000, 0x1, 0x800, 0x7f, 0x3, 0x80, 0x0, 0x6, 0x5, 0x9, 0x6, 0x8517, 0x100, 0x8d, 0x8, 0x4, 0x34, 0x8, 0x9, 0x401, 0xa, 0xfffffffffffffffd, 0x1, 0x4, 0x4, 0x7d6e, 0x1, 0x101, 0x8, 0x73, 0x10, 0x8, 0x8, 0xbe3, 0x8, 0x5, 0x40000, 0x3, 0x0, 0x3, 0x9, 0x4, 0xfffffffffffffff9, 0x7, 0x81, 0x101, 0x0, 0x6, 0x6, 0x81, 0xfff, 0x5, 0x6de1, 0x1, 0x80, 0x0, 0x4, 0x40, 0x9, 0x1, 0x8001, 0x0, 0x2, 0xaa3, 0x5, 0x1, 0x6, 0x100000000, 0x7fff, 0x8000000000000000, 0x93c, 0x8, 0x6, 0x3]}) (async)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000640), 0x636b80, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04)
ioctl$KVM_CAP_ARM_SYSTEM_SUSPEND(r4, 0x4068aea3, &(0x7f0000000680)) (async)
r6 = syz_kvm_vgic_v3_setup(r4, 0x1, 0x2c0) (async)
r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x21)
ioctl$KVM_CAP_ARM_MTE(r7, 0x4068aea3, &(0x7f0000000700))
ioctl$KVM_CAP_ARM_INJECT_SERROR_ESR(r3, 0x4068aea3, &(0x7f0000000780)) (async)
ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000840)=@attr_riscv64=@attr_config={0x0, 0x1, 0x0, &(0x7f0000000800)=0x97}) (async)
r8 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000a40)={0x0, &(0x7f0000000880)=[@memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x40, 0x5, 0x3}}, @svc={0x122, 0x40, {0x8400000c, [0x7, 0xffffffffffffff71, 0x1000, 0x1000, 0x6]}}, @mrs={0xbe, 0x18, {0x603000000013e6db}}, @hvc={0x32, 0x40, {0x8400000a, [0xffffffffffffffff, 0x6, 0x0, 0x98, 0x2]}}, @its_setup={0x82, 0x28, {0x3, 0x4, 0x98}}, @its_send_cmd={0xaa, 0x28, {0x5, 0x0, 0x3, 0xa, 0x8000, 0x2, 0x3}}, @smc={0x1e, 0x40, {0xffff, [0x5, 0x4, 0x8000000000000001, 0xffffffff, 0x1]}}, @eret={0xe6, 0x18, 0xccc}, @uexit={0x0, 0x18, 0x1}], 0x188}, &(0x7f0000000a80)=[@featur2={0x1, 0x12}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r8, 0x4018aee1, &(0x7f0000000b00)=@attr_irq_timer={0x0, 0x1, 0x0, &(0x7f0000000ac0)=0x1f})
ioctl$KVM_RUN(r8, 0xae80, 0x0) (async)
syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) (async)
r9 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x35)
ioctl$KVM_CAP_ARM_SYSTEM_SUSPEND(r9, 0x4068aea3, &(0x7f0000000b40)) (async)
r10 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x7)
ioctl$KVM_CAP_HALT_POLL(r10, 0x4068aea3, &(0x7f0000000bc0)={0xb6, 0x0, 0x101}) (async)
write$eventfd(r1, &(0x7f0000000c40), 0x8) (async)
r11 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0xb)
ioctl$KVM_CAP_DIRTY_LOG_RING_WITH_BITMAP(r11, 0x4068aea3, &(0x7f0000000c80))

51.809948848s ago: executing program 9 (id=651):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000880)={0x10001, 0x280, 0x180, &(0x7f0000000480)=[0xd, 0x0, 0x800, 0x3fff80, 0x8, 0xf82, 0x7fff, 0x10000, 0x0, 0xb, 0x0, 0xa6, 0x8, 0x1, 0x558a, 0x200, 0xffffffffffffff6c, 0x2, 0x5, 0x3, 0x0, 0x2, 0x62, 0x0, 0x1, 0x9, 0xc4ef, 0x8, 0x80000001, 0x4, 0x101, 0x401, 0x1f5, 0x9, 0x7, 0x400, 0x9, 0xfffffffffffffff7, 0xffffffffffffffff, 0x4fdfe099, 0x7, 0x3, 0x1000, 0x54c, 0xfffffffffffffffd, 0x4, 0x4, 0x3, 0x8, 0x5, 0x9, 0xffff, 0xe, 0x8000000000000001, 0xe5a, 0x2, 0x1000, 0x2, 0x7, 0x6, 0x100000000, 0x9, 0x8, 0x3, 0x6, 0x5, 0xd04, 0x1, 0xb75, 0x1000, 0x0, 0x2, 0xcaa, 0x719f, 0x79, 0x3, 0xe, 0x9, 0xe, 0x9, 0x5, 0x4, 0x5, 0x3, 0x3, 0xfffffffffffffffb, 0x4, 0x9, 0x36, 0x5, 0x0, 0x0, 0x2, 0x7, 0xd41, 0x2, 0x1, 0x6, 0x1, 0x663b, 0x4, 0x1ff, 0xfffffffffffffbff, 0x3, 0x10, 0x0, 0x4, 0x0, 0x5, 0x1, 0x6, 0x1, 0x4, 0x68f1, 0x1, 0x3, 0xfffffffffffffffa, 0x8, 0x3, 0x6, 0x1, 0x2, 0x2, 0xb, 0xc, 0xfff, 0x81, 0x800]})
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1000001, 0x12, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0xc8, 0x1})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x4, <r5=>0xffffffffffffffff, 0x1})
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000200)=@x86={0x11, 0x8, 0xf, 0x0, 0x5, 0x6, 0x6, 0x6, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x9, 0x0, 0x0, 0x3, 0x5, 0x8, '\x00', 0x1, 0x400000000002})
ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000240)={0x4, 0x0, [{0x1, 0x1, 0x0, 0x0, @sint={0x9, 0x3800000}}, {0x9, 0x3, 0x0, 0x0, @irqchip={0x3, 0x1}}, {0x0, 0x0, 0x0, 0x0, @msi={0x0, 0x0, 0x4}}, {0x0, 0x0, 0x1, 0x0, @adapter={0x0, 0x5, 0xffffffffffffffff, 0x7f, 0xb2d}}]})
write$eventfd(r5, &(0x7f0000000340)=0x3, 0x50)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x3)
ioctl$KVM_ARM_VCPU_INIT(r8, 0x4020aeae, &(0x7f00000003c0)={0x5, 0x8})
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r8, 0x4018aee1, &(0x7f0000000400)=@attr_pmu_filter={0x0, 0x0, 0x2, 0x0})
r9 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000440)={0x0, &(0x7f00000000c0)}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x2, 0x100)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000180)={0x1010020, 0x1})
eventfd2(0x1, 0x801)
r10 = eventfd2(0xff, 0x80000)
r11 = eventfd2(0x6, 0x80401)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={r11, 0x3, 0x2, r10})
ioctl$KVM_RUN(r9, 0xae80, 0x0)

0s ago: executing program 41 (id=651):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000880)={0x10001, 0x280, 0x180, &(0x7f0000000480)=[0xd, 0x0, 0x800, 0x3fff80, 0x8, 0xf82, 0x7fff, 0x10000, 0x0, 0xb, 0x0, 0xa6, 0x8, 0x1, 0x558a, 0x200, 0xffffffffffffff6c, 0x2, 0x5, 0x3, 0x0, 0x2, 0x62, 0x0, 0x1, 0x9, 0xc4ef, 0x8, 0x80000001, 0x4, 0x101, 0x401, 0x1f5, 0x9, 0x7, 0x400, 0x9, 0xfffffffffffffff7, 0xffffffffffffffff, 0x4fdfe099, 0x7, 0x3, 0x1000, 0x54c, 0xfffffffffffffffd, 0x4, 0x4, 0x3, 0x8, 0x5, 0x9, 0xffff, 0xe, 0x8000000000000001, 0xe5a, 0x2, 0x1000, 0x2, 0x7, 0x6, 0x100000000, 0x9, 0x8, 0x3, 0x6, 0x5, 0xd04, 0x1, 0xb75, 0x1000, 0x0, 0x2, 0xcaa, 0x719f, 0x79, 0x3, 0xe, 0x9, 0xe, 0x9, 0x5, 0x4, 0x5, 0x3, 0x3, 0xfffffffffffffffb, 0x4, 0x9, 0x36, 0x5, 0x0, 0x0, 0x2, 0x7, 0xd41, 0x2, 0x1, 0x6, 0x1, 0x663b, 0x4, 0x1ff, 0xfffffffffffffbff, 0x3, 0x10, 0x0, 0x4, 0x0, 0x5, 0x1, 0x6, 0x1, 0x4, 0x68f1, 0x1, 0x3, 0xfffffffffffffffa, 0x8, 0x3, 0x6, 0x1, 0x2, 0x2, 0xb, 0xc, 0xfff, 0x81, 0x800]})
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1000001, 0x12, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0xc8, 0x1})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x4, <r5=>0xffffffffffffffff, 0x1})
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000200)=@x86={0x11, 0x8, 0xf, 0x0, 0x5, 0x6, 0x6, 0x6, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x9, 0x0, 0x0, 0x3, 0x5, 0x8, '\x00', 0x1, 0x400000000002})
ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000240)={0x4, 0x0, [{0x1, 0x1, 0x0, 0x0, @sint={0x9, 0x3800000}}, {0x9, 0x3, 0x0, 0x0, @irqchip={0x3, 0x1}}, {0x0, 0x0, 0x0, 0x0, @msi={0x0, 0x0, 0x4}}, {0x0, 0x0, 0x1, 0x0, @adapter={0x0, 0x5, 0xffffffffffffffff, 0x7f, 0xb2d}}]})
write$eventfd(r5, &(0x7f0000000340)=0x3, 0x50)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x3)
ioctl$KVM_ARM_VCPU_INIT(r8, 0x4020aeae, &(0x7f00000003c0)={0x5, 0x8})
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r8, 0x4018aee1, &(0x7f0000000400)=@attr_pmu_filter={0x0, 0x0, 0x2, 0x0})
r9 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000440)={0x0, &(0x7f00000000c0)}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x2, 0x100)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000180)={0x1010020, 0x1})
eventfd2(0x1, 0x801)
r10 = eventfd2(0xff, 0x80000)
r11 = eventfd2(0x6, 0x80401)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={r11, 0x3, 0x2, r10})
ioctl$KVM_RUN(r9, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

[  370.633503][   T24] audit: type=1400 audit(369.830:76): avc:  denied  { read } for  pid=3218 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[  378.036151][   T24] audit: type=1400 audit(377.230:77): avc:  denied  { write } for  pid=3278 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  381.947560][   T24] audit: type=1400 audit(381.110:78): avc:  denied  { write } for  pid=3281 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  384.351936][ T3218] 8021q: adding VLAN 0 to HW filter on device bond0
[  392.330017][   T24] audit: type=1400 audit(391.530:79): avc:  denied  { write } for  pid=3286 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  397.340649][   T24] audit: type=1400 audit(396.510:80): avc:  denied  { write } for  pid=3289 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  409.705612][   T24] audit: type=1400 audit(408.900:81): avc:  denied  { write } for  pid=3294 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  413.289542][   T24] audit: type=1400 audit(412.470:82): avc:  denied  { write } for  pid=3297 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  424.647710][   T24] audit: type=1400 audit(423.830:83): avc:  denied  { write } for  pid=3303 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  428.344685][   T24] audit: type=1400 audit(427.540:84): avc:  denied  { write } for  pid=3306 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  430.664185][ T3218] eql: remember to turn off Van-Jacobson compression on your slave devices
[  437.968838][   T24] audit: type=1400 audit(437.160:85): avc:  denied  { write } for  pid=3311 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  441.561550][   T24] audit: type=1400 audit(440.760:86): avc:  denied  { write } for  pid=3314 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  450.732087][   T24] audit: type=1400 audit(449.890:87): avc:  denied  { write } for  pid=3318 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  455.629382][   T24] audit: type=1400 audit(454.810:88): avc:  denied  { write } for  pid=3321 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  464.774192][   T24] audit: type=1400 audit(463.940:89): avc:  denied  { write } for  pid=3324 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  468.339109][   T24] audit: type=1400 audit(467.520:90): avc:  denied  { write } for  pid=3327 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  475.762272][   T24] audit: type=1400 audit(474.960:91): avc:  denied  { write } for  pid=3331 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  479.357583][   T24] audit: type=1400 audit(478.550:92): avc:  denied  { write } for  pid=3334 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  488.178817][   T24] audit: type=1400 audit(487.360:93): avc:  denied  { write } for  pid=3338 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  491.725437][   T24] audit: type=1400 audit(490.920:94): avc:  denied  { write } for  pid=3341 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  512.337768][   T24] audit: type=1400 audit(511.510:95): avc:  denied  { write } for  pid=3352 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  517.227543][   T24] audit: type=1400 audit(516.420:96): avc:  denied  { write } for  pid=3355 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  528.492619][   T24] audit: type=1400 audit(527.690:97): avc:  denied  { write } for  pid=3359 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  532.078168][   T24] audit: type=1400 audit(531.270:98): avc:  denied  { write } for  pid=3362 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  547.951183][   T24] audit: type=1400 audit(547.150:99): avc:  denied  { write } for  pid=3367 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  551.518970][   T24] audit: type=1400 audit(550.690:100): avc:  denied  { write } for  pid=3370 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
