last executing test programs:

1h9m16.649296861s ago: executing program 0 (id=208):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0x80111500, 0x20000000)
close(r3)
r4 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0x80111500, 0x20000000)
ioctl$KVM_CREATE_VM(r7, 0x541b, 0xffffffffffffe)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
openat$kvm(0x0, 0x0, 0x0, 0x0)
r10 = openat$kvm(0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
r11 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r12 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r13 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0)
r15 = syz_kvm_setup_syzos_vm$arm64(r14, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r15, &(0x7f0000000b80)={0x0, 0x0}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1)
syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1)
r16 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000b80)={0x0, &(0x7f0000000080)=[@hvc={0x32, 0x40, {0x84000003, [0xaee, 0x0, 0x4, 0x9, 0x4d]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1)
ioctl$KVM_RUN(r16, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0xdddd1000, 0x2000, &(0x7f0000fa3000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
ioctl$KVM_CREATE_DEVICE(r9, 0xc018aec0, &(0x7f00000000c0)={0x1})

1h9m6.886465989s ago: executing program 0 (id=210):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000200)={0x8, [0x6b73, 0x6, 0x101, 0x1, 0x3, 0x1, 0x0, 0x2]})

1h9m1.296355435s ago: executing program 0 (id=211):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, r1, 0x3, 0x23ac5f9b426ec4b1, 0xffffffffffffffff, 0x0)
r2 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x29)
syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000340)=[@svc={0x122, 0x40, {0x100, [0x9, 0x7030, 0x3, 0x5, 0x3]}}, @code={0xa, 0x6c, {"008008d50044207e0000809a007008d5006c200e007c001b20ec99d20040b8f2810180d2e20180d2230180d2240180d2020000d4a0a19dd20080b0f2810180d2620080d2630080d2640080d2020000d40820601e000008d5"}}], 0xac}, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
r5 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r4, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0xffffffffffffffa7)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r4, 0x0)
ioctl$KVM_CAP_HALT_POLL(r3, 0x4068aea3, &(0x7f0000000140)={0xb6, 0x0, 0x9})
eventfd2(0x5, 0x800)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x100000c, 0x16831, 0xffffffffffffffff, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1)
ioctl$KVM_SET_MP_STATE(r8, 0x4004ae99, 0x0)
r9 = openat$kvm(0x0, &(0x7f0000000040), 0x8800, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_CREATE_VM(r9, 0xae01, 0x9)
r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil)
r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000b80)={0x0, &(0x7f0000000040)=[@smc={0x1e, 0x40, {0x84000012, [0x79c4, 0x100080001, 0x5, 0x101, 0x13]}}], 0x40}, &(0x7f00000000c0)=[@featur1={0x1, 0x4}], 0x1)
r13 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r14, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000180)={0x8, <r15=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r15, 0x4018aee1, &(0x7f0000000000)=@attr_riscv64=@attr_addr={0x0, 0x1, @aplic, &(0x7f0000000140)=0x6})
ioctl$KVM_SET_DEVICE_ATTR(r15, 0x4018aee1, &(0x7f0000000540)=@attr_other={0x0, 0x8, 0x80, &(0x7f0000000500)=0x7})
ioctl$KVM_RUN(r12, 0xae80, 0x0)

1h8m53.746602828s ago: executing program 0 (id=213):
r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f000079e000/0x400000)=nil)
r2 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@mrs={0xbe, 0x18, {0x603000000013dcf0}}], 0x18}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000040)={0x0, 0x0}, 0x0, 0x0)
r6 = openat$kvm(0x0, &(0x7f0000000280), 0x103080, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2)
r8 = syz_kvm_vgic_v3_setup(r1, 0x1, 0x40)
ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f0000000080)=@attr_riscv64=@attr_aplic={0x0, 0x1, @valid=0x5cdc, &(0x7f0000000040)=0x8})
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r5, 0x4018aee1, &(0x7f0000000000)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0x20e4586c})
ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000100)={0x2710, 0x5, 0x30000, 0x1000, &(0x7f0000eeb000/0x1000)=nil, 0x100000, r5})
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x4000, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x28)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r10, 0x4068aea3, &(0x7f0000000280)={0xdf, 0x0, 0x2000})
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
mmap$KVM_VCPU(&(0x7f0000e31000/0x2000)=nil, 0x930, 0xa, 0x2012, r11, 0x40000)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r12 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
r14 = syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000a9c000/0x400000)=nil)
r15 = syz_kvm_add_vcpu$arm64(r14, &(0x7f0000000b80)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r15, 0x4010aeac, &(0x7f0000000300)=@arm64_extra={0x603000000013df02, &(0x7f00000002c0)=0x9})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x900c0, 0x0)

1h8m40.360956615s ago: executing program 0 (id=215):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000200)={0x8, [0x6b73, 0x6, 0x101, 0x1, 0x3, 0x1, 0x0, 0x2]})

1h8m32.824723766s ago: executing program 0 (id=217):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x33)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000100)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)=@arm64_core={0x60300000001000d4, 0x0})
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x22)
syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x15)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1000009, 0x16831, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vm(r6, 0x8040aeb6, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x0, 0x0})
r7 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f000090f000/0x400000)=nil)
r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@msr={0x14, 0x20, {0x6030000000138076, 0x8000}}], 0x20}, &(0x7f0000000100)=[@featur2={0x1, 0x23}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r8, 0x4018aee1, &(0x7f0000000140)=@attr_pmu_init)
ioctl$KVM_RUN(r8, 0xae80, 0x0)

1h7m45.486341083s ago: executing program 32 (id=217):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x33)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000100)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)=@arm64_core={0x60300000001000d4, 0x0})
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x22)
syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x15)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1000009, 0x16831, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vm(r6, 0x8040aeb6, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x0, 0x0})
r7 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f000090f000/0x400000)=nil)
r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@msr={0x14, 0x20, {0x6030000000138076, 0x8000}}], 0x20}, &(0x7f0000000100)=[@featur2={0x1, 0x23}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r8, 0x4018aee1, &(0x7f0000000140)=@attr_pmu_init)
ioctl$KVM_RUN(r8, 0xae80, 0x0)

34m21.182495613s ago: executing program 1 (id=538):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x8002, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x2c)
ioctl$KVM_SET_USER_MEMORY_REGION2(r3, 0x40a0ae49, &(0x7f0000000040)={0x1fd, 0x4, 0x10000, 0x2000, &(0x7f0000ffe000/0x2000)=nil, 0xfffffffffffff000})
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x3)
ioctl$KVM_ARM_VCPU_INIT(r6, 0x4020aeae, &(0x7f0000000100)={0x5, 0x18})
ioctl$KVM_GET_ONE_REG(r6, 0x4010aeab, &(0x7f00000000c0)=@arm64_sve_vls={0x606000000015ffff, &(0x7f0000000080)=0x10001})
r7 = syz_kvm_vgic_v3_setup(r1, 0x3, 0x40)
r8 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil)
r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000240)={0x0, &(0x7f0000000280)=[@its_setup={0x82, 0x28, {0x2, 0x0, 0x19f}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x0, 0x4, 0xf, 0x0, 0x8, 0x1}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xffd0, 0xff, 0xe}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x1, 0x4, 0xd, 0x8, 0x5}}, @svc={0x122, 0x40, {0x84000050, [0x7, 0x3, 0x7, 0x0, 0x17a]}}, @its_send_cmd={0xaa, 0x28, {0x15, 0x0, 0x4, 0xb, 0x0, 0x3, 0x4}}, @memwrite={0x6e, 0x30, @generic={0xffff1000, 0x87c, 0x7, 0x4}}, @mrs={0xbe, 0x18, {0x603000000013df5e}}, @mrs={0xbe, 0x18, {0x603000000013c005}}, @memwrite={0x6e, 0x30, @generic={0xa000, 0x5e2, 0x2, 0x2}}], 0x1a0}, 0x0, 0x0)
r12 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r14, 0x4018aee1, &(0x7f0000000040)=@attr_irq_timer={0x0, 0x1, 0x1, 0x0})
syz_kvm_vgic_v3_setup(r9, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000180)={0x8, <r15=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r15, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r11, 0xae80, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x6, 0x382bc663, &(0x7f0000000200)=0xffffffff})

34m5.747389118s ago: executing program 2 (id=540):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000000), 0x402000, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000180)={0x0, &(0x7f0000000380)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x7ffe}}], 0x20}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r5, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = eventfd2(0x3, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1d)
r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x26)
syz_kvm_setup_cpu$arm64(r7, r5, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000000c0)=[{0x0, &(0x7f0000000080)=[@svc={0x122, 0x40, {0x3f000000, [0x40, 0x9, 0x3, 0x6]}}], 0x40}], 0x1, 0x0, &(0x7f0000000100)=[@featur2], 0x1)
write$eventfd(r6, &(0x7f0000000400)=0xfffffffffffffffc, 0x8)
syz_kvm_add_vcpu$arm64(0x0, 0x0, 0x0, 0x0)
close(0x4)
close(0x5)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, 0xfffffffffffffffe)

34m2.859337859s ago: executing program 1 (id=541):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x4c500, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x9000000)
mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000)
munmap(&(0x7f000075a000/0xb000)=nil, 0xb000)
munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000482000/0x2000)=nil, 0x2000)
munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000)
munmap(&(0x7f0000e76000/0x12000)=nil, 0x12000)
mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x24132, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000f1a000/0x4000)=nil, 0x930, 0x0, 0x9032, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000fed000/0x3000)=nil, 0x930, 0x0, 0x4030031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
ioctl$KVM_ARM_SET_COUNTER_OFFSET(r1, 0x4010aeb5, &(0x7f0000000000)={0x0, 0x1ba})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})

33m58.476279897s ago: executing program 2 (id=542):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000580)={0x3, 0x400, 0x340, &(0x7f0000000180)=[0x1ff, 0x1, 0xffffffffffffffff, 0x4, 0x40, 0x80cb, 0x0, 0x4, 0xfffffffffffff800, 0x7ff, 0x5, 0x0, 0xe40, 0x0, 0x137f, 0x5, 0xe000000, 0x2, 0x2, 0x831, 0x3, 0x8, 0x679, 0x79, 0x5, 0x5, 0x4, 0x9, 0x4, 0xffffffffffffffff, 0xfffffffffffffff8, 0xfffffffffffffffe, 0x5, 0x1, 0x768, 0x6, 0x4, 0x80, 0x8001, 0x40, 0x5, 0x4, 0x100, 0x2, 0x80000000, 0x5, 0xe, 0x7, 0x5862f881, 0xaead, 0x8, 0x6, 0x2, 0x981c, 0x4, 0xf422, 0x5, 0x2f5000000000, 0x8000, 0x10000, 0x55ee, 0x4, 0xad, 0x6, 0x7f, 0x9, 0x4, 0x2, 0x8, 0xdf7e, 0x7, 0x5, 0x6, 0x2, 0x7fffffff, 0x4, 0x3, 0x8, 0xc, 0xb6, 0x9, 0x7fffffffffffffff, 0x1, 0x3, 0xc, 0x1, 0x2, 0x3, 0x5, 0x7, 0x3, 0x8, 0x8000000000000000, 0xffffffff, 0x983e, 0x4, 0x100000000, 0xd98, 0x6, 0x9, 0x9, 0x4, 0x8000000000000000, 0x6, 0x9, 0x9, 0x7, 0x400, 0x2, 0x4, 0x8, 0xce, 0x6, 0x4, 0x2c, 0x6, 0x6, 0x6, 0x54c1, 0xffffffffffffffff, 0x9, 0x6, 0x1, 0xff, 0xb, 0x7f, 0xb, 0x7]})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x3)
r3 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f00000001c0)={0x8, <r5=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4})
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x8, 0x100, &(0x7f0000000080)=0x8000000000000000})
syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000280)=@attr_arm64={0x0, 0x4, 0x2, 0x0})
syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_HAS_DEVICE_ATTR_vm(r1, 0x4018aee3, &(0x7f0000000100)=@attr_other={0x0, 0xc5fb, 0x8, 0x0})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80100, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x25)
r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000b7b000/0x400000)=nil)
r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000000)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r9, 0x4010aeac, &(0x7f0000000280)=@arm64_core={0x6030000000100042, &(0x7f0000000100)=0x17})
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3a)

33m55.850728407s ago: executing program 1 (id=543):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x10)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
r5 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x13, r4, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r4, 0x0)
r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0x801c581f, 0xfffffffffffffffc)
r7 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000})
r8 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil)
r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
r12 = syz_kvm_vgic_v3_setup(r9, 0x1, 0x100)
ioctl$KVM_SET_DEVICE_ATTR(r12, 0x4018aee1, &(0x7f0000000100)=@attr_riscv64=@attr_imsic={0x0, 0x1, 0x954, &(0x7f0000000140)=0xfffffffffffffc00})
mmap$KVM_VCPU(&(0x7f0000ffc000/0x1000)=nil, 0x930, 0x2000002, 0x2013, r7, 0x0)
r13 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0)
ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0)
r14 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1)
r15 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x0, 0x4, 0x10, r4, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r15, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r14, 0x0)
r16 = eventfd2(0x0, 0x0)
close(r16)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01)
write$eventfd(r16, &(0x7f0000000180)=0x5, 0xfffffde3)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x1000009, 0x5c1fd1b6565d2f2, r11, 0x0)

33m49.446067924s ago: executing program 2 (id=544):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = mmap$KVM_VCPU(&(0x7f0000dd4000/0x3000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32)
ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f00000001c0)={0xb0, "1f56166c1fb95702ce0188ec5f69d0615b905137a8d86dbebd3fe320594a69382d8c38510f59738016fbaf44c3eb9a30e0b39ca3850e3c1a726e992de04cb1e25e84575978d8c60e246dff13180832f19df6320572d97c0fff2a0c9e8be59775746588fa76212916054efc650aa403f522998748ebddd7cb196499ef1f3f156c330f58e410f6fc4e3a5680e18b4c9a33df31f7f5eecce1fae931e1cf0b6b4b224cbdba7a09ee08fdf998f5d689065bdb"})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r4 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r3, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r3, 0x0)
r5 = eventfd2(0x0, 0x0)
close(r5)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01)
write$eventfd(r5, &(0x7f0000000180)=0x5, 0xfffffde3)
r6 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0xfffffffffffffffe)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0)
mmap$KVM_VCPU(&(0x7f0000007000/0x3000)=nil, 0x930, 0x8, 0x8010, 0xffffffffffffffff, 0x0)
r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CAP_HALT_POLL(r8, 0x4068aea3, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

33m43.773793914s ago: executing program 1 (id=545):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3)
ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000000)={0x5, 0x18})
ioctl$KVM_ARM_VCPU_FINALIZE(r2, 0x4004aec2, &(0x7f00000001c0)=0x4)
ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f00000000c0)=@arm64_sve_vls={0x606000000015ffff, 0x0})
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
r6 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r5, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f00000001c0)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x48)
r7 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04)
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r8 = openat$kvm(0x0, &(0x7f0000000040), 0x240100, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r9 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000140)={0x4, <r11=>0xffffffffffffffff, 0x1})
ioctl$KVM_CREATE_VM(r11, 0x400454d1, 0x110c230004)
mmap$KVM_VCPU(&(0x7f0000007000/0x3000)=nil, r7, 0x1000001, 0x11, r5, 0x0)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1b37f3, 0x0)
r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40800, 0x0)
ioctl$KVM_CREATE_VM(r12, 0x40049409, 0x6)

33m30.339079502s ago: executing program 1 (id=546):
syz_kvm_setup_cpu$arm64(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil, &(0x7f0000000840)=[{0x0, 0x0, 0x248}], 0x1, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, <r2=>0xffffffffffffffff, 0x1})
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x19, 0x9b, 0xf, 0x0, 0x1, 0x8, 0x83, 0x42, 0x48, 0x81, 0xdd, 0x68, 0x0, 0x100001, 0x12b, 0x0, 0x3, 0xa, 0x8, '\x00', 0x5, 0x80000008})
write$eventfd(r2, &(0x7f00000001c0)=0x3, 0x8e80)
syz_kvm_setup_cpu$arm64(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil, &(0x7f0000000840)=[{0x0, 0x0, 0x248}], 0x1, 0x0, 0x0, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) (async)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) (async)
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) (async)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0) (async)
ioctl$KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, 0x0) (async)
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x19, 0x9b, 0xf, 0x0, 0x1, 0x8, 0x83, 0x42, 0x48, 0x81, 0xdd, 0x68, 0x0, 0x100001, 0x12b, 0x0, 0x3, 0xa, 0x8, '\x00', 0x5, 0x80000008}) (async)
write$eventfd(r2, &(0x7f00000001c0)=0x3, 0x8e80) (async)

33m25.157100954s ago: executing program 2 (id=547):
munmap$KVM_VCPU(0x0, 0x1000000001)
mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x0, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000041000/0x1000)=nil, 0x930, 0x3000006, 0x13, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f00000aa000/0x1000)=nil, 0x930, 0x400000b, 0x80010, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0x0, &(0x7f0000000000), 0x80, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2e)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x26)
ioctl$KVM_GET_DEVICE_ATTR_vm(r2, 0x4018aee2, &(0x7f00000000c0)=@attr_other={0x0, 0x5, 0x2, &(0x7f0000000080)=0x8})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x5, 0x1, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$arm64(r5, 0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil, &(0x7f0000000840)=[{0x0, 0x0, 0x248}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000500)={0x1fd, 0x0, 0x10000, 0x2000, &(0x7f0000000000/0x2000)=nil})
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
ioctl$KVM_ARM_VCPU_FINALIZE(r3, 0x8000ae8c, 0x0)
ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000040)=@arm64_sve={0x60800000001503e1, &(0x7f0000000000)=0x9})
r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x23)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r7, r8, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x20}], 0x1, 0x0, 0x0, 0x0)
openat$kvm(0x0, &(0x7f0000000140), 0x121200, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc9, 0x3})
r9 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x3)
ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000140)={0x6, <r10=>0xffffffffffffffff, 0x1})
ioctl$KVM_SET_DEVICE_ATTR(r10, 0x40305828, &(0x7f0000000040)=@attr_other={0x0, 0x0, 0xfffffffffffffff7, 0x0})
ioctl$KVM_GET_ONE_REG(r8, 0x4010aeab, &(0x7f0000000100)=@arm64_core={0x60300000001000d7, 0x0})
mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0)

33m21.514292665s ago: executing program 1 (id=548):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f00000001c0)="f21bc75509bf71c9d70236fc044842da63ff2f677e80ab404d37b2e3f137a13bc2b875c2357c6e1100000000000000000000000000000000000000000000000000ff00", 0x0, 0x48)
ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x5000, 0x102000, 0x20081})
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000140)={0x4, <r4=>0xffffffffffffffff, 0x1})
write$eventfd(r4, &(0x7f00000001c0)=0x8100000001, 0x51a8)
r5 = eventfd2(0xeffffffd, 0x801)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x200, 0x4000, 0x4, r5, 0x1})
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000001340)={0x3, 0x0, 0x2, r5, 0x3})
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x34)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x51d987bd, 0x0, 0x0, r5, 0xa})
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) (async)
syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f00000001c0)="f21bc75509bf71c9d70236fc044842da63ff2f677e80ab404d37b2e3f137a13bc2b875c2357c6e1100000000000000000000000000000000000000000000000000ff00", 0x0, 0x48) (async)
ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x5000, 0x102000, 0x20081}) (async)
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) (async)
write$eventfd(r4, &(0x7f00000001c0)=0x8100000001, 0x51a8) (async)
eventfd2(0xeffffffd, 0x801) (async)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x200, 0x4000, 0x4, r5, 0x1}) (async)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000001340)={0x3, 0x0, 0x2, r5, 0x3}) (async)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x34) (async)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x51d987bd, 0x0, 0x0, r5, 0xa}) (async)

