last executing test programs: 20m33.126951774s ago: executing program 0 (id=17): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1d) syz_kvm_vgic_v3_setup(r0, 0x1, 0x100) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0x6, 0x2}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x28) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r5, 0x4068aea3, &(0x7f00000001c0)={0xa8, 0x0, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000100)={0x10001, 0x6, 0xe000, 0x1000, &(0x7f0000fed000/0x1000)=nil}) r6 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r3, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000080)="fb01db06033ce3c60100a29ea6ab8031d1dfd92f0000dc0320002c005a9610fbff67521c966f8f1f4408357070c2c7aadad0b207000000000400", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r3, 0x0) r7 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0xa00f2, 0x408) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x2002, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000bfe000/0x400000)=nil) ioctl$KVM_GET_API_VERSION(r8, 0xae00, 0x0) r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r11, 0x4010aeac, &(0x7f0000000280)=@arm64_sys={0x603000000013808c, &(0x7f00000001c0)=0x8}) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0) openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x3e) ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, &(0x7f00000001c0)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x8, 0x800000110, &(0x7f0000000080)=0x8000000000000000}) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) 20m24.97389053s ago: executing program 0 (id=19): mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000007, 0x4f833, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x8, 0xf, 0x0, 0x5, 0x6, 0x6, 0x6, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x9, 0x0, 0x0, 0x3, 0x5, 0x8, '\x00', 0x1, 0x2}) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000240)=@arm64_fp={0x60400000001004a3, 0x0}) r3 = eventfd2(0x3, 0x100001) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x0, r3}) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) r7 = ioctl$KVM_CREATE_VM(r6, 0x894c, 0x0) (async) r8 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000980)={0x0, &(0x7f00000003c0)=[@code={0xa, 0x9c, {"a09b90d20020b8f2210080d2a20080d2a30180d2440180d2020000d4005c205e000008d580939dd200a0b0f2810180d2c20180d2c30080d2240080d2020000d4007008d50000669e004b9dd20060b8f2610180d2c20080d2a30180d2040180d2020000d4000028d5e09982d20080b0f2010180d2620180d2a30180d2640180d2020000d40060400d"}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x0, 0x1, 0xd, 0xff, 0x3fd0000, 0x3}}, @mrs={0xbe, 0x18, {0x603000000013df55}}, @its_setup={0x82, 0x28, {0x2, 0x1, 0x25d}}, @uexit={0x0, 0x18, 0x10}, @svc={0x122, 0x40, {0xc400000c, [0x1, 0x2, 0x8, 0x2, 0x3]}}, @eret={0xe6, 0x18, 0x400}, @irq_setup={0x46, 0x18, {0x0, 0x15b}}, @its_send_cmd={0xaa, 0x28, {0x5, 0x1, 0x4, 0x4, 0x7e7882c1, 0x10001, 0x4}}, @smc={0x1e, 0x40, {0x84000050, [0x5, 0x4, 0x0, 0x1]}}, @smc={0x1e, 0x40, {0x80000001, [0x8, 0x4fe, 0x6, 0xff, 0x7fffffffffffffff]}}, @its_send_cmd={0xaa, 0x28, {0xb, 0x1, 0x4, 0x4, 0x401, 0x5, 0x1}}, @hvc={0x32, 0x40, {0x84000008, [0x40, 0x4e, 0x0, 0x100000000, 0xffffffffffffffff]}}, @mrs={0xbe, 0x18, {0x603000000013c685}}, @mrs={0xbe, 0x18, {0x603000000013c086}}, @smc={0x1e, 0x40, {0x84000009, [0x1, 0x137ab240, 0xff, 0x1]}}, @smc={0x1e, 0x40, {0x4000, [0x6, 0x1, 0x1000, 0x9, 0x401]}}, @hvc={0x32, 0x40, {0x800, [0x1, 0xd, 0x2, 0x4, 0xca8]}}, @its_setup={0x82, 0x28, {0x0, 0x9, 0x240}}, @svc={0x122, 0x40, {0x84000007, [0x5, 0x6, 0x8, 0xfa, 0x7]}}, @code={0xa, 0x9c, {"00459bd200c0b0f2410080d2e20080d2a30080d2e40080d2020000d4007008d5008008d5c0ac9ad20080b8f2210080d2420180d2430180d2e40080d2020000d40004002f000008d5002c84d20080b8f2810180d2020080d2030180d2440080d2020000d4c0e49bd20020b0f2c10080d2420080d2630080d2a40180d2020000d4007008d5007008d5"}}, @code={0xa, 0x84, {"000028d5008008d5007008d580879fd20080b8f2210080d2c20080d2430180d2a40180d2020000d400e198d200c0b0f2a10080d2220080d2e30180d2640180d2020000d4a00798d20020b0f2210180d2420080d2a30180d2c40080d2020000d40080a09b007008d500084078e00300eb"}}, @eret={0xe6, 0x18, 0xfffffffffffffe01}, @eret={0xe6, 0x18, 0x7fffffffffffffff}, @uexit={0x0, 0x18, 0xffffffff}, @mrs={0xbe, 0x18, {0x25f8}}, @msr={0x14, 0x20, {0x6030000000138025, 0x4}}, @eret={0xe6, 0x18, 0x40}], 0x5ac}, &(0x7f00000009c0)=[@featur1={0x1, 0x2}], 0x1) syz_kvm_setup_cpu$arm64(r5, r8, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000ec0)=[{0x0, &(0x7f0000000a00)=[@eret={0xe6, 0x18, 0x40}, @smc={0x1e, 0x40, {0xc400000c, [0x4, 0x60be, 0x7b, 0x4b97d223, 0x7]}}, @code={0xa, 0x84, {"000c40bc0000c06820bf8ed20040b0f2410080d2a20080d2030080d2a40180d2020000d400a8205e000008d50048202e20f498d20080b0f2e10180d2c20080d2c30180d2240080d2020000d4007008d5008008d5804294d200e0b8f2810180d2020180d2230180d2e40080d2020000d4"}}, @uexit={0x0, 0x18}, @svc={0x122, 0x40, {0x84000008, [0x81, 0xfffffffffffffff8, 0x7, 0xfffffffffffffff7, 0xc9223c2]}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x1, 0x32d, 0x2, 0x8, 0x800, 0x4}}, @hvc={0x32, 0x40, {0x84000002, [0x7, 0x0, 0x4, 0xdb2, 0xe43]}}, @irq_setup={0x46, 0x18, {0x3, 0x26c}}, @hvc={0x32, 0x40, {0x200, [0x1, 0x6, 0xc1, 0x0, 0x80]}}, @eret={0xe6, 0x18, 0x1}, @its_setup={0x82, 0x28, {0x2, 0x3, 0x2ef}}, @uexit={0x0, 0x18, 0x7}, @its_setup={0x82, 0x28, {0x1, 0x4, 0x4d}}, @code={0xa, 0x84, {"000028d5000c00b8001b80d20020b0f2e10080d2020080d2830080d2e40180d2020000d400e4000fa0c191d20060b8f2a10080d2c20080d2030180d2e40080d2020000d40000299e602388d200a0b8f2e10080d2220180d2830180d2640080d2020000d4007008d5007008d5007008d5"}}, @code={0xa, 0x9c, {"603c85d200e0b0f2810180d2420080d2430080d2a40180d2020000d4a0509ad20040b8f2010080d2020180d2a30180d2040180d2020000d4000028d5007008d5c0b486d20000b0f2e10180d2020180d2c30180d2040180d2020000d4603a82d200c0b8f2410080d2a20080d2030180d2240080d2020000d40038205e0094007f008008d5000008d5"}}, @eret={0xe6, 0x18, 0x565}, @code={0xa, 0xb4, {"00d4202e007008d5006689d20040b8f2810080d2020080d2830180d2040180d2020000d4809491d200a0b8f2e10180d2a20080d2e30080d2c40080d2020000d4007008d5205692d200a0b0f2610180d2e20080d2030080d2640080d2020000d480fd97d200c0b8f2810180d2620180d2630180d2a40180d2020000d41004601e00a0000fe06789d20000b0f2210080d2a20180d2e30080d2040180d2020000d4"}}, @msr={0x14, 0x20, {0x603000000013dce1, 0x4}}, @smc={0x1e, 0x40, {0x8, [0x2, 0xbf7, 0xd99d, 0x3625, 0x7]}}], 0x4c0}], 0x1, 0x0, &(0x7f0000000f00)=[@featur1={0x1, 0x80}], 0x1) ioctl$KVM_CREATE_VCPU(r7, 0xb701, 0x0) (async) syz_kvm_add_vcpu$arm64(0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xb701, 0xfffffffffffffffe) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x1}) (async, rerun: 32) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (rerun: 32) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x30) ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) (async, rerun: 32) r12 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0) (rerun: 32) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x2e) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r13, r14, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000100)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_ONE_REG(r14, 0x4010aeac, &(0x7f0000000140)=@arm64_core={0x603000000010001a, &(0x7f00000000c0)=0x11}) (async) ioctl$KVM_SET_VCPU_EVENTS(r14, 0x4040aea0, &(0x7f0000000080)=@arm64={0xe6, 0x7, 0x8, '\x00', 0xff}) (async) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000140)={0x4, 0x0, [{0x1, 0x1, 0x0, 0x0, @adapter={0x8000000000000001, 0x8, 0x2, 0xa, 0x10}}, {0x9, 0x3, 0x1, 0x0, @adapter={0xd4ff}}, {0x0, 0x0, 0x0, 0x0, @msi={0x80, 0x0, 0x0, 0x7}}, {0x0, 0x0, 0x0, 0x0, @adapter={0x1, 0x5, 0x101, 0x7f, 0xb2a}}]}) (async) write$eventfd(r11, &(0x7f00000001c0)=0x3, 0x50) 20m16.215198922s ago: executing program 1 (id=20): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x1d9e00, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013c4f1, 0x8000}}, @msr={0x14, 0x20, {0x603000000013dce4, 0x8000}}], 0x40}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x2b) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dcf0, 0x7fff}}], 0x20}, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) ioctl$KVM_RUN(r3, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x136) syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000000c0)=@arm64={0x6, 0x81, 0x2, '\x00', 0x20000000006}) ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, &(0x7f0000000000)) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r8 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r9 = openat$kvm(0x0, &(0x7f0000000140), 0x206a02, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0xa8200, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x27) syz_kvm_vgic_v3_setup(r12, 0x4, 0x1a0) r13 = eventfd2(0x2, 0x80000) r14 = eventfd2(0xf, 0x80001) ioctl$KVM_IRQFD(r12, 0x4020ae76, &(0x7f0000000100)={r14, 0x0, 0x2, r13}) ioctl$KVM_IRQFD(r12, 0x4020ae76, &(0x7f0000000000)={r13, 0x8, 0x2, r13}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 20m15.38565901s ago: executing program 0 (id=21): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) (async) r3 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000000)={0x4000, 0x13000, 0x1}) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000000)={0x4000, 0x13000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000380)={0x2, 0x25000, 0x1}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r6, 0x4010ae68, &(0x7f00000003c0)={0x4, 0xa7e9ea20e9018807, 0x1}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013c65e, 0x8000}}], 0x20}, 0x0, 0x0) (async) r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013c65e, 0x8000}}], 0x20}, 