Warning: Permanently added '[localhost]:40738' (ED25519) to the list of known hosts.
[  566.413856][   T24] audit: type=1400 audit(565.610:101): avc:  denied  { name_bind } for  pid=3375 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  568.382909][   T24] audit: type=1400 audit(567.550:102): avc:  denied  { execute } for  pid=3376 comm="sh" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[  568.390992][   T24] audit: type=1400 audit(567.580:103): avc:  denied  { execute_no_trans } for  pid=3376 comm="sh" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[  600.280462][   T24] audit: type=1400 audit(599.480:104): avc:  denied  { mounton } for  pid=3376 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[  600.317521][   T24] audit: type=1400 audit(599.510:105): avc:  denied  { mount } for  pid=3376 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  600.395858][ T3376] cgroup: Unknown subsys name 'net'
[  600.452762][   T24] audit: type=1400 audit(599.650:106): avc:  denied  { unmount } for  pid=3376 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  600.855154][ T3376] cgroup: Unknown subsys name 'cpuset'
[  600.971654][ T3376] cgroup: Unknown subsys name 'rlimit'
[  601.750757][   T24] audit: type=1400 audit(600.950:107): avc:  denied  { setattr } for  pid=3376 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  601.772486][   T24] audit: type=1400 audit(600.970:108): avc:  denied  { mounton } for  pid=3376 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[  601.794930][   T24] audit: type=1400 audit(600.990:109): avc:  denied  { mount } for  pid=3376 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[  602.754658][ T3379] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[  602.773997][   T24] audit: type=1400 audit(601.970:110): avc:  denied  { relabelto } for  pid=3379 comm="mkswap" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[  602.800601][   T24] audit: type=1400 audit(601.990:111): avc:  denied  { write } for  pid=3379 comm="mkswap" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
Setting up swapspace version 1, size = 127995904 bytes
[  602.979660][   T24] audit: type=1400 audit(602.170:112): avc:  denied  { read } for  pid=3376 comm="syz-executor" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[  602.985535][   T24] audit: type=1400 audit(602.180:113): avc:  denied  { open } for  pid=3376 comm="syz-executor" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[  603.050586][ T3376] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[  656.519054][   T24] audit: type=1400 audit(655.710:114): avc:  denied  { execmem } for  pid=3380 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  659.985125][   T24] audit: type=1400 audit(659.180:115): avc:  denied  { read } for  pid=3382 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  660.021449][   T24] audit: type=1400 audit(659.200:116): avc:  denied  { open } for  pid=3383 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  660.091857][   T24] audit: type=1400 audit(659.290:117): avc:  denied  { mounton } for  pid=3382 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  660.310384][   T24] audit: type=1400 audit(659.500:118): avc:  denied  { module_request } for  pid=3383 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  660.314002][   T24] audit: type=1400 audit(659.510:119): avc:  denied  { module_request } for  pid=3382 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  661.275363][   T24] audit: type=1400 audit(660.460:120): avc:  denied  { sys_module } for  pid=3383 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  667.514747][   T24] audit: type=1400 audit(666.710:121): avc:  denied  { create } for  pid=3383 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  667.553978][   T24] audit: type=1400 audit(666.750:122): avc:  denied  { create } for  pid=3382 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  668.098896][   T24] audit: type=1400 audit(667.290:123): avc:  denied  { write } for  pid=3382 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  668.313767][ T3383] rxe_eth0 speed is unknown, defaulting to 1000
[  668.369412][ T3382] rdma_rxe: rxe_newlink: failed to add rxe_eth0
[  668.387740][   T24] audit: type=1400 audit(667.570:124): avc:  denied  { read } for  pid=3382 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  668.432887][ T3383] rxe_eth0 speed is unknown, defaulting to 1000
[  668.535199][ T3383] rxe_eth0 speed is unknown, defaulting to 1000
[  676.651602][ T3383] infiniband rxe0: set active
[  676.654834][ T3283] rxe_eth0 speed is unknown, defaulting to 1000
[  676.665353][ T3383] infiniband rxe0: added rxe_eth0
[  677.758974][ T3383] RDS/IB: rxe0: added
[  677.762739][ T3383] smc: adding ib device rxe0 with port count 1
[  677.764008][ T3383] smc:    ib device rxe0 port 1 has no pnetid
[  677.781194][ T3283] rxe_eth0 speed is unknown, defaulting to 1000
[  677.863989][ T3383] rxe_eth0 speed is unknown, defaulting to 1000
[  684.932271][ T3383] rxe_eth0 speed is unknown, defaulting to 1000
[  686.461891][ T3283] rxe_eth0 speed is unknown, defaulting to 1000
[  689.635473][   T24] audit: type=1400 audit(688.830:125): avc:  denied  { write } for  pid=3425 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  691.798971][ T3382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  692.130514][ T3382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  692.949440][   T24] audit: type=1400 audit(692.140:126): avc:  denied  { write } for  pid=3429 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  700.284600][   T24] audit: type=1400 audit(699.480:127): avc:  denied  { write } for  pid=3434 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  705.317589][   T24] audit: type=1400 audit(704.510:128): avc:  denied  { write } for  pid=3443 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  712.421597][ T3382] hsr_slave_0: entered promiscuous mode
[  712.453823][ T3382] hsr_slave_1: entered promiscuous mode
[  717.190894][ T3383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  717.429437][ T3383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  719.949135][   T24] audit: type=1400 audit(719.110:129): avc:  denied  { create } for  pid=3382 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  719.949925][   T24] audit: type=1400 audit(719.140:130): avc:  denied  { write } for  pid=3382 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  720.018926][   T24] audit: type=1400 audit(719.210:131): avc:  denied  { read } for  pid=3382 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  720.085924][ T3382] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  720.279174][ T3382] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  720.315317][ T3382] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  720.455844][ T3382] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  720.513456][ T3382] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  720.710249][ T3382] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  720.789271][ T3382] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  720.952144][ T3382] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  730.359447][ T3383] hsr_slave_0: entered promiscuous mode
[  730.381055][ T3383] hsr_slave_1: entered promiscuous mode
[  730.400109][ T3383] debugfs: 'hsr0' already exists in 'hsr'
[  730.401462][ T3383] Cannot create hsr debugfs directory
[  732.265689][ T3382] 8021q: adding VLAN 0 to HW filter on device bond0
[  738.234305][ T3383] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  738.398768][ T3383] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  738.441821][ T3383] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  738.622012][ T3383] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  738.700794][ T3383] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  738.851073][ T3383] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  738.921095][ T3383] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  739.111228][ T3383] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  752.651198][ T3383] 8021q: adding VLAN 0 to HW filter on device bond0
[  785.032398][ T3382] veth0_vlan: entered promiscuous mode
[  785.600407][ T3382] veth1_vlan: entered promiscuous mode
[  787.362497][ T3382] veth0_macvtap: entered promiscuous mode
[  787.734667][ T3382] veth1_macvtap: entered promiscuous mode