33m18.806990585s ago: executing program 2 (id=549):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0x80111500, 0x20000000)
write$eventfd(r1, &(0x7f0000000000), 0xfffffdef) (async)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xf, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0) (async)
r2 = eventfd2(0xffffffab, 0x801) (async)
r3 = eventfd2(0x8001, 0x800)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r2, 0x8, 0x2, r3})

33m12.564215842s ago: executing program 2 (id=550):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0x80111500, 0x20000000)
r4 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000bc5000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000140)={0x4, <r9=>0xffffffffffffffff, 0x1})
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0xd, 0x8, 0xb, 0x0, 0x2, 0x6, 0x6, 0x6, 0x48, 0x88, 0xf5, 0x9, 0x0, 0x9, 0x6, 0xa, 0x3, 0x8, 0x0, '\x00', 0x10, 0x6})
write$eventfd(r9, &(0x7f00000001c0)=0x9, 0x1d)
r10 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000000)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r10, 0x4018aee1, &(0x7f0000000040)=@attr_pmu_filter={0x0, 0x0, 0x2, 0xfffffffffffffffe})
write$eventfd(r3, &(0x7f0000000000)=0xe0, 0xfdf8)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0x80111500, 0x20000000)
write$eventfd(r12, 0x0, 0x84)
r13 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r1, r13, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x20}], 0x1, 0x0, 0x0, 0x0)
r14 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0)
r16 = syz_kvm_setup_syzos_vm$arm64(r15, &(0x7f0000a9c000/0x400000)=nil)
r17 = syz_kvm_add_vcpu$arm64(r16, &(0x7f0000000b80)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r17, 0x4010aeac, &(0x7f0000000300)=@arm64_extra={0x603000000013c513, &(0x7f00000002c0)=0x9})
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0)

32m35.646492884s ago: executing program 33 (id=548):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f00000001c0)="f21bc75509bf71c9d70236fc044842da63ff2f677e80ab404d37b2e3f137a13bc2b875c2357c6e1100000000000000000000000000000000000000000000000000ff00", 0x0, 0x48)
ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x5000, 0x102000, 0x20081})
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000140)={0x4, <r4=>0xffffffffffffffff, 0x1})
write$eventfd(r4, &(0x7f00000001c0)=0x8100000001, 0x51a8)
r5 = eventfd2(0xeffffffd, 0x801)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x200, 0x4000, 0x4, r5, 0x1})
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000001340)={0x3, 0x0, 0x2, r5, 0x3})
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x34)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x51d987bd, 0x0, 0x0, r5, 0xa})
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) (async)
syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f00000001c0)="f21bc75509bf71c9d70236fc044842da63ff2f677e80ab404d37b2e3f137a13bc2b875c2357c6e1100000000000000000000000000000000000000000000000000ff00", 0x0, 0x48) (async)
ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x5000, 0x102000, 0x20081}) (async)
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) (async)
write$eventfd(r4, &(0x7f00000001c0)=0x8100000001, 0x51a8) (async)
eventfd2(0xeffffffd, 0x801) (async)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x200, 0x4000, 0x4, r5, 0x1}) (async)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000001340)={0x3, 0x0, 0x2, r5, 0x3}) (async)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x34) (async)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x51d987bd, 0x0, 0x0, r5, 0xa}) (async)

32m25.754139693s ago: executing program 34 (id=550):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0x80111500, 0x20000000)
r4 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000bc5000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000140)={0x4, <r9=>0xffffffffffffffff, 0x1})
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0xd, 0x8, 0xb, 0x0, 0x2, 0x6, 0x6, 0x6, 0x48, 0x88, 0xf5, 0x9, 0x0, 0x9, 0x6, 0xa, 0x3, 0x8, 0x0, '\x00', 0x10, 0x6})
write$eventfd(r9, &(0x7f00000001c0)=0x9, 0x1d)
r10 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000000)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r10, 0x4018aee1, &(0x7f0000000040)=@attr_pmu_filter={0x0, 0x0, 0x2, 0xfffffffffffffffe})
write$eventfd(r3, &(0x7f0000000000)=0xe0, 0xfdf8)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0x80111500, 0x20000000)
write$eventfd(r12, 0x0, 0x84)
r13 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r1, r13, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x20}], 0x1, 0x0, 0x0, 0x0)
r14 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0)
r16 = syz_kvm_setup_syzos_vm$arm64(r15, &(0x7f0000a9c000/0x400000)=nil)
r17 = syz_kvm_add_vcpu$arm64(r16, &(0x7f0000000b80)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r17, 0x4010aeac, &(0x7f0000000300)=@arm64_extra={0x603000000013c513, &(0x7f00000002c0)=0x9})
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0)

28m10.168213299s ago: executing program 3 (id=551):
r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
close(0xffffffffffffffff)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x315440, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0x80111500, 0x20000000)
ioctl$KVM_CREATE_VM(r3, 0x5760, 0x2000001c)
r4 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f00000001c0)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r4, 0x4018aee1, &(0x7f0000000000)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0x20e4586e})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r6 = openat$kvm(0x0, 0x0, 0x200, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x2a)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0xeeef0000, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f00000000c0)={0x2515, 0x2, 0x50000, 0x1000, &(0x7f0000c8c000/0x1000)=nil})
close(r9)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000)
ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000140)={0x7, <r10=>0xffffffffffffffff, 0x1})
ioctl$KVM_HAS_DEVICE_ATTR(r10, 0x4018aee3, &(0x7f0000000180)=@attr_riscv64=@attr_imsic={0x0, 0x1, 0x73c0, 0x0})
openat$kvm(0x0, &(0x7f0000000040), 0x800, 0x0)
munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000e6a000/0x2000)=nil, 0x2000)
munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000)
mmap$KVM_VCPU(&(0x7f0000fc2000/0x4000)=nil, 0x930, 0x0, 0x4f832, 0xffffffffffffffff, 0x1000000)

27m31.177882975s ago: executing program 4 (id=552):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ARM_VCPU_INIT(r3, 0x4020aeae, &(0x7f0000000080)={0x5})
ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000280)=@arm64_sys={0x603000000013c006, &(0x7f0000000240)})
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r4, 0x4068aea3, &(0x7f00000001c0)={0xa8, 0x0, 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})

27m19.478187049s ago: executing program 35 (id=551):
r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
close(0xffffffffffffffff)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x315440, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0x80111500, 0x20000000)
ioctl$KVM_CREATE_VM(r3, 0x5760, 0x2000001c)
r4 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f00000001c0)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r4, 0x4018aee1, &(0x7f0000000000)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0x20e4586e})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r6 = openat$kvm(0x0, 0x0, 0x200, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x2a)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0xeeef0000, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f00000000c0)={0x2515, 0x2, 0x50000, 0x1000, &(0x7f0000c8c000/0x1000)=nil})
close(r9)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000)
ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000140)={0x7, <r10=>0xffffffffffffffff, 0x1})
ioctl$KVM_HAS_DEVICE_ATTR(r10, 0x4018aee3, &(0x7f0000000180)=@attr_riscv64=@attr_imsic={0x0, 0x1, 0x73c0, 0x0})
openat$kvm(0x0, &(0x7f0000000040), 0x800, 0x0)
munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000e6a000/0x2000)=nil, 0x2000)
munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000)
mmap$KVM_VCPU(&(0x7f0000fc2000/0x4000)=nil, 0x930, 0x0, 0x4f832, 0xffffffffffffffff, 0x1000000)

26m43.859063459s ago: executing program 36 (id=552):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ARM_VCPU_INIT(r3, 0x4020aeae, &(0x7f0000000080)={0x5})
ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000280)=@arm64_sys={0x603000000013c006, &(0x7f0000000240)})
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r4, 0x4068aea3, &(0x7f00000001c0)={0xa8, 0x0, 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})

20m2.101399203s ago: executing program 5 (id=555):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0)
r3 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32)
syz_memcpy_off$KVM_EXIT_MMIO(r3, 0x20, 0x0, 0x0, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x404)
ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f00000001c0)={0x8, <r7=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4})
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
syz_kvm_setup_cpu$arm64(r6, 0xffffffffffffffff, &(0x7f0000001000/0x400000)=nil, &(0x7f0000000140)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x8, 0x100, &(0x7f0000000080)=0x8000000000000000})
ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000280)=@attr_arm64={0x0, 0x4, 0x2, 0x0})
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x1ff, 0x2, 0x30000, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000300)=@attr_other={0x0, 0x4, 0x1, 0x0})
r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04)
mmap$KVM_VCPU(&(0x7f0000c60000/0x2000)=nil, r8, 0x300000a, 0x16831, 0xffffffffffffffff, 0x0)
r9 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1)
ioctl$KVM_ARM_VCPU_INIT(r11, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8})
ioctl$KVM_SET_ONE_REG(r11, 0x4010aeac, &(0x7f0000000380)=@arm64_sys={0x603000000013c016, &(0x7f0000000000)=0x5})
syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f00000000c0)="e65bf643e6e1a3ffc871fcc8064f26b4d9f94b6f1ccd7b41443d2b5486580143226c0ead9a1620b6709fafba2af023314cc4bf610d6a743ad4913910b8364e5f73ea2fc43ac1ebfc", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0)
syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@its_setup={0x82, 0x28, {0x3, 0x4, 0x2}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x0, 0x40000000, 0x10000, 0x10000, 0x0, 0x1}}], 0x50}, 0x0, 0x0)

19m43.770984842s ago: executing program 5 (id=556):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000140)={0x0, &(0x7f0000000200)=[@smc={0x1e, 0x40, {0x86000000, [0x10000, 0xffe, 0x7e8, 0x7, 0x4000004]}}], 0x40}, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

19m30.899207393s ago: executing program 6 (id=554):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x400, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000000c0)={0x7, <r2=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x1000000, 0x3, &(0x7f0000000000)=0xffffffffffffffff})

19m29.546801861s ago: executing program 5 (id=557):
r0 = syz_kvm_vgic_v3_setup(0xffffffffffffffff, 0x1, 0x200)
ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000000040)=@attr_arm64={0x0, 0x7, 0x2, &(0x7f0000000000)=0x3}) (async)
r1 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece)
ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000080)={0xd932, 0xffe, 0x0, r1, 0x2}) (async)
ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f00000000c0)={0x101ff, 0x0, &(0x7f0000ffe000/0x2000)=nil}) (async)
r2 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000240)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x0, 0x96}}, @eret={0xe6, 0x18, 0x1c}, @hvc={0x32, 0x40, {0x2000, [0x1, 0x2, 0x6, 0x2, 0xfffffffffffffffc]}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xfff4, 0xfffffffffffffffd, 0xd}}, @smc={0x1e, 0x40, {0x32000000, [0x1, 0x3ff, 0x80, 0xa, 0x4b20]}}, @eret={0xe6, 0x18, 0x5}], 0x108}, &(0x7f0000000280)=[@featur1={0x1, 0x41}], 0x1)
ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f00000002c0)={0x66, "16f501bed4007bc7105313a09b0d0db7bbd1e10eee444dd71f08e29b42dee49f47d772a4c09e199344ce825022e83521143733efa6991a8d054e81871333a70ccaf80b05c27ed99dd8179533b7956b3a2d9de647130ef3c31335108634964d715bc3d925fb60"})
r3 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000540)={0x0, &(0x7f0000000340)=[@hvc={0x32, 0x40, {0x1000000, [0x9, 0xf6, 0x1, 0x925, 0x9]}}, @mrs={0xbe, 0x18, {0x603000000013c111}}, @irq_setup={0x46, 0x18, {0x3, 0x34e}}, @code={0xa, 0xb4, {"20c797d20040b8f2610080d2e20180d2e30180d2240080d2020000d40000199e007008d5e07e8fd20000b8f2410080d2e20180d2a30180d2040080d2020000d400084078008008d500ca93d20000b0f2210080d2020080d2230180d2a40180d2020000d40008c09ae09297d20060b8f2210180d2a20180d2e30080d2c40080d2020000d4208293d20080b0f2e10180d2e20080d2a30180d2840180d2020000d4"}}, @its_setup={0x82, 0x28, {0x3, 0x0, 0x12e}}, @svc={0x122, 0x40, {0x8400000b, [0x401, 0x2, 0x6, 0xdde2, 0x4]}}, @its_setup={0x82, 0x28, {0x4, 0x3, 0x3df}}, @eret={0xe6, 0x18, 0x2}, @irq_setup={0x46, 0x18, {0x3, 0x3d8}}], 0x1e4}, &(0x7f0000000580)=[@featur2={0x1, 0xa1}], 0x1)
ioctl$KVM_ARM_VCPU_INIT(r3, 0x4020aeae, &(0x7f00000005c0)={0x0, 0x6}) (async)
r4 = ioctl$KVM_GET_STATS_FD_cpu(r2, 0xaece)
write$eventfd(r4, &(0x7f0000000600)=0x9, 0x8) (async)
r5 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000bfd000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000900)={0x0, &(0x7f0000000640)=[@svc={0x122, 0x40, {0x8400000e, [0x5, 0x3, 0x1, 0x0, 0x4]}}, @msr={0x14, 0x20, {0x5ee3, 0x5}}, @eret={0xe6, 0x18, 0x4}, @irq_setup={0x46, 0x18, {0x2, 0x132}}, @its_send_cmd={0xaa, 0x28, {0xb, 0x0, 0x2, 0x10, 0x3, 0x8, 0x3}}, @eret={0xe6, 0x18, 0x7f}, @smc={0x1e, 0x40, {0x2, [0x5, 0x800, 0xff, 0xe, 0xffffffffffff8000]}}, @hvc={0x32, 0x40, {0x1000000, [0x81, 0xfff, 0x6, 0x81, 0x87]}}, @svc={0x122, 0x40, {0xc5000020, [0x0, 0xfffffffffffffe00, 0x7, 0x6, 0x2316]}}, @eret={0xe6, 0x18, 0x3}, @uexit={0x0, 0x18, 0xff}, @eret={0xe6, 0x18, 0x3}, @code={0xa, 0x9c, {"60968ad200e0b8f2010180d2e20180d2c30180d2e40080d2020000d4000c40bc008008d520be80d200e0b8f2a10080d2220080d2230180d2240180d2020000d4c07099d20040b0f2810080d2020180d2230080d2440180d2020000d4000028d5007008d5007008d5000008d5c0149cd200c0b8f2610180d2220180d2630080d2640180d2020000d4"}}, @smc={0x1e, 0x40, {0x8400000e, [0x40ee, 0x4, 0xa, 0x401, 0x101]}}], 0x2b4}, &(0x7f0000000940)=[@featur1={0x1, 0xd0}], 0x1) (async)
close(r1)
ioctl$KVM_HAS_DEVICE_ATTR(r4, 0x4018aee3, &(0x7f00000009c0)=@attr_riscv64=@attr_aplic={0x0, 0x1, @valid=0x1ddc, &(0x7f0000000980)=0x7}) (async)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1c)
r7 = ioctl$KVM_GET_STATS_FD_vm(r6, 0xaece)
ioctl$KVM_CAP_ARM_MTE(r7, 0x4068aea3, &(0x7f0000000a00)) (async)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a80), 0x42c400, 0x0)
ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000ac0)={0x9b, "d0466d4b9a4147a004f1fb52278065b51786f23626ada3d29f4c1308bc8ee65777fb3ed07f10517d82d07a8049c376864ae4c2e4e4ea0d4c013b479dc494838c790f438a9a33645dae81aaf7457e6adc36569bcdcd4103218217e1aac22735204b95696102c5316fcfc63332a9f4043d34c8cda203cef2ebadb374fb3eb9d356d5a537d0116d9ad2aee5e7e1a36f2a36d6c8f2e662b27a58e8f3e4"}) (async)
write$eventfd(r8, &(0x7f0000000b80)=0x4, 0x8) (async)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000bc0), 0x208102, 0x0) (async)
ioctl$KVM_SET_DEVICE_ATTR(r0, 0x4018aee1, &(0x7f0000000c40)=@attr_arm64={0x0, 0x3, 0x4, &(0x7f0000000c00)=0x42}) (async)
r10 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) (async)
r11 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000001380)={0x0, &(0x7f0000000c80)=[@memwrite={0x6e, 0x30, @vgic_gicr={0x8100000, 0x100, 0x7}}, @code={0xa, 0x6c, {"000c003c0034005f008c002f000000eb000c40b800b8202e40b297d200e0b0f2410080d2620180d2630080d2040180d2020000d4e02697d20020b0f2410080d2c20080d2030080d2640180d2020000d4007008d5000028d5"}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xffd0, 0x5, 0xc}}, @mrs={0xbe, 0x18, {0x603000000013e110}}, @code={0xa, 0x9c, {"807399d200a0b0f2610080d2a20180d2a30080d2c40080d2020000d41f2003d500c0206e007008d540f39dd200a0b0f2810180d2420080d2830080d2440080d2020000d40084004f00fc001b00da8dd200a0b8f2a10080d2620080d2230180d2240180d2020000d4c0af84d200a0b0f2610080d2820180d2e30080d2c40080d2020000d40084400d"}}, @irq_setup={0x46, 0x18, {0x0, 0x5c}}, @msr={0x14, 0x20, {0x603000000013deb4, 0x8}}, @its_setup={0x82, 0x28, {0x0, 0x0, 0x1e4}}, @code={0xa, 0x6c, {"007008d580c990d200a0b8f2c10080d2c20080d2230180d2840180d2020000d400e0c00d008008d5000008d5007008d5007008d5007008d5a0c694d200a0b8f2a10180d2a20080d2a30080d2a40080d2020000d40008407a"}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x100, 0x67, 0x8}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x0, 0x3, 0xe, 0x2, 0x400, 0x4}}, @msr={0x14, 0x20, {0x603000000013e66d, 0x8000}}, @eret={0xe6, 0x18, 0x4f65}, @mrs={0xbe, 0x18, {0x603000000013c4c9}}, @msr={0x14, 0x20, {0x603000000013df48}}, @hvc={0x32, 0x40, {0x84000010, [0x101, 0xd, 0x8000000000000001, 0x3, 0xffff]}}, @code={0xa, 0x84, {"008008d5000028d5007c005300000014000080da40a587d20000b0f2010180d2820180d2a30080d2c40180d2020000d400a0df0dc03e9bd200e0b0f2010180d2820180d2030080d2c40080d2020000d4a06994d20040b8f2410080d2820080d2430080d2840180d2020000d4007008d5"}}, @svc={0x122, 0x40, {0x84000002, [0x3400000, 0x5, 0x7ff, 0x7ff, 0x1]}}, @svc={0x122, 0x40, {0xc4000053, [0x9, 0x7, 0x7, 0x10001, 0x2]}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x0, 0x1, 0x4, 0x7fffffff, 0xfffffffb, 0x3}}, @smc={0x1e, 0x40, {0x30000000, [0x9, 0x99, 0x6, 0x9, 0x3ac0800000000000]}}, @mrs={0xbe, 0x18, {0x603000000013e091}}, @code={0xa, 0x84, {"007008d50000402c0080200d00004008c0119dd200a0b8f2210180d2820080d2a30180d2240180d2020000d400008012e0699cd20080b8f2210080d2620180d2a30080d2840080d2020000d400fc007f000008d5e03996d20000b0f2610080d2420080d2a30180d2840080d2020000d4"}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x1, 0x1, 0x7, 0x8f, 0x0, 0x2}}, @smc={0x1e, 0x40, {0xc4000014, [0x3ff, 0x8, 0x1, 0xa, 0x5]}}, @smc={0x1e, 0x40, {0x84000003, [0x8, 0xffffffffffffffff, 0x2, 0x4]}}, @its_setup={0x82, 0x28, {0x3, 0x2, 0x157}}, @code={0xa, 0x9c, {"00000053e00300fa000028d5606480d200e0b8f2010180d2c20080d2a30180d2440080d2020000d4000028d5007008d5c0158cd200a0b8f2a10180d2020080d2a30180d2840180d2020000d4008008d560ec83d20060b8f2a10180d2420080d2230080d2240180d2020000d4202399d20020b8f2e10180d2820180d2e30080d2440180d2020000d4"}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x0, 0x0, 0x8, 0x0, 0xfffff801, 0x4}}], 0x6f0}, &(0x7f00000013c0)=[@featur2={0x1, 0x21}], 0x1)
mmap$KVM_VCPU(&(0x7f0000ed7000/0x3000)=nil, r10, 0x4000000, 0x90813, r11, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000001400), 0x800, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000001440), 0x200, 0x0) (async)
ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0xfffffffffffffffe) (async)
syz_kvm_add_vcpu$arm64(r5, &(0x7f0000001940)={0x0, &(0x7f0000001480)=[@uexit={0x0, 0x18}, @code={0xa, 0x9c, {"80c49ed200c0b0f2610080d2e20080d2a30180d2440080d2020000d4406595d200c0b0f2c10180d2a20180d2030180d2840180d2020000d40024000fa0588dd20040b8f2a10180d2420180d2830180d2240080d2020000d4c0b085d200e0b0f2c10180d2a20180d2430080d2c40080d2020000d400a0c00d007008d500a8210e007008d50000005c"}}, @irq_setup={0x46, 0x18, {0x3, 0x12d}}, @hvc={0x32, 0x40, {0x3f000000, [0x77, 0x6, 0x99ec, 0x1ff, 0xa]}}, @mrs={0xbe, 0x18, {0x603000000013e298}}, @svc={0x122, 0x40, {0xcf00001c, [0x99b, 0x6, 0xf5e, 0xfffffffffffffffe, 0xff1]}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x0, 0x3, 0x1, 0x8, 0x9, 0x2}}, @uexit={0x0, 0x18, 0x800}, @svc={0x122, 0x40, {0xc3001fce, [0x2c, 0x101, 0x6, 0x8e32]}}, @code={0xa, 0x84, {"007008d5000000eb0000c06c0068216e403782d20040b0f2210080d2e20080d2430080d2240080d2020000d460189cd200e0b8f2e10080d2e20080d2a30080d2e40080d2020000d4000008d50040000e00638cd200a0b8f2810180d2c20080d2e30080d2840080d2020000d4000c00fc"}}, @memwrite={0x6e, 0x30, @generic={0x2, 0x39e, 0x12f}}, @mrs={0xbe, 0x18, {0x603000000013e201}}, @code={0xa, 0x9c, {"000008d5007008d500e4a07e408d96d20060b8f2010080d2620080d2a30080d2c40080d2020000d480a59cd200a0b0f2610080d2220080d2230180d2040180d2020000d400000058e00390d20040b0f2410180d2820180d2c30180d2c40180d2020000d40000c0290070000f209483d20060b8f2c10180d2420080d2030080d2a40180d2020000d4"}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x1, 0x2, 0xa, 0x9, 0x3d6, 0x1}}, @irq_setup={0x46, 0x18, {0x3, 0xb8}}, @eret={0xe6, 0x18}, @svc={0x122, 0x40, {0xc5000021, [0x10000, 0x5, 0x8, 0x2, 0xfffffffffffffff8]}}, @uexit={0x0, 0x18, 0x7}, @msr={0x14, 0x20, {0x603000000013e658, 0x800}}, @hvc={0x32, 0x40, {0xc400000d, [0x9, 0x59cc, 0x0, 0x32, 0x8]}}, @its_send_cmd={0xaa, 0x28, {0xe, 0x1, 0x2, 0xc, 0x9, 0xa9e, 0x3}}], 0x484}, &(0x7f0000001980)=[@featur2={0x1, 0x90}], 0x1)

