last executing test programs: 1h14m15.370635922s ago: executing program 32 (id=93): munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) r0 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x3, 0x2}}, @its_send_cmd={0xaa, 0x28, {0x4, 0x1, 0x80000, 0xfffc, 0x0, 0x8, 0x2}}], 0x50}, 0x0, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x2, 0x1, &(0x7f0000000000)=0x1100000000000000}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, r0, 0x0, 0x1010, r4, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0x80111500, 0x20000000) r9 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r9, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32) ioctl$KVM_CLEAR_DIRTY_LOG(r8, 0xc018aec0, &(0x7f0000000540)={0x2710, 0x1c0, 0xc0, &(0x7f0000000140)=[0x0, 0x800, 0x8, 0x7, 0x80000000, 0xfffffffffffffff9, 0x6, 0x5545, 0xa, 0x0, 0x9, 0x6, 0x171e, 0x18, 0x3, 0x8001, 0xfffffffffffffffa, 0x5f, 0x7, 0x5, 0x8000, 0x3400, 0x4, 0x1c000, 0x0, 0x9, 0xc6d4, 0xfffffffffffffffe, 0x7fff800000, 0xa52, 0x9, 0x913, 0xfffffffffffffffb, 0x800, 0x4, 0xc, 0x800, 0x8, 0x5, 0x8, 0x8c, 0x1, 0x0, 0x2ef9, 0x8, 0xfff, 0x9, 0x1d22, 0x2, 0x1, 0x2, 0x0, 0x101, 0x1000, 0x100, 0x8000000000000000, 0x100, 0x4, 0x6, 0xe0ac, 0x1b1, 0xffffffffffffffff, 0x9, 0x8c, 0x6, 0x2, 0x3, 0x6, 0x1ff, 0xd3b9, 0x8, 0xfffffffffffffffb, 0x8e3756c, 0x8, 0x5, 0xff, 0x5, 0x0, 0xe7a, 0x3aab34d1, 0x6, 0xffff, 0x4, 0x0, 0x0, 0xe1, 0x1400000, 0xe8bc, 0xfffffffffffffffc, 0xfffffffffffffffa, 0x0, 0x2, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x910, 0x7, 0x9, 0x4, 0x6, 0x3, 0xfa9, 0x0, 0xc89f, 0x4, 0x9, 0x12, 0x9, 0x2, 0x5, 0xfffffffffffffff7, 0x7, 0x9, 0x7, 0xa, 0x8, 0xb7, 0xbc, 0x54, 0x9ce2, 0x0, 0x9, 0x4, 0xac55, 0x1, 0x6, 0x3, 0x4ed]}) r10 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r10, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32) r11 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r12 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1, 0x16831, 0xffffffffffffffff, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000280), 0xc355c3e12d79c1c2, 0x0) ioctl$KVM_CREATE_VM(r13, 0x8924, 0x110c230020) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) 1h10m5.430447361s ago: executing program 0 (id=123): munmap$KVM_VCPU(0x0, 0x1000000000) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x163800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r3, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000040)=@arm64_fw={0x6030000000140001, &(0x7f0000000000)=0x1ff}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x2041, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) r10 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1b) r11 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r10, 0x3, 0x11, r9, 0x40000) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = syz_kvm_vgic_v3_setup(r13, 0x2, 0x360) ioctl$KVM_SET_DEVICE_ATTR(r14, 0x4018aee1, &(0x7f00000002c0)=@attr_other={0x0, 0xb, 0x4, &(0x7f0000000240)=0x2}) r15 = ioctl$KVM_CREATE_GUEST_MEMFD(r13, 0xc040aed4, &(0x7f0000000080)={0x100000000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r13, 0x40a0ae49, &(0x7f0000000140)={0x2, 0x4, 0xf000, 0x1000, &(0x7f0000e21000/0x1000)=nil, 0x0, r15}) ioctl$KVM_SET_USER_MEMORY_REGION2(r13, 0x40a0ae49, &(0x7f0000000080)={0x1fd, 0x4, 0x8000000, 0x2000, &(0x7f0000ffd000/0x2000)=nil, 0x10000, r15}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r11, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4a85400005a9610fbff67521cf66f8fd22627e7000000f700000000000000f200", 0x0, 0x48) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_ARM_VCPU_INIT(r5, 0x4020aeae, &(0x7f0000000040)={0x5}) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0) 1h9m51.322784092s ago: executing program 0 (id=124): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2e) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000100)=[{0x0, 0x0}], 0x1, 0x0, &(0x7f00000003c0)=[@featur2={0x1, 0x17}], 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x26) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=[@featur2={0x1, 0x2}], 0x1) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000000)=@x86={0x9, 0xe, 0x3, 0x0, 0x1b2, 0x99, 0x6, 0x9, 0x4, 0xa, 0x5, 0x0, 0x0, 0x6, 0x1, 0x11, 0x1, 0x9, 0xfb, '\x00', 0x97, 0x9}) r7 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil) r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[@msr={0x14, 0x20, {0x603000000013df7f, 0x8000}}], 0x20}, &(0x7f0000000280)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r10, 0x4018aee1, &(0x7f00000002c0)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f00000000c0)={0x1, 0x298, 0x1}}) ioctl$KVM_ARM_VCPU_INIT(0xffffffffffffffff, 0x4020aeae, &(0x7f0000000000)={0x5, 0x18}) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)=@arm64_core={0x6030000000100042, &(0x7f0000000000)=0x8013}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x181b03, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r13, 0x800454cf, 0x80000110c230007) 1h9m37.531463938s ago: executing program 2 (id=95): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_kvm_add_vcpu$arm64(0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc9, 0x3}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x10400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4030582b, &(0x7f0000000040)=@attr_other={0x0, 0x0, 0xfffffffffffffff7, 0x0}) 1h9m31.130695975s ago: executing program 2 (id=125): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = eventfd2(0x3, 0x0) write$eventfd(r1, &(0x7f0000000400)=0xfffffffffffffffc, 0x8) write$eventfd(r1, &(0x7f0000000480)=0x8c49, 0x8) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x4}}, @its_send_cmd={0xaa, 0x28, {0xb, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40000005}}], 0x50}, 0x0, 0x0) r5 = syz_kvm_vgic_v3_setup(r2, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x4, 0x0, &(0x7f0000000000)=0x7}) 1h9m28.787227321s ago: executing program 0 (id=126): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3}) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, r3, 0x2000003, 0x2013, r2, 0xff010000) syz_kvm_setup_cpu$arm64(r1, 0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil, &(0x7f0000000940)=[{0x0, &(0x7f0000000700)=[@svc={0x122, 0x40, {0x1, [0x8001, 0x2, 0x8, 0x96, 0x8]}}], 0x40}], 0x1, 0x0, 0x0, 0x0) close(r2) mmap$KVM_VCPU(&(0x7f0000000000/0x4000)=nil, 0x930, 0x4, 0x4f833, 0xffffffffffffffff, 0x0) 1h9m20.538516039s ago: executing program 0 (id=127): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x80001, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x10200, 0x1, 0x100000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013c65e, 0x8000}}], 0x20}, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0x80111500, 0x20000000) r8 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r9 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r8, 0xae04) mmap$KVM_VCPU(&(0x7f0000e5f000/0x3000)=nil, r9, 0x3, 0x13, r7, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r11 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil) r14 = syz_kvm_add_vcpu$arm64(r13, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x2}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x4, 0x80003, 0xa, 0x0, 0x2, 0x2}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r12, 0x1, 0x100) ioctl$KVM_RUN(r14, 0xae80, 0x0) ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r15, 0x4018aee1, &(0x7f00000001c0)=@attr_riscv64=@attr_addr={0x0, 0x1, @aplic, &(0x7f0000000240)=0x5}) r16 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r17 = ioctl$KVM_CREATE_VM(r16, 0xae01, 