[  789.593735][ T3440] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  789.600871][ T3440] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  789.661130][ T3440] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  789.683392][   T48] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  791.698787][   T24] audit: type=1400 audit(790.880:132): avc:  denied  { mount } for  pid=3382 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  791.799554][   T24] audit: type=1400 audit(790.990:133): avc:  denied  { mounton } for  pid=3382 comm="syz-executor" path="/syzkaller.DNkS8q/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  791.913203][   T24] audit: type=1400 audit(791.110:134): avc:  denied  { mount } for  pid=3382 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  792.122256][   T24] audit: type=1400 audit(791.310:135): avc:  denied  { mounton } for  pid=3382 comm="syz-executor" path="/syzkaller.DNkS8q/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  792.202334][   T24] audit: type=1400 audit(791.400:136): avc:  denied  { mounton } for  pid=3382 comm="syz-executor" path="/syzkaller.DNkS8q/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  792.548545][   T24] audit: type=1400 audit(791.730:137): avc:  denied  { unmount } for  pid=3382 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  792.710006][   T24] audit: type=1400 audit(791.870:138): avc:  denied  { mounton } for  pid=3382 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1548 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[  792.815544][   T24] audit: type=1400 audit(791.990:139): avc:  denied  { mount } for  pid=3382 comm="syz-executor" name="/" dev="gadgetfs" ino=3754 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  796.224087][   T24] audit: type=1400 audit(795.420:140): avc:  denied  { mounton } for  pid=3382 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[  796.281269][   T24] audit: type=1400 audit(795.470:141): avc:  denied  { mount } for  pid=3382 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  797.170272][ T3382] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  798.283830][   T24] audit: type=1400 audit(797.480:142): avc:  denied  { read } for  pid=3382 comm="syz-executor" name="loop0" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  798.352379][   T24] audit: type=1400 audit(797.540:143): avc:  denied  { open } for  pid=3382 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  798.371225][   T24] audit: type=1400 audit(797.570:144): avc:  denied  { ioctl } for  pid=3382 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=636 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  804.789174][   T24] audit: type=1400 audit(803.980:145): avc:  denied  { read } for  pid=3555 comm="syz.0.1" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  804.834870][   T24] audit: type=1400 audit(804.030:146): avc:  denied  { open } for  pid=3555 comm="syz.0.1" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  805.009762][   T24] audit: type=1400 audit(804.200:147): avc:  denied  { ioctl } for  pid=3555 comm="syz.0.1" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  805.728998][ T3383] veth0_vlan: entered promiscuous mode
[  806.491433][ T3383] veth1_vlan: entered promiscuous mode
[  807.639681][   T24] audit: type=1400 audit(806.820:148): avc:  denied  { append } for  pid=3555 comm="syz.0.1" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  809.031295][ T3383] veth0_macvtap: entered promiscuous mode
[  809.424293][ T3383] veth1_macvtap: entered promiscuous mode
[  811.970110][ T3394] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  811.970768][ T3394] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  811.971286][ T3394] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  811.971791][ T3394] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  837.293001][   T24] audit: type=1400 audit(836.460:149): avc:  denied  { write } for  pid=3581 comm="syz.0.5" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  841.578088][   T24] audit: type=1400 audit(840.550:150): avc:  denied  { execute } for  pid=3584 comm="syz.1.6" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=4209 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  854.789429][   T24] audit: type=1400 audit(853.970:151): avc:  denied  { mmap_zero } for  pid=3595 comm="syz.0.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1
[  872.973288][   T24] audit: type=1400 audit(872.160:152): avc:  denied  { create } for  pid=3616 comm="syz.1.14" anonclass=[kvm-gmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  873.070744][   T24] audit: type=1400 audit(872.240:153): avc:  denied  { map } for  pid=3616 comm="syz.1.14" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=4559 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  873.131963][   T24] audit: type=1400 audit(872.320:154): avc:  denied  { read } for  pid=3616 comm="syz.1.14" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=4559 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  924.046103][   T24] audit: type=1400 audit(923.240:155): avc:  denied  { write } for  pid=3650 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  930.187453][   T24] audit: type=1400 audit(929.370:156): avc:  denied  { write } for  pid=3659 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1117.876101][   T24] audit: type=1400 audit(1117.070:157): avc:  denied  { setattr } for  pid=3791 comm="syz.1.66" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1154.215059][ T3818] kvm [3818]: Failed to find VMA for hva 0x20c01000
[ 1375.539688][   T24] audit: type=1400 audit(1374.730:158): avc:  denied  { write } for  pid=3996 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1384.268400][   T24] audit: type=1400 audit(1383.400:159): avc:  denied  { write } for  pid=4004 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1507.484903][ T4092] kvm [4092]: Failed to find VMA for hva 0x20c01000
[ 1603.149481][ T4155] kvm [4155]: Failed to find VMA for hva 0x20c79000
[ 1789.134676][ T4255] rxe_eth0 speed is unknown, defaulting to 1000
[ 1800.963731][ T4258] rxe_eth0 speed is unknown, defaulting to 1000
[ 1832.780929][   T24] audit: type=1400 audit(1831.970:160): avc:  denied  { write } for  pid=4287 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1834.324557][   T50] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1835.714485][   T50] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1836.973917][   T50] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1838.313155][   T50] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1840.335311][   T24] audit: type=1400 audit(1839.530:161): avc:  denied  { write } for  pid=4296 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1845.344104][ T4255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1846.054877][ T4255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1850.412788][   T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1850.712891][   T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1850.885316][   T50] bond0 (unregistering): Released all slaves
[ 1867.563014][   T50] hsr_slave_0: left promiscuous mode
[ 1867.624132][   T50] hsr_slave_1: left promiscuous mode
[ 1868.099928][   T50] veth1_macvtap: left promiscuous mode
[ 1868.101161][   T50] veth0_macvtap: left promiscuous mode
[ 1868.102988][   T50] veth1_vlan: left promiscuous mode
[ 1868.105033][   T50] veth0_vlan: left promiscuous mode
[ 1870.975751][   T24] audit: type=1400 audit(1870.170:162): avc:  denied  { write } for  pid=4318 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1875.158752][   T24] audit: type=1400 audit(1874.330:163): avc:  denied  { write } for  pid=4321 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1884.463062][ T3218] 8021q: adding VLAN 0 to HW filter on device eth1
[ 1885.393433][ T4258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1885.878724][ T4258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1888.459770][   T50] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1889.618854][   T50] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1890.516136][   T50] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1891.904407][   T50] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1898.079638][   T24] audit: type=1400 audit(1897.230:164): avc:  denied  { write } for  pid=4332 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1899.795290][ T4255] hsr_slave_0: entered promiscuous mode
[ 1899.885673][ T4255] hsr_slave_1: entered promiscuous mode
[ 1899.958874][ T4255] debugfs: 'hsr0' already exists in 'hsr'
[ 1899.959256][ T4255] Cannot create hsr debugfs directory
[ 1903.412129][   T24] audit: type=1400 audit(1902.610:165): avc:  denied  { write } for  pid=4341 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1907.230025][   T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1907.353047][   T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1907.408396][   T50] bond0 (unregistering): Released all slaves
[ 1907.794157][ T3218] 8021q: adding VLAN 0 to HW filter on device eth2
[ 1920.501047][   T50] hsr_slave_0: left promiscuous mode
[ 1920.567562][   T50] hsr_slave_1: left promiscuous mode
[ 1920.870865][   T50] veth1_macvtap: left promiscuous mode
[ 1920.871582][   T50] veth0_macvtap: left promiscuous mode
[ 1920.873159][   T50] veth1_vlan: left promiscuous mode
[ 1920.874306][   T50] veth0_vlan: left promiscuous mode
[ 1933.473794][ T4258] hsr_slave_0: entered promiscuous mode
[ 1933.498986][ T4258] hsr_slave_1: entered promiscuous mode
[ 1939.111985][   T24] audit: type=1400 audit(1938.310:166): avc:  denied  { write } for  pid=4352 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1939.188267][ T4255] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1939.358724][ T4255] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1939.751698][ T4255] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1939.881593][ T4255] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1940.195303][ T4255] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1940.331282][ T4255] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1940.615118][ T4255] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1940.788969][ T4255] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1942.947491][   T24] audit: type=1400 audit(1942.130:167): avc:  denied  { write } for  pid=4355 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1946.204018][ T3218] 8021q: adding VLAN 0 to HW filter on device eth3