19m17.417417664s ago: executing program 6 (id=558):
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000180)={0x4, 0x1000, 0x1})
r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x300, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x28)
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r2, 0x4068aea3, &(0x7f0000000280)={0xdf, 0x0, 0x2000})
ioctl$KVM_CLEAR_DIRTY_LOG(r2, 0xc018aec0, &(0x7f0000000740)={0x0, 0x240, 0x1c0, 0x0})
r3 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1)
syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000080)={0x0, &(0x7f00000002c0)=[@hvc={0x32, 0x40, {0x57, [0xa00000000, 0x4, 0x4, 0x9, 0x4d]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil)
close(r6)
r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000000)={0x0, 0x0}, &(0x7f00000000c0)=[@featur1={0x1, 0x5}], 0x1)
r12 = syz_kvm_add_vcpu$arm64(r0, &(0x7f0000000b80)={0x0, &(0x7f0000000100)=[@smc={0x1e, 0x40, {0x84000003, [0x80000000000000, 0x53960c3d, 0xac8, 0x2, 0x7fffffffffffffff]}}], 0x40}, &(0x7f00000001c0)=[@featur1={0x1, 0x4}], 0x1)
ioctl$KVM_RUN(r12, 0xae80, 0x0)
ioctl$KVM_SET_ONE_REG(r11, 0x4010aeac, &(0x7f0000000140)=@arm64_sys={0x603000000013dea7, 0x0})

19m16.492378032s ago: executing program 5 (id=559):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80403, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, 0x0)
r3 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, 0x0)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f0000000040)=@arm64_core={0x603000000010003e, &(0x7f00000001c0)=0x1000000080007})
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
r8 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil)
r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000b80)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r11, 0x4010aeac, &(0x7f0000000000)=@arm64_fw={0x6030000000140003, &(0x7f0000000200)=0x10000})
r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0)
mmap$KVM_VCPU(0x0, 0x50000, 0x3, 0x11, r14, 0x0)
r15 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2040, 0x0)
r16 = ioctl$KVM_CREATE_VM(r15, 0xae01, 0x0)
r17 = ioctl$KVM_CREATE_VCPU(r16, 0xae41, 0x3)
ioctl$KVM_ARM_VCPU_INIT(r17, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8})
r18 = ioctl$KVM_CREATE_VCPU(r16, 0xae41, 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r18, 0x4018aee1, &(0x7f0000000140)=@attr_other={0x0, 0x0, 0x4, 0x0})
r19 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r7, 0x0)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r19, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r7, 0x0)
openat$kvm(0x0, 0x0, 0x0, 0x0)

18m59.464075068s ago: executing program 6 (id=560):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x29)
syz_kvm_vgic_v3_setup(r2, 0x4, 0x80)
ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f0000000040)={0x2000000, 0x8000bb28})
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r3, r4, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x20}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_GET_ONE_REG(r4, 0x4010aeab, &(0x7f0000000100)=@arm64_extra={0x603000000013c036})

18m54.297811542s ago: executing program 5 (id=561):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2e)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000200)={0x3, 0x60000, 0x1})
ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000180)={0xc, "11029c14e50eaac9139c4595"})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x5, 0x1, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000bc2000/0x400000)=nil)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000000, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=[@featur2={0x1, 0x2}], 0x1)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000500)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0xfffffffffffffffe)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000040)={0x10200, 0x1, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$arm64(r7, 0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil, &(0x7f0000000840)=[{0x0, 0x0, 0x248}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000500)={0x1fd, 0x0, 0x10000, 0x2000, &(0x7f0000000000/0x2000)=nil})
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)

18m44.796974052s ago: executing program 6 (id=562):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x40)
ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000040)={0xffffffff, 0x6000})
syz_kvm_add_vcpu$arm64(r4, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
r6 = syz_kvm_vgic_v3_setup(r3, 0x1, 0x100)
r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x38)
ioctl$KVM_GET_DIRTY_LOG(r7, 0x4010ae42, &(0x7f0000000000)={0x2, 0x0, &(0x7f0000ffa000/0x3000)=nil})
openat$kvm(0xffffffffffffff9c, 0x0, 0x4eed40, 0x0)
syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, &(0x7f0000000240)="57ffe02b199233af1c100f993e9c1541d69a2077275a13cf", 0x0, 0x18)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04)
r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x1})
r9 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20080, 0x0)
ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f0000000140)={0x4, <r12=>0xffffffffffffffff, 0x1})
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x8, 0xf, 0x0, 0x5, 0x6, 0x86, 0x6, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x0, 0x800000, 0x0, 0x3, 0x5, 0x8, '\x00', 0x9, 0x93})
write$eventfd(r12, &(0x7f00000001c0)=0x3, 0xfdef)
ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000000)=@attr_other={0x0, 0x5, 0xb0, &(0x7f00000003c0)=0x5})
r13 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r14 = syz_kvm_add_vcpu$arm64(r13, &(0x7f0000000180)={0x0, &(0x7f00000001c0)}, &(0x7f0000000300)=[@featur2={0x1, 0x2}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r14, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000280)={0x2, 0x0, [{0x9, 0x3, 0x1, 0x0, @irqchip={0x3, 0x4}}, {0x5, 0x5, 0x1, 0x0, @adapter={0xe, 0x8000000000000001, 0x1, 0x7077, 0x2}}]})
ioctl$KVM_RUN(r14, 0xae80, 0x0)

18m29.016648823s ago: executing program 5 (id=563):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2d)
ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000000)={0xa, <r1=>0xffffffffffffffff})
ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000040)={0x5, 0x0, [{0x4, 0x4, 0x0, 0x0, @adapter={0x0, 0x7fffffffffffffff, 0x9, 0x9, 0xf37b}}, {0x1, 0x2, 0x0, 0x0, @irqchip={0x9, 0xa}}, {0x5, 0x3, 0x1, 0x0, @msi={0x1, 0x7, 0xfff, 0x3}}, {0x1, 0x0, 0x1, 0x0, @sint={0x1, 0x5}}, {0xb, 0x4, 0x1, 0x0, @irqchip={0x10, 0x7fffffff}}]})
syz_kvm_vgic_v3_setup(r0, 0x4, 0x40)
ioctl$KVM_ARM_SET_COUNTER_OFFSET(r0, 0x4010aeb5, &(0x7f0000000140)={0x300a, 0x8})
r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r0, 0x4020aed2, &(0x7f0000000180)={0x40000, 0x8000})
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xe)
ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, &(0x7f00000001c0)={0x7af8, 0x7})
ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000200)={0x10003, 0x0, &(0x7f0000ffd000/0x2000)=nil})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x4000c1, 0x0)
r5 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000900)={0x0, &(0x7f0000000280)=[@memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x10040, 0xd789, 0xa}}, @uexit={0x0, 0x18, 0x9}, @smc={0x1e, 0x40, {0xc4000053, [0x2, 0xc59e, 0x6, 0x7, 0xc1f]}}, @eret={0xe6, 0x18, 0xd}, @code={0xa, 0x9c, {"40cc9fd200a0b0f2810080d2e20180d2830080d2840180d2020000d4000c207e005c200ea05282d20060b0f2010080d2c20180d2830180d2240180d2020000d4805c84d20040b8f2010080d2a20180d2230180d2a40080d2020000d4007008d500c8217e00000011007008d5c0669cd20040b0f2c10080d2620080d2a30080d2040180d2020000d4"}}, @smc={0x1e, 0x40, {0xc400000c, [0x7, 0x2, 0x31d43f9c, 0x5, 0x5]}}, @msr={0x14, 0x20, {0x603000000013c649, 0xa}}, @eret={0xe6, 0x18, 0x100000001}, @eret={0xe6, 0x18, 0x4}, @smc={0x1e, 0x40, {0x84000010, [0x9, 0x1, 0x3, 0x1, 0x2]}}, @svc={0x122, 0x40, {0x84000006, [0x0, 0x4, 0x8, 0x8, 0x10000]}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x1, 0x2, 0x4, 0x1, 0x2, 0x2}}, @code={0xa, 0x84, {"00800048000008d5e0509ad20060b0f2c10080d2a20180d2430080d2c40080d2020000d4206489d20080b8f2210080d2620080d2030080d2e40080d2020000d40000681e000020ab0040e21e0038200e80579ad20080b8f2e10080d2e20180d2830180d2c40180d2020000d4007008d5"}}, @uexit={0x0, 0x18, 0xbb}, @smc={0x1e, 0x40, {0xc5000021, [0xe806, 0x5, 0x5, 0xd, 0x4]}}, @mrs={0xbe, 0x18, {0x603000000013807d}}, @mrs={0xbe, 0x18, {0x7af9}}, @mrs={0xbe, 0x18, {0x603000000013e6c3}}, @smc={0x1e, 0x40, {0x84000003, [0x71900000000, 0x9, 0x5c0, 0x9, 0x4]}}, @its_setup={0x82, 0x28, {0x2, 0x2, 0x382}}, @svc={0x122, 0x40, {0x84000053, [0x7ff, 0x5, 0xffffffffffffffff, 0x5, 0x7]}}, @code={0xa, 0x84, {"000008d5007008d50038207ea0b899d20000b0f2810180d2620180d2630180d2840180d2020000d4405e82d200e0b0f2810180d2020180d2830080d2840080d2020000d440828dd200e0b8f2810080d2a20080d2030080d2040180d2020000d40018601e00804048008008d50008c09a"}}, @its_setup={0x82, 0x28, {0x0, 0x3, 0x129}}, @smc={0x1e, 0x40, {0x80000001, [0x8, 0x15ad, 0x10, 0x6, 0x7]}}, @smc={0x1e, 0x40, {0xc4000014, [0xcf, 0x2, 0x3b8, 0x8a, 0x1a]}}, @irq_setup={0x46, 0x18, {0x1, 0x3c5}}, @hvc={0x32, 0x40, {0xffff, [0x6a, 0x4, 0xe9f6, 0x1, 0x614]}}, @code={0xa, 0x54, {"0000df0d008008d50000400c007008d5007008d50004005e0050200e007008d5007008d520769bd20080b8f2c10180d2820080d2430180d2a40180d2020000d4"}}, @msr={0x14, 0x20, {0x603000000013e536, 0x2}}, @eret={0xe6, 0x18, 0x4}], 0x650}, &(0x7f0000000940)=[@featur2={0x1, 0x8}], 0x1)
ioctl$KVM_SET_REGS(r5, 0x4360ae82, &(0x7f0000000980)={[0xb, 0x0, 0x2, 0x1651, 0x8000000000000001, 0xc145, 0x6, 0x8, 0x5, 0x9, 0x5, 0x3, 0x7fff, 0x800, 0x2dd7, 0x401], 0xdddd1000, 0x201585})
ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000a80)=@attr_other={0x0, 0x5, 0x800, &(0x7f0000000a40)=0x8})
r6 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1)
ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000b00)=@attr_arm64={0x0, 0x3, 0x2, &(0x7f0000000ac0)=0x8})
ioctl$KVM_CAP_ARM_MTE(r0, 0x4068aea3, &(0x7f0000000b40))
ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil})
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000c00), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x33)
r9 = mmap$KVM_VCPU(&(0x7f0000ff9000/0x4000)=nil, 0x0, 0x3000001, 0x40010, r5, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r9, 0x20, &(0x7f0000000c40)="5e23d1d2bd44862ce456db33e62941ab69b0f6c7942058be76ee1b6c62577b18e7b81a733274a0ea969b5d20bc248b67324426edd8a5eca2d555c66f905b4f9b174f53746ccb6f0c", 0x0, 0x48)
ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000cc0)=@x86={0xf, 0x87, 0x4, 0x0, 0x80000001, 0xf9, 0x4, 0x10, 0x40, 0x1, 0x1, 0x8, 0x0, 0x2, 0x1ff, 0x4, 0x0, 0x9, 0x6, '\x00', 0x8, 0x28b})
ioctl$KVM_CAP_HALT_POLL(r3, 0x4068aea3, 0xffffffffffffffff)
ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000d00))
r10 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_ARM_SET_COUNTER_OFFSET(r10, 0x4010aeb5, &(0x7f0000000d40)={0x9, 0x6fff})
ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000d80)={0xfeb})
ioctl$KVM_SET_GSI_ROUTING(r8, 0x4008ae6a, &(0x7f0000000dc0)={0x8, 0x0, [{0xa, 0x1, 0x1, 0x0, @sint={0x9a, 0x2}}, {0x6, 0x2, 0x1, 0x0, @adapter={0xff, 0x4, 0x2, 0x5, 0x4}}, {0x8, 0x4, 0x0, 0x0, @sint={0xc, 0x4}}, {0x6a06, 0x4, 0x0, 0x0, @msi={0x400, 0xe653, 0x80000000, 0xfe}}, {0x3, 0x3, 0x1, 0x0, @msi={0x80000001, 0x42f5, 0x4, 0x3}}, {0x1, 0x1, 0x0, 0x0, @sint={0x3, 0x7}}, {0x2, 0x1, 0x0, 0x0, @sint={0x8, 0xffffff01}}, {0x2, 0x42ff542bb376b6e3, 0x0, 0x0, @irqchip={0x738c0, 0x10001}}]})

18m20.751424357s ago: executing program 6 (id=564):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r2 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f00000008c0)={0x0, &(0x7f0000000380)=[@msr={0x14, 0x20, {0x603000000013f102, 0x7}}, @code={0xa, 0xcc, {"00db99d20060b0f2a10080d2420180d2230180d2840180d2020000d4804b83d200e0b8f2e10180d2620180d2630080d2840080d2020000d40000c09b0000241e20a39ed20080b0f2810180d2620080d2230080d2240080d2020000d4005384d20000b0f2c10080d2420080d2830180d2640080d2020000d400c8307ee05c98d200a0b8f2c10080d2620080d2c30180d2240080d2020000d4a0188dd200e0b0f2c10180d2620180d2e30180d2e40180d2020000d4007008d5"}}, @irq_setup={0x46, 0x18, {0x0, 0x161}}, @irq_setup={0x46, 0x18, {0x1, 0x365}}, @its_send_cmd={0xaa, 0x28, {0xe, 0x1, 0x1, 0x6, 0x8, 0x8, 0x1}}, @its_setup={0x82, 0x28, {0x1, 0x0, 0x3d8}}, @hvc={0x32, 0x40, {0x84000051, [0xebd, 0x7fffffffffffffff, 0x2, 0x5, 0xdf]}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x1, 0x4, 0xd, 0x5, 0x2, 0x3}}, @hvc={0x32, 0x40, {0x84000052, [0xdd8, 0x3, 0x3, 0x6, 0x245]}}, @code={0xa, 0x6c, {"000080f2004cc09a007008d5a01c93d20060b8f2810180d2220180d2c30080d2e40080d2020000d4008008d5008008d50020600d00c0c00d008008d5e0e28dd200e0b0f2a10080d2020180d2830180d2640180d2020000d4"}}, @mrs={0xbe, 0x18, {0x603000000013e66e}}, @hvc={0x32, 0x40, {0x70000016, [0x6, 0x3, 0x2, 0xd34b, 0x800]}}, @smc={0x1e, 0x40, {0x8400000f, [0x6, 0x7, 0x7724, 0x3b5229ba, 0x1]}}, @svc={0x122, 0x40, {0x80007fff, [0xfffffffffffffffe, 0x4, 0xc8, 0x2f0]}}, @hvc={0x32, 0x40, {0x8400000d, [0x3, 0x1400000000000, 0x5c16, 0xfff, 0xfffffffffffffc00]}}, @mrs={0xbe, 0x18, {0x603000000013c10b}}, @hvc={0x32, 0x40, {0x1, [0xe1ee, 0x7, 0x84, 0x2, 0xffff]}}, @smc={0x1e, 0x40, {0x80000002, [0x80000001, 0x1, 0x4, 0x2, 0xe5]}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x1, 0x4, 0x8, 0x7, 0x9}}, @mrs={0xbe, 0x18, {0x603000000013dea5}}, @memwrite={0x6e, 0x30, @generic={0xfec00000, 0xc43, 0xc85, 0xa}}, @svc={0x122, 0x40, {0x200, [0x4, 0x5, 0x2fa6, 0x1, 0x3]}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x1, 0x4, 0xa, 0x60000, 0x1, 0x3}}], 0x508}, &(0x7f0000000900)=[@featur1={0x1, 0x40}], 0x1)
mmap$KVM_VCPU(&(0x7f0000c0c000/0x2000)=nil, 0x930, 0x400000f, 0x80031, r2, 0x0) (async)
r3 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r4 = eventfd2(0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000004000/0x4000)=nil, 0x930, 0x0, 0x11, r4, 0x0) (async)
r5 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x2}}], 0x20}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r5, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) (async)
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee1, 0x0) (async)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