0x0) r18 = ioctl$KVM_CREATE_VCPU(r17, 0xae41, 0x4) ioctl$KVM_ARM_VCPU_INIT(r18, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) ioctl$KVM_SET_ONE_REG(r18, 0x4010aeac, &(0x7f00000000c0)=@arm64_sys={0x603000000013c4f6}) ioctl$KVM_RUN(r14, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000e00000/0x2000)=nil, r9, 0x3000000, 0x10010, r10, 0x0) 1h9m19.399587387s ago: executing program 2 (id=128): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80403, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x12) r3 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, 0x0) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000140), 0x400, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f00000001c0)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f0000000080)=@attr_other={0x0, 0x8, 0x2, 0xfffffffffffffffe}) r9 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, 0x0) r10 = openat$kvm(0x0, 0x0, 0x400, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x8, 0xf, 0x0, 0x5, 0x9, 0x86, 0x6, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x8, '\x00', 0x1, 0x4000000000807}) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = openat$kvm(0x0, &(0x7f0000000080), 0x40000, 0x0) ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r13, 0xae04) ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r14, &(0x7f00000001c0)=0x3, 0xfdef) ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f00000000c0)={0x3, 0xffffffffffffffff, 0xe396a50af25666a9}) ioctl$KVM_SET_DEVICE_ATTR(r15, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x8, 0x4, &(0x7f0000000180)}) ioctl$KVM_SET_DEVICE_ATTR(r15, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x2, &(0x7f0000000240)}) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f0000000040)=@arm64_core={0x603000000010004c, &(0x7f0000000000)=0x80005}) 1h9m7.038545079s ago: executing program 2 (id=129): mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000e33000/0x1000)=nil, 0x0, 0x80000c, 0x10, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x9000000) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000) munmap(&(0x7f0000482000/0x2000)=nil, 0x2000) munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000) munmap(&(0x7f0000e76000/0x12000)=nil, 0x12000) r0 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) mmap$KVM_VCPU(&(0x7f0000f1a000/0x4000)=nil, r0, 0x1, 0x9032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000fed000/0x3000)=nil, 0x930, 0x0, 0x4030031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000ccc000/0x1000)=nil, 0x930, 0x2000002, 0x12, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) mmap$KVM_VCPU(&(0x7f000064b000/0x4000)=nil, r2, 0x100000d, 0x9032, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0xa, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f00000000c0)=@attr_riscv64=@attr_imsic={0x0, 0x1, 0x40, &(0x7f0000000080)=0x4}) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) 1h9m2.933113774s ago: executing program 0 (id=130): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0x5421, 0x6) r1 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x3}) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0xc1, 0xf, 0x0, 0x5, 0x6, 0x86, 0xfe, 0x0, 0x86, 0xdd, 0x68, 0x0, 0x0, 0x93c, 0x23, 0x3, 0x4, 0x8, '\x00', 0x3, 0x8093}) (async) write$eventfd(r4, &(0x7f00000001c0)=0x3, 0xfdef) (async) syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, 0xfffffffffffffffe, 0x0, 0xfffffffffffffee9) (async) r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_ARM_VCPU_INIT(r9, 0x4020aeae, &(0x7f0000000140)={0x5, 0x8}) (async, rerun: 32) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_SET_ONE_REG(r9, 0x4010aeac, &(0x7f0000000080)=@arm64_sys={0x603000000013f682, &(0x7f0000000000)=0x36a0bd2a}) (async) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0) syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) (async) r10 = syz_kvm_add_vcpu$arm64(r1, &(0x7f0000000080)={0x0, &(0x7f0000000800)=[@mrs={0xbe, 0x18, {0x603000000013dce9}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80e0000, 0xffd0, 0x1ff, 0x7}}], 0x48}, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) 1h8m58.828349188s ago: executing program 2 (id=131): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x27) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x1}}, @memwrite={0x6e, 0x30, @generic={0xeeee8000, 0xe58, 0x2, 0x4}}], 0x58}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_CAP_ARM_SYSTEM_SUSPEND(r1, 0x4068aea3, &(0x7f0000000100)) r5 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r6, 0x4068aea3, &(0x7f0000000340)={0xdf, 0x0, 0x2000}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f000022c000/0x400000)=nil) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000040)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r8, 0x4018aee1, &(0x7f0000000000)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0x20e4586c}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x6, 0x8032, 0xffffffffffffffff, 0x0) ioctl$KVM_SIGNAL_MSI(r6, 0x4020aea5, &(0x7f0000000080)={0x3000, 0x0, 0xca, 0x0, 0xf0000000}) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0) r9 = openat$kvm(0x0, &(0x7f0000000140), 0x101000, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r11, 0x4020aeae, &(0x7f0000000100)={0x5, 0x18}) ioctl$KVM_GET_ONE_REG(r11, 0x4010aeab, &(0x7f0000000000)=@arm64_sve={0x6080000000150300, 0x0}) ioctl$KVM_SET_GUEST_DEBUG_arm64(r11, 0x4208ae9b, &(0x7f0000000240)={0x2, 0x0, {[0x1, 0x6, 0xf69, 0xfffffffffffffffb, 0x2, 0x80, 0x1, 0xfffffffffffffffc, 0xd8, 0x685e0000000, 0x2, 0x3, 0x2, 0x10000, 0x2, 0x2], [0x702, 0x10000, 0x6fad, 0xfffffffffffffff8, 0x0, 0x10001, 0x9, 0x0, 0x9, 0x7, 0x0, 0x8000000000000000, 0x7, 0x6, 0x5, 0xfffffffffffffffe], [0x0, 0x6, 0x10001, 0xb, 0xbb, 0x10000, 0x9, 0x4, 0x7, 0x8, 0x5, 0x80, 0x73af, 0x2, 0xb838, 0x400000000000009], [0xfffffffffffffff8, 0x9, 0x0, 0x2, 0x100000000, 0x2, 0x8, 0xfffffffffffffffc, 0x6, 0x1, 0x8, 0x0, 0x40a, 0xa4, 0xfffffffffffffffd, 0x100000001]}}) 1h8m53.429041411s ago: executing program 0 (id=132): r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$KVM_SET_DEVICE_ATTR_vm(r0, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0xc54e, 0xfffffffffffffff6, &(0x7f0000000000)=0xfffffffffffffff7}) ioctl$KVM_PPC_ALLOCATE_HTAB(r0, 0xc004aea7, &(0x7f0000000080)=0x7) r1 = ioctl$KVM_GET_STATS_FD_vm(r0, 0xaece) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f00000000c0)={0x5, 0x1ff, 0x850}) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x40800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x33) ioctl$KVM_SET_DEVICE_ATTR_vm(r3, 0x4018aee1, &(0x7f0000000180)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x6, 0x2}}) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0xd8882, 0x0) ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7) close(r2) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x35) syz_kvm_setup_cpu$arm64(r1, r0, &(0x7f0000bff000/0x400000)=nil, &(0x7f0000000240)=[{0x0, &(0x7f0000000200)=[@svc={0x122, 0x40, {0x84000012, [0xffffffff8b0c9315, 0x8, 0x4, 0x5, 0x6]}}], 0x40}], 0x1, 0x0, &(0x7f0000000280), 0x1) ioctl$KVM_SET_DEVICE_ATTR_vm(r1, 0x4018aee1, &(0x7f0000000300)=@attr_other={0x0, 0x7, 0x200, &(0x7f00000002c0)=0x1}) ioctl$KVM_CREATE_GUEST_MEMFD(r0, 0xc040aed4, &(0x7f0000000340)={0x0, 0x2}) r5 = ioctl$KVM_GET_STATS_FD_cpu(r1, 0xaece) ioctl$KVM_IRQ_LINE(r5, 0x4008ae61, &(0x7f0000000380)={0x3, 0x3}) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f00000003c0)={r1, 0x0, 0x2, r5}) ioctl$KVM_S390_VCPU_FAULT(r5, 0x4008ae52, &(0x7f0000000400)=0x15c20374) ioctl$KVM_GET_DEVICE_ATTR_vm(r1, 