[ 1948.035161][ T4258] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1948.339467][ T4258] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1948.394977][ T4258] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1948.563119][ T4258] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1948.625043][ T4258] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1948.864423][ T4258] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1948.936011][ T4258] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1949.151246][ T4258] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1959.288813][   T24] audit: type=1400 audit(1958.440:168): avc:  denied  { write } for  pid=4380 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1962.694460][ T4255] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1965.859210][   T24] audit: type=1400 audit(1965.050:169): avc:  denied  { write } for  pid=4388 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1969.251777][ T4258] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1970.702557][ T3218] 8021q: adding VLAN 0 to HW filter on device eth4
[ 1987.431198][   T24] audit: type=1400 audit(1986.590:170): avc:  denied  { write } for  pid=4405 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1996.348827][   T24] audit: type=1400 audit(1995.470:171): avc:  denied  { write } for  pid=4413 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2001.499555][ T3218] 8021q: adding VLAN 0 to HW filter on device eth5
[ 2012.871274][   T24] audit: type=1400 audit(2012.070:172): avc:  denied  { write } for  pid=4429 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2018.717578][   T24] audit: type=1400 audit(2017.910:173): avc:  denied  { write } for  pid=4439 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2022.740346][ T3218] 8021q: adding VLAN 0 to HW filter on device eth6
[ 2035.738762][   T24] audit: type=1400 audit(2034.910:174): avc:  denied  { write } for  pid=4454 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2043.267987][   T24] audit: type=1400 audit(2042.460:175): avc:  denied  { write } for  pid=4464 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2047.017255][ T4255] veth0_vlan: entered promiscuous mode
[ 2047.832885][ T4255] veth1_vlan: entered promiscuous mode
[ 2049.178648][ T3218] 8021q: adding VLAN 0 to HW filter on device eth7
[ 2051.323559][ T4255] veth0_macvtap: entered promiscuous mode
[ 2052.104685][ T4255] veth1_macvtap: entered promiscuous mode
[ 2056.134160][ T4411] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2056.136128][ T4411] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2056.369337][ T4291] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2056.379539][ T4411] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2056.718817][   T24] audit: type=1400 audit(2055.900:176): avc:  denied  { write } for  pid=4470 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2056.948882][ T4258] veth0_vlan: entered promiscuous mode
[ 2059.401741][ T4258] veth1_vlan: entered promiscuous mode
[ 2063.841581][ T4258] veth0_macvtap: entered promiscuous mode
[ 2064.299136][ T4258] veth1_macvtap: entered promiscuous mode
[ 2064.919955][   T24] audit: type=1400 audit(2064.110:177): avc:  denied  { write } for  pid=4474 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2067.428927][   T50] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2067.429705][   T50] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2067.430323][   T50] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2067.430920][   T50] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2087.395322][   T24] audit: type=1400 audit(2086.570:178): avc:  denied  { write } for  pid=4491 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2095.234352][   T24] audit: type=1400 audit(2094.430:179): avc:  denied  { write } for  pid=4503 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2101.749801][ T3218] 8021q: adding VLAN 0 to HW filter on device eth8
[ 2143.752296][   T24] audit: type=1400 audit(2142.910:180): avc:  denied  { write } for  pid=4531 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2152.231316][   T24] audit: type=1400 audit(2151.420:181): avc:  denied  { write } for  pid=4541 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2194.935822][   T24] audit: type=1400 audit(2194.100:182): avc:  denied  { write } for  pid=4576 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2203.668199][   T24] audit: type=1400 audit(2202.860:183): avc:  denied  { write } for  pid=4581 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2219.274725][   T24] audit: type=1400 audit(2218.470:184): avc:  denied  { write } for  pid=4590 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2229.847672][   T24] audit: type=1400 audit(2229.030:185): avc:  denied  { write } for  pid=4602 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2258.508256][   T24] audit: type=1400 audit(2257.630:186): avc:  denied  { write } for  pid=4622 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2266.988788][   T24] audit: type=1400 audit(2266.160:187): avc:  denied  { write } for  pid=4635 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2288.718533][   T24] audit: type=1400 audit(2287.820:188): avc:  denied  { write } for  pid=4646 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2298.464728][   T24] audit: type=1400 audit(2297.650:189): avc:  denied  { write } for  pid=4660 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2318.488303][   T24] audit: type=1400 audit(2317.670:190): avc:  denied  { write } for  pid=4675 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2327.117622][   T24] audit: type=1400 audit(2326.310:191): avc:  denied  { write } for  pid=4685 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2345.264818][   T24] audit: type=1400 audit(2344.460:192): avc:  denied  { write } for  pid=4698 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2355.609203][   T24] audit: type=1400 audit(2354.720:193): avc:  denied  { write } for  pid=4707 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2373.623575][   T24] audit: type=1400 audit(2372.810:194): avc:  denied  { write } for  pid=4718 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2382.982324][   T24] audit: type=1400 audit(2382.130:195): avc:  denied  { write } for  pid=4728 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2501.652659][ T4800] kvm [4799]: Unsupported guest access at: eeef0000
[ 2501.652659][ T4800]  { Op0( 2), Op1( 0), CRn( 0), CRm( 6), Op2( 2), func_read },
[ 2531.601887][   T24] audit: type=1400 audit(2530.780:196): avc:  denied  { ioctl } for  pid=4823 comm="syz.3.264" path="net:[4026533013]" dev="nsfs" ino=4026533013 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 2746.968500][ T4962] kvm [4962]: Failed to find VMA for hva 0x20c0b000
[ 2747.158247][ T4963] kvm [4963]: Failed to find VMA for hva 0x20c01000
[ 2747.219315][ T4962] kvm [4962]: Failed to find VMA for hva 0x20c01000
[ 2747.253658][ T4962] kvm [4962]: Failed to find VMA for hva 0x20c01000
[ 2747.361119][ T4962] kvm [4962]: Failed to find VMA for hva 0x20c01000
[ 2747.364319][ T4962] kvm [4962]: Failed to find VMA for hva 0x20c01000
[ 2747.515993][ T4962] kvm [4962]: Failed to find VMA for hva 0x20c01000
[ 2747.650484][ T4962] kvm [4962]: Failed to find VMA for hva 0x20c01000
[ 2747.653698][ T4962] kvm [4962]: Failed to find VMA for hva 0x20c01000
[ 2747.845959][ T4962] kvm [4962]: Failed to find VMA for hva 0x20c01000
[ 2747.893549][ T4962] kvm [4962]: Failed to find VMA for hva 0x20c01000
[ 2748.121390][ T4962] kvm [4962]: Failed to find VMA for hva 0x20c01000
[ 2748.124516][ T4962] kvm [4962]: Failed to find VMA for hva 0x20c01000
[ 2748.248812][ T4962] kvm [4962]: Failed to find VMA for hva 0x20c01000
[ 2748.320784][ T4962] kvm [4962]: Failed to find VMA for hva 0x20c01000
[ 2748.323999][ T4962] kvm [4962]: Failed to find VMA for hva 0x20c01000
[ 2748.512791][ T4962] kvm [4962]: Failed to find VMA for hva 0x20c01000
[ 2748.515982][ T4962] kvm [4962]: Failed to find VMA for hva 0x20c01000
[ 2894.852876][   T24] audit: type=1400 audit(2893.990:197): avc:  denied  { map } for  pid=5044 comm="syz.3.319" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 2894.990552][   T24] audit: type=1400 audit(2894.120:198): avc:  denied  { execute } for  pid=5044 comm="syz.3.319" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 2959.612193][   T24] audit: type=1400 audit(2958.800:199): avc:  denied  { write } for  pid=5079 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2969.664122][   T24] audit: type=1400 audit(2968.850:200): avc:  denied  { write } for  pid=5087 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2986.348275][   T24] audit: type=1400 audit(2985.530:201): avc:  denied  { execute } for  pid=5099 comm="syz.3.335" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=24990 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 3393.338083][   T24] audit: type=1400 audit(3392.490:202): avc:  denied  { write } for  pid=5344 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 3401.794043][   T24] audit: type=1400 audit(3400.990:203): avc:  denied  { write } for  pid=5357 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 3481.176127][ T5402] kvm [5400]: Unsupported guest access at: eeef0000
[ 3481.176127][ T5402]  { Op0( 2), Op1( 3), CRn(15), CRm( 5), Op2( 5), func_write },
[ 3894.689975][   T24] audit: type=1400 audit(3893.880:204): avc:  denied  { write } for  pid=5640 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 3902.668627][   T24] audit: type=1400 audit(3901.860:205): avc:  denied  { write } for  pid=5643 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4148.101711][ T5751] rxe_eth0 speed is unknown, defaulting to 1000
[ 4178.131163][ T4411] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4179.393581][ T4411] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4180.541973][ T4411] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4181.386014][ T4411] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4194.290312][ T4411] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 4194.410405][ T4411] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 4194.524604][ T4411] bond0 (unregistering): Released all slaves
[ 4198.214615][ T5761] rxe_eth0 speed is unknown, defaulting to 1000
[ 4211.392331][   T24] audit: type=1400 audit(4210.590:206): avc:  denied  { write } for  pid=5784 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4216.470156][ T4411] hsr_slave_0: left promiscuous mode