17m42.206911468s ago: executing program 37 (id=563):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2d)
ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000000)={0xa, <r1=>0xffffffffffffffff})
ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000040)={0x5, 0x0, [{0x4, 0x4, 0x0, 0x0, @adapter={0x0, 0x7fffffffffffffff, 0x9, 0x9, 0xf37b}}, {0x1, 0x2, 0x0, 0x0, @irqchip={0x9, 0xa}}, {0x5, 0x3, 0x1, 0x0, @msi={0x1, 0x7, 0xfff, 0x3}}, {0x1, 0x0, 0x1, 0x0, @sint={0x1, 0x5}}, {0xb, 0x4, 0x1, 0x0, @irqchip={0x10, 0x7fffffff}}]})
syz_kvm_vgic_v3_setup(r0, 0x4, 0x40)
ioctl$KVM_ARM_SET_COUNTER_OFFSET(r0, 0x4010aeb5, &(0x7f0000000140)={0x300a, 0x8})
r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r0, 0x4020aed2, &(0x7f0000000180)={0x40000, 0x8000})
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xe)
ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, &(0x7f00000001c0)={0x7af8, 0x7})
ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000200)={0x10003, 0x0, &(0x7f0000ffd000/0x2000)=nil})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x4000c1, 0x0)
r5 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000900)={0x0, &(0x7f0000000280)=[@memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x10040, 0xd789, 0xa}}, @uexit={0x0, 0x18, 0x9}, @smc={0x1e, 0x40, {0xc4000053, [0x2, 0xc59e, 0x6, 0x7, 0xc1f]}}, @eret={0xe6, 0x18, 0xd}, @code={0xa, 0x9c, {"40cc9fd200a0b0f2810080d2e20180d2830080d2840180d2020000d4000c207e005c200ea05282d20060b0f2010080d2c20180d2830180d2240180d2020000d4805c84d20040b8f2010080d2a20180d2230180d2a40080d2020000d4007008d500c8217e00000011007008d5c0669cd20040b0f2c10080d2620080d2a30080d2040180d2020000d4"}}, @smc={0x1e, 0x40, {0xc400000c, [0x7, 0x2, 0x31d43f9c, 0x5, 0x5]}}, @msr={0x14, 0x20, {0x603000000013c649, 0xa}}, @eret={0xe6, 0x18, 0x100000001}, @eret={0xe6, 0x18, 0x4}, @smc={0x1e, 0x40, {0x84000010, [0x9, 0x1, 0x3, 0x1, 0x2]}}, @svc={0x122, 0x40, {0x84000006, [0x0, 0x4, 0x8, 0x8, 0x10000]}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x1, 0x2, 0x4, 0x1, 0x2, 0x2}}, @code={0xa, 0x84, {"00800048000008d5e0509ad20060b0f2c10080d2a20180d2430080d2c40080d2020000d4206489d20080b8f2210080d2620080d2030080d2e40080d2020000d40000681e000020ab0040e21e0038200e80579ad20080b8f2e10080d2e20180d2830180d2c40180d2020000d4007008d5"}}, @uexit={0x0, 0x18, 0xbb}, @smc={0x1e, 0x40, {0xc5000021, [0xe806, 0x5, 0x5, 0xd, 0x4]}}, @mrs={0xbe, 0x18, {0x603000000013807d}}, @mrs={0xbe, 0x18, {0x7af9}}, @mrs={0xbe, 0x18, {0x603000000013e6c3}}, @smc={0x1e, 0x40, {0x84000003, [0x71900000000, 0x9, 0x5c0, 0x9, 0x4]}}, @its_setup={0x82, 0x28, {0x2, 0x2, 0x382}}, @svc={0x122, 0x40, {0x84000053, [0x7ff, 0x5, 0xffffffffffffffff, 0x5, 0x7]}}, @code={0xa, 0x84, {"000008d5007008d50038207ea0b899d20000b0f2810180d2620180d2630180d2840180d2020000d4405e82d200e0b0f2810180d2020180d2830080d2840080d2020000d440828dd200e0b8f2810080d2a20080d2030080d2040180d2020000d40018601e00804048008008d50008c09a"}}, @its_setup={0x82, 0x28, {0x0, 0x3, 0x129}}, @smc={0x1e, 0x40, {0x80000001, [0x8, 0x15ad, 0x10, 0x6, 0x7]}}, @smc={0x1e, 0x40, {0xc4000014, [0xcf, 0x2, 0x3b8, 0x8a, 0x1a]}}, @irq_setup={0x46, 0x18, {0x1, 0x3c5}}, @hvc={0x32, 0x40, {0xffff, [0x6a, 0x4, 0xe9f6, 0x1, 0x614]}}, @code={0xa, 0x54, {"0000df0d008008d50000400c007008d5007008d50004005e0050200e007008d5007008d520769bd20080b8f2c10180d2820080d2430180d2a40180d2020000d4"}}, @msr={0x14, 0x20, {0x603000000013e536, 0x2}}, @eret={0xe6, 0x18, 0x4}], 0x650}, &(0x7f0000000940)=[@featur2={0x1, 0x8}], 0x1)
ioctl$KVM_SET_REGS(r5, 0x4360ae82, &(0x7f0000000980)={[0xb, 0x0, 0x2, 0x1651, 0x8000000000000001, 0xc145, 0x6, 0x8, 0x5, 0x9, 0x5, 0x3, 0x7fff, 0x800, 0x2dd7, 0x401], 0xdddd1000, 0x201585})
ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000a80)=@attr_other={0x0, 0x5, 0x800, &(0x7f0000000a40)=0x8})
r6 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1)
ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000b00)=@attr_arm64={0x0, 0x3, 0x2, &(0x7f0000000ac0)=0x8})
ioctl$KVM_CAP_ARM_MTE(r0, 0x4068aea3, &(0x7f0000000b40))
ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil})
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000c00), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x33)
r9 = mmap$KVM_VCPU(&(0x7f0000ff9000/0x4000)=nil, 0x0, 0x3000001, 0x40010, r5, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r9, 0x20, &(0x7f0000000c40)="5e23d1d2bd44862ce456db33e62941ab69b0f6c7942058be76ee1b6c62577b18e7b81a733274a0ea969b5d20bc248b67324426edd8a5eca2d555c66f905b4f9b174f53746ccb6f0c", 0x0, 0x48)
ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000cc0)=@x86={0xf, 0x87, 0x4, 0x0, 0x80000001, 0xf9, 0x4, 0x10, 0x40, 0x1, 0x1, 0x8, 0x0, 0x2, 0x1ff, 0x4, 0x0, 0x9, 0x6, '\x00', 0x8, 0x28b})
ioctl$KVM_CAP_HALT_POLL(r3, 0x4068aea3, 0xffffffffffffffff)
ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000d00))
r10 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_ARM_SET_COUNTER_OFFSET(r10, 0x4010aeb5, &(0x7f0000000d40)={0x9, 0x6fff})
ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000d80)={0xfeb})
ioctl$KVM_SET_GSI_ROUTING(r8, 0x4008ae6a, &(0x7f0000000dc0)={0x8, 0x0, [{0xa, 0x1, 0x1, 0x0, @sint={0x9a, 0x2}}, {0x6, 0x2, 0x1, 0x0, @adapter={0xff, 0x4, 0x2, 0x5, 0x4}}, {0x8, 0x4, 0x0, 0x0, @sint={0xc, 0x4}}, {0x6a06, 0x4, 0x0, 0x0, @msi={0x400, 0xe653, 0x80000000, 0xfe}}, {0x3, 0x3, 0x1, 0x0, @msi={0x80000001, 0x42f5, 0x4, 0x3}}, {0x1, 0x1, 0x0, 0x0, @sint={0x3, 0x7}}, {0x2, 0x1, 0x0, 0x0, @sint={0x8, 0xffffff01}}, {0x2, 0x42ff542bb376b6e3, 0x0, 0x0, @irqchip={0x738c0, 0x10001}}]})

17m32.373962248s ago: executing program 38 (id=564):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r2 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f00000008c0)={0x0, &(0x7f0000000380)=[@msr={0x14, 0x20, {0x603000000013f102, 0x7}}, @code={0xa, 0xcc, {"00db99d20060b0f2a10080d2420180d2230180d2840180d2020000d4804b83d200e0b8f2e10180d2620180d2630080d2840080d2020000d40000c09b0000241e20a39ed20080b0f2810180d2620080d2230080d2240080d2020000d4005384d20000b0f2c10080d2420080d2830180d2640080d2020000d400c8307ee05c98d200a0b8f2c10080d2620080d2c30180d2240080d2020000d4a0188dd200e0b0f2c10180d2620180d2e30180d2e40180d2020000d4007008d5"}}, @irq_setup={0x46, 0x18, {0x0, 0x161}}, @irq_setup={0x46, 0x18, {0x1, 0x365}}, @its_send_cmd={0xaa, 0x28, {0xe, 0x1, 0x1, 0x6, 0x8, 0x8, 0x1}}, @its_setup={0x82, 0x28, {0x1, 0x0, 0x3d8}}, @hvc={0x32, 0x40, {0x84000051, [0xebd, 0x7fffffffffffffff, 0x2, 0x5, 0xdf]}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x1, 0x4, 0xd, 0x5, 0x2, 0x3}}, @hvc={0x32, 0x40, {0x84000052, [0xdd8, 0x3, 0x3, 0x6, 0x245]}}, @code={0xa, 0x6c, {"000080f2004cc09a007008d5a01c93d20060b8f2810180d2220180d2c30080d2e40080d2020000d4008008d5008008d50020600d00c0c00d008008d5e0e28dd200e0b0f2a10080d2020180d2830180d2640180d2020000d4"}}, @mrs={0xbe, 0x18, {0x603000000013e66e}}, @hvc={0x32, 0x40, {0x70000016, [0x6, 0x3, 0x2, 0xd34b, 0x800]}}, @smc={0x1e, 0x40, {0x8400000f, [0x6, 0x7, 0x7724, 0x3b5229ba, 0x1]}}, @svc={0x122, 0x40, {0x80007fff, [0xfffffffffffffffe, 0x4, 0xc8, 0x2f0]}}, @hvc={0x32, 0x40, {0x8400000d, [0x3, 0x1400000000000, 0x5c16, 0xfff, 0xfffffffffffffc00]}}, @mrs={0xbe, 0x18, {0x603000000013c10b}}, @hvc={0x32, 0x40, {0x1, [0xe1ee, 0x7, 0x84, 0x2, 0xffff]}}, @smc={0x1e, 0x40, {0x80000002, [0x80000001, 0x1, 0x4, 0x2, 0xe5]}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x1, 0x4, 0x8, 0x7, 0x9}}, @mrs={0xbe, 0x18, {0x603000000013dea5}}, @memwrite={0x6e, 0x30, @generic={0xfec00000, 0xc43, 0xc85, 0xa}}, @svc={0x122, 0x40, {0x200, [0x4, 0x5, 0x2fa6, 0x1, 0x3]}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x1, 0x4, 0xa, 0x60000, 0x1, 0x3}}], 0x508}, &(0x7f0000000900)=[@featur1={0x1, 0x40}], 0x1)
mmap$KVM_VCPU(&(0x7f0000c0c000/0x2000)=nil, 0x930, 0x400000f, 0x80031, r2, 0x0) (async)
r3 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r4 = eventfd2(0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000004000/0x4000)=nil, 0x930, 0x0, 0x11, r4, 0x0) (async)
r5 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x2}}], 0x20}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r5, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) (async)
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee1, 0x0) (async)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

3m3.209931533s ago: executing program 8 (id=598):
r0 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
r1 = mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, r0, 0xc, 0x16831, 0xffffffffffffffff, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x8800, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = eventfd2(0x40000000, 0x80000)
ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000001340)={0x0, 0x0, 0x2, r4, 0x3})
ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000080)={0x5, 0x0, 0x0, r4, 0xa})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000240)="37e68986ad644f5dc57bbc1ff382863b67f3eee57a32ec911d95f88f3dd8ea716e4a29cefbd440b2ecf83f57baf33b0c97182970a47ef45c954e42f2055384921830f6e273d2eb30", 0x0, 0x2a2019ac5ed2a1ef)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x1})
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
openat$kvm(0x0, 0x0, 0x800, 0x0)
ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000140)={0x4, <r9=>0xffffffffffffffff, 0x1})
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x8, 0xf, 0x0, 0x5, 0xff, 0x86, 0x9, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x0, 0x4, 0x0, 0x3, 0x5, 0x8, '\x00', 0x9, 0x93})
ioctl$KVM_GET_API_VERSION(r7, 0xae00, 0x0)
write$eventfd(r9, &(0x7f00000001c0)=0x3, 0xfdef)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0)
r12 = ioctl$KVM_CREATE_GUEST_MEMFD(r11, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3})
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x2000003, 0x12, r12, 0x200001fe0000)
r13 = openat$kvm(0x0, &(0x7f0000000280), 0x103080, 0x0)
r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x2)
r15 = syz_kvm_vgic_v3_setup(r14, 0x1, 0x40)
ioctl$KVM_SET_DEVICE_ATTR(r15, 0x4018aee1, &(0x7f0000000080)=@attr_riscv64=@attr_aplic={0x0, 0x1, @valid=0x5cdc, &(0x7f0000000040)=0x8})
syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000000000/0x400000)=nil)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x11)

2m59.176865926s ago: executing program 7 (id=599):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x2}}, @msr={0x14, 0x20, {0x603000000013dce9, 0x8000}}], 0x40}, &(0x7f0000000040)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
r4 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000180)={0x0, &(0x7f0000000000)=[@mrs={0xbe, 0x18, {0x603000000013c800}}], 0x18}, 0x0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r7, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) (async)
syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x2}}, @msr={0x14, 0x20, {0x603000000013dce9, 0x8000}}], 0x40}, &(0x7f0000000040)=[@featur1={0x1, 0x8}], 0x1) (async)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) (async)
openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async)
syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) (async)
syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000180)={0x0, &(0x7f0000000000)=[@mrs={0xbe, 0x18, {0x603000000013c800}}], 0x18}, 0x0, 0x0) (async)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r7, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) (async)
ioctl$KVM_RUN(r7, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)