0x0, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x3) (async) r13 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r13, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) (async) ioctl$KVM_ARM_VCPU_INIT(r13, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) ioctl$KVM_SET_ONE_REG(r13, 0x4010aeac, &(0x7f00000000c0)=@arm64_extra={0x603000000013c01b, &(0x7f0000000040)=0xffffffffffffff00}) r14 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r15 = syz_kvm_add_vcpu$arm64(r14, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0xfffffffffffffffe}}, @msr={0x14, 0x20, {0x603000000013dce1, 0xffffffffffff7fff}}], 0x40}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r15, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) (async) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r15, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) ioctl$KVM_RUN(r15, 0xae80, 0x0) syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f00000002c0)=[@uexit={0x0, 0x18, 0x2}], 0x18}, &(0x7f0000000000), 0x1) (async) r16 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f00000002c0)=[@uexit={0x0, 0x18, 0x2}], 0x18}, &(0x7f0000000000), 0x1) ioctl$KVM_RUN(r16, 0xae80, 0x0) 20m3.156596245s ago: executing program 1 (id=22): r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000000)={0x0, 0x0}, &(0x7f00000000c0)=[@featur1={0x1, 0x5}], 0x1) r5 = syz_kvm_add_vcpu$arm64(r0, &(0x7f0000000b80)={0x0, &(0x7f0000000100)=[@smc={0x1e, 0x40, {0x84000003, [0x80000000000000, 0x53960c3d, 0xac8, 0x2, 0x7fffffffffffffff]}}], 0x40}, &(0x7f00000001c0)=[@featur1={0x1, 0x4}], 0x1) syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xf3) ioctl$KVM_GET_ONE_REG(r4, 0x4010aeab, &(0x7f0000000140)=@arm64_fp={0x604000000010005c, &(0x7f0000000080)=0xe03}) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_ONE_REG(r7, 0x4010aeac, &(0x7f0000000200)=@other={0x5, &(0x7f0000000180)=0xfffffffffffffff9}) 20m2.956954456s ago: executing program 0 (id=23): r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x27) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_GUEST_MEMFD(r5, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r5, 0x40a0ae49, &(0x7f0000000180)={0x1fe, 0x4, 0x80a0000, 0x2000, &(0x7f0000c08000/0x2000)=nil, 0x1000, r6}) (async) ioctl$KVM_SET_USER_MEMORY_REGION2(r5, 0x40a0ae49, &(0x7f0000000300)={0x0, 0x4, 0x5000, 0x2000, &(0x7f0000ffd000/0x2000)=nil, 0x4000000000, r6}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x480481, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x210200, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x28) (async) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r10, 0x4020aeae, &(0x7f0000000100)={0x5, 0x18}) (async) ioctl$KVM_GET_ONE_REG(r10, 0x4010aeab, &(0x7f0000000140)=@arm64_sve={0x603000000013df02, 0x0}) (async) r11 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x3c) r12 = ioctl$KVM_CREATE_GUEST_MEMFD(r11, 0xc040aed4, &(0x7f00000001c0)={0x1, 0x2}) (async) r13 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x2e) r15 = ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r15, 0x4018aee2, &(0x7f0000000180)=@attr_other={0x0, 0x9, 0xfffffffffffffffe, &(0x7f0000000000)=0xfe}) (async) r16 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, r16, 0x3000001, 0x11, r12, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION2(r5, 0x40a0ae49, &(0x7f0000000240)={0x1ff, 0x5, 0x2, 0x1000, &(0x7f0000ffd000/0x1000)=nil, 0x9, r12}) ioctl$KVM_PPC_ALLOCATE_HTAB(r2, 0xc004aea7, &(0x7f0000000080)=0x80000001) (async) r17 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000b80)={0x0, 0x0}, &(0x7f0000000bc0)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_SET_ONE_REG(r17, 0x4010aeac, &(0x7f0000000000)=@arm64_fw={0x6030000000140000, &(0x7f0000000200)=0x10000}) (async) syz_kvm_add_vcpu$arm64(r0, &(0x7f0000000b80)={0x0, &(0x7f0000000100)=[@hvc={0x32, 0x40, {0xc4000012, [0x100000001, 0x8000000000000000, 0xffffffffffffffff, 0xee24, 0xffffffffffff0001]}}], 0x40}, &(0x7f0000000040)=[@featur1={0x1, 0x4}], 0x1) 19m54.087633174s ago: executing program 1 (id=24): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x9) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000000)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_vgic_v3_setup(r3, 0x2, 0x220) openat$kvm(0x0, 0x0, 0x0, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r7, 0x4010aeac, &(0x7f00000000c0)=@arm64_core={0x6030000000100008, &(0x7f0000000000)=0xc}) 19m46.426905942s ago: executing program 0 (id=25): mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000300)="e80149dd033be3ac2cc4a29ea6abf4e74d4e37c4b85400005a9610060067521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700000000000400", 0x0, 0x48) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x0, 0x2000002, 0x11, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0) syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000000000/0x400000)=nil) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000280)="37e68986ad644f5dc57bbc1ff386863b67f3eee57a32ec911d95f88f3dd8ea716e5a29ceeb3000", 0x0, 0xffffffffffffffc0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x20200, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@mrs={0xbe, 0x18, {0x603000000013df40}}], 0x18}, &(0x7f0000000100)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r6, 0x4018aee1, &(0x7f0000000140)=@attr_pmu_init) r7 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r8 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r7, 0x3, 0x11, r6, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$arm64(r6, r8, 0xffffffffffffffff) syz_memcpy_off$KVM_EXIT_MMIO(r8, 0x20, &(0x7f0000000100)="330e3d71d28d0969381e9f7c94892745685b93136cb31f96", 0x0, 0x18) r9 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r10 = openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000200)=@attr_other={0x0, 0x2, 0x7, &(0x7f0000000240)=0x3}) mmap$KVM_VCPU(&(0x7f0000000000/0xc00000)=nil, 0x930, 0xf, 0x32, 0xffffffffffffffff, 0x0) close(r2) 19m43.55411487s ago: executing program 1 (id=26): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xc, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x20000000) r2 = eventfd2(0x6, 0x0) ioctl$KVM_CREATE_VM(r2, 0x4020940d, 0x20000000) openat$kvm(0x0, 0x0, 0x0, 0x0) r3 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x8) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x5) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x105000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x100000c, 0x4d832, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000240)={0x1fe, 0x3, 0xffff1000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f00000000c0)={0x2, 0x3, 0x100000, 0x2000, &(0x7f000000f000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xcccc0000, 0x1000, &(0x7f0000f15000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000200)={0x1fd, 0x0, 0xeeee0000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x2710, 0x3, 0x200000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r9, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xc, 0x810, 0xffffffffffffffff, 0x20000000) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) r10 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r11 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, r10, 0x2, 0x12, r9, 0x0) mmap$KVM_VCPU(&(0x7f0000010000/0x4000)=nil, r10, 0x100000a, 0x12, r5, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r11, 0x20, &(0x7f00000001c0)="fb016b03002e5ee42ec6a29ea6ab8000000004ef0000c20cecf80a97ab78000000040000000000000000409700000000ffffffff00000000a0eb00df00", 0x0, 0xffffffffffffff69) mmap$KVM_VCPU(&(0x7f0000010000/0x1000)=nil, 0x930, 0x100000f, 0x9032, 0xffffffffffffffff, 0x0) 19m36.834511342s ago: executing program 0 (id=27): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34) r1 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r4 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r3, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000300)="fb4149dd033b8986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67525673312b01040000000000002627e7000000000000000200", 0x0, 0xfffffffffffffe73) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x12, r3, 0x0) r5 = eventfd2(0x70, 0x0) close(r5) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x0) write$eventfd(r5, &(0x7f0000000100)=0xfffffffffffffffe, 0x8) r6 = eventfd2(0x0, 0x0) close(r6) r7 = eventfd2(0x0, 0x0) close(r7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xc0c82, 0x0) mmap$KVM_VCPU(&(0x7f0000008000/0x3000)=nil, 0x930, 0x2000004, 0x2011, r7, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, 0x930, 0x200000e, 0x2011, r6, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0) openat$kvm(0x0, &(0x7f0000000140), 0x400, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2c) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f00000000c0)={0x7}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x100000e, 0x16831, r9, 0x0) r10 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000040)=@arm64_core={0x6030000000100050, 0x0}) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) 19m33.383312024s ago: executing program 1 (id=28): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000000)={0x80a0000, 0x8000, 0x1}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x8, 0x88, 0x0}) 19m26.716241013s ago: executing program 1 (id=29): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x1, 0x300) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000280)={0x8}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000200)={0x0, 0x0, 0x9, 0x3}) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) (async) syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) (async) syz_kvm_vgic_v3_setup(r1, 0x1, 