[ 4216.592877][ T4411] hsr_slave_1: left promiscuous mode
[ 4217.201983][ T4411] veth1_macvtap: left promiscuous mode
[ 4217.202736][ T4411] veth0_macvtap: left promiscuous mode
[ 4217.205375][ T4411] veth1_vlan: left promiscuous mode
[ 4217.228124][ T4411] veth0_vlan: left promiscuous mode
[ 4219.133889][   T24] audit: type=1400 audit(4218.320:207): avc:  denied  { write } for  pid=5789 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4237.940320][ T3218] 8021q: adding VLAN 0 to HW filter on device eth9
[ 4242.918723][ T4411] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4244.272678][ T4411] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4245.339188][ T4411] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4247.081534][ T4411] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4254.635314][   T24] audit: type=1400 audit(4253.820:208): avc:  denied  { write } for  pid=5799 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4255.241902][ T5751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 4255.681098][ T5751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 4260.698281][   T24] audit: type=1400 audit(4259.890:209): avc:  denied  { write } for  pid=5809 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4264.963556][ T4411] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 4265.124421][ T4411] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 4265.189557][ T4411] bond0 (unregistering): Released all slaves
[ 4267.309348][ T3218] 8021q: adding VLAN 0 to HW filter on device eth10
[ 4284.051892][ T4411] hsr_slave_0: left promiscuous mode
[ 4284.148392][ T4411] hsr_slave_1: left promiscuous mode
[ 4284.413011][   T24] audit: type=1400 audit(4283.600:210): avc:  denied  { write } for  pid=5820 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4284.688566][ T4411] veth1_macvtap: left promiscuous mode
[ 4284.689346][ T4411] veth0_macvtap: left promiscuous mode
[ 4284.690929][ T4411] veth1_vlan: left promiscuous mode
[ 4284.692334][ T4411] veth0_vlan: left promiscuous mode
[ 4291.602057][   T24] audit: type=1400 audit(4290.800:211): avc:  denied  { write } for  pid=5827 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4304.473000][ T3218] 8021q: adding VLAN 0 to HW filter on device eth11
[ 4312.435864][ T5751] hsr_slave_0: entered promiscuous mode
[ 4312.520557][ T5751] hsr_slave_1: entered promiscuous mode
[ 4316.780385][ T5761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 4317.245535][ T5761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 4318.935766][   T24] audit: type=1400 audit(4318.130:212): avc:  denied  { write } for  pid=5839 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4325.049469][   T24] audit: type=1400 audit(4324.190:213): avc:  denied  { write } for  pid=5844 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4327.534358][ T5751] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 4327.802140][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 4327.885256][ T5751] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 4328.159118][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 4328.231380][ T5751] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 4328.495549][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 4328.700404][ T5751] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 4328.930220][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 4329.685959][ T3218] 8021q: adding VLAN 0 to HW filter on device eth12
[ 4345.834376][ T5761] hsr_slave_0: entered promiscuous mode
[ 4345.961348][ T5761] hsr_slave_1: entered promiscuous mode
[ 4346.161598][ T5761] debugfs: 'hsr0' already exists in 'hsr'
[ 4346.162014][ T5761] Cannot create hsr debugfs directory
[ 4346.428825][   T24] audit: type=1400 audit(4345.540:214): avc:  denied  { write } for  pid=5866 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4353.560553][   T24] audit: type=1400 audit(4352.740:215): avc:  denied  { write } for  pid=5874 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4357.462592][ T3218] 8021q: adding VLAN 0 to HW filter on device eth13
[ 4364.594393][   T24] audit: type=1400 audit(4363.790:216): avc:  denied  { write } for  pid=5877 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4364.671756][ T5751] 8021q: adding VLAN 0 to HW filter on device bond0
[ 4365.937926][ T5761] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 4366.285051][ T5761] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 4366.664681][ T5761] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 4366.971045][ T5761] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 4367.015375][ T5761] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 4367.316056][ T5761] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 4367.649958][ T5761] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 4367.899392][ T5761] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 4372.885299][   T24] audit: type=1400 audit(4372.080:217): avc:  denied  { write } for  pid=5889 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4393.347842][   T24] audit: type=1400 audit(4392.530:218): avc:  denied  { write } for  pid=5904 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4395.895687][ T5761] 8021q: adding VLAN 0 to HW filter on device bond0
[ 4403.377571][   T24] audit: type=1400 audit(4402.560:219): avc:  denied  { write } for  pid=5910 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4409.873283][ T3218] 8021q: adding VLAN 0 to HW filter on device eth14
[ 4430.482375][   T24] audit: type=1400 audit(4429.680:220): avc:  denied  { write } for  pid=5926 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4438.009292][   T24] audit: type=1400 audit(4437.190:221): avc:  denied  { write } for  pid=5936 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4443.262548][ T3218] 8021q: adding VLAN 0 to HW filter on device eth15
[ 4460.024758][   T24] audit: type=1400 audit(4459.220:222): avc:  denied  { write } for  pid=5952 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4469.791907][   T24] audit: type=1400 audit(4468.980:223): avc:  denied  { write } for  pid=5963 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4476.363162][ T3218] 8021q: adding VLAN 0 to HW filter on device eth16
[ 4485.257770][   T24] audit: type=1400 audit(4484.440:224): avc:  denied  { write } for  pid=5971 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4492.153580][ T5751] veth0_vlan: entered promiscuous mode
[ 4493.284557][ T5751] veth1_vlan: entered promiscuous mode
[ 4493.449893][   T24] audit: type=1400 audit(4492.640:225): avc:  denied  { write } for  pid=5981 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4496.509597][ T5751] veth0_macvtap: entered promiscuous mode
[ 4497.069222][ T5751] veth1_macvtap: entered promiscuous mode
[ 4500.525096][ T3992] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 4500.525876][ T3992] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 4500.720404][ T3499] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 4500.729575][ T3498] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 4527.714386][ T5761] veth0_vlan: entered promiscuous mode
[ 4529.739601][ T5761] veth1_vlan: entered promiscuous mode
[ 4533.921132][ T5761] veth0_macvtap: entered promiscuous mode
[ 4534.915068][ T5761] veth1_macvtap: entered promiscuous mode
[ 4539.993896][ T4311] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 4540.017762][ T4311] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 4540.018532][ T4311] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 4540.019138][ T4311] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 4553.554436][   T24] audit: type=1400 audit(4552.750:226): avc:  denied  { write } for  pid=6015 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4564.621116][   T24] audit: type=1400 audit(4563.800:227): avc:  denied  { write } for  pid=6028 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4605.169314][   T24] audit: type=1400 audit(4604.330:228): avc:  denied  { write } for  pid=6055 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4616.914187][   T24] audit: type=1400 audit(4616.110:229): avc:  denied  { write } for  pid=6065 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4635.651824][   T24] audit: type=1400 audit(4634.630:230): avc:  denied  { write } for  pid=6072 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4647.949530][   T24] audit: type=1400 audit(4647.120:231): avc:  denied  { write } for  pid=6082 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4674.929600][   T24] audit: type=1400 audit(4674.110:232): avc:  denied  { write } for  pid=6098 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4685.489755][   T24] audit: type=1400 audit(4684.690:233): avc:  denied  { write } for  pid=6109 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4702.569252][   T24] audit: type=1400 audit(4701.760:234): avc:  denied  { write } for  pid=6114 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4714.809748][   T24] audit: type=1400 audit(4713.970:235): avc:  denied  { write } for  pid=6124 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4756.805867][   T24] audit: type=1400 audit(4756.000:236): avc:  denied  { write } for  pid=6145 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4768.894232][   T24] audit: type=1400 audit(4768.090:237): avc:  denied  { write } for  pid=6158 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4798.564457][   T24] audit: type=1400 audit(4797.740:238): avc:  denied  { write } for  pid=6175 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4809.095464][   T24] audit: type=1400 audit(4808.290:239): avc:  denied  { write } for  pid=6185 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4835.467630][   T24] audit: type=1400 audit(4834.600:240): avc:  denied  { write } for  pid=6200 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4846.918413][   T24] audit: type=1400 audit(4845.990:241): avc:  denied  { write } for  pid=6207 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4960.129397][ T6270] FAULT_INJECTION: forcing a failure.