2m33.923046054s ago: executing program 8 (id=600):
munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) (async)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3c)
ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffd000/0x1000)=nil})
r1 = syz_kvm_vgic_v3_setup(r0, 0x1, 0xa0) (async)
ioctl$KVM_CLEAR_DIRTY_LOG(r0, 0xc018aec0, &(0x7f0000000440)={0x2, 0x300, 0x0, &(0x7f0000000040)=[0x7, 0x2, 0x4, 0xd, 0x9, 0x3, 0x5, 0x4, 0x7, 0x2, 0x3d, 0x1, 0x8, 0x5, 0x16e, 0x10000, 0x200, 0x2, 0x61, 0x5, 0x3, 0x7, 0x7fff, 0x30281b14, 0x0, 0x264d, 0x1, 0x6, 0x7f, 0x7fffffff, 0x101, 0x5, 0xa, 0x4, 0x80, 0xffffffff, 0x8, 0x5, 0x0, 0x4, 0x260, 0x5, 0x1, 0x8001, 0x9, 0x100, 0x5, 0x6, 0x2, 0xffff, 0xe9, 0x5, 0xb8, 0x10001, 0x40, 0x7c8, 0x2, 0x9, 0x5, 0x8, 0xffffffffffffffff, 0x5, 0x8000000000000000, 0x6, 0x4c, 0x9b74, 0xffffffffffffffb9, 0x401, 0x2, 0xfc8, 0x2, 0x6072, 0x8, 0x5, 0x3, 0x1, 0x7698, 0x3, 0x8000, 0x3, 0x7, 0x1, 0x0, 0x4, 0x9, 0xfffffffffffffff7, 0x3, 0x17bd05e8, 0x0, 0x5, 0x3ff, 0x8, 0x7, 0x0, 0x1, 0xffffffff, 0x4, 0x5, 0x1, 0x200, 0xffffffff00000000, 0xd7b, 0xffffffff, 0x4, 0xfffffffffffffffb, 0x5, 0x6, 0x0, 0xc8, 0x0, 0x1, 0x40, 0x8, 0x2, 0x9, 0x0, 0x8, 0x0, 0x5, 0x401, 0x3ff, 0x8, 0xffffffffffff4327, 0x101, 0x8, 0x610, 0x3, 0xcc0c]}) (async)
ioctl$KVM_ARM_SET_COUNTER_OFFSET(r0, 0x4010aeb5, &(0x7f0000000480)={0x4000000000000000, 0x100000000000000}) (async)
r2 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000840)={0x0, &(0x7f00000004c0)=[@msr={0x14, 0x20, {0x603000000013dce8, 0xffffffffffffffff}}, @code={0xa, 0x84, {"0060e00d808c8dd20060b0f2a10080d2820180d2a30180d2840180d2020000d4007008d500006088007008d5c0c593d20000b0f2010180d2420080d2030180d2a40080d2020000d41f0020eb007008d5402c84d20020b8f2410180d2820080d2e30080d2040180d2020000d40000229e"}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x23d24959a799297f, 0x8, 0x5}}, @uexit={0x0, 0x18, 0x7}, @eret={0xe6, 0x18, 0x6}, @its_setup={0x82, 0x28, {0x4, 0x1, 0x165}}, @msr={0x14, 0x20, {0x603000000013c510, 0x9}}, @smc={0x1e, 0x40, {0xc4000407, [0x1, 0x2, 0x7, 0x0, 0xfffffffffffffff8]}}, @smc={0x1e, 0x40, {0x86000000, [0xe39d, 0xfffffffffffffff1, 0x4, 0x7, 0x5]}}, @its_setup={0x82, 0x28, {0x4, 0x3, 0x139}}, @mrs={0xbe, 0x18, {0x6030000000138016}}, @its_setup={0x82, 0x28, {0x0, 0x4, 0x15}}, @mrs={0xbe, 0x18, {0x603000000013df7a}}, @hvc={0x32, 0x40, {0x100, [0x1, 0x4, 0x4, 0x0, 0x9]}}, @hvc={0x32, 0x40, {0x86000000, [0x8, 0x4, 0x2, 0x0, 0x82c9]}}, @svc={0x122, 0x40, {0x86000001, [0x3, 0x3, 0x10, 0xbc]}}, @its_setup={0x82, 0x28, {0x3, 0x3, 0x10b}}, @uexit={0x0, 0x18, 0x6}], 0x34c}, &(0x7f0000000880)=[@featur1={0x1, 0x2}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r2, 0x4018aee1, &(0x7f00000008c0)=@attr_pmu_init) (async)
ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r0, 0x4010ae74, &(0x7f0000000900)={0x6, 0x1, 0x8}) (async)
r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
mmap$KVM_VCPU(&(0x7f0000ffc000/0x1000)=nil, r3, 0x2000000, 0x2010, r2, 0x0) (async)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000940)=@x86={0x7, 0xd, 0xf8, 0x0, 0xa17b, 0x8, 0xc, 0x2, 0x0, 0x90, 0x8, 0xf, 0x0, 0x6, 0x2, 0x7, 0xfe, 0x0, 0x0, '\x00', 0x2, 0x40}) (async)
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
ioctl$KVM_CREATE_GUEST_MEMFD(r0, 0xc040aed4, &(0x7f0000000980)={0x0, 0x1})
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r0, 0x4068aea3, &(0x7f00000009c0)={0xdf, 0x0, 0x102000}) (async)
ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000a40)={0x5, 0x0, [{0x9, 0x0, 0x0, 0x0, @sint={0x6, 0xc03}}, {0x8, 0x1, 0x0, 0x0, @irqchip={0x2, 0xc}}, {0x7, 0x5, 0x1, 0x0, @adapter={0xfff, 0x5, 0xe, 0xb, 0x3fa}}, {0x4, 0x3, 0x1, 0x0, @sint={0xa, 0x8}}, {0x7, 0x4, 0x1, 0x0, @msi={0x6, 0x5, 0x6, 0x66f}}]}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000b40)={0x1fd, 0xe, 0x80deffa, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x8) (async)
ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000bc0)=@attr_other={0x0, 0x2, 0x2, &(0x7f0000000b80)=0x1}) (async)
r4 = ioctl$KVM_GET_STATS_FD_cpu(r2, 0xaece) (async)
eventfd2(0x7, 0x1)
syz_kvm_setup_cpu$arm64(r4, r2, &(0x7f0000bfe000/0x400000)=nil, &(0x7f0000001040)=[{0x0, &(0x7f0000000c00)=[@mrs={0xbe, 0x18, {0x603000000013e21a}}, @msr={0x14, 0x20, {0x6030000000138056, 0x2}}, @eret={0xe6, 0x18, 0x8000}, @its_send_cmd={0xaa, 0x28, {0x1, 0x0, 0x4, 0x1, 0x400, 0x4}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x1, 0x4, 0x2, 0x8, 0x395cf2dd, 0x3}}, @svc={0x122, 0x40, {0x8400000c, [0x0, 0xcc, 0x6, 0x6, 0x10000000000000]}}, @uexit={0x0, 0x18, 0xffff}, @hvc={0x32, 0x40, {0x50, [0x4, 0x7, 0x2, 0x7, 0x46]}}, @uexit={0x0, 0x18, 0x1}, @eret={0xe6, 0x18, 0x9}, @msr={0x14, 0x20, {0x603000000013e537, 0x4}}, @eret={0xe6, 0x18, 0x5}, @code={0xa, 0x84, {"000008d5008008d50000259e00d8a02e00a98ed200c0b8f2410180d2a20180d2030080d2e40080d2020000d4000008d5000028d540f79cd200a0b0f2210180d2820180d2430180d2240180d2020000d40080200e20539ed200a0b8f2610080d2820180d2c30080d2e40080d2020000d4"}}, @msr={0x14, 0x20, {0x603000000013c102, 0x74bf}}, @its_setup={0x82, 0x28, {0x1, 0x1, 0x21a}}, @msr={0x14, 0x20, {0x603000000013df47, 0x1}}, @svc={0x122, 0x40, {0xc400000c, [0xfffffffffffffe4c, 0x8, 0x2, 0xb, 0x8]}}, @mrs={0xbe, 0x18, {0x6030000000131a04}}, @code={0xa, 0x84, {"608984d200c0b8f2210080d2420180d2c30080d2c40180d2020000d4000028d5000028d5a0d890d20080b8f2210180d2820180d2430180d2a40180d2020000d4007008d5000028d50000021ea0cd80d20080b8f2810180d2c20080d2230080d2440080d2020000d4008008d5007008d5"}}, @smc={0x1e, 0x40, {0xc4000009, [0x8000000000000001, 0xe, 0x3, 0x5, 0x8000000000000000]}}, @msr={0x14, 0x20, {0x603000000013e659, 0x80}}, @svc={0x122, 0x40, {0xc4000001, [0x0, 0x10, 0x6, 0x80000000, 0x3]}}], 0x408}], 0x1, 0x0, &(0x7f0000001080)=[@featur1={0x1, 0xc2}], 0x1) (async)
munmap(&(0x7f0000eca000/0x3000)=nil, 0x3000)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x46182, 0x0) (async)
ioctl$KVM_IRQ_LINE_STATUS(r4, 0xc008ae67, &(0x7f0000001100)={0xc09, 0x5}) (async)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f0000001140)={0x0, 0x1}) (async)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001180), 0x101401, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0xf)
ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r4, 0x4010ae74, &(0x7f00000011c0)={0x101, 0x200, 0x4000})

2m33.678834045s ago: executing program 7 (id=601):
r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x3})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000140)={0x4, <r3=>0xffffffffffffffff, 0x1})
r4 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x29)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x5)
ioctl$KVM_GET_DEVICE_ATTR_vcpu(r6, 0x4018aee2, &(0x7f0000000140)=@attr_irq_timer={0x0, 0x1, 0x1, 0x0})
r7 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04)
r8 = syz_kvm_add_vcpu$arm64(r0, &(0x7f0000000040)={0x0, &(0x7f0000000000)=[@svc={0x122, 0x40, {0xffff, [0xe, 0x294, 0x1, 0x9]}}], 0x40}, &(0x7f0000000080)=[@featur1={0x1, 0x80}], 0x1)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, r7, 0x1000001, 0x12, r8, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x9c, 0xf, 0x0, 0x7ff, 0x8, 0x82, 0x46, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x20100001, 0xffc0001, 0x0, 0x3, 0xa, 0x8, '\x00', 0x1, 0x8000093})
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4000ae84, 0x0)
write$eventfd(r3, &(0x7f00000001c0)=0x3, 0xfdef)

2m15.908724141s ago: executing program 8 (id=602):
r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000000080)={0x100000000, 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x2000, &(0x7f0000e37000/0x2000)=nil, 0x10000, r3})
syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
eventfd2(0x2, 0x80000)
r4 = syz_kvm_add_vcpu$arm64(r0, &(0x7f0000000040)={0x0, 0x0}, 0x0, 0xfffffffffffffdbd)
r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000240)={0x0, &(0x7f0000000280)=[@its_setup={0x82, 0x28, {0x2, 0x0, 0x19f}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x0, 0x4, 0xf, 0x0, 0x8, 0x1}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xffd0, 0xff, 0xe}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x1, 0x4, 0xd, 0x8, 0x5}}, @svc={0x122, 0x40, {0x84000050, [0x7, 0x3, 0x7, 0x0, 0x17a]}}, @its_send_cmd={0xaa, 0x28, {0x15, 0x0, 0x4, 0xb, 0x0, 0x3, 0x4}}, @memwrite={0x6e, 0x30, @generic={0xffff1000, 0x87c, 0x7, 0x4}}, @mrs={0xbe, 0x18, {0x603000000013df5e}}, @mrs={0xbe, 0x18, {0x603000000013c005}}, @memwrite={0x6e, 0x30, @generic={0xa000, 0x5e2, 0x2, 0x2}}], 0x1a0}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r6, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000180)={0x8, <r9=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r10 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x29)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
ioctl$KVM_GET_REG_LIST(r11, 0x4000ae8d, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r12 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
r13 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x29)
syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000340)=[@uexit={0x0, 0x18, 0x1f95}, @svc={0x122, 0x40, {0x100, [0x9, 0x7030, 0x3, 0x5, 0x1]}}, @irq_setup={0x46, 0x18, {0x0, 0x64}}], 0x70}, 0x0, 0x0)
r15 = ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x1)
mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r15, 0x0)

2m9.830825712s ago: executing program 7 (id=603):
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x300, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x28)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
mmap$KVM_VCPU(&(0x7f0000e31000/0x2000)=nil, 0x930, 0xa, 0x11, r6, 0x40000)
mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r3, 0x0)
mmap$KVM_VCPU(&(0x7f0000e04000/0x2000)=nil, 0x930, 0x1, 0x11, r3, 0x0)
r7 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04)
ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)=@arm64_ccsidr={0x602000000011000c, &(0x7f0000000000)=0x3ba7})
mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, r7, 0x8, 0x13, r3, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x2000)=nil, r7, 0x1000001, 0x12, r3, 0x0)
ioctl$KVM_GET_SREGS(r6, 0x8000ae83, &(0x7f00000000c0))
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b6565d2f1, 0xffffffffffffffff, 0x0)

1m46.608304058s ago: executing program 8 (id=604):
ioctl$KVM_ARM_VCPU_INIT(0xffffffffffffffff, 0x4020aeae, 0x0)
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000240)={0x1fe, 0x4, 0xeeee8000, 0x2000, &(0x7f0000000000/0x2000)=nil, 0x0, r3})
ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000080)={0x2710, 0x4, 0x100000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil, 0x8000, r3})
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x0, 0x0})
ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000140)={0x4, <r7=>0xffffffffffffffff, 0x1})
r8 = ioctl$KVM_CREATE_VM(r7, 0x894c, 0x0)
ioctl$KVM_CREATE_VCPU(r8, 0xb704, 0x0)
r9 = mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0)
syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000000000/0x400000)=nil)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0xc3033, 0xffffffffffffffff, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
r12 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x29)
r13 = ioctl$KVM_CREATE_GUEST_MEMFD(r12, 0xc040aed4, &(0x7f0000000040)={0x1000200001fe0000, 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION2(r11, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0x2000, &(0x7f0000ffc000/0x2000)=nil, 0x100000000000000, r13})
syz_memcpy_off$KVM_EXIT_HYPERCALL(r9, 0x20, &(0x7f0000000240)="37e68986ad644f5dc57bbc1ff382863b67f3eee57a32ec911d95f88f3dd8ea716e4a29cefbd440b2ecf83f57baf33b0c97182970a47ef45c954e42f2055384921830f6e273d2eb30", 0x0, 0x2a2019ac5ed2a1ef)
mmap$KVM_VCPU(&(0x7f0000000000/0xc00000)=nil, 0x930, 0xf, 0x32, 0xffffffffffffffff, 0x0)
close(r4)

1m45.344048659s ago: executing program 7 (id=605):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x161681, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000000c0)=[{0x0, 0x0}], 0x1, 0x0, &(0x7f00000003c0)=[@featur2={0x1, 0x4}], 0x1)
ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000100)=@riscv64_f={0x8020000005000000, &(0x7f0000000000)=0x6})
syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x20}], 0x1, 0x0, 0x0, 0x0)

1m26.766028094s ago: executing program 7 (id=606):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000180)={0x1010020, 0x1})
r4 = eventfd2(0x1, 0x801)
r5 = eventfd2(0xff, 0x80000)
r6 = openat$kvm(0x0, &(0x7f0000000000), 0x197402, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000100)={0x7, <r8=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f00000002c0)=@attr_arm64={0x0, 0x4, 0x0, 0x0})
r9 = eventfd2(0x8801, 0x800)
syz_kvm_setup_cpu$arm64(r1, r3, &(0x7f0000b98000/0x400000)=nil, &(0x7f0000000540)=[{0x0, &(0x7f0000000300)=[@its_setup={0x82, 0x28, {0x2, 0x1, 0x24b}}, @irq_setup={0x46, 0x18, {0x1, 0x3d1}}, @mrs={0xbe, 0x18, {0x603000000013f600}}, @eret={0xe6, 0x18}, @eret={0xe6, 0x18, 0x4}, @hvc={0x32, 0x40, {0x800, [0x1, 0xd, 0xfffffffffffffff7, 0x9, 0xff]}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x10, 0x6, 0x9}}, @mrs={0xbe, 0x18, {0x603000000013c210}}, @mrs={0xbe, 0x18, {0x603000000013c021}}, @irq_setup={0x46, 0x18, {0x4, 0xa}}, @smc={0x1e, 0x40, {0x84000006, [0x80, 0xfffffffffffffffd, 0x6a4, 0x5, 0x7ff]}}, @its_setup={0x82, 0x28, {0x0, 0x3, 0x110}}, @its_setup={0x82, 0x28, {0x2, 0x4, 0x25c}}, @svc={0x122, 0x40, {0x86000001, [0x2, 0x7, 0x1, 0x9, 0x4]}}], 0x210}], 0x1, 0x0, &(0x7f0000000580)=[@featur2={0x1, 0x80}], 0x1)
r10 = eventfd2(0x3ff, 0x0)
ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f0000000080)={r9, 0x5, 0x2, r10})
close(r9)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={r4, 0x3, 0x2, r5})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) (async)
syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}, 0x0, 0x0) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000180)={0x1010020, 0x1}) (async)
eventfd2(0x1, 0x801) (async)
eventfd2(0xff, 0x80000) (async)
openat$kvm(0x0, &(0x7f0000000000), 0x197402, 0x0) (async)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000100)={0x7}) (async)
ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f00000002c0)=@attr_arm64={0x0, 0x4, 0x0, 0x0}) (async)
eventfd2(0x8801, 0x800) (async)
syz_kvm_setup_cpu$arm64(r1, r3, &(0x7f0000b98000/0x400000)=nil, &(0x7f0000000540)=[{0x0, &(0x7f0000000300)=[@its_setup={0x82, 0x28, {0x2, 0x1, 0x24b}}, @irq_setup={0x46, 0x18, {0x1, 0x3d1}}, @mrs={0xbe, 0x18, {0x603000000013f600}}, @eret={0xe6, 0x18}, @eret={0xe6, 0x18, 0x4}, @hvc={0x32, 0x40, {0x800, [0x1, 0xd, 0xfffffffffffffff7, 0x9, 0xff]}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x10, 0x6, 0x9}}, @mrs={0xbe, 0x18, {0x603000000013c210}}, @mrs={0xbe, 0x18, {0x603000000013c021}}, @irq_setup={0x46, 0x18, {0x4, 0xa}}, @smc={0x1e, 0x40, {0x84000006, [0x80, 0xfffffffffffffffd, 0x6a4, 0x5, 0x7ff]}}, @its_setup={0x82, 0x28, {0x0, 0x3, 0x110}}, @its_setup={0x82, 0x28, {0x2, 0x4, 0x25c}}, @svc={0x122, 0x40, {0x86000001, [0x2, 0x7, 0x1, 0x9, 0x4]}}], 0x210}], 0x1, 0x0, &(0x7f0000000580)=[@featur2={0x1, 0x80}], 0x1) (async)
eventfd2(0x3ff, 0x0) (async)
ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f0000000080)={r9, 0x5, 0x2, r10}) (async)
close(r9) (async)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={r4, 0x3, 0x2, r5}) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)

1m16.043948253s ago: executing program 8 (id=607):
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, <r2=>0xffffffffffffffff, 0x1})
ioctl$KVM_CREATE_VM(r2, 0x8927, 0x110c230004)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000e51000/0x4000)=nil, 0x4000)
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
munmap(&(0x7f00006bf000/0x2000)=nil, 0x2000)
r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x3, 0x1, 0x1}}], 0x28}, 0x0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000180)={0x8, <r7=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8090000})
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x28)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)

1m1.097798027s ago: executing program 7 (id=608):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34) (async)
r2 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000180), &(0x7f0000000300)=[@featur1={0x1, 0xc}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r5, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async)
r6 = mmap$KVM_VCPU(&(0x7f0000dd4000/0x3000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) (async, rerun: 64)
r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (rerun: 64)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r8, r9, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000000)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_SET_ONE_REG(r9, 0x4010aeac, &(0x7f0000000080)=@arm64_core={0x6030000000100042, &(0x7f0000000100)=0xc5c5}) (async)
ioctl$KVM_GET_SREGS(r9, 0x8000ae83, &(0x7f00000001c0)) (async)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32)
r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r11 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x80010, r10, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r11, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r10, 0x0) (async, rerun: 32)
r12 = eventfd2(0x0, 0x0) (async, rerun: 32)
close(r3) (async)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01)
write$eventfd(r12, &(0x7f0000000180)=0x5, 0xfffffde3) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2082c0, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0) (async)
r13 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000c00000/0x400000)=nil) (async)
ioctl$KVM_CAP_HALT_POLL(r13, 0x4068aea3, 0x0)

50.948078752s ago: executing program 8 (id=609):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x28081, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000769000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000380)={0x0, &(0x7f0000000100)=[@smc={0x1e, 0x40, {0x84000002, [0x3, 0x3, 0x2, 0x3f8b, 0x3448]}}], 0x40}, &(0x7f00000000c0)=[@featur2={0x1, 0x4}], 0x1)
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000140)={0x4, <r8=>0xffffffffffffffff, 0x1})
ioctl$KVM_CREATE_VM(r8, 0x400454da, 0x25) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x4, 0x0, 0xeeef0000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000f7d000/0x2000)=nil}) (async)
syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000b46000/0x400000)=nil) (async)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0)
r9 = ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece)
ioctl$KVM_SET_ONE_REG(r9, 0x4010aeac, &(0x7f0000000040)=@arm64_ccsidr={0x6020000000110005, &(0x7f0000000000)=0x8})

12.849148975s ago: executing program 39 (id=608):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34) (async)
r2 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000180), &(0x7f0000000300)=[@featur1={0x1, 0xc}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r5, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async)
r6 = mmap$KVM_VCPU(&(0x7f0000dd4000/0x3000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) (async, rerun: 64)
r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (rerun: 64)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r8, r9, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000000)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_SET_ONE_REG(r9, 0x4010aeac, &(0x7f0000000080)=@arm64_core={0x6030000000100042, &(0x7f0000000100)=0xc5c5}) (async)
ioctl$KVM_GET_SREGS(r9, 0x8000ae83, &(0x7f00000001c0)) (async)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32)
r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r11 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x80010, r10, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r11, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r10, 0x0) (async, rerun: 32)
r12 = eventfd2(0x0, 0x0) (async, rerun: 32)
close(r3) (async)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01)
write$eventfd(r12, &(0x7f0000000180)=0x5, 0xfffffde3) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2082c0, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0) (async)
r13 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000c00000/0x400000)=nil) (async)
ioctl$KVM_CAP_HALT_POLL(r13, 0x4068aea3, 0x0)

0s ago: executing program 40 (id=609):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x28081, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000769000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000380)={0x0, &(0x7f0000000100)=[@smc={0x1e, 0x40, {0x84000002, [0x3, 0x3, 0x2, 0x3f8b, 0x3448]}}], 0x40}, &(0x7f00000000c0)=[@featur2={0x1, 0x4}], 0x1)
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000140)={0x4, <r8=>0xffffffffffffffff, 0x1})
ioctl$KVM_CREATE_VM(r8, 0x400454da, 0x25) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x4, 0x0, 0xeeef0000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000f7d000/0x2000)=nil}) (async)
syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000b46000/0x400000)=nil) (async)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0)
r9 = ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece)
ioctl$KVM_SET_ONE_REG(r9, 0x4010aeac, &(0x7f0000000040)=@arm64_ccsidr={0x6020000000110005, &(0x7f0000000000)=0x8})

kernel console output (not intermixed with test programs):