0x300) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000280)={0x8}) (async) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000200)={0x0, 0x0, 0x9, 0x3}) (async) 18m50.404956694s ago: executing program 32 (id=27): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34) r1 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r4 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r3, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000300)="fb4149dd033b8986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67525673312b01040000000000002627e7000000000000000200", 0x0, 0xfffffffffffffe73) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x12, r3, 0x0) r5 = eventfd2(0x70, 0x0) close(r5) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x0) write$eventfd(r5, &(0x7f0000000100)=0xfffffffffffffffe, 0x8) r6 = eventfd2(0x0, 0x0) close(r6) r7 = eventfd2(0x0, 0x0) close(r7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xc0c82, 0x0) mmap$KVM_VCPU(&(0x7f0000008000/0x3000)=nil, 0x930, 0x2000004, 0x2011, r7, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, 0x930, 0x200000e, 0x2011, r6, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0) openat$kvm(0x0, &(0x7f0000000140), 0x400, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2c) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f00000000c0)={0x7}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x100000e, 0x16831, r9, 0x0) r10 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000040)=@arm64_core={0x6030000000100050, 0x0}) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) 18m39.675227401s ago: executing program 33 (id=29): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x1, 0x300) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000280)={0x8}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000200)={0x0, 0x0, 0x9, 0x3}) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) (async) syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) (async) syz_kvm_vgic_v3_setup(r1, 0x1, 0x300) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000280)={0x8}) (async) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000200)={0x0, 0x0, 0x9, 0x3}) (async) 8m49.794279963s ago: executing program 3 (id=73): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000080)="fb0149dd033be3ac4e37c4005a9614fbff67521ce16f8f09449a7a836b73312954000000000000000000000000000000000000000000000000000000dc6900", 0x0, 0x2e) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r1, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x103201, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x4}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000004}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r4, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) r8 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r10, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x3, 0x3, 0x10000000004}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000005}}], 0x50}, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r6, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0xc0280, 0x0) 8m39.628073557s ago: executing program 2 (id=74): r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000bfe000/0x400000)=nil) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80180, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0x5450, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f0000000080)={0x100000000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r3, 0x40a0ae49, &(0x7f0000000140)={0x2, 0x4, 0x10000, 0x2000, &(0x7f0000d1d000/0x2000)=nil, 0x0, r4}) (async) ioctl$KVM_SET_USER_MEMORY_REGION2(r3, 0x40a0ae49, &(0x7f0000000140)={0x2, 0x4, 0x10000, 0x2000, &(0x7f0000d1d000/0x2000)=nil, 0x0, r4}) ioctl$KVM_SET_USER_MEMORY_REGION2(r3, 0x40a0ae49, &(0x7f0000000080)={0x1fd, 0x4, 0xeeee8000, 0x2000, &(0x7f0000ffd000/0x2000)=nil, 0x10000, r4}) syz_kvm_add_vcpu$arm64(r0, &(0x7f00000007c0)={0x0, &(0x7f0000000140)=[@irq_setup={0x46, 0x18, {0x4, 0x358}}, @irq_setup={0x46, 0x18, {0x0, 0x281}}, @hvc={0x32, 0x40, {0xc4000012, [0x6a, 0x40, 0x80000000, 0x80000000, 0x1]}}, @uexit={0x0, 0x18, 0x101}, @smc={0x1e, 0x40, {0xc400000c, [0x6, 0x6, 0x1, 0x72e5, 0x3]}}, @its_send_cmd={0xaa, 0x28, {0x4, 0x0, 0x2, 0x7, 0x5, 0x4, 0x4}}, @its_setup={0x82, 0x28, {0x1, 0x4, 0xfd}}, @smc={0x1e, 0x40, {0x6000000, [0x10000, 0x3, 0x7, 0x4, 0x31]}}, @irq_setup={0x46, 0x18, {0x3, 0x285}}, @msr={0x14, 0x20, {0x603000000013dee0, 0x8}}, @irq_setup={0x46, 0x18, {0x4, 0xf7}}, @code={0xa, 0x9c, {"40899cd200e0b8f2410180d2820180d2430180d2e40180d2020000d40010c05a007008d5007091d20000b8f2c10080d2c20180d2230180d2e40180d2020000d4000008d5007008d580f194d20020b0f2810080d2620180d2c30180d2440080d2020000d400e0c00da0119ed20040b0f2810180d2a20180d2230180d2c40080d2020000d400b8205e"}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x1, 0x2, 0x7, 0x3, 0xc, 0x2}}, @code={0xa, 0x9c, {"000040b3000000780000299ea0569ad20060b0f2410080d2420080d2630180d2c40180d2020000d40058284e007008d50060000ea00096d20000b8f2210080d2020180d2630080d2c40080d2020000d480528bd20040b8f2810080d2420080d2e30180d2c40080d2020000d4e0ee87d200e0b0f2810180d2820180d2630080d2240080d2020000d4"}}, @svc={0x122, 0x40, {0x8, [0x2000000000000000, 0x6, 0x7fff, 0x2, 0x7]}}, @eret={0xe6, 0x18, 0x4}, @irq_setup={0x46, 0x18, {0x4, 0x37a}}, @eret={0xe6, 0x18, 0x5}, @smc={0x1e, 0x40, {0x84000013, [0x1, 0x7, 0x4, 0x3, 0xffffffffffff3def]}}, @smc={0x1e, 0x40, {0x4000, [0x12000000000000, 0x8, 0x5, 0x8, 0x8]}}, @eret={0xe6, 0x18, 0x3}, @mrs={0xbe, 0x18, {0x603000000013f099}}, @code={0xa, 0x84, {"c0da99d200a0b0f2210180d2620080d2e30180d2840180d2020000d4a04990d200a0b8f2e10080d2a20080d2e30080d2040180d2020000d4000028d500c8a07e0000c068000080f9a0ff9bd20060b0f2c10080d2e20180d2830080d2240180d2020000d4000400bc000028d5002c004e"}}, @hvc={0x32, 0x40, {0x80003fff, [0x10001, 0x4, 0x401, 0x5, 0xfffffffffffffff8]}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x8100000, 0xb0, 0x2, 0x4}}, @its_setup={0x82, 0x28, {0x4, 0x3, 0x2b2}}, @irq_setup={0x46, 0x18, {0x2, 0xa6}}, @code={0xa, 0xb4, {"008008d5000028d580ff94d200e0b0f2e10180d2620080d2e30180d2240080d2020000d41820601ee0b382d20060b8f2c10080d2020180d2e30180d2a40180d2020000d4c05d8dd20080b8f2810180d2a20180d2230080d2c40180d2020000d4c05994d20060b8f2e10080d2a20080d2230080d2c40080d2020000d4806f9ad20080b0f2210180d2020180d2a30180d2c40080d2020000d4000028d5007008d5"}}, @hvc={0x32, 0x40, {0x40000000, [0x4, 0x3, 0x10, 0x0, 0x3]}}, @uexit={0x0, 0x18, 0x81}], 0x680}, &(0x7f0000000800)=[@featur1={0x1, 0xa2}], 0x1) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x8800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000a5a000/0x400000)=nil) (async) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000a5a000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000b80)={0x0, &(0x7f0000000040)=[@smc={0x1e, 0x40, {0x84000012, [0x79c4, 0x100080001, 0x5, 0x101, 0x13]}}], 0x40}, &(0x7f00000000c0)=[@featur1={0x1, 0x4}], 0x1) (async) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000b80)={0x0, &(0x7f0000000040)=[@smc={0x1e, 0x40, {0x84000012, [0x79c4, 0x100080001, 0x5, 0x101, 0x13]}}], 0x40}, &(0x7f00000000c0)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r8, 0xae80, 0x0) munmap$KVM_VCPU(0x0, 0x1000000000) (async) munmap$KVM_VCPU(0x0, 0x1000000000) openat$kvm(0xffffffffffffff9c, 0x0, 0x20080, 0x0) r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x2) (async) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x2) ioctl$KVM_ARM_VCPU_FINALIZE(r13, 0xc018ae85, 0x0) (async) ioctl$KVM_ARM_VCPU_FINALIZE(r13, 0xc018ae85, 0x0) r14 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r14, 0x4020aeae, &(0x7f0000000100)={0x5, 0x18}) (async) ioctl$KVM_ARM_VCPU_INIT(r14, 0x4020aeae, &(0x7f0000000100)={0x5, 0x18}) ioctl$KVM_GET_ONE_REG(r14, 0x4010aeab, &(0x7f00000000c0)=@arm64_sve_vls={0x606000000015ffff, &(0x7f0000000080)=0x10001}) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xc, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x20000000) 8m30.107726314s ago: executing program 3 (id=75): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000000c0)={0x7, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000340)=@attr_arm64={0x0, 0x0, 0x2, &(0x7f0000000240)=0x4}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x3, 0x27, 0x6, 0x0, 0x4, 0x9, 0xff, 0x7, 0xc7, 0x43, 0x5, 0x7, 0x0, 0x5, 0x2e, 0xd7, 0x10, 0xaa, 0x7, '\x00', 0x2, 0x100000000000000}) write$eventfd(r5, &(0x7f00000001c0)=0x9, 0x1d) 8m24.423339006s ago: executing program 2 (id=76): openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x2, 0x80010, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) syz_kvm_setup_syzos_vm$arm64(r0, &(0x7f00006b3000/0x400000)=nil) 8m17.336211941s ago: executing program 3 (id=77): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f00000000c0)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x5}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x8, 0xf, 0x0, 0x5, 0x6, 0x6, 0x6, 0x74, 0x86, 0xdd, 0x68, 0x0, 0x209, 0x0, 0x0, 0x3, 0x5, 0x5, '\x00', 0x1, 0x400000000002}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000140)={0x4, 0x0, [{0x1, 0x1, 0x0, 0x0, @adapter={0x8000000000000001, 0xffffffffffffff66, 0x2, 0xa, 0x10}}, {0x5, 0x3, 0x1, 0x0, @msi={0x7, 0x6, 0x7fffffff, 0x5}}, {0x0, 0x0, 0x1, 0x0, @msi={0x80, 0x0, 0x0, 0xa0}}, {0x0, 0x0, 0x1, 0x0, @adapter={0x5e9, 0x5, 0x401, 0x7f, 0xb2d}}]}) write$eventfd(r4, &(0x7f00000001c0)=0x3, 0x50) openat$kvm(0xffffffffffffff9c, 0x0, 0x181900, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000482000/0x2000)=nil, 0x2000) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x1, 0x0, 0x6000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x1fd, 0x2, 0x2000, 0x1000, &(0x7f0000fa2000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000100)={0x10201, 