[ 4960.129397][ T6270] name fail_usercopy, interval 1, probability 0, space 0, times 1
[ 4960.130864][ T6270] CPU: 0 UID: 0 PID: 6270 Comm: syz.4.562 Not tainted syzkaller #0 PREEMPT(full) 
[ 4960.131269][ T6270] Hardware name: linux,dummy-virt (DT)
[ 4960.133589][ T6270] Call trace:
[ 4960.134008][ T6270]  show_stack+0x2c/0x3c (C)
[ 4960.135254][ T6270]  __dump_stack+0x30/0x40
[ 4960.135638][ T6270]  dump_stack_lvl+0xd8/0x12c
[ 4960.135986][ T6270]  dump_stack+0x1c/0x28
[ 4960.136366][ T6270]  should_fail_ex+0x56c/0x6d8
[ 4960.136637][ T6270]  should_fail+0x14/0x24
[ 4960.136917][ T6270]  should_fail_usercopy+0x20/0x30
[ 4960.137185][ T6270]  simple_read_from_buffer+0xd0/0x294
[ 4960.137500][ T6270]  proc_fail_nth_read+0x184/0x214
[ 4960.137735][ T6270]  vfs_read+0x220/0x9d8
[ 4960.137994][ T6270]  ksys_read+0x108/0x1fc
[ 4960.138239][ T6270]  __arm64_sys_read+0x9c/0xd0
[ 4960.138491][ T6270]  invoke_syscall+0x94/0x1ec
[ 4960.138801][ T6270]  el0_svc_common+0x120/0x2f4
[ 4960.139085][ T6270]  do_el0_svc+0x58/0x74
[ 4960.139359][ T6270]  el0_svc+0x64/0x240
[ 4960.139637][ T6270]  el0t_64_sync_handler+0x68/0xdc
[ 4960.139940][ T6270]  el0t_64_sync+0x198/0x19c
[ 4961.888808][   T24] audit: type=1400 audit(4961.080:242): avc:  denied  { map } for  pid=6266 comm="syz.5.561" path="pipe:[35895]" dev="pipefs" ino=35895 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[ 5163.087728][   T24] audit: type=1400 audit(5162.280:243): avc:  denied  { write } for  pid=6353 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5169.987616][   T24] audit: type=1400 audit(5169.170:244): avc:  denied  { write } for  pid=6356 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5215.652613][ T6360] rxe_eth0 speed is unknown, defaulting to 1000
[ 5228.579225][ T6363] rxe_eth0 speed is unknown, defaulting to 1000
[ 5249.361981][ T4411] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5253.192482][ T4411] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5255.465435][ T4411] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5258.393723][ T4411] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5276.566044][ T4411] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 5276.724694][ T4411] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 5276.850917][ T4411] bond0 (unregistering): Released all slaves
[ 5294.604220][ T4411] hsr_slave_0: left promiscuous mode
[ 5294.738073][ T4411] hsr_slave_1: left promiscuous mode
[ 5295.318382][ T4411] veth1_macvtap: left promiscuous mode
[ 5295.319592][ T4411] veth0_macvtap: left promiscuous mode
[ 5295.359522][ T4411] veth1_vlan: left promiscuous mode
[ 5295.360931][ T4411] veth0_vlan: left promiscuous mode
[ 5325.165338][ T4279] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5328.179733][ T4279] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5331.135803][   T24] audit: type=1400 audit(5330.330:245): avc:  denied  { write } for  pid=6408 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5331.261006][ T4279] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5331.872304][ T6360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 5332.810095][ T4279] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5333.389271][ T6360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 5336.937742][   T24] audit: type=1400 audit(5336.120:246): avc:  denied  { write } for  pid=6414 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5350.422558][ T4279] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 5350.519889][ T4279] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 5350.603769][ T4279] bond0 (unregistering): Released all slaves
[ 5351.142526][ T3218] 8021q: adding VLAN 0 to HW filter on device eth17
[ 5368.658204][ T6363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 5369.383729][ T6363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 5372.024834][ T4279] hsr_slave_0: left promiscuous mode
[ 5372.137397][ T4279] hsr_slave_1: left promiscuous mode
[ 5372.669722][ T4279] veth1_macvtap: left promiscuous mode
[ 5372.670471][ T4279] veth0_macvtap: left promiscuous mode
[ 5372.672589][ T4279] veth1_vlan: left promiscuous mode
[ 5372.673814][ T4279] veth0_vlan: left promiscuous mode
[ 5376.643962][   T24] audit: type=1400 audit(5375.840:247): avc:  denied  { write } for  pid=6432 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5383.531011][   T24] audit: type=1400 audit(5382.710:248): avc:  denied  { write } for  pid=6435 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5396.530235][ T3218] 8021q: adding VLAN 0 to HW filter on device eth18
[ 5405.639702][ T6360] hsr_slave_0: entered promiscuous mode
[ 5405.695647][ T6360] hsr_slave_1: entered promiscuous mode
[ 5410.839090][   T24] audit: type=1400 audit(5410.020:249): avc:  denied  { write } for  pid=6444 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5417.378623][   T24] audit: type=1400 audit(5416.520:250): avc:  denied  { write } for  pid=6451 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5423.372192][ T3218] 8021q: adding VLAN 0 to HW filter on device eth20
[ 5425.170512][ T6360] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 5425.462343][ T6360] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 5426.378144][ T6360] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 5426.563543][ T6360] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 5426.916133][ T6363] hsr_slave_0: entered promiscuous mode
[ 5427.002577][ T6363] hsr_slave_1: entered promiscuous mode
[ 5427.083726][ T6363] debugfs: 'hsr0' already exists in 'hsr'
[ 5427.084148][ T6363] Cannot create hsr debugfs directory
[ 5427.100127][ T6360] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 5427.301595][ T6360] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 5427.641064][ T6360] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 5427.881177][ T6360] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 5448.955000][   T24] audit: type=1400 audit(5448.150:251): avc:  denied  { write } for  pid=6469 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5449.888910][ T6363] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 5450.384227][ T6363] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 5450.454972][ T6363] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 5450.962529][ T6363] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 5451.054915][ T6363] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 5451.604969][ T6363] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 5451.875508][ T6363] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 5452.165641][ T6363] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 5459.309366][   T24] audit: type=1400 audit(5458.500:252): avc:  denied  { write } for  pid=6484 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5460.952361][ T6360] 8021q: adding VLAN 0 to HW filter on device bond0
[ 5465.625143][ T3218] 8021q: adding VLAN 0 to HW filter on device eth19
[ 5482.095411][ T6363] 8021q: adding VLAN 0 to HW filter on device bond0
[ 5485.269320][   T24] audit: type=1400 audit(5484.320:253): avc:  denied  { write } for  pid=6497 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5497.301224][   T24] audit: type=1400 audit(5496.470:254): avc:  denied  { write } for  pid=6505 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5504.413112][ T3218] 8021q: adding VLAN 0 to HW filter on device eth21
[ 5535.787627][   T24] audit: type=1400 audit(5534.950:255): avc:  denied  { write } for  pid=6526 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5545.538827][   T24] audit: type=1400 audit(5544.700:256): avc:  denied  { write } for  pid=6537 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5552.944852][ T3218] 8021q: adding VLAN 0 to HW filter on device eth22
[ 5578.489124][   T24] audit: type=1400 audit(5577.680:257): avc:  denied  { write } for  pid=6554 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5587.977976][   T24] audit: type=1400 audit(5587.150:258): avc:  denied  { write } for  pid=6565 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5594.011276][ T3218] 8021q: adding VLAN 0 to HW filter on device eth23
[ 5608.279158][ T6360] veth0_vlan: entered promiscuous mode
[ 5609.774204][ T6360] veth1_vlan: entered promiscuous mode
[ 5614.064539][ T6360] veth0_macvtap: entered promiscuous mode
[ 5615.152825][ T6360] veth1_macvtap: entered promiscuous mode
[ 5619.862805][ T3992] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 5619.969445][ T4311] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 5620.449987][ T5764] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 5620.778223][ T3992] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 5633.318407][   T24] audit: type=1400 audit(5632.510:259): avc:  denied  { write } for  pid=6585 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5638.182193][ T6363] veth0_vlan: entered promiscuous mode
[ 5639.504614][ T6363] veth1_vlan: entered promiscuous mode
[ 5644.211184][ T6363] veth0_macvtap: entered promiscuous mode
[ 5645.131718][ T6363] veth1_macvtap: entered promiscuous mode
[ 5645.538778][   T24] audit: type=1400 audit(5644.710:260): avc:  denied  { write } for  pid=6593 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5649.572431][ T5764] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 5649.728322][ T6369] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 5649.729109][ T6369] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 5649.729709][ T6369] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 5654.352197][ T3218] 8021q: adding VLAN 0 to HW filter on device eth24
[ 5690.573076][   T24] audit: type=1400 audit(5689.740:261): avc:  denied  { write } for  pid=6611 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5704.599120][   T24] audit: type=1400 audit(5703.750:262): avc:  denied  { write } for  pid=6623 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5748.929569][   T24] audit: type=1400 audit(5748.120:263): avc:  denied  { write } for  pid=6644 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5764.350423][   T24] audit: type=1400 audit(5763.510:264): avc:  denied  { write } for  pid=6654 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5789.738896][   T24] audit: type=1400 audit(5788.930:265): avc:  denied  { write } for  pid=6666 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5804.589116][   T24] audit: type=1400 audit(5803.770:266): avc:  denied  { write } for  pid=6679 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5836.828440][   T24] audit: type=1400 audit(5836.010:267): avc:  denied  { write } for  pid=6691 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5850.902462][   T24] audit: type=1400 audit(5850.090:268): avc:  denied  { write } for  pid=6701 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5884.449619][   T24] audit: type=1400 audit(5883.590:269): avc:  denied  { write } for  pid=6712 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5895.843690][   T24] audit: type=1400 audit(5895.030:270): avc:  denied  { write } for  pid=6726 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5971.748420][   T24] audit: type=1400 audit(5970.930:271): avc:  denied  { write } for  pid=6759 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5986.159601][   T24] audit: type=1400 audit(5985.350:272): avc:  denied  { write } for  pid=6770 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6027.140807][   T24] audit: type=1400 audit(6026.300:273): avc:  denied  { write } for  pid=6795 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6043.029410][   T24] audit: type=1400 audit(6042.110:274): avc:  denied  { write } for  pid=6806 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6069.160187][   T24] audit: type=1400 audit(6068.330:275): avc:  denied  { write } for  pid=6817 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6081.889378][   T24] audit: type=1400 audit(6081.050:276): avc:  denied  { write } for  pid=6826 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6113.568686][   T24] audit: type=1400 audit(6112.630:277): avc:  denied  { write } for  pid=6836 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6127.524038][   T24] audit: type=1400 audit(6126.690:278): avc:  denied  { write } for  pid=6849 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6227.153405][ T6894] FAULT_INJECTION: forcing a failure.