[  368.571247][   T24] audit: type=1400 audit(367.910:74): avc:  denied  { read } for  pid=3224 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[  375.383166][   T24] audit: type=1400 audit(374.730:75): avc:  denied  { write } for  pid=3281 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  379.122621][   T24] audit: type=1400 audit(378.460:76): avc:  denied  { write } for  pid=3284 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  391.161911][   T24] audit: type=1400 audit(390.520:77): avc:  denied  { write } for  pid=3289 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  396.069273][   T24] audit: type=1400 audit(395.430:78): avc:  denied  { write } for  pid=3292 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  399.385995][ T3224] 8021q: adding VLAN 0 to HW filter on device bond0
[  406.792702][   T24] audit: type=1400 audit(406.150:79): avc:  denied  { write } for  pid=3297 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  410.526596][   T24] audit: type=1400 audit(409.890:80): avc:  denied  { write } for  pid=3300 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  421.932642][   T24] audit: type=1400 audit(421.270:81): avc:  denied  { write } for  pid=3305 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  425.581272][   T24] audit: type=1400 audit(424.940:82): avc:  denied  { write } for  pid=3308 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  427.889546][ T3224] eql: remember to turn off Van-Jacobson compression on your slave devices
[  435.382624][   T24] audit: type=1400 audit(434.740:83): avc:  denied  { write } for  pid=3313 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  439.002002][   T24] audit: type=1400 audit(438.350:84): avc:  denied  { write } for  pid=3316 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  456.077187][   T24] audit: type=1400 audit(455.440:85): avc:  denied  { write } for  pid=3324 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  461.055620][   T24] audit: type=1400 audit(460.420:86): avc:  denied  { write } for  pid=3327 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  466.843366][   T24] audit: type=1400 audit(466.200:87): avc:  denied  { write } for  pid=3329 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  470.369176][   T24] audit: type=1400 audit(469.710:88): avc:  denied  { write } for  pid=3332 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  480.161362][   T24] audit: type=1400 audit(479.500:89): avc:  denied  { write } for  pid=3337 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  483.902691][   T24] audit: type=1400 audit(483.250:90): avc:  denied  { write } for  pid=3340 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  488.914528][   T24] audit: type=1400 audit(488.260:91): avc:  denied  { write } for  pid=3342 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  492.671407][   T24] audit: type=1400 audit(491.990:92): avc:  denied  { write } for  pid=3345 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  505.463978][   T24] audit: type=1400 audit(504.800:93): avc:  denied  { write } for  pid=3351 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  509.125033][   T24] audit: type=1400 audit(508.490:94): avc:  denied  { write } for  pid=3354 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  519.066933][   T24] audit: type=1400 audit(518.430:95): avc:  denied  { write } for  pid=3358 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  523.869324][   T24] audit: type=1400 audit(523.230:96): avc:  denied  { write } for  pid=3361 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  541.011283][   T24] audit: type=1400 audit(540.330:97): avc:  denied  { write } for  pid=3369 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  544.637195][   T24] audit: type=1400 audit(544.000:98): avc:  denied  { write } for  pid=3372 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  555.111826][   T24] audit: type=1400 audit(554.470:99): avc:  denied  { write } for  pid=3376 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  559.722668][   T24] audit: type=1400 audit(559.070:100): avc:  denied  { write } for  pid=3379 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
Warning: Permanently added '[localhost]:43589' (ED25519) to the list of known hosts.
[  569.324031][   T24] audit: type=1400 audit(568.670:101): avc:  denied  { name_bind } for  pid=3384 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  571.171321][   T24] audit: type=1400 audit(570.500:102): avc:  denied  { execute } for  pid=3385 comm="sh" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[  571.185282][   T24] audit: type=1400 audit(570.530:103): avc:  denied  { execute_no_trans } for  pid=3385 comm="sh" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[  603.119522][   T24] audit: type=1400 audit(602.480:104): avc:  denied  { mounton } for  pid=3385 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[  603.157866][   T24] audit: type=1400 audit(602.520:105): avc:  denied  { mount } for  pid=3385 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  603.236710][ T3385] cgroup: Unknown subsys name 'net'
[  603.289566][   T24] audit: type=1400 audit(602.650:106): avc:  denied  { unmount } for  pid=3385 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  603.684393][ T3385] cgroup: Unknown subsys name 'cpuset'
[  603.796948][ T3385] cgroup: Unknown subsys name 'rlimit'
[  604.574043][   T24] audit: type=1400 audit(603.940:107): avc:  denied  { setattr } for  pid=3385 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  604.597800][   T24] audit: type=1400 audit(603.960:108): avc:  denied  { mounton } for  pid=3385 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[  604.617979][   T24] audit: type=1400 audit(603.980:109): avc:  denied  { mount } for  pid=3385 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[  605.604142][ T3388] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[  605.618304][   T24] audit: type=1400 audit(604.970:110): avc:  denied  { relabelto } for  pid=3388 comm="mkswap" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[  605.644626][   T24] audit: type=1400 audit(605.010:111): avc:  denied  { write } for  pid=3388 comm="mkswap" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
Setting up swapspace version 1, size = 127995904 bytes
[  605.827426][   T24] audit: type=1400 audit(605.190:112): avc:  denied  { read } for  pid=3385 comm="syz-executor" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[  605.854436][   T24] audit: type=1400 audit(605.210:113): avc:  denied  { open } for  pid=3385 comm="syz-executor" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[  605.904898][ T3385] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[  658.103345][   T24] audit: type=1400 audit(657.460:114): avc:  denied  { execmem } for  pid=3389 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  661.563513][   T24] audit: type=1400 audit(660.920:115): avc:  denied  { read } for  pid=3392 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  661.587377][   T24] audit: type=1400 audit(660.950:116): avc:  denied  { open } for  pid=3392 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  661.671210][   T24] audit: type=1400 audit(661.000:117): avc:  denied  { mounton } for  pid=3392 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  661.874727][   T24] audit: type=1400 audit(661.240:118): avc:  denied  { module_request } for  pid=3391 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  662.811836][   T24] audit: type=1400 audit(662.170:119): avc:  denied  { sys_module } for  pid=3391 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  684.038439][ T3391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  684.117340][ T3392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  684.187604][ T3391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  684.244009][ T3392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  696.371906][ T3392] hsr_slave_0: entered promiscuous mode
[  696.431573][ T3392] hsr_slave_1: entered promiscuous mode
[  698.067356][ T3391] hsr_slave_0: entered promiscuous mode
[  698.134712][ T3391] hsr_slave_1: entered promiscuous mode
[  698.192142][ T3391] debugfs: 'hsr0' already exists in 'hsr'
[  698.193527][ T3391] Cannot create hsr debugfs directory
[  705.756383][   T24] audit: type=1400 audit(705.110:120): avc:  denied  { create } for  pid=3392 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  705.824851][   T24] audit: type=1400 audit(705.190:121): avc:  denied  { write } for  pid=3392 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  705.874923][   T24] audit: type=1400 audit(705.240:122): avc:  denied  { read } for  pid=3392 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  706.006899][ T3392] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  706.242997][ T3392] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  706.345435][ T3392] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  706.623142][ T3392] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  706.698943][ T3392] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  706.862608][ T3392] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  707.055628][ T3392] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  707.115273][ T3392] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  708.596542][ T3391] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  708.703617][ T3391] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  708.765284][ T3391] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  708.876098][ T3391] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  708.936025][ T3391] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  709.068893][ T3391] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  709.152980][ T3391] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  709.306050][ T3391] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  720.398563][ T3392] 8021q: adding VLAN 0 to HW filter on device bond0
[  722.708429][ T3391] 8021q: adding VLAN 0 to HW filter on device bond0
[  771.984118][ T3392] veth0_vlan: entered promiscuous mode
[  772.375438][ T3392] veth1_vlan: entered promiscuous mode
[  774.044678][ T3391] veth0_vlan: entered promiscuous mode
[  774.618527][ T3392] veth0_macvtap: entered promiscuous mode
[  774.865634][ T3391] veth1_vlan: entered promiscuous mode
[  775.146856][ T3392] veth1_macvtap: entered promiscuous mode
[  777.294357][ T3450] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  777.303581][   T50] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  777.304335][   T50] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  777.304958][   T50] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  777.452629][ T3391] veth0_macvtap: entered promiscuous mode
[  778.085370][ T3391] veth1_macvtap: entered promiscuous mode
[  780.268404][   T24] audit: type=1400 audit(779.620:123): avc:  denied  { mount } for  pid=3392 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  780.476955][   T24] audit: type=1400 audit(779.770:124): avc:  denied  { mounton } for  pid=3392 comm="syz-executor" path="/syzkaller.AQnOWF/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  780.627409][   T24] audit: type=1400 audit(779.990:125): avc:  denied  { mount } for  pid=3392 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  780.873627][   T24] audit: type=1400 audit(780.230:126): avc:  denied  { mounton } for  pid=3392 comm="syz-executor" path="/syzkaller.AQnOWF/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  780.958269][   T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  780.958956][   T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  780.959467][   T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  780.975878][   T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  781.024442][   T24] audit: type=1400 audit(780.360:127): avc:  denied  { mounton } for  pid=3392 comm="syz-executor" path="/syzkaller.AQnOWF/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  781.732764][   T24] audit: type=1400 audit(781.080:128): avc:  denied  { unmount } for  pid=3392 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  781.887022][   T24] audit: type=1400 audit(781.250:129): avc:  denied  { mounton } for  pid=3392 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1544 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[  782.023014][   T24] audit: type=1400 audit(781.380:130): avc:  denied  { mount } for  pid=3392 comm="syz-executor" name="/" dev="gadgetfs" ino=3747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  782.451734][   T24] audit: type=1400 audit(781.770:131): avc:  denied  { mount } for  pid=3392 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  782.593414][   T24] audit: type=1400 audit(781.930:132): avc:  denied  { mounton } for  pid=3392 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[  783.638781][ T3392] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  792.823357][   T24] kauditd_printk_skb: 4 callbacks suppressed
[  792.823660][   T24] audit: type=1400 audit(792.180:137): avc:  denied  { read } for  pid=3542 comm="syz.1.2" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  792.881613][   T24] audit: type=1400 audit(792.210:138): avc:  denied  { open } for  pid=3542 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  793.342592][   T24] audit: type=1400 audit(792.700:139): avc:  denied  { ioctl } for  pid=3542 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  796.512731][   T24] audit: type=1400 audit(795.870:140): avc:  denied  { write } for  pid=3544 comm="syz.0.1" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  805.015429][   T24] audit: type=1400 audit(804.370:141): avc:  denied  { execute } for  pid=3551 comm="syz.0.3" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=3890 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  856.278832][   T24] audit: type=1400 audit(855.630:142): avc:  denied  { append } for  pid=3577 comm="syz.1.12" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  857.783495][   T24] audit: type=1400 audit(857.140:143): avc:  denied  { mmap_zero } for  pid=3577 comm="syz.1.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1
[  935.803535][   T24] audit: type=1400 audit(935.110:144): avc:  denied  { create } for  pid=3632 comm="syz.1.27" anonclass=[kvm-gmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  935.874138][   T24] audit: type=1400 audit(935.230:145): avc:  denied  { map } for  pid=3632 comm="syz.1.27" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=5320 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  935.913580][   T24] audit: type=1400 audit(935.270:146): avc:  denied  { read } for  pid=3632 comm="syz.1.27" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=5320 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  936.582852][   T24] audit: type=1400 audit(935.940:147): avc:  denied  { write } for  pid=3632 comm="syz.1.27" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=5320 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  940.799327][   T24] audit: type=1400 audit(940.150:148): avc:  denied  { setattr } for  pid=3639 comm="syz.0.28" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1015.776595][   T24] audit: type=1400 audit(1015.140:149): avc:  denied  { write } for  pid=3684 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1025.255883][   T24] audit: type=1400 audit(1024.570:150): avc:  denied  { write } for  pid=3690 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1066.984141][   T24] audit: type=1400 audit(1066.300:151): avc:  denied  { map } for  pid=3711 comm="syz.1.51" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1067.007340][   T24] audit: type=1400 audit(1066.370:152): avc:  denied  { execute } for  pid=3711 comm="syz.1.51" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1147.594080][   T24] audit: type=1400 audit(1146.940:153): avc:  denied  { execute } for  pid=3749 comm="syz.0.63" path=2F33312FFF67521CD66F8F1F447D3570707CD24B7EEBB207 dev="tmpfs" ino=174 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[ 1170.384622][   T24] audit: type=1400 audit(1169.740:154): avc:  denied  { ioctl } for  pid=3763 comm="syz.0.68" path="net:[4026531833]" dev="nsfs" ino=4026531833 ioctlcmd=0x5828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 1321.182371][   T24] audit: type=1400 audit(1320.530:155): avc:  denied  { write } for  pid=3861 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1329.884337][   T24] audit: type=1400 audit(1329.110:156): avc:  denied  { write } for  pid=3870 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1404.037671][   T24] audit: type=1400 audit(1403.400:157): avc:  denied  { ioctl } for  pid=3921 comm="syz.1.110" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=10192 ioctlcmd=0xae46 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1405.462545][ T3922] kvm [3922]: Failed to find VMA for hva 0x20d8d000
[ 1406.138602][ T3926] FAULT_INJECTION: forcing a failure.
[ 1406.138602][ T3926] name failslab, interval 1, probability 0, space 0, times 1
[ 1406.139966][ T3926] CPU: 0 UID: 0 PID: 3926 Comm: syz.0.111 Not tainted syzkaller #0 PREEMPT 
[ 1406.140568][ T3926] Hardware name: linux,dummy-virt (DT)
[ 1406.141021][ T3926] Call trace:
[ 1406.141404][ T3926]  show_stack+0x2c/0x3c (C)
[ 1406.143350][ T3926]  __dump_stack+0x30/0x40
[ 1406.143755][ T3926]  dump_stack_lvl+0xd8/0x12c
[ 1406.144102][ T3926]  dump_stack+0x1c/0x28
[ 1406.144428][ T3926]  should_fail_ex+0x56c/0x6d8
[ 1406.144657][ T3926]  should_failslab+0xb8/0xec
[ 1406.144925][ T3926]  __kmalloc_noprof+0xf0/0x5f4
[ 1406.145170][ T3926]  tomoyo_encode+0x27c/0x4ec
[ 1406.145415][ T3926]  tomoyo_realpath_from_path+0x5d4/0x640
[ 1406.145653][ T3926]  tomoyo_path_number_perm+0x158/0x358
[ 1406.145952][ T3926]  tomoyo_file_ioctl+0x2c/0x3c
[ 1406.146175][ T3926]  security_file_ioctl+0xe0/0x2cc
[ 1406.146466][ T3926]  __arm64_sys_ioctl+0xd4/0x248
[ 1406.146699][ T3926]  invoke_syscall+0x94/0x1ec
[ 1406.146979][ T3926]  el0_svc_common+0x120/0x2f4
[ 1406.147262][ T3926]  do_el0_svc+0x58/0x74
[ 1406.147572][ T3926]  el0_svc+0x64/0x240
[ 1406.147837][ T3926]  el0t_64_sync_handler+0x68/0xdc
[ 1406.148092][ T3926]  el0t_64_sync+0x198/0x19c
[ 1406.332418][ T3926] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1439.709148][ T3946] FAULT_INJECTION: forcing a failure.
[ 1439.709148][ T3946] name fail_usercopy, interval 1, probability 0, space 0, times 1
[ 1439.709587][ T3946] CPU: 0 UID: 0 PID: 3946 Comm: syz.1.116 Not tainted syzkaller #0 PREEMPT 
[ 1439.709828][ T3946] Hardware name: linux,dummy-virt (DT)
[ 1439.709982][ T3946] Call trace:
[ 1439.710065][ T3946]  show_stack+0x2c/0x3c (C)
[ 1439.710436][ T3946]  __dump_stack+0x30/0x40
[ 1439.710757][ T3946]  dump_stack_lvl+0xd8/0x12c
[ 1439.711050][ T3946]  dump_stack+0x1c/0x28
[ 1439.711350][ T3946]  should_fail_ex+0x56c/0x6d8
[ 1439.711582][ T3946]  should_fail+0x14/0x24
[ 1439.711800][ T3946]  should_fail_usercopy+0x20/0x30
[ 1439.712041][ T3946]  _inline_copy_from_user+0x44/0x18c
[ 1439.712321][ T3946]  kvm_arch_vcpu_ioctl+0x3b8/0x1604
[ 1439.712591][ T3946]  kvm_vcpu_ioctl+0x600/0xc6c
[ 1439.712861][ T3946]  __arm64_sys_ioctl+0x190/0x248
[ 1439.713087][ T3946]  invoke_syscall+0x94/0x1ec
[ 1439.713395][ T3946]  el0_svc_common+0x120/0x2f4
[ 1439.713695][ T3946]  do_el0_svc+0x58/0x74
[ 1439.713966][ T3946]  el0_svc+0x64/0x240
[ 1439.714201][ T3946]  el0t_64_sync_handler+0x68/0xdc
[ 1439.714464][ T3946]  el0t_64_sync+0x198/0x19c
[ 1465.398214][ T3960] FAULT_INJECTION: forcing a failure.
[ 1465.398214][ T3960] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1465.398648][ T3960] CPU: 0 UID: 0 PID: 3960 Comm: syz.1.122 Not tainted syzkaller #0 PREEMPT 
[ 1465.398888][ T3960] Hardware name: linux,dummy-virt (DT)
[ 1465.398985][ T3960] Call trace:
[ 1465.399060][ T3960]  show_stack+0x2c/0x3c (C)
[ 1465.399430][ T3960]  __dump_stack+0x30/0x40
[ 1465.399751][ T3960]  dump_stack_lvl+0xd8/0x12c
[ 1465.400101][ T3960]  dump_stack+0x1c/0x28
[ 1465.400421][ T3960]  should_fail_ex+0x56c/0x6d8
[ 1465.400657][ T3960]  should_fail+0x14/0x24
[ 1465.400858][ T3960]  should_fail_usercopy+0x20/0x30
[ 1465.401084][ T3960]  kvm_arm_get_reg+0x284/0xa4c
[ 1465.401333][ T3960]  kvm_arch_vcpu_ioctl+0x628/0x1604
[ 1465.401590][ T3960]  kvm_vcpu_ioctl+0x600/0xc6c
[ 1465.401843][ T3960]  __arm64_sys_ioctl+0x190/0x248
[ 1465.402062][ T3960]  invoke_syscall+0x94/0x1ec
[ 1465.402356][ T3960]  el0_svc_common+0x120/0x2f4
[ 1465.402649][ T3960]  do_el0_svc+0x58/0x74
[ 1465.402933][ T3960]  el0_svc+0x64/0x240
[ 1465.403168][ T3960]  el0t_64_sync_handler+0x68/0xdc
[ 1465.403425][ T3960]  el0t_64_sync+0x198/0x19c
[ 1527.054948][   T24] audit: type=1400 audit(1526.420:158): avc:  denied  { execute } for  pid=3988 comm="syz.1.131" path="/sys/kernel/debug/kcov" dev="debugfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=file permissive=1
[ 1703.142285][   T24] audit: type=1400 audit(1702.420:159): avc:  denied  { write } for  pid=4101 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1710.905801][   T24] audit: type=1400 audit(1710.270:160): avc:  denied  { write } for  pid=4110 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2048.624427][   T21] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2049.929746][   T21] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2050.881593][   T21] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2052.383122][   T21] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2055.649831][   T24] audit: type=1400 audit(2054.960:161): avc:  denied  { read write } for  pid=4305 comm="syz.1.221" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 2055.743960][   T24] audit: type=1400 audit(2055.020:162): avc:  denied  { open } for  pid=4305 comm="syz.1.221" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 2056.413846][   T24] audit: type=1400 audit(2055.750:163): avc:  denied  { ioctl } for  pid=4305 comm="syz.1.221" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 2067.289003][   T21] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2067.557165][   T21] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2067.715437][   T21] bond0 (unregistering): Released all slaves
[ 2069.522168][   T21] hsr_slave_0: left promiscuous mode
[ 2069.603212][   T21] hsr_slave_1: left promiscuous mode
[ 2070.002838][   T21] veth1_macvtap: left promiscuous mode