0x4018aee2, &(0x7f0000000480)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000440)={0x69b00, 0x4, 0x1}}) ioctl$KVM_CAP_ARM_USER_IRQ(r4, 0x4068aea3, &(0x7f00000004c0)) close(r1) ioctl$KVM_ARM_SET_COUNTER_OFFSET(r3, 0x4010aeb5, &(0x7f0000000540)={0x8000, 0x66241432}) ioctl$KVM_CAP_ARM_SYSTEM_SUSPEND(r1, 0x4068aea3, &(0x7f0000000580)) ioctl$KVM_IRQ_LINE(r4, 0x4008ae61, &(0x7f0000000600)={0x6, 0xc}) ioctl$KVM_CAP_PTP_KVM(r5, 0x4068aea3, &(0x7f0000000640)) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f00000006c0)={0x1fd, 0x0, &(0x7f0000ec7000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x21) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r6, 0x4010ae74, &(0x7f0000000700)={0x6, 0x0, 0x1}) 1h8m46.89967566s ago: executing program 2 (id=133): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_GET_DEVICE_ATTR(r5, 0x4018aee2, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x1, 0x0}) r6 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil) r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@its_setup={0x82, 0x28, {0x0, 0x1, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x0, 0x5, 0x10, 0x0, 0x20000080, 0x3}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r9, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r12, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r11, 0xae80, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x2, 0x0, &(0x7f0000000000)=0x8}) r14 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0xe0}}, @its_send_cmd={0xaa, 0x28, {0xe, 0x0, 0x2, 0x6, 0x3}}], 0x50}, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x0, 0x1000009, 0x11, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000240)=@arm64={0x2, 0x11, 0x7, '\x00', 0x2c2}) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_RUN(r13, 0xae80, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r15, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r14, 0x4018aee1, &(0x7f0000000000)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0x3}) ioctl$KVM_RUN(r14, 0xae80, 0x0) 1h8m6.910429284s ago: executing program 33 (id=132): r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$KVM_SET_DEVICE_ATTR_vm(r0, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0xc54e, 0xfffffffffffffff6, &(0x7f0000000000)=0xfffffffffffffff7}) ioctl$KVM_PPC_ALLOCATE_HTAB(r0, 0xc004aea7, &(0x7f0000000080)=0x7) r1 = ioctl$KVM_GET_STATS_FD_vm(r0, 0xaece) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f00000000c0)={0x5, 0x1ff, 0x850}) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x40800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x33) ioctl$KVM_SET_DEVICE_ATTR_vm(r3, 0x4018aee1, &(0x7f0000000180)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x6, 0x2}}) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0xd8882, 0x0) ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7) close(r2) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x35) syz_kvm_setup_cpu$arm64(r1, r0, &(0x7f0000bff000/0x400000)=nil, &(0x7f0000000240)=[{0x0, &(0x7f0000000200)=[@svc={0x122, 0x40, {0x84000012, [0xffffffff8b0c9315, 0x8, 0x4, 0x5, 0x6]}}], 0x40}], 0x1, 0x0, &(0x7f0000000280), 0x1) ioctl$KVM_SET_DEVICE_ATTR_vm(r1, 0x4018aee1, &(0x7f0000000300)=@attr_other={0x0, 0x7, 0x200, &(0x7f00000002c0)=0x1}) ioctl$KVM_CREATE_GUEST_MEMFD(r0, 0xc040aed4, &(0x7f0000000340)={0x0, 0x2}) r5 = ioctl$KVM_GET_STATS_FD_cpu(r1, 0xaece) ioctl$KVM_IRQ_LINE(r5, 0x4008ae61, &(0x7f0000000380)={0x3, 0x3}) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f00000003c0)={r1, 0x0, 0x2, r5}) ioctl$KVM_S390_VCPU_FAULT(r5, 0x4008ae52, &(0x7f0000000400)=0x15c20374) ioctl$KVM_GET_DEVICE_ATTR_vm(r1, 0x4018aee2, &(0x7f0000000480)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000440)={0x69b00, 0x4, 0x1}}) ioctl$KVM_CAP_ARM_USER_IRQ(r4, 