[ 6227.153405][ T6894] name failslab, interval 1, probability 0, space 0, times 1
[ 6227.153918][ T6894] CPU: 0 UID: 0 PID: 6894 Comm: syz.7.640 Not tainted syzkaller #0 PREEMPT(full) 
[ 6227.154184][ T6894] Hardware name: linux,dummy-virt (DT)
[ 6227.154290][ T6894] Call trace:
[ 6227.154369][ T6894]  show_stack+0x2c/0x3c (C)
[ 6227.154748][ T6894]  __dump_stack+0x30/0x40
[ 6227.155055][ T6894]  dump_stack_lvl+0xd8/0x12c
[ 6227.155384][ T6894]  dump_stack+0x1c/0x28
[ 6227.155706][ T6894]  should_fail_ex+0x56c/0x6d8
[ 6227.155972][ T6894]  should_failslab+0xb8/0xec
[ 6227.156373][ T6894]  kmem_cache_alloc_noprof+0x98/0x524
[ 6227.156691][ T6894]  mas_alloc_nodes+0x350/0x3b8
[ 6227.156959][ T6894]  mas_preallocate+0x618/0xacc
[ 6227.157219][ T6894]  __split_vma+0x2dc/0xa0c
[ 6227.157476][ T6894]  vms_gather_munmap_vmas+0x4d0/0x14d4
[ 6227.157734][ T6894]  do_vmi_align_munmap+0x174/0x280
[ 6227.157976][ T6894]  do_vmi_munmap+0x1ac/0x210
[ 6227.158224][ T6894]  __vm_munmap+0x1a0/0x2dc
[ 6227.158470][ T6894]  __arm64_sys_munmap+0x80/0xac
[ 6227.158709][ T6894]  invoke_syscall+0x94/0x1ec
[ 6227.159003][ T6894]  el0_svc_common+0x120/0x2f4
[ 6227.159298][ T6894]  do_el0_svc+0x58/0x74
[ 6227.159576][ T6894]  el0_svc+0x64/0x240
[ 6227.159865][ T6894]  el0t_64_sync_handler+0x68/0xdc
[ 6227.160192][ T6894]  el0t_64_sync+0x198/0x19c
[ 6274.231922][ T6917] FAULT_INJECTION: forcing a failure.
[ 6274.231922][ T6917] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 6274.232403][ T6917] CPU: 0 UID: 0 PID: 6917 Comm: syz.7.645 Not tainted syzkaller #0 PREEMPT(full) 
[ 6274.232662][ T6917] Hardware name: linux,dummy-virt (DT)
[ 6274.232776][ T6917] Call trace:
[ 6274.232853][ T6917]  show_stack+0x2c/0x3c (C)
[ 6274.233203][ T6917]  __dump_stack+0x30/0x40
[ 6274.233503][ T6917]  dump_stack_lvl+0xd8/0x12c
[ 6274.233828][ T6917]  dump_stack+0x1c/0x28
[ 6274.234121][ T6917]  should_fail_ex+0x56c/0x6d8
[ 6274.234371][ T6917]  should_fail+0x14/0x24
[ 6274.234611][ T6917]  should_fail_usercopy+0x20/0x30
[ 6274.234895][ T6917]  simple_read_from_buffer+0xd0/0x294
[ 6274.235208][ T6917]  proc_fail_nth_read+0x184/0x214
[ 6274.235421][ T6917]  vfs_read+0x220/0x9d8
[ 6274.235671][ T6917]  ksys_read+0x108/0x1fc
[ 6274.235932][ T6917]  __arm64_sys_read+0x9c/0xd0
[ 6274.236228][ T6917]  invoke_syscall+0x94/0x1ec
[ 6274.236529][ T6917]  el0_svc_common+0x120/0x2f4
[ 6274.236839][ T6917]  do_el0_svc+0x58/0x74
[ 6274.237115][ T6917]  el0_svc+0x64/0x240
[ 6274.237392][ T6917]  el0t_64_sync_handler+0x68/0xdc
[ 6274.237686][ T6917]  el0t_64_sync+0x198/0x19c
[ 6284.418587][   T24] audit: type=1400 audit(6283.600:279): avc:  denied  { write } for  pid=6916 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6298.873351][   T24] audit: type=1400 audit(6298.060:280): avc:  denied  { write } for  pid=6927 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6345.990833][ T6930] rxe_eth0 speed is unknown, defaulting to 1000
[ 6381.078234][ T6940] rxe_eth0 speed is unknown, defaulting to 1000
[ 6438.054721][ T6930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 6438.453823][ T6930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 6480.892252][ T6940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 6481.281716][ T6940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 6488.293375][ T6930] hsr_slave_0: entered promiscuous mode
[ 6488.455392][ T6930] hsr_slave_1: entered promiscuous mode
[ 6488.578388][ T6930] debugfs: 'hsr0' already exists in 'hsr'
[ 6488.578804][ T6930] Cannot create hsr debugfs directory
[ 6519.673926][ T6930] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 6520.389847][ T6930] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 6520.515719][ T6930] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 6521.251742][ T6930] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 6522.649438][ T6930] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 6523.256091][ T6930] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 6523.648917][ T6930] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 6524.122533][ T6930] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 6530.463688][ T6940] hsr_slave_0: entered promiscuous mode
[ 6530.613928][ T6940] hsr_slave_1: entered promiscuous mode
[ 6530.792039][ T6940] debugfs: 'hsr0' already exists in 'hsr'
[ 6530.792459][ T6940] Cannot create hsr debugfs directory
[ 6563.443115][ T6940] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 6564.311616][ T6940] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 6564.723607][ T6940] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 6565.445913][ T6940] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 6566.058000][ T6940] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 6566.662003][ T6940] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 6567.354574][ T6940] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 6568.071085][ T6940] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 6580.230946][ T6930] 8021q: adding VLAN 0 to HW filter on device bond0
[ 6621.321474][ T6940] 8021q: adding VLAN 0 to HW filter on device bond0
[ 6674.438118][   T24] audit: type=1400 audit(6673.490:281): avc:  denied  { write } for  pid=7045 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6690.217811][   T24] audit: type=1400 audit(6689.410:282): avc:  denied  { write } for  pid=7055 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6796.975735][ T6930] veth0_vlan: entered promiscuous mode
[ 6799.324243][ T6930] veth1_vlan: entered promiscuous mode
[ 6804.973795][ T6930] veth0_macvtap: entered promiscuous mode
[ 6806.292041][ T6930] veth1_macvtap: entered promiscuous mode
[ 6812.658260][ T7020] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 6812.700220][ T4311] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 6812.723825][ T6369] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 6812.728848][ T5764] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 6840.984242][ T6940] veth0_vlan: entered promiscuous mode
[ 6842.845832][ T6940] veth1_vlan: entered promiscuous mode
[ 6849.311801][ T6940] veth0_macvtap: entered promiscuous mode
[ 6850.884989][ T6940] veth1_macvtap: entered promiscuous mode
[ 6858.421780][ T3498] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 6858.611628][ T6888] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 6858.612475][ T6888] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 6858.613101][ T6888] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 6954.093106][ T7116] rxe_eth0 speed is unknown, defaulting to 1000
[ 7030.409081][   T26] INFO: task syz.7.646:6919 blocked for more than 430 seconds.