[ 2070.004137][   T21] veth0_macvtap: left promiscuous mode
[ 2070.024548][   T21] veth1_vlan: left promiscuous mode
[ 2070.035536][   T21] veth0_vlan: left promiscuous mode
[ 2108.912766][   T24] audit: type=1400 audit(2108.230:164): avc:  denied  { write } for  pid=4334 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2115.326113][   T24] audit: type=1400 audit(2114.690:165): avc:  denied  { write } for  pid=4340 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2119.409482][ T3224] 8021q: adding VLAN 0 to HW filter on device eth1
[ 2137.961642][   T24] audit: type=1400 audit(2137.290:166): avc:  denied  { write } for  pid=4364 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2139.646483][ T4300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2139.876023][ T4300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2143.698921][   T24] audit: type=1400 audit(2143.060:167): avc:  denied  { write } for  pid=4373 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2147.668634][ T3224] 8021q: adding VLAN 0 to HW filter on device eth2
[ 2156.001882][   T24] audit: type=1400 audit(2155.350:168): avc:  denied  { write } for  pid=4382 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2163.767359][   T24] audit: type=1400 audit(2163.130:169): avc:  denied  { write } for  pid=4392 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2170.221969][ T4300] hsr_slave_0: entered promiscuous mode
[ 2170.286932][ T4300] hsr_slave_1: entered promiscuous mode
[ 2170.366266][ T4300] debugfs: 'hsr0' already exists in 'hsr'
[ 2170.366673][ T4300] Cannot create hsr debugfs directory
[ 2183.263040][   T24] audit: type=1400 audit(2182.610:170): avc:  denied  { write } for  pid=4404 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2186.468336][ T4300] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 2186.724055][ T4300] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 2186.842594][ T4300] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 2187.118251][ T4300] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 2187.269127][ T4300] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 2187.568230][ T4300] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 2187.782090][ T4300] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 2188.114219][ T4300] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 2191.104472][   T24] audit: type=1400 audit(2190.450:171): avc:  denied  { write } for  pid=4410 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2195.848936][ T3224] 8021q: adding VLAN 0 to HW filter on device eth3
[ 2211.672992][ T4300] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2212.634361][   T24] audit: type=1400 audit(2211.950:172): avc:  denied  { write } for  pid=4432 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2218.912034][   T24] audit: type=1400 audit(2218.270:173): avc:  denied  { append } for  pid=4438 comm="syz.1.235" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 2222.102553][   T24] audit: type=1400 audit(2221.460:174): avc:  denied  { write } for  pid=4439 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2228.303543][ T3224] 8021q: adding VLAN 0 to HW filter on device eth4
[ 2249.052736][   T24] audit: type=1400 audit(2248.380:175): avc:  denied  { write } for  pid=4457 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2256.161996][   T24] audit: type=1400 audit(2255.500:176): avc:  denied  { write } for  pid=4468 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2283.165296][   T24] audit: type=1400 audit(2282.530:177): avc:  denied  { write } for  pid=4491 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2292.802681][   T24] audit: type=1400 audit(2292.140:178): avc:  denied  { write } for  pid=4503 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2305.016473][   T24] audit: type=1400 audit(2304.380:179): avc:  denied  { write } for  pid=4510 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2312.012466][ T4300] veth0_vlan: entered promiscuous mode
[ 2312.185442][   T24] audit: type=1400 audit(2311.480:180): avc:  denied  { write } for  pid=4519 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2312.597865][ T4300] veth1_vlan: entered promiscuous mode
[ 2315.912966][ T4300] veth0_macvtap: entered promiscuous mode
[ 2316.325981][ T4300] veth1_macvtap: entered promiscuous mode
[ 2320.003212][ T3788] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2320.013108][ T3450] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2320.013840][ T3450] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2320.014448][ T3450] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2322.442516][   T24] audit: type=1400 audit(2321.770:181): avc:  denied  { setattr } for  pid=4525 comm="syz.1.243" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 2332.415087][   T24] audit: type=1400 audit(2331.740:182): avc:  denied  { write } for  pid=4530 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2342.846569][   T24] audit: type=1400 audit(2342.210:183): avc:  denied  { write } for  pid=4541 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2623.725859][   T24] audit: type=1400 audit(2623.070:184): avc:  denied  { map } for  pid=4708 comm="syz.2.294" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 2623.805088][   T24] audit: type=1400 audit(2623.170:185): avc:  denied  { execute } for  pid=4708 comm="syz.2.294" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 2731.711870][   T24] audit: type=1400 audit(2731.070:186): avc:  denied  { write } for  pid=4769 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2738.737058][   T24] audit: type=1400 audit(2738.080:187): avc:  denied  { write } for  pid=4779 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2972.903138][ T4918] kvm [4918]: Failed to find VMA for hva 0x20c01000
[ 3095.019008][   T24] audit: type=1400 audit(3094.380:188): avc:  denied  { write } for  pid=4991 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 3104.402830][   T24] audit: type=1400 audit(3103.630:189): avc:  denied  { write } for  pid=5001 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 3339.183486][ T5138] kvm [5138]: Failed to find VMA for hva 0x20dbb000
[ 3365.296588][   T24] audit: type=1400 audit(3364.660:190): avc:  denied  { map } for  pid=5156 comm="syz.1.422" path="pipe:[2737]" dev="pipefs" ino=2737 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[ 3686.618177][   T24] audit: type=1400 audit(3685.920:191): avc:  denied  { write } for  pid=5343 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 3694.903714][   T24] audit: type=1400 audit(3694.260:192): avc:  denied  { write } for  pid=5351 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 3855.931749][ T5451] FAULT_INJECTION: forcing a failure.
[ 3855.931749][ T5451] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3855.932179][ T5451] CPU: 0 UID: 0 PID: 5451 Comm: syz.2.504 Not tainted syzkaller #0 PREEMPT 
[ 3855.932448][ T5451] Hardware name: linux,dummy-virt (DT)
[ 3855.932554][ T5451] Call trace:
[ 3855.932642][ T5451]  show_stack+0x2c/0x3c (C)
[ 3855.932996][ T5451]  __dump_stack+0x30/0x40
[ 3855.933292][ T5451]  dump_stack_lvl+0xd8/0x12c
[ 3855.933602][ T5451]  dump_stack+0x1c/0x28
[ 3855.933910][ T5451]  should_fail_ex+0x56c/0x6d8
[ 3855.934124][ T5451]  should_fail+0x14/0x24
[ 3855.934326][ T5451]  should_fail_usercopy+0x20/0x30
[ 3855.934552][ T5451]  simple_read_from_buffer+0xd0/0x294
[ 3855.934866][ T5451]  proc_fail_nth_read+0x184/0x214
[ 3855.935167][ T5451]  vfs_read+0x220/0x9d8
[ 3855.935401][ T5451]  ksys_read+0x108/0x1fc
[ 3855.935630][ T5451]  __arm64_sys_read+0x9c/0xd0
[ 3855.935899][ T5451]  invoke_syscall+0x94/0x1ec
[ 3855.936194][ T5451]  el0_svc_common+0x120/0x2f4
[ 3855.936496][ T5451]  do_el0_svc+0x58/0x74
[ 3855.936797][ T5451]  el0_svc+0x64/0x240
[ 3855.937039][ T5451]  el0t_64_sync_handler+0x68/0xdc
[ 3855.937274][ T5451]  el0t_64_sync+0x198/0x19c
[ 4205.104647][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 4205.487598][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 4205.562600][   T24] audit: type=1400 audit(4204.910:193): avc:  denied  { write } for  pid=5646 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4212.949475][   T24] audit: type=1400 audit(4212.310:194): avc:  denied  { write } for  pid=5652 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4227.685937][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 4228.026321][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 4237.278541][ T5608] hsr_slave_0: entered promiscuous mode
[ 4237.339334][ T5608] hsr_slave_1: entered promiscuous mode
[ 4237.434900][ T5608] debugfs: 'hsr0' already exists in 'hsr'
[ 4237.435278][ T5608] Cannot create hsr debugfs directory
[ 4253.888780][ T5616] hsr_slave_0: entered promiscuous mode
[ 4253.945645][ T5616] hsr_slave_1: entered promiscuous mode
[ 4253.985500][ T5616] debugfs: 'hsr0' already exists in 'hsr'
[ 4253.985885][ T5616] Cannot create hsr debugfs directory
[ 4253.988769][ T5608] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 4254.324927][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 4254.462992][ T5608] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 4254.754821][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 4254.882441][ T5608] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 4255.114073][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 4255.807632][ T5608] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 4256.056198][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 4277.283112][ T5616] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 4277.897525][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 4277.988811][ T5616] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 4278.349156][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 4278.602231][ T5616] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 4278.943095][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 4279.046389][ T5616] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 4279.415563][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 4289.177023][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0
[ 4307.707093][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0
[ 4393.298728][ T5608] veth0_vlan: entered promiscuous mode
[ 4394.634663][ T5608] veth1_vlan: entered promiscuous mode
[ 4398.395014][ T5608] veth0_macvtap: entered promiscuous mode
[ 4399.133772][ T5608] veth1_macvtap: entered promiscuous mode
[ 4403.133400][ T4327] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 4403.564926][ T5626] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 4403.586795][ T5626] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 4403.587613][ T5626] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 4435.276039][ T5616] veth0_vlan: entered promiscuous mode
[ 4435.868562][ T5616] veth1_vlan: entered promiscuous mode
[ 4438.879765][ T5616] veth0_macvtap: entered promiscuous mode
[ 4439.503924][ T5616] veth1_macvtap: entered promiscuous mode
[ 4442.931998][ T4126] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 4442.943067][ T5080] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 4442.947294][ T5080] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 4442.947913][ T5080] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 4541.664740][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 4542.229259][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 4565.798647][ T4126] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4568.877053][ T4126] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4571.052637][ T4126] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4572.837688][ T4126] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4590.929220][ T4126] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 4591.093175][ T4126] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 4591.142560][ T4126] bond0 (unregistering): Released all slaves
[ 4593.302013][ T4126] hsr_slave_0: left promiscuous mode
[ 4593.482641][ T4126] hsr_slave_1: left promiscuous mode
[ 4593.884646][ T4126] veth1_macvtap: left promiscuous mode
[ 4593.885804][ T4126] veth0_macvtap: left promiscuous mode
[ 4593.887346][ T4126] veth1_vlan: left promiscuous mode
[ 4593.888552][ T4126] veth0_vlan: left promiscuous mode
[ 4612.247446][ T5780] hsr_slave_0: entered promiscuous mode
[ 4612.333305][ T5780] hsr_slave_1: entered promiscuous mode
[ 4612.395811][ T5780] debugfs: 'hsr0' already exists in 'hsr'
[ 4612.396229][ T5780] Cannot create hsr debugfs directory
[ 4618.169404][ T4126] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4620.929649][ T4126] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4625.276214][ T4126] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4625.483501][   T24] audit: type=1400 audit(4624.830:195): avc:  denied  { write } for  pid=5839 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4628.088962][ T4126] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4635.092743][   T24] audit: type=1400 audit(4634.450:196): avc:  denied  { write } for  pid=5845 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4642.933563][ T3224] 8021q: adding VLAN 0 to HW filter on device eth5
[ 4643.535698][ T4126] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4644.226640][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 4645.095861][ T4126] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4645.725122][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 4646.954696][ T4126] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4647.654852][ T5780] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 4647.896896][ T5780] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 4648.013089][ T5780] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 4648.159716][ T5780] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 4648.453182][ T4126] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4648.794524][ T5780] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 4649.117730][ T5780] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 4649.215799][ T5780] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 4649.587066][ T5780] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 4657.014666][ T4126] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4659.169605][ T4126] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4661.376248][ T4126] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4663.806844][ T4126] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4668.389111][   T24] audit: type=1400 audit(4667.750:197): avc:  denied  { write } for  pid=5869 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4677.342657][   T24] audit: type=1400 audit(4676.680:198): avc:  denied  { write } for  pid=5879 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4688.164737][ T4126] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 4688.318707][ T4126] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 4688.424973][ T4126] bond0 (unregistering): Released all slaves
[ 4693.293394][ T4126] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 4693.414465][ T4126] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 4693.465998][ T4126] bond0 (unregistering): Released all slaves
[ 4696.609113][ T4126] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 4696.798029][ T4126] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 4696.904217][ T4126] bond0 (unregistering): Released all slaves
[ 4697.916585][ T3224] 8021q: adding VLAN 0 to HW filter on device eth6
[ 4699.335075][ T4126] hsr_slave_0: left promiscuous mode
[ 4699.382185][ T4126] hsr_slave_1: left promiscuous mode
[ 4699.734979][ T4126] hsr_slave_0: left promiscuous mode
[ 4699.807395][ T4126] hsr_slave_1: left promiscuous mode
[ 4700.028845][ T4126] hsr_slave_0: left promiscuous mode
[ 4700.074020][ T4126] hsr_slave_1: left promiscuous mode
[ 4700.994623][ T4126] veth1_macvtap: left promiscuous mode
[ 4700.995364][ T4126] veth0_macvtap: left promiscuous mode
[ 4701.012567][ T4126] veth1_vlan: left promiscuous mode
[ 4701.013860][ T4126] veth0_vlan: left promiscuous mode
[ 4701.076886][ T4126] veth1_macvtap: left promiscuous mode
[ 4701.077611][ T4126] veth0_macvtap: left promiscuous mode
[ 4701.079066][ T4126] veth1_vlan: left promiscuous mode
[ 4701.121880][ T4126] veth0_vlan: left promiscuous mode
[ 4701.199703][ T4126] veth1_macvtap: left promiscuous mode
[ 4701.202599][ T4126] veth0_macvtap: left promiscuous mode
[ 4701.204804][ T4126] veth1_vlan: left promiscuous mode
[ 4701.205992][ T4126] veth0_vlan: left promiscuous mode
[ 4742.405481][ T5795] hsr_slave_0: entered promiscuous mode
[ 4742.548450][ T5795] hsr_slave_1: entered promiscuous mode
[ 4748.185001][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0
[ 4753.419492][   T24] audit: type=1400 audit(4752.780:199): avc:  denied  { write } for  pid=5886 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4761.621319][   T24] audit: type=1400 audit(4760.960:200): avc:  denied  { write } for  pid=5891 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4763.337898][ T5795] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 4763.599457][ T5795] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 4763.723264][ T5795] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 4763.933755][ T5795] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 4764.045380][ T5795] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 4764.292897][ T5795] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 4764.339670][ T5795] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 4764.619069][ T5795] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 4766.768458][ T3224] 8021q: adding VLAN 0 to HW filter on device eth7
[ 4781.851971][   T24] audit: type=1400 audit(4781.180:201): avc:  denied  { write } for  pid=5911 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4788.207422][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0
[ 4788.296747][   T24] audit: type=1400 audit(4787.660:202): avc:  denied  { write } for  pid=5919 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4793.327344][ T3224] 8021q: adding VLAN 0 to HW filter on device eth8
[ 4799.186138][   T24] audit: type=1400 audit(4798.550:203): avc:  denied  { write } for  pid=5926 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4807.571429][   T24] audit: type=1400 audit(4806.910:204): avc:  denied  { write } for  pid=5936 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4829.248768][   T24] audit: type=1400 audit(4828.610:205): avc:  denied  { write } for  pid=5950 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4835.792200][   T24] audit: type=1400 audit(4835.130:206): avc:  denied  { write } for  pid=5960 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4840.276798][ T3224] 8021q: adding VLAN 0 to HW filter on device eth9
[ 4854.466260][   T24] audit: type=1400 audit(4853.830:207): avc:  denied  { write } for  pid=5975 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4859.122712][ T5780] veth0_vlan: entered promiscuous mode
[ 4859.938562][ T5780] veth1_vlan: entered promiscuous mode
[ 4862.653105][   T24] audit: type=1400 audit(4861.910:208): avc:  denied  { write } for  pid=5985 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4863.275668][ T5780] veth0_macvtap: entered promiscuous mode
[ 4863.820769][ T5780] veth1_macvtap: entered promiscuous mode
[ 4867.463256][ T5080] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 4867.473755][ T5724] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 4867.474492][ T5724] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 4867.475079][ T5724] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 4870.427125][ T3224] 8021q: adding VLAN 0 to HW filter on device eth10
[ 4893.258250][   T24] audit: type=1400 audit(4892.600:209): avc:  denied  { write } for  pid=6000 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4902.784247][   T24] audit: type=1400 audit(4902.140:210): avc:  denied  { write } for  pid=6007 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4908.218465][ T3224] 8021q: adding VLAN 0 to HW filter on device eth12
[ 4909.788275][ T5795] veth0_vlan: entered promiscuous mode
[ 4910.958133][ T5795] veth1_vlan: entered promiscuous mode
[ 4914.988800][ T5795] veth0_macvtap: entered promiscuous mode
[ 4915.866870][ T5795] veth1_macvtap: entered promiscuous mode
[ 4919.498458][ T4126] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 4919.782602][   T21] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 4919.783381][   T21] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 4919.784025][   T21] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 4934.506114][   T24] audit: type=1400 audit(4933.850:211): avc:  denied  { write } for  pid=6020 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4946.835175][   T24] audit: type=1400 audit(4946.170:212): avc:  denied  { write } for  pid=6033 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4955.326272][ T3224] 8021q: adding VLAN 0 to HW filter on device eth11
[ 4984.776501][   T24] audit: type=1400 audit(4984.110:213): avc:  denied  { write } for  pid=6052 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4997.022887][   T24] audit: type=1400 audit(4996.360:214): avc:  denied  { write } for  pid=6058 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5005.716191][ T3224] 8021q: adding VLAN 0 to HW filter on device eth13
[ 5024.752156][   T24] audit: type=1400 audit(5024.070:215): avc:  denied  { write } for  pid=6071 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5029.975971][   T24] audit: type=1400 audit(5029.290:216): avc:  denied  { write } for  pid=6074 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5033.578216][ T3224] 8021q: adding VLAN 0 to HW filter on device eth14
[ 5052.528839][   T24] audit: type=1400 audit(5051.880:217): avc:  denied  { write } for  pid=6080 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5062.083648][   T24] audit: type=1400 audit(5061.400:218): avc:  denied  { write } for  pid=6084 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5069.967714][ T3224] 8021q: adding VLAN 0 to HW filter on device eth15
[ 5090.904038][   T24] audit: type=1400 audit(5090.270:219): avc:  denied  { write } for  pid=6099 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5100.622905][   T24] audit: type=1400 audit(5099.980:220): avc:  denied  { write } for  pid=6108 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5107.816040][ T3224] 8021q: adding VLAN 0 to HW filter on device eth16