0x1, 0x5000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) syz_kvm_vgic_v3_setup(r5, 0x2, 0x0) 8m15.391102055s ago: executing program 2 (id=78): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x163800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r5, 0x4018aee3, &(0x7f0000000000)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0xb}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r6, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r7, 0xae04) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) mmap$KVM_VCPU(&(0x7f0000c0c000/0x2000)=nil, 0x930, 0x1000002, 0x80031, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000c58000/0x1000)=nil, r8, 0x2000003, 0xaf832, 0xffffffffffffffff, 0x0) munmap$KVM_VCPU(0x0, 0x1000000000) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x2, 0x4f832, 0xffffffffffffffff, 0x1000000) 8m5.354052641s ago: executing program 3 (id=79): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x35) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x8}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_ASSIGN_SET_MSIX_NR(r4, 0x4008ae73, 0x0) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f00000000c0)={0x0, &(0x7f0000000380)=[@its_setup={0x82, 0x28, {0x3, 0x1, 0x39d}}], 0x28}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r4, 0xffffffffffbffffc, 0x120) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000f4d000/0x2000)=nil, 0x930, 0x0, 0x5c1fd1b6565d2f1, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r6, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x4f832, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000240)=@attr_arm64={0x0, 0x4, 0x2, 0x0}) r8 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r8, &(0x7f00000008c0)={0x0, 0x0}, 0x0, 0x0) syz_kvm_add_vcpu$arm64(r8, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x4, 0x1, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x3}}], 0x50}, 0x0, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r10, 0x4010ae67, &(0x7f0000000380)={0x2, 0xa000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r10, 0x4010ae67, &(0x7f0000000480)={0x2, 0x18000, 0x1}) close(r10) syz_kvm_vgic_v3_setup(0xffffffffffffffff, 0x5, 0x3e0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x2, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) 8m0.913303381s ago: executing program 2 (id=80): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r5, 0x4068aea3, &(0x7f0000000500)) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ARM_VCPU_INIT(r6, 0x4020aeae, &(0x7f0000000340)={0x5}) ioctl$KVM_GET_ONE_REG(r6, 0x4010aeab, &(0x7f0000000180)=@arm64_fw={0x6030000000140003, 0xfffffffffffffffe}) 7m47.672712595s ago: executing program 3 (id=81): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3) r5 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) r8 = mmap$KVM_VCPU(&(0x7f0000006000/0x2000)=nil, 0x0, 0x280000a, 0x10, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f0000000300)="fb4149dd033b8986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67525673312b01040000000000002627e7000000000000000200", 0x0, 0xfffffffffffffe73) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x0, 0x1, 0x110, r7, 0x0) r9 = eventfd2(0x70, 0x0) close(r9) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x0) write$eventfd(r9, &(0x7f0000000100)=0xfffffffffffffffd, 0x8) r10 = eventfd2(0x0, 0x0) close(r10) r11 = eventfd2(0x0, 0x0) close(r11) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xc0c82, 0x0) mmap$KVM_VCPU(&(0x7f0000008000/0x3000)=nil, 0x930, 0x2000004, 0x2011, r11, 0x0) mmap$KVM_VCPU(&(0x7f0000005000/0x4000)=nil, 0x930, 0x2000004, 0x2011, r10, 0x0) ioctl$KVM_ARM_VCPU_INIT(r4, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r4, 0x4018aee1, &(0x7f0000000000)=@attr_set_pmu={0x0, 0x0, 0x3, &(0x7f00000001c0)=0x103}) r12 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r12, 0x4020aeae, &(0x7f0000000040)={0x5}) ioctl$KVM_RUN(r12, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x3000)=nil, 0x0, 0x1, 0x10010, 0xffffffffffffffff, 0x0) 7m45.445094646s ago: executing program 2 (id=82): r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000000000)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0x20e4586c}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x2, 0x0, &(0x7f0000000000)=0x1100000000000000}) openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) (async) syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) (async) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000000000)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0x20e4586c}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x2, 0x0, &(0x7f0000000000)=0x1100000000000000}) (async) 7m31.52599358s ago: executing program 2 (id=83): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x8200, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0x5421, 0x6) r1 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, 0xfffffffffffffffe, 0x0, 0xfffffffffffffee9) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x34) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, 0x0) mmap$KVM_VCPU(&(0x7f0000e09000/0x2000)=nil, 0x0, 0x1000008, 0x8010, 0xffffffffffffffff, 0x0) syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r1, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@mrs={0xbe, 0x18, {0x603000000013c643}}], 0x18}, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x8200, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r0, 0x5421, 0x6) (async) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async) syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, 0xfffffffffffffffe, 0x0, 0xfffffffffffffee9) (async) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x34) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000e09000/0x2000)=nil, 0x0, 0x1000008, 0x8010, 0xffffffffffffffff, 0x0) (async) syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) (async) syz_kvm_add_vcpu$arm64(r1, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@mrs={0xbe, 0x18, {0x603000000013c643}}], 0x18}, 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) 7m27.940758389s ago: executing program 3 (id=84): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ARM_VCPU_INIT(0xffffffffffffffff, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000180)=@riscv64_smstateen_csr={0x0, &(0x7f0000000080)=0xd6}) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r2, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x16, 0x4, 0x1}}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r2, r3, &(0x7f0000bfe000/0x400000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f0000000240)=[@hvc={0x32, 0x40, {0x8600ff01, [0x7, 0x9, 0x8, 0xfffffffffffffff8, 0x100]}}], 0x40}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_SREGS(r3, 0x8000ae83, &(0x7f0000000240)) 6m44.343684619s ago: executing program 34 (id=83): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x8200, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0x5421, 0x6) r1 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, 0xfffffffffffffffe, 0x0, 0xfffffffffffffee9) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x34) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, 0x0) mmap$KVM_VCPU(&(0x7f0000e09000/0x2000)=nil, 0x0, 0x1000008, 0x8010, 0xffffffffffffffff, 0x0) syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r1, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@mrs={0xbe, 0x18, {0x603000000013c643}}], 0x18}, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x8200, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r0, 0x5421, 0x6) (async) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async) syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, 0xfffffffffffffffe, 0x0, 0xfffffffffffffee9) (async) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x34) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000e09000/0x2000)=nil, 0x0, 0x1000008, 0x8010, 0xffffffffffffffff, 0x0) (async) syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) (async) syz_kvm_add_vcpu$arm64(r1, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@mrs={0xbe, 0x18, {0x603000000013c643}}], 0x18}, 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) 6m38.545459038s ago: executing program 35 (id=84): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ARM_VCPU_INIT(0xffffffffffffffff, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000180)=@riscv64_smstateen_csr={0x0, &(0x7f0000000080)=0xd6}) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r2, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x16, 0x4, 0x1}}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r2, r3, &(0x7f0000bfe000/0x400000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f0000000240)=[@hvc={0x32, 0x40, {0x8600ff01, [0x7, 0x9, 0x8, 0xfffffffffffffff8, 0x100]}}], 0x40}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_SREGS(r3, 0x8000ae83, &(0x7f0000000240)) 59.414409632s ago: executing program 4 (id=85): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7) syz_kvm_setup_cpu$arm64(r1, 0xffffffffffffffff, &(0x7f0000bee000/0x400000)=nil, &(0x7f0000000140)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1fe, 0x1, 0x8000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1, 0x16831, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 50.205016089s ago: executing program 5 (id=86): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x8200, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0x5421, 0x6) r1 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, 0xfffffffffffffffe, 0x0, 0xfffffffffffffee9) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, 0x0) syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r1, &(0x7f0000000080)={0x0, &(0x7f0000000000)=[@mrs={0xbe, 