[ 7030.409491][   T26]       Not tainted syzkaller #0
[ 7030.409724][   T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 7030.410047][   T26] task:syz.7.646       state:D stack:0     pid:6919  tgid:6919  ppid:6363   task_flags:0x400040 flags:0x00000011
[ 7030.412434][   T26] Call trace:
[ 7030.412664][   T26]  __switch_to+0x5e4/0xb74 (T)
[ 7030.413108][   T26]  __schedule+0x1e0c/0x38a4
[ 7030.413398][   T26]  schedule+0x1b4/0x274
[ 7030.413681][   T26]  schedule_timeout+0x68/0x1e4
[ 7030.414022][   T26]  wait_for_completion+0x1bc/0x418
[ 7030.414316][   T26]  __synchronize_srcu+0x1cc/0x20c
[ 7030.414587][   T26]  synchronize_srcu+0x668/0x8dc
[ 7030.414873][   T26]  mmu_notifier_unregister+0x33c/0x444
[ 7030.415134][   T26]  kvm_put_kvm+0x69c/0xbbc
[ 7030.415463][   T26]  kvm_vm_release+0x58/0x78
[ 7030.415750][   T26]  __fput+0x4b0/0x97c
[ 7030.416096][   T26]  ____fput+0x20/0x30
[ 7030.652725][   T26]  task_work_run+0x1b8/0x254
[ 7030.653224][   T26]  exit_to_user_mode_loop+0x110/0x188
[ 7030.653554][   T26]  el0_svc+0x18c/0x240
[ 7030.653914][   T26]  el0t_64_sync_handler+0x68/0xdc
[ 7030.654235][   T26]  el0t_64_sync+0x198/0x19c
[ 7030.748503][   T26] 
[ 7030.748503][   T26] Showing all locks held in the system:
[ 7030.748979][   T26] locks held by khungtaskd/26: 1, last CPU#0:
[ 7030.749242][   T26]  #0: ffff800088a7e858 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x4c/0x188
[ 7030.750893][   T26] locks held by getty/3249: 2, on CPU#0:
[ 7030.751110][   T26]  #0: f3f000001342e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x40/0x50
[ 7030.751983][   T26]  #1: 1fff80008d7db2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x314/0x11f8
[ 7030.752867][   T26] locks held by sshd-session/3375: 1, last CPU#0:
[ 7030.753061][   T26]  #0: 52f0000017d059e0 (sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_sendmsg+0x30/0x64
[ 7030.753886][   T26] locks held by syz-executor/3376: 2, last CPU#0:
[ 7030.754070][   T26]  #0: 8cf0000013a70df8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0xf4/0xb64
[ 7030.754787][   T26]  #1: ffff800088a7e858 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x50/0x22c
[ 7030.755553][   T26] locks held by kworker/u4:7/3499: 2, on CPU#0:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 7030.755752][   T26]  #0: 9af000000dc34140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b8
[ 7030.999890][   T26]  #1: ffff8000a3c17ce8 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b8
[ 7031.000796][   T26] locks held by kworker/u4:0/3992: 3, last CPU#0:
[ 7031.001005][   T26]  #0: 9af000000dc34140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b8
[ 7031.001747][   T26]  #1: ffff80008dc97ce8 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b8
[ 7031.002491][   T26]  #2: a9f000001e2eca58 (&devlink->lock_key#8){+.+.}-{4:4}, at: devl_trylock+0x24/0x34
[ 7031.003494][   T26] locks held by kworker/u4:8/4311: 3, last CPU#0:
[ 7031.003700][   T26]  #0: 9af000000dc34140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b8
[ 7031.004517][   T26]  #1: ffff80008efa7ce8 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b8
[ 7031.005304][   T26]  #2: 69f000001f534a58 (&devlink->lock_key#6){+.+.}-{4:4}, at: devl_trylock+0x24/0x34
[ 7031.135959][   T26] locks held by kworker/u4:4/5764: 2, last CPU#0:
[ 7031.178191][   T26]  #0: 92f000000dc33d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b8
[ 7031.179189][   T26]  #1: ffff8000a06e7ce8 ((gc_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b8
[ 7031.179964][   T26] locks held by kworker/u4:11/5923: 3, last CPU#0:
[ 7031.180250][   T26]  #0: 9af000000dc34140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b8
[ 7031.181034][   T26]  #1: ffff80008f8e7ce8 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b8
[ 7031.181809][   T26]  #2: f3f000001d31c258 (&devlink->lock_key#5){+.+.}-{4:4}, at: devl_trylock+0x24/0x34
[ 7031.182787][   T26] locks held by syz.6.644/6905: 2, last CPU#0:
[ 7031.182990][   T26]  #0: ffff800088acc330 (srcu){.+.+}-{0:0}, at: __mmu_notifier_release+0x4e8/0x87c
[ 7031.183825][   T26]  #1: 6cf000002039b518 (&kvm->srcu){.+.+}-{0:0}, at: kvm_mmu_notifier_release+0x50/0xc4
[ 7031.184658][   T26] locks held by kworker/u4:13/6971: 3, last CPU#0:
[ 7031.184873][   T26]  #0: 9af000000dc34140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b8
[ 7031.185589][   T26]  #1: ffff8000a3997ce8 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b8
[ 7031.338031][   T26]  #2: 1ff000001f58aa58 (&devlink->lock_key#9){+.+.}-{4:4}, at: devl_trylock+0x24/0x34
[ 7031.339164][   T26] locks held by kworker/u4:14/7020: 3, last CPU#0:
[ 7031.339366][   T26]  #0: 9af000000dc34140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b8
[ 7031.340216][   T26]  #1: ffff8000a3ad7ce8 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b8
[ 7031.341029][   T26]  #2: 69f000001f534a58 (&devlink->lock_key#6){+.+.}-{4:4}, at: devl_trylock+0x24/0x34
[ 7031.341909][   T26] locks held by kworker/u4:15/7021: 3, last CPU#0:
[ 7031.342096][   T26]  #0: 9af000000dc34140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b8
[ 7031.342832][   T26]  #1: ffff8000a3ae7ce8 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b8
[ 7031.343565][   T26]  #2: 46f000001fc4f258 (&devlink->lock_key#3){+.+.}-{4:4}, at: devl_trylock+0x24/0x34
[ 7031.344479][   T26] locks held by syz-executor/7116: 4, last CPU#0:
[ 7031.344691][   T26]  #0: ffff80008895c5a8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x1ac/0x2a0
[ 7031.345560][   T26]  #1: ffff800088d70bf8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x9e4/0x1b0c
[ 7031.538064][   T26]  #2: 14f000000e2c9980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x48/0x70c
[ 7031.539050][   T26]  #3: ffff800088a7e858 (rcu_read_lock){....}-{1:3}, at: kernfs_root+0x44/0x29c
[ 7031.539834][   T26] locks held by modprobe/7142: 1, last CPU#0:
[ 7031.540036][   T26]  #0: 38f000001ff21878 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x12c/0x3cc
[ 7031.541079][   T26] 
[ 7031.541207][   T26] =============================================
[ 7031.541207][   T26] 
[ 7031.542019][   T26] Kernel panic - not syncing: hung_task: blocked tasks
[ 7031.550359][   T26] CPU: 0 UID: 0 PID: 26 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[ 7031.551723][   T26] Hardware name: linux,dummy-virt (DT)
[ 7031.552587][   T26] Call trace:
[ 7031.553254][   T26]  show_stack+0x2c/0x3c (C)
[ 7031.554265][   T26]  __dump_stack+0x30/0x40
[ 7031.555173][   T26]  dump_stack_lvl+0x30/0x12c
[ 7031.556175][   T26]  dump_stack+0x1c/0x28
[ 7031.557097][   T26]  vpanic+0x4cc/0x844
[ 7031.557935][   T26]  vpanic+0x0/0x844
[ 7031.558722][   T26]  hung_task_panic+0x0/0x2c
[ 7031.559566][   T26]  kthread+0x4cc/0x514
[ 7031.560582][   T26]  ret_from_fork+0x10/0x20
[ 7031.562359][   T26] Kernel Offset: disabled
[ 7031.562971][   T26] CPU features: 0x0,00000000,00d1802f,df188f42,0afff61f
[ 7031.563982][   T26] Memory Limit: none
[ 7031.566209][   T26] Rebooting in 86400 seconds..