[ 5135.035017][   T24] audit: type=1400 audit(5134.270:221): avc:  denied  { write } for  pid=6122 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5144.351342][   T24] audit: type=1400 audit(5143.700:222): avc:  denied  { write } for  pid=6132 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5151.286695][ T3224] 8021q: adding VLAN 0 to HW filter on device eth17
[ 5163.928092][   T24] audit: type=1400 audit(5163.190:223): avc:  denied  { write } for  pid=6141 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5165.825854][ T6085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 5166.463232][ T6085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 5177.472333][ T3451] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5178.024180][   T24] audit: type=1400 audit(5177.360:224): avc:  denied  { write } for  pid=6149 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5181.678139][ T3451] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5182.609172][ T6089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 5183.672984][ T3451] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5184.607093][ T6089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 5186.882792][ T3451] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5210.434508][   T24] audit: type=1400 audit(5209.780:225): avc:  denied  { write } for  pid=6166 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5213.599004][ T3451] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 5214.048180][ T3451] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 5214.332842][ T3451] bond0 (unregistering): Released all slaves
[ 5217.038964][ T3451] hsr_slave_0: left promiscuous mode
[ 5217.162133][ T3451] hsr_slave_1: left promiscuous mode
[ 5217.639660][ T3451] veth1_macvtap: left promiscuous mode
[ 5217.681695][ T3451] veth0_macvtap: left promiscuous mode
[ 5217.683424][ T3451] veth1_vlan: left promiscuous mode
[ 5217.684643][ T3451] veth0_vlan: left promiscuous mode
[ 5217.972591][   T24] audit: type=1400 audit(5217.320:226): avc:  denied  { write } for  pid=6171 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5245.483423][ T3224] 8021q: adding VLAN 0 to HW filter on device eth18
[ 5248.476366][ T6085] hsr_slave_0: entered promiscuous mode
[ 5248.622685][ T6085] hsr_slave_1: entered promiscuous mode
[ 5251.308681][ T3451] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5253.075557][ T3451] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5255.887638][ T3451] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5257.653334][ T3451] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5264.606623][   T24] audit: type=1400 audit(5263.970:227): avc:  denied  { write } for  pid=6182 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5266.532314][ T6089] hsr_slave_0: entered promiscuous mode
[ 5266.598111][ T6089] hsr_slave_1: entered promiscuous mode
[ 5266.742657][ T6089] debugfs: 'hsr0' already exists in 'hsr'
[ 5266.743083][ T6089] Cannot create hsr debugfs directory
[ 5272.873067][   T24] audit: type=1400 audit(5272.090:228): avc:  denied  { write } for  pid=6187 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5282.933674][ T3451] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 5283.516182][ T3451] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 5283.905929][ T3451] bond0 (unregistering): Released all slaves
[ 5286.166910][ T3224] 8021q: adding VLAN 0 to HW filter on device eth19
[ 5286.726432][ T3451] hsr_slave_0: left promiscuous mode
[ 5286.923274][ T3451] hsr_slave_1: left promiscuous mode
[ 5287.380746][ T3451] veth1_macvtap: left promiscuous mode
[ 5287.426885][ T3451] veth0_macvtap: left promiscuous mode
[ 5287.428647][ T3451] veth1_vlan: left promiscuous mode
[ 5287.461612][ T3451] veth0_vlan: left promiscuous mode
[ 5312.723820][ T6085] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 5313.009534][ T6085] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 5313.643476][ T6085] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 5313.907465][ T6085] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 5314.364772][ T6085] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 5314.496213][ T6085] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 5314.519354][ T6085] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 5314.744641][ T6085] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 5324.852565][ T6089] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 5325.179703][ T6089] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 5325.379562][ T6089] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 5325.709315][ T6089] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 5325.858952][ T6089] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 5326.308892][ T6089] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 5326.528897][ T6089] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 5327.038068][ T6089] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 5331.178899][   T24] audit: type=1400 audit(5330.540:229): avc:  denied  { write } for  pid=6203 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5339.576562][   T24] audit: type=1400 audit(5338.940:230): avc:  denied  { write } for  pid=6220 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5346.249783][ T3224] 8021q: adding VLAN 0 to HW filter on device eth20
[ 5349.025266][ T6085] 8021q: adding VLAN 0 to HW filter on device bond0
[ 5359.735914][ T6089] 8021q: adding VLAN 0 to HW filter on device bond0
[ 5370.989904][   T24] audit: type=1400 audit(5370.350:231): avc:  denied  { write } for  pid=6233 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5382.105441][   T24] audit: type=1400 audit(5381.470:232): avc:  denied  { write } for  pid=6242 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5388.795849][ T3224] 8021q: adding VLAN 0 to HW filter on device eth21
[ 5399.886236][   T24] audit: type=1400 audit(5399.240:233): avc:  denied  { write } for  pid=6248 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5410.621655][   T24] audit: type=1400 audit(5409.980:234): avc:  denied  { write } for  pid=6259 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5440.126896][   T24] audit: type=1400 audit(5439.480:235): avc:  denied  { write } for  pid=6274 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5449.102747][   T24] audit: type=1400 audit(5448.450:236): avc:  denied  { write } for  pid=6284 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5455.129132][ T3224] 8021q: adding VLAN 0 to HW filter on device eth22
[ 5477.303315][   T24] audit: type=1400 audit(5476.640:237): avc:  denied  { write } for  pid=6300 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5489.201772][   T24] audit: type=1400 audit(5488.560:238): avc:  denied  { write } for  pid=6310 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5496.804038][ T3224] 8021q: adding VLAN 0 to HW filter on device eth23
[ 5503.039325][ T6085] veth0_vlan: entered promiscuous mode
[ 5504.154900][ T6085] veth1_vlan: entered promiscuous mode
[ 5508.123633][ T6085] veth0_macvtap: entered promiscuous mode
[ 5508.679017][ T6085] veth1_macvtap: entered promiscuous mode
[ 5513.408690][ T5053] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 5513.429621][ T5626] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 5513.634813][ T5656] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 5513.635865][ T5656] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 5516.064162][ T6089] veth0_vlan: entered promiscuous mode
[ 5518.926684][ T6089] veth1_vlan: entered promiscuous mode
[ 5520.016365][   T24] audit: type=1400 audit(5519.380:239): avc:  denied  { write } for  pid=6324 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5524.526454][ T6089] veth0_macvtap: entered promiscuous mode
[ 5525.340932][ T6089] veth1_macvtap: entered promiscuous mode
[ 5530.656304][ T3451] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 5530.913451][ T6150] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 5530.918111][ T6150] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 5531.035130][ T5690] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 5532.908623][   T24] audit: type=1400 audit(5532.190:240): avc:  denied  { write } for  pid=6328 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5543.713707][ T3224] 8021q: adding VLAN 0 to HW filter on device eth24
[ 5578.522145][   T24] audit: type=1400 audit(5577.770:241): avc:  denied  { write } for  pid=6346 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5593.084841][   T24] audit: type=1400 audit(5592.450:242): avc:  denied  { write } for  pid=6356 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5603.758224][ T3224] 8021q: adding VLAN 0 to HW filter on device eth25
[ 5636.348227][   T24] audit: type=1400 audit(5635.710:243): avc:  denied  { write } for  pid=6371 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5651.609620][   T24] audit: type=1400 audit(5650.960:244): avc:  denied  { write } for  pid=6384 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5663.157440][ T3224] 8021q: adding VLAN 0 to HW filter on device eth26
[ 5708.316013][   T24] audit: type=1400 audit(5707.670:245): avc:  denied  { write } for  pid=6407 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5723.975239][   T24] audit: type=1400 audit(5723.340:246): avc:  denied  { write } for  pid=6420 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5734.248043][ T3224] 8021q: adding VLAN 0 to HW filter on device eth27
[ 5755.021725][   T24] audit: type=1400 audit(5754.340:247): avc:  denied  { write } for  pid=6432 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5769.606915][   T24] audit: type=1400 audit(5768.880:248): avc:  denied  { write } for  pid=6438 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5815.722646][   T24] audit: type=1400 audit(5814.970:249): avc:  denied  { write } for  pid=6453 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5830.311773][   T24] audit: type=1400 audit(5829.620:250): avc:  denied  { write } for  pid=6462 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5841.295586][ T3224] 8021q: adding VLAN 0 to HW filter on device eth28
[ 5890.816445][   T24] audit: type=1400 audit(5890.180:251): avc:  denied  { write } for  pid=6485 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5906.533094][   T24] audit: type=1400 audit(5905.880:252): avc:  denied  { write } for  pid=6498 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5971.582632][   T24] audit: type=1400 audit(5970.930:253): avc:  denied  { write } for  pid=6524 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5987.863227][   T24] audit: type=1400 audit(5987.080:254): avc:  denied  { write } for  pid=6539 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6021.494640][   T24] audit: type=1400 audit(6020.800:255): avc:  denied  { write } for  pid=6549 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6038.431572][   T24] audit: type=1400 audit(6037.740:256): avc:  denied  { write } for  pid=6561 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6076.722025][   T24] audit: type=1400 audit(6076.060:257): avc:  denied  { write } for  pid=6582 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6087.727867][   T24] audit: type=1400 audit(6087.080:258): avc:  denied  { write } for  pid=6585 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6128.106974][   T24] audit: type=1400 audit(6127.470:259): avc:  denied  { write } for  pid=6593 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6142.841931][   T24] audit: type=1400 audit(6142.170:260): avc:  denied  { write } for  pid=6605 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6169.722490][   T24] audit: type=1400 audit(6169.080:261): avc:  denied  { write } for  pid=6616 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6181.661485][   T24] audit: type=1400 audit(6180.970:262): avc:  denied  { write } for  pid=6621 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6247.844291][ T6592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 6248.463064][ T6592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 6268.734895][ T6597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 6269.502969][ T6597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 6306.924801][ T6592] hsr_slave_0: entered promiscuous mode
[ 6307.133849][ T6592] hsr_slave_1: entered promiscuous mode
[ 6307.254348][ T6592] debugfs: 'hsr0' already exists in 'hsr'
[ 6307.254746][ T6592] Cannot create hsr debugfs directory
[ 6335.857424][ T6597] hsr_slave_0: entered promiscuous mode
[ 6335.987601][ T6597] hsr_slave_1: entered promiscuous mode
[ 6336.222130][ T6597] debugfs: 'hsr0' already exists in 'hsr'
[ 6336.222545][ T6597] Cannot create hsr debugfs directory
[ 6356.633659][ T6592] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 6357.375917][ T6592] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 6358.592742][ T6592] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 6358.963702][ T6592] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 6361.998502][ T6592] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 6362.408888][ T6592] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 6363.773489][ T6592] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 6364.306711][ T6592] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 6401.228556][ T6597] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 6402.042163][ T6597] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 6402.186705][ T6597] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 6402.919500][ T6597] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 6403.129209][ T6597] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 6404.024643][ T6597] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 6404.333189][ T6597] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 6405.173648][ T6597] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 6429.124966][ T6592] 8021q: adding VLAN 0 to HW filter on device bond0
[ 6458.368496][ T6597] 8021q: adding VLAN 0 to HW filter on device bond0
[ 6500.959710][   T26] INFO: task syz.8.609:6573 blocked for more than 430 seconds.
[ 6500.961932][   T26]       Not tainted syzkaller #0
[ 6500.962319][   T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 6500.962637][   T26] task:syz.8.609       state:D stack:0     pid:6573  tgid:6573  ppid:6089   task_flags:0x400040 flags:0x00000011
[ 6500.965026][   T26] Call trace:
[ 6500.965242][   T26]  __switch_to+0x5e4/0xb74 (T)
[ 6500.965754][   T26]  __schedule+0x1e0c/0x38cc
[ 6500.966094][   T26]  schedule+0x1b4/0x274
[ 6500.966456][   T26]  schedule_timeout+0x68/0x1e4
[ 6500.966737][   T26]  wait_for_completion+0x1b8/0x414
[ 6500.966977][   T26]  __synchronize_srcu+0x1c8/0x208
[ 6500.967336][   T26]  synchronize_srcu+0x668/0x8dc
[ 6500.967681][   T26]  mmu_notifier_unregister+0x33c/0x444
[ 6500.968055][   T26]  kvm_put_kvm+0x69c/0xbbc
[ 6500.968418][   T26]  kvm_vm_release+0x58/0x78
[ 6500.968702][   T26]  __fput+0x4ac/0x978
[ 6500.968980][   T26]  ____fput+0x20/0x30
[ 6500.969249][   T26]  task_work_run+0x1b8/0x250
[ 6500.969550][   T26]  exit_to_user_mode_loop+0x110/0x188
[ 6501.104676][   T26]  el0_svc+0x18c/0x240
[ 6501.105143][   T26]  el0t_64_sync_handler+0x68/0xdc
[ 6501.105466][   T26]  el0t_64_sync+0x198/0x19c
[ 6501.106806][   T26] 
[ 6501.106806][   T26] Showing all locks held in the system:
[ 6501.107124][   T26] locks held by kworker/u4:1/21: 3, on CPU#0:
[ 6501.107390][   T26]  #0: 8df0000012140140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b4
[ 6501.108676][   T26]  #1: ffff80008cdc7ce8 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b4
[ 6501.109436][   T26]  #2: ffff8000882c43b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c
[ 6501.305076][   T26] locks held by khungtaskd/26: 1, last CPU#0:
[ 6501.305340][   T26]  #0: ffff800087fce618 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x4c/0x188
[ 6501.306266][   T26] locks held by getty/3252: 2, on CPU#0:
[ 6501.306480][   T26]  #0: 1af00000123aa0a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c
[ 6501.307201][   T26]  #1: a6ff80008cd2b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x314/0x11f8
[ 6501.308000][   T26] locks held by syz-executor/3385: 2, last CPU#0:
[ 6501.308188][   T26]  #0: 48f000001567e1f8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0xf4/0xb64
[ 6501.309002][   T26]  #1: ffff800087fce618 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x50/0x22c
[ 6501.309763][   T26] locks held by kworker/u4:6/3451: 3, last CPU#0:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 6501.481846][   T26]  #0: fff0000074cccea0 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x364/0x38cc
[ 6501.482872][   T26]  #1: fff0000074cb7248 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x6c/0x6e8
[ 6501.483654][   T26]  #2: fff0000074cb8cd8 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x5cc/0xe90
[ 6501.484535][   T26] locks held by kworker/u4:0/5053: 3, last CPU#0:
[ 6501.484727][   T26]  #0: 06f000000d034140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b4
[ 6501.485453][   T26]  #1: ffff80008ece7ce8 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b4
[ 6501.486155][   T26]  #2: aef000001dac1258 (&devlink->lock_key#4){+.+.}-{4:4}, at: devl_trylock+0x24/0x34
[ 6501.487126][   T26] locks held by kworker/u4:4/5626: 2, last CPU#0:
[ 6501.487369][   T26]  #0: e4f000000d033d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b4
[ 6501.488128][   T26]  #1: ffff80008ed97ce8 ((gc_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b4
[ 6501.488860][   T26] locks held by kworker/u4:5/5656: 3, last CPU#0:
[ 6501.489035][   T26]  #0: e4f000000d033d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b4
[ 6501.489751][   T26]  #1: ffff80008ee87ce8 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b4
[ 6501.771911][   T26]  #2: 38f000001df4f258 (&devlink->lock_key#10){+.+.}-{4:4}, at: devl_trylock+0x24/0x34
[ 6501.772802][   T26] locks held by kworker/u4:9/5690: 3, last CPU#0:
[ 6501.772990][   T26]  #0: 06f000000d034140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b4
[ 6501.773699][   T26]  #1: ffff80008efc7ce8 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b4
[ 6501.774422][   T26]  #2: 7cf0000018fc5a58 (&devlink->lock_key#11){+.+.}-{4:4}, at: devl_trylock+0x24/0x34
[ 6501.775206][   T26] locks held by kworker/u4:11/5817: 3, last CPU#0:
[ 6501.775415][   T26]  #0: 06f000000d034140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b4
[ 6501.776142][   T26]  #1: ffff80008f2c7ce8 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b4
[ 6501.776890][   T26]  #2: 96f0000027707258 (&devlink->lock_key#6){+.+.}-{4:4}, at: devl_trylock+0x24/0x34
[ 6501.777709][   T26] locks held by kworker/u4:7/6150: 2, on CPU#0:
[ 6501.777887][   T26]  #0: 06f000000d034140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b4
[ 6501.778610][   T26]  #1: ffff80008e437ce8 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b4
[ 6501.779380][   T26] locks held by syz.7.608/6565: 2, last CPU#0:
[ 6501.779572][   T26]  #0: ffff80008801bf70 (srcu){.+.+}-{0:0}, at: mmu_notifier_unregister+0xdc/0x444
[ 6502.012066][   T26]  #1: 86f000001fe65530 (&kvm->srcu){.+.+}-{0:0}, at: kvm_mmu_notifier_release+0x50/0xc4
[ 6502.012928][   T26] locks held by kworker/0:5/6580: 5, last CPU#0:
[ 6502.013115][   T26]  #0: 20f0000012366340 ((wq_completion)mld){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b4
[ 6502.013857][   T26]  #1: ffff8000a0457ce8 ((work_completion)(&(&idev->mc_ifc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b4
[ 6502.014590][   T26]  #2: a8f00000275f1d30 (&idev->mc_lock){+.+.}-{4:4}, at: mld_ifc_work+0x40/0xe1c
[ 6502.015365][   T26]  #3: ffff800087fce618 (rcu_read_lock){....}-{1:3}, at: mld_sendpack+0x1c0/0x13dc
[ 6502.016150][   T26]  #4: ffff800087fce618 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x14c/0x7fc
[ 6502.017002][   T26] locks held by kworker/u4:3/6601: 3, last CPU#0:
[ 6502.017180][   T26]  #0: 06f000000d034140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b4
[ 6502.017911][   T26]  #1: ffff8000a0737ce8 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b4
[ 6502.018645][   T26]  #2: aef000001dac1258 (&devlink->lock_key#4){+.+.}-{4:4}, at: devl_trylock+0x24/0x34
[ 6502.019479][   T26] locks held by kworker/u4:15/6707: 2, on CPU#0:
[ 6502.019662][   T26]  #0: 06f000000d034140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b4
[ 6502.282550][   T26]  #1: ffff8000a3557ce8 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b4
[ 6502.283343][   T26] locks held by kworker/u4:16/6732: 3, last CPU#0:
[ 6502.283551][   T26]  #0: e4f000000d033d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b4
[ 6502.284334][   T26]  #1: ffff8000a35f7ce8 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b4
[ 6502.285056][   T26]  #2: ffff800087fce618 (rcu_read_lock){....}-{1:3}, at: gc_worker+0x234/0x14c0
[ 6502.285845][   T26] locks held by modprobe/6757: 1, last CPU#0:
[ 6502.286023][   T26]  #0: 7af000001890c278 (&mm->mmap_lock){++++}-{4:4}, at: do_mprotect_pkey+0x204/0xb70
[ 6502.286765][   T26] locks held by modprobe/6758: 1, last CPU#0:
[ 6502.286941][   T26]  #0: 64f000001fcf1d88 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x150/0x41c
[ 6502.443511][   T26] 
[ 6502.443746][   T26] =============================================
[ 6502.443746][   T26] 
[ 6502.444599][   T26] Kernel panic - not syncing: hung_task: blocked tasks
[ 6502.448870][   T26] CPU: 0 UID: 0 PID: 26 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT 
[ 6502.450249][   T26] Hardware name: linux,dummy-virt (DT)
[ 6502.451119][   T26] Call trace:
[ 6502.451756][   T26]  show_stack+0x2c/0x3c (C)
[ 6502.452770][   T26]  __dump_stack+0x30/0x40
[ 6502.453744][   T26]  dump_stack_lvl+0x30/0x12c
[ 6502.454644][   T26]  dump_stack+0x1c/0x28
[ 6502.455525][   T26]  vpanic+0x4cc/0x844
[ 6502.456334][   T26]  vpanic+0x0/0x844
[ 6502.457119][   T26]  hung_task_panic+0x0/0x2c
[ 6502.458021][   T26]  kthread+0x4cc/0x514
[ 6502.458817][   T26]  ret_from_fork+0x10/0x20
[ 6502.460545][   T26] Kernel Offset: disabled
[ 6502.461232][   T26] CPU features: 0x0,00000000,00d1802f,df188f42,0afff61f
[ 6502.462356][   T26] Memory Limit: none
[ 6502.464552][   T26] Rebooting in 86400 seconds..