0x18, {0x603000000013c643}}], 0x18}, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r6, 0xae03, 0xe4) munmap(&(0x7f0000011000/0xc00000)=nil, 0xc00000) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) munmap(&(0x7f0000d8f000/0x4000)=nil, 0x4000) munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x3000000, 0x4d832, 0xffffffffffffffff, 0x0) 12.416530637s ago: executing program 36 (id=85): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7) syz_kvm_setup_cpu$arm64(r1, 0xffffffffffffffff, &(0x7f0000bee000/0x400000)=nil, &(0x7f0000000140)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1fe, 0x1, 0x8000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1, 0x16831, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 0s ago: executing program 37 (id=86): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x8200, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0x5421, 0x6) r1 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, 0xfffffffffffffffe, 0x0, 0xfffffffffffffee9) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, 0x0) syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r1, &(0x7f0000000080)={0x0, &(0x7f0000000000)=[@mrs={0xbe, 0x18, {0x603000000013c643}}], 0x18}, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r6, 0xae03, 0xe4) munmap(&(0x7f0000011000/0xc00000)=nil, 0xc00000) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) munmap(&(0x7f0000d8f000/0x4000)=nil, 0x4000) munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x3000000, 0x4d832, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): [ 361.041023][ T24] audit: type=1400 audit(360.220:75): avc: denied { write } for pid=3254 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=138 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 364.798351][ T24] audit: type=1400 audit(363.980:76): avc: denied { write } for pid=3258 comm="rm" name="hook-state" dev="tmpfs" ino=138 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 367.464133][ T3205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.835098][ T24] audit: type=1400 audit(374.000:77): avc: denied { write } for pid=3265 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=138 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 379.066645][ T24] audit: type=1400 audit(378.250:78): avc: denied { write } for pid=3268 comm="rm" name="hook-state" dev="tmpfs" ino=138 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 388.301217][ T24] audit: type=1400 audit(387.480:79): avc: denied { write } for pid=3272 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=138 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 393.511187][ T24] audit: type=1400 audit(392.680:80): avc: denied { write } for pid=3275 comm="rm" name="hook-state" dev="tmpfs" ino=138 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 406.251236][ T24] audit: type=1400 audit(405.430:81): avc: denied { write } for pid=3281 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=138 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 410.205326][ T24] audit: type=1400 audit(409.390:82): avc: denied { write } for pid=3284 comm="rm" name="hook-state" dev="tmpfs" ino=138 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 412.648313][ T3205] eql: remember to turn off Van-Jacobson compression on your slave devices [ 420.295626][ T24] audit: type=1400 audit(419.450:83): avc: denied { write } for pid=3289 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=138 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 423.963547][ T24] audit: type=1400 audit(423.150:84): avc: denied { write } for pid=3292 comm="rm" name="hook-state" dev="tmpfs" ino=138 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 433.555430][ T24] audit: type=1400 audit(432.740:85): avc: denied { write } for pid=3296 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=138 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 437.300183][ T24] audit: type=1400 audit(436.480:86): avc: denied { write } for pid=3299 comm="rm" name="hook-state" dev="tmpfs" ino=138 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 447.260047][ T24] audit: type=1400 audit(446.430:87): avc: denied { write } for pid=3303 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=138 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 452.241460][ T24] audit: type=1400 audit(451.420:88): avc: denied { write } for pid=3306 comm="rm" name="hook-state" dev="tmpfs" ino=138 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 463.624541][ T24] audit: type=1400 audit(462.810:89): avc: denied { write } for pid=3311 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=138 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 467.420773][ T24] audit: type=1400 audit(466.600:90): avc: denied { write } for pid=3314 comm="rm" name="hook-state" dev="tmpfs" ino=138 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 476.844731][ T24] audit: type=1400 audit(476.030:91): avc: denied { write } for pid=3318 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=138 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 480.590370][ T24] audit: type=1400 audit(479.740:92): avc: denied { write } for pid=3321 comm="rm" name="hook-state" dev="tmpfs" ino=138 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 485.910017][ T24] audit: type=1400 audit(485.090:93): avc: denied { write } for pid=3323 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=138 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 489.821283][ T24] audit: type=1400 audit(489.000:94): avc: denied { write } for pid=3326 comm="rm" name="hook-state" dev="tmpfs" ino=138 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 507.131661][ T24] audit: type=1400 audit(506.310:95): avc: denied { write } for pid=3334 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=138 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 512.021349][ T24] audit: type=1400 audit(511.200:96): avc: denied { write } for pid=3337 comm="rm" name="hook-state" dev="tmpfs" ino=138 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 536.564987][ T24] audit: type=1400 audit(535.750:97): avc: denied { write } for pid=3347 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=138 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 540.301863][ T24] audit: type=1400 audit(539.470:98): avc: denied { write } for pid=3350 comm="rm" name="hook-state" dev="tmpfs" ino=138 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 546.190385][ T24] audit: type=1400 audit(545.370:99): avc: denied { write } for pid=3353 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=138 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 549.898418][ T24] audit: type=1400 audit(549.080:100): avc: denied { write } for pid=3356 comm="rm" name="hook-state" dev="tmpfs" ino=138 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:19215' (ED25519) to the list of known hosts. [ 581.276344][ T24] audit: type=1400 audit(580.460:101): avc: denied { name_bind } for pid=3361 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 582.105794][ T24] audit: type=1400 audit(581.290:102): avc: denied { execute } for pid=3362 comm="sh" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 582.125446][ T24] audit: type=1400 audit(581.310:103): avc: denied { execute_no_trans } for pid=3362 comm="sh" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 606.192631][ T24] audit: type=1400 audit(605.380:104): avc: denied { mounton } for pid=3362 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 606.233712][ T24] audit: type=1400 audit(605.420:105): avc: denied { mount } for pid=3362 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 606.320245][ T3362] cgroup: Unknown subsys name 'net' [ 606.376073][ T24] audit: type=1400 audit(605.560:106): avc: denied { unmount } for pid=3362 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 606.788381][ T3362] cgroup: Unknown subsys name 'cpuset' [ 606.905556][ T3362] cgroup: Unknown subsys name 'rlimit' [ 607.784388][ T24] audit: type=1400 audit(606.960:107): avc: denied { setattr } for pid=3362 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 607.807817][ T24] audit: type=1400 audit(606.990:108): avc: denied { mounton } for pid=3362 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 607.833174][ T24] audit: type=1400 audit(607.010:109): avc: denied { mount } for pid=3362 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 608.822280][ T3365] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 608.850863][ T24] audit: type=1400 audit(608.020:110): avc: denied { relabelto } for pid=3365 comm="mkswap" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 608.866986][ T24] audit: type=1400 audit(608.030:111): avc: denied { write } for pid=3365 comm="mkswap" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 609.054996][ T24] audit: type=1400 audit(608.230:112): avc: denied { read } for pid=3362 comm="syz-executor" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 609.075256][ T24] audit: type=1400 audit(608.250:113): avc: denied { open } for pid=3362 comm="syz-executor" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 609.125340][ T3362] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 667.604377][ T24] audit: type=1400 audit(666.790:114): avc: denied { execmem } for pid=3366 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 671.333620][ T24] audit: type=1400 audit(670.520:115): avc: denied { read } for pid=3368 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 671.362654][ T24] audit: type=1400 audit(670.530:116): avc: denied { open } for pid=3369 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 671.421307][ T24] audit: type=1400 audit(670.600:117): avc: denied { mounton } for pid=3368 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 671.649626][ T24] audit: type=1400 audit(670.830:118): avc: denied { module_request } for pid=3369 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 671.695527][ T24] audit: type=1400 audit(670.870:119): avc: denied { module_request } for pid=3368 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 672.665164][ T24] audit: type=1400 audit(671.820:120): avc: denied { sys_module } for pid=3368 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 696.326514][ T3369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 696.981630][ T3369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 697.078272][ T3368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 697.552471][ T3368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 709.791381][ T3369] hsr_slave_0: entered promiscuous mode [ 709.817730][ T3369] hsr_slave_1: entered promiscuous mode [ 710.716495][ T3368] hsr_slave_0: entered promiscuous mode [ 710.755846][ T3368] hsr_slave_1: entered promiscuous mode [ 710.785257][ T3368] debugfs: 'hsr0' already exists in 'hsr' [ 710.790644][ T3368] Cannot create hsr debugfs directory [ 716.336840][ T24] audit: type=1400 audit(715.520:121): avc: denied { create } for pid=3369 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 716.371991][ T24] audit: type=1400 audit(715.550:122): avc: denied { write } for pid=3369 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 716.422162][ T24] audit: type=1400 audit(715.590:123): avc: denied { read } for pid=3369 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 716.576166][ T3369] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 716.733177][ T3369] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 716.804497][ T3369] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 716.974196][ T3369] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 717.063454][ T3369] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 717.209709][ T3369] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 717.395701][ T3369] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 717.466751][ T3369] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 718.944511][ T3368] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 719.069703][ T3368] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 719.122959][ T3368] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 719.254478][ T3368] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 719.327344][ T3368] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 719.424233][ T3368] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 719.506531][ T3368] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 719.642451][ T3368] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 730.765795][ T3369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 733.226694][ T3368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 783.911808][ T3369] veth0_vlan: entered promiscuous mode [ 784.345654][ T3369] veth1_vlan: entered promiscuous mode [ 785.902171][ T3368] veth0_vlan: entered promiscuous mode [ 786.677623][ T3368] veth1_vlan: entered promiscuous mode [ 786.794751][ T3369] veth0_macvtap: entered promiscuous mode [ 787.372676][ T3369] veth1_macvtap: entered promiscuous mode [ 789.478293][ T3368] veth0_macvtap: entered promiscuous mode [ 789.700917][ T21] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.733056][ T21] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.845557][ T21] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.854140][ T21] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.063086][ T3368] veth1_macvtap: entered promiscuous mode [ 792.309894][ T24] audit: type=1400 audit(791.480:124): avc: denied { mount } for pid=3369 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 792.605174][ T24] audit: type=1400 audit(791.780:125): avc: denied { mounton } for pid=3369 comm="syz-executor" path="/syzkaller.c8OGNx/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 792.794622][ T24] audit: type=1400 audit(791.980:126): avc: denied { mount } for pid=3369 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 793.062968][ T24] audit: type=1400 audit(792.220:127): avc: denied { mounton } for pid=3369 comm="syz-executor" path="/syzkaller.c8OGNx/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 793.120537][ T30] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.124416][ T30] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.151455][ T30] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.165139][ T30] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.228168][ T24] audit: type=1400 audit(792.410:128): avc: denied { mounton } for pid=3369 comm="syz-executor" path="/syzkaller.c8OGNx/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 793.830252][ T24] audit: type=1400 audit(793.000:129): avc: denied { unmount } for pid=3369 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 794.077945][ T24] audit: type=1400 audit(793.260:130): avc: denied { mounton } for pid=3369 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1548 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 794.178411][ T24] audit: type=1400 audit(793.360:131): avc: denied { mount } for pid=3369 comm="syz-executor" name="/" dev="gadgetfs" ino=3733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 794.630862][ T24] audit: type=1400 audit(793.790:132): avc: denied { mount } for pid=3369 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 794.757895][ T24] audit: type=1400 audit(793.910:133): avc: denied { mounton } for pid=3369 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 796.143701][ T3369] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 805.953765][ T24] kauditd_printk_skb: 4 callbacks suppressed [ 805.962402][ T24] audit: type=1400 audit(805.140:138): avc: denied { read } for pid=3519 comm="syz.1.2" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 806.021608][ T24] audit: type=1400 audit(805.200:139): avc: denied { open } for pid=3519 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 806.181141][ T24] audit: type=1400 audit(805.360:140): avc: denied { ioctl } for pid=3519 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 828.581252][ T24] audit: type=1400 audit(827.750:141): avc: denied { write } for pid=3536 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=138 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 828.610383][ T24] audit: type=1400 audit(827.790:142): avc: denied { create } for pid=3536 comm="dhcpcd-run-hook" name="resolv.conf.eth0.ra" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 828.719490][ T24] audit: type=1400 audit(827.880:143): avc: denied { write open } for pid=3536 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth0.ra" dev="tmpfs" ino=990 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 828.823222][ T24] audit: type=1400 audit(827.930:144): avc: denied { append } for pid=3536 comm="dhcpcd-run-hook" name="resolv.conf.eth0.ra" dev="tmpfs" ino=990 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 829.080270][ T24] audit: type=1400 audit(828.260:145): avc: denied { getattr } for pid=3536 comm="dhcpcd-run-hook" path="/tmp/resolv.conf" dev="tmpfs" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 833.371133][ T24] audit: type=1400 audit(832.510:146): avc: denied { read } for pid=3539 comm="cmp" name="resolv.conf" dev="tmpfs" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 836.207772][ T24] audit: type=1400 audit(835.380:147): avc: denied { write } for pid=3541 comm="syz.1.6" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 837.918069][ T24] audit: type=1400 audit(837.100:148): avc: denied { write } for pid=3543 comm="rm" name="hook-state" dev="tmpfs" ino=138 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 837.963440][ T24] audit: type=1400 audit(837.130:149): avc: denied { unlink } for pid=3543 comm="rm" name="resolv.conf.eth0.ra" dev="tmpfs" ino=990 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 846.925276][ T24] audit: type=1400 audit(846.110:150): avc: denied { execute } for pid=3551 comm="syz.0.7" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=4181 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 898.635270][ T3574] kvm [3573]: Unsupported guest access at: eeef0000 [ 898.635270][ T3574] { Op0( 2), Op1( 0), CRn( 0), CRm( 6), Op2( 2), func_read }, [ 916.918277][ T3585] kvm [3584]: Unsupported guest access at: eeef0000 [ 916.918277][ T3585] { Op0( 2), Op1( 3), CRn(11), CRm(11), Op2( 4), func_write }, [ 919.515069][ T24] audit: type=1400 audit(918.700:151): avc: denied { ioctl } for pid=3587 comm="syz.0.19" path="net:[4026532627]" dev="nsfs" ino=4026532627 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 926.761377][ T24] audit: type=1400 audit(925.940:152): avc: denied { append } for pid=3592 comm="syz.1.20" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 969.703556][ T24] audit: type=1400 audit(968.880:153): avc: denied { execute } for pid=3613 comm="syz.0.27" path=2F31332F10FBFF67525673312B0104 dev="tmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1062.714471][ T3625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1063.083218][ T3625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1084.328026][ T3635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1084.555513][ T3635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1088.752493][ T3625] hsr_slave_0: entered promiscuous mode [ 1088.844536][ T3625] hsr_slave_1: entered promiscuous mode [ 1088.923330][ T3625] debugfs: 'hsr0' already exists in 'hsr' [ 1088.929997][ T3625] Cannot create hsr debugfs directory [ 1102.897177][ T3625] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1103.187742][ T3625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1103.275146][ T3625] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1103.492565][ T3625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1103.602541][ T3625] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1103.772095][ T3625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1103.847128][ T3625] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1104.095110][ T3625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1109.498448][ T3635] hsr_slave_0: entered promiscuous mode [ 1109.642647][ T3635] hsr_slave_1: entered promiscuous mode [ 1109.803810][ T3635] debugfs: 'hsr0' already exists in 'hsr' [ 1109.816044][ T3635] Cannot create hsr debugfs directory [ 1127.743494][ T3505] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.556568][ T3505] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.171947][ T3505] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.620104][ T3505] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1135.816303][ T3635] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1136.058607][ T3635] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1136.291033][ T3635] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1136.603872][ T3635] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1137.307051][ T3635] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1137.564253][ T3635] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1138.382943][ T3635] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1138.685852][ T3635] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1147.221047][ T3505] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1147.336773][ T3505] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1147.423907][ T3505] bond0 (unregistering): Released all slaves [ 1149.013061][ T3505] hsr_slave_0: left promiscuous mode [ 1149.153625][ T3505] hsr_slave_1: left promiscuous mode [ 1149.511034][ T3505] veth1_macvtap: left promiscuous mode [ 1149.515210][ T3505] veth0_macvtap: left promiscuous mode [ 1149.564147][ T3505] veth1_vlan: left promiscuous mode [ 1149.592990][ T3505] veth0_vlan: left promiscuous mode [ 1166.528260][ T3625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1169.572537][ T3505] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1171.066354][ T3505] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1172.324331][ T3505] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1173.862797][ T3505] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1181.071907][ T24] audit: type=1400 audit(1180.250:154): avc: denied { write } for pid=3726 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=138 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1189.755147][ T24] audit: type=1400 audit(1188.940:155): avc: denied { write } for pid=3737 comm="rm" name="hook-state" dev="tmpfs" ino=138 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1193.505192][ T3505] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1194.242560][ T3505] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1194.482905][ T3505] bond0 (unregistering): Released all slaves [ 1195.387742][ T3205] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1196.316401][ T3505] hsr_slave_0: left promiscuous mode [ 1196.404093][ T3505] hsr_slave_1: left promiscuous mode [ 1196.750864][ T3505] veth1_macvtap: left promiscuous mode [ 1196.754076][ T3505] veth0_macvtap: left promiscuous mode [ 1196.771071][ T3505] veth1_vlan: left promiscuous mode [ 1196.784046][ T3505] veth0_vlan: left promiscuous mode [ 1218.080792][ T3635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1223.995273][ T24] audit: type=1400 audit(1223.180:156): avc: denied { write } for pid=3745 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=138 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1229.654397][ T24] audit: type=1400 audit(1228.840:157): avc: denied { write } for pid=3754 comm="rm" name="hook-state" dev="tmpfs" ino=138 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1233.635438][ T3205] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1247.972388][ T24] audit: type=1400 audit(1247.130:158): avc: denied { write } for pid=3768 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=138 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1255.681874][ T24] audit: type=1400 audit(1254.800:159): avc: denied { write } for pid=3777 comm="rm" name="hook-state" dev="tmpfs" ino=138 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1260.796951][ T3205] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1273.040424][ T24] audit: type=1400 audit(1272.200:160): avc: denied { write } for pid=3793 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=138 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1279.393385][ T3625] veth0_vlan: entered promiscuous mode [ 1279.572253][ T24] audit: type=1400 audit(1278.680:161): avc: denied { write } for pid=3803 comm="rm" name="hook-state" dev="tmpfs" ino=138 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1280.115129][ T3625] veth1_vlan: entered promiscuous mode [ 1283.284528][ T3625] veth0_macvtap: entered promiscuous mode [ 1283.866680][ T3205] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1283.963311][ T3625] veth1_macvtap: entered promiscuous mode [ 1286.805018][ T30] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1286.823535][ T30] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1286.861651][ T30] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1286.868491][ T30] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1290.241282][ T24] audit: type=1400 audit(1289.420:162): avc: denied { unmount } for pid=3625 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1290.860739][ T24] audit: type=1400 audit(1289.970:163): avc: denied { write } for pid=3807 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=138 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1298.750303][ T24] audit: type=1400 audit(1297.880:164): avc: denied { write } for pid=3815 comm="rm" name="hook-state" dev="tmpfs" ino=138 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1304.546550][ T3635] veth0_vlan: entered promiscuous mode [ 1305.883210][ T3635] veth1_vlan: entered promiscuous mode [ 1309.552586][ T3635] veth0_macvtap: entered promiscuous mode [ 1309.998411][ T3635] veth1_macvtap: entered promiscuous mode [ 1313.825383][ T3718] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1313.897467][ T30] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1313.914054][ T30] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1313.948472][ T30] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1325.971379][ T24] audit: type=1400 audit(1325.140:165): avc: denied { write } for pid=3829 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=138 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1336.074380][ T24] audit: type=1400 audit(1335.250:166): avc: denied { write } for pid=3838 comm="rm" name="hook-state" dev="tmpfs" ino=138 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1341.576166][ T24] audit: type=1400 audit(1340.760:167): avc: denied { setattr } for pid=3842 comm="syz.3.35" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1341.896884][ T3205] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1359.722229][ T24] audit: type=1400 audit(1358.860:168): avc: denied { write } for pid=3853 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=138 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1370.342246][ T24] audit: type=1400 audit(1369.510:169): avc: denied { write } for pid=3861 comm="rm" name="hook-state" dev="tmpfs" ino=138 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1377.826166][ T3205] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1397.852705][ T24] audit: type=1400 audit(1397.020:170): avc: denied { write } for pid=3877 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=138 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1407.340630][ T24] audit: type=1400 audit(1406.480:171): avc: denied { write } for pid=3887 comm="rm" name="hook-state" dev="tmpfs" ino=138 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1413.612616][ T3205] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1441.493947][ T24] audit: type=1400 audit(1440.670:172): avc: denied { write } for pid=3903 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=138 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1452.531782][ T24] audit: type=1400 audit(1451.690:173): avc: denied { write } for pid=3913 comm="rm" name="hook-state" dev="tmpfs" ino=138 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1458.903421][ T3205] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1500.090482][ T24] audit: type=1400 audit(1499.260:174): avc: denied { write } for pid=3949 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=138 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1511.182115][ T24] audit: type=1400 audit(1510.350:175): avc: denied { write } for pid=3958 comm="rm" name="hook-state" dev="tmpfs" ino=138 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1538.292035][ T24] audit: type=1400 audit(1537.450:176): avc: denied { write } for pid=3978 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=138 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1548.211820][ T24] audit: type=1400 audit(1547.380:177): avc: denied { write } for pid=3989 comm="rm" name="hook-state" dev="tmpfs" ino=138 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1563.885596][ T24] audit: type=1400 audit(1562.950:178): avc: denied { map } for pid=3996 comm="syz.2.66" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1563.980639][ T24] audit: type=1400 audit(1563.070:179): avc: denied { execute } for pid=3996 comm="syz.2.66" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1572.650486][ T24] audit: type=1400 audit(1571.800:180): avc: denied { write } for pid=4001 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=138 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1582.264921][ T24] audit: type=1400 audit(1581.420:181): avc: denied { write } for pid=4009 comm="rm" name="hook-state" dev="tmpfs" ino=138 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1607.936690][ T24] audit: type=1400 audit(1607.110:182): avc: denied { write } for pid=4022 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=138 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1619.285522][ T24] audit: type=1400 audit(1618.470:183): avc: denied { write } for pid=4036 comm="rm" name="hook-state" dev="tmpfs" ino=138 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1646.825495][ T24] audit: type=1400 audit(1646.000:184): avc: denied { write } for pid=4051 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=138 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1656.470042][ T24] audit: type=1400 audit(1655.640:185): avc: denied { write } for pid=4061 comm="rm" name="hook-state" dev="tmpfs" ino=138 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1689.780315][ T24] audit: type=1400 audit(1688.930:186): avc: denied { write } for pid=4079 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=138 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1700.132807][ T24] audit: type=1400 audit(1699.300:187): avc: denied { write } for pid=4089 comm="rm" name="hook-state" dev="tmpfs" ino=138 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1712.186469][ T24] audit: type=1400 audit(1711.370:188): avc: denied { write } for pid=4096 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=138 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1716.331032][ T24] audit: type=1400 audit(1715.500:189): avc: denied { write } for pid=4099 comm="rm" name="hook-state" dev="tmpfs" ino=138 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1728.002556][ T24] audit: type=1400 audit(1727.180:190): avc: denied { write } for pid=4103 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=138 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1734.023051][ T24] audit: type=1400 audit(1733.160:191): avc: denied { write } for pid=4106 comm="rm" name="hook-state" dev="tmpfs" ino=138 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1748.351282][ T24] audit: type=1400 audit(1747.530:192): avc: denied { write } for pid=4111 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=138 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1754.612640][ T24] audit: type=1400 audit(1753.730:193): avc: denied { write } for pid=4114 comm="rm" name="hook-state" dev="tmpfs" ino=138 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1823.567389][ T4115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1823.796712][ T4115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1827.102201][ T4118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1827.416705][ T4118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1853.265361][ T4115] hsr_slave_0: entered promiscuous mode [ 1853.354810][ T4115] hsr_slave_1: entered promiscuous mode [ 1858.277419][ T4118] hsr_slave_0: entered promiscuous mode [ 1858.393400][ T4118] hsr_slave_1: entered promiscuous mode [ 1858.426826][ T4118] debugfs: 'hsr0' already exists in 'hsr' [ 1858.471430][ T4118] Cannot create hsr debugfs directory [ 1875.404872][ T4115] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1875.905317][ T4115] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1876.124853][ T4115] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1876.676278][ T4115] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1876.927744][ T4115] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1877.346396][ T4115] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1878.292277][ T4115] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1878.624671][ T4115] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1882.872162][ T4118] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1883.306636][ T4118] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1883.434608][ T4118] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1883.985162][ T4118] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1884.093823][ T4118] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1884.418562][ T4118] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1884.544428][ T4118] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1885.103099][ T4118] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1910.137179][ T4115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1917.747731][ T4118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2043.342981][ T24] audit: type=1400 audit(2042.420:194): avc: denied { write } for pid=4272 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=138 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2055.225887][ T4115] veth0_vlan: entered promiscuous mode [ 2055.761666][ T24] audit: type=1400 audit(2054.930:195): avc: denied { write } for pid=4282 comm="rm" name="hook-state" dev="tmpfs" ino=138 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2057.088244][ T4115] veth1_vlan: entered promiscuous mode [ 2061.257135][ T4115] veth0_macvtap: entered promiscuous mode [ 2062.555271][ T4115] veth1_macvtap: entered promiscuous mode [ 2065.181392][ T4118] veth0_vlan: entered promiscuous mode [ 2067.072130][ T4118] veth1_vlan: entered promiscuous mode [ 2069.003856][ T3719] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2069.007988][ T3719] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2069.102465][ T3719] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2069.132139][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2073.722407][ T4118] veth0_macvtap: entered promiscuous mode [ 2074.638425][ T4118] veth1_macvtap: entered promiscuous mode [ 2078.963125][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2078.994466][ T3505] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2079.112475][ T40] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2079.123206][ T40] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2141.466985][ T26] INFO: task syz.3.84:4088 blocked for more than 430 seconds. [ 2141.493205][ T26] Not tainted syzkaller #0 [ 2141.514234][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2141.525232][ T26] task:syz.3.84 state:D stack:0 pid:4088 tgid:4088 ppid:3635 task_flags:0x400040 flags:0x00000011 [ 2141.573983][ T26] Call trace: [ 2141.590194][ T26] __switch_to+0x5e0/0xb70 (T) [ 2141.614025][ T26] __schedule+0x2554/0x3828 [ 2141.633941][ T26] schedule+0xac/0x278 [ 2141.661050][ T26] schedule_timeout+0x68/0x1ec [ 2141.674776][ T26] do_wait_for_common+0x270/0x428 [ 2141.694040][ T26] wait_for_completion+0x44/0x5c [ 2141.695054][ T26] __synchronize_srcu+0x1b4/0x1f4 [ 2141.695648][ T26] synchronize_srcu+0x668/0x8dc [ 2141.696183][ T26] mmu_notifier_unregister+0x320/0x428 [ 2141.696667][ T26] kvm_put_kvm+0x69c/0xbbc [ 2141.697108][ T26] kvm_vm_release+0x58/0x78 [ 2141.697559][ T26] __fput+0x4ac/0x978 [ 2141.698512][ T26] ____fput+0x20/0x30 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2141.763967][ T26] task_work_run+0x1b8/0x250 [ 2141.765124][ T26] exit_to_user_mode_loop+0x110/0x188 [ 2141.765690][ T26] el0_svc+0x184/0x238 [ 2141.766221][ T26] el0t_64_sync_handler+0x84/0x12c [ 2141.766693][ T26] el0t_64_sync+0x198/0x19c [ 2141.768373][ T26] [ 2141.768373][ T26] Showing all locks held in the system: [ 2141.848576][ T26] 1 lock held by khungtaskd/26: [ 2141.861322][ T26] #0: ffff800087db4518 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire+0x0/0x44 [ 2141.864158][ T26] 2 locks held by getty/3236: [ 2141.864559][ T26] #0: a8f000001276e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 2141.866862][ T26] #1: 90ff80008cb4b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x314/0x1214 [ 2141.868542][ T26] 2 locks held by syz-executor/3362: [ 2141.950252][ T26] 3 locks held by kworker/u4:8/3505: [ 2141.950733][ T26] 3 locks held by kworker/u4:9/3718: [ 2141.951084][ T26] 3 locks held by kworker/u4:10/3719: [ 2141.951421][ T26] 2 locks held by syz.2.83/4090: [ 2141.951742][ T26] 2 locks held by kworker/u4:1/4139: [ 2141.952057][ T26] #0: 3df000000d036540 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_one_work+0x804/0x1d5c [ 2141.954048][ T26] #1: ffff80008f617cb8 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x890/0x1d5c [ 2141.955704][ T26] 3 locks held by kworker/u4:7/4202: [ 2141.956042][ T26] 1 lock held by syz-executor/4296: [ 2141.956368][ T26] 2 locks held by modprobe/4297: [ 2141.956791][ T26] [ 2141.957057][ T26] ============================================= [ 2141.957057][ T26] [ 2141.958018][ T26] Kernel panic - not syncing: hung_task: blocked tasks [ 2141.973195][ T26] CPU: 0 UID: 0 PID: 26 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT [ 2141.974918][ T26] Hardware name: linux,dummy-virt (DT) [ 2141.976079][ T26] Call trace: [ 2141.976939][ T26] show_stack+0x2c/0x3c (C) [ 2141.978132][ T26] __dump_stack+0x30/0x40 [ 2141.979255][ T26] dump_stack_lvl+0x30/0x12c [ 2141.980389][ T26] dump_stack+0x1c/0x28 [ 2141.981449][ T26] vpanic+0x4cc/0x844 [ 2141.982411][ T26] vpanic+0x0/0x844 [ 2141.983353][ T26] hung_task_panic+0x0/0x2c [ 2141.984511][ T26] kthread+0x4d4/0x51c [ 2141.985431][ T26] ret_from_fork+0x10/0x20 [ 2141.987484][ T26] Kernel Offset: disabled [ 2141.988341][ T26] CPU features: 0x00000000,0034600b,f7c647a1,057ffe1f [ 2141.989643][ T26] Memory Limit: none [ 2141.992041][ T26] Rebooting in 86400 seconds..