0x4068aea3, &(0x7f00000004c0)) close(r1) ioctl$KVM_ARM_SET_COUNTER_OFFSET(r3, 0x4010aeb5, &(0x7f0000000540)={0x8000, 0x66241432}) ioctl$KVM_CAP_ARM_SYSTEM_SUSPEND(r1, 0x4068aea3, &(0x7f0000000580)) ioctl$KVM_IRQ_LINE(r4, 0x4008ae61, &(0x7f0000000600)={0x6, 0xc}) ioctl$KVM_CAP_PTP_KVM(r5, 0x4068aea3, &(0x7f0000000640)) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f00000006c0)={0x1fd, 0x0, &(0x7f0000ec7000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x21) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r6, 0x4010ae74, &(0x7f0000000700)={0x6, 0x0, 0x1}) 1h7m55.398701532s ago: executing program 34 (id=133): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_GET_DEVICE_ATTR(r5, 0x4018aee2, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x1, 0x0}) r6 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil) r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@its_setup={0x82, 0x28, {0x0, 0x1, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x0, 0x5, 0x10, 0x0, 0x20000080, 0x3}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r9, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r12, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r11, 0xae80, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x2, 0x0, &(0x7f0000000000)=0x8}) r14 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0xe0}}, @its_send_cmd={0xaa, 0x28, {0xe, 0x0, 0x2, 0x6, 0x3}}], 0x50}, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x0, 0x1000009, 0x11, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000240)=@arm64={0x2, 0x11, 0x7, '\x00', 0x2c2}) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_RUN(r13, 0xae80, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r15, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r14, 0x4018aee1, &(0x7f0000000000)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0x3}) ioctl$KVM_RUN(r14, 0xae80, 0x0) 1h2m29.94427526s ago: executing program 3 (id=141): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, 0x0) 1h2m19.580263082s ago: executing program 3 (id=143): close(0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x25) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0xb, 0x2}) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000001c0)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000380)}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) eventfd2(0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x5, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000001c0)={0x8, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000002c0)=@attr_other={0x0, 0x8, 0x100, &(0x7f0000000300)=0xc000000000000000}) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f00000002c0)=@attr_other={0x0, 0x8, 0x108, &(0x7f0000000000)=0xc000000000000000}) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x4, 0x2, 0x0}) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0x80111500, 0x20000000) close(r9) ioctl$KVM_GET_STATS_FD_vm(r7, 0xaece) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0x80111500, 0x20000000) ioctl$KVM_CREATE_VM(r11, 0x541b, 0x20) ioctl$KVM_IRQFD(r5, 0x4020ae76, 0xffffffffffffffff) 1h2m16.453820955s ago: executing program 4 (id=144): r0 = openat$kvm(0x0, &(0x7f0000000200), 0x640c00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ARM_VCPU_INIT(r4, 0x4020aeae, &(0x7f0000000100)={0x5, 0x12}) ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f00000000c0)=@arm64_sys={0x603000000013e090, &(0x7f00000001c0)=0x4}) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x1, 0x0, [{0x4, 0x2, 0x0, 0x0, @irqchip={0xa416, 0x8}}]}) r5 = eventfd2(0x4, 0x80000) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r5, 0x3, 0x0, r5}) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_kvm_add_vcpu$arm64(0x0, 0x0, 0x0, 0x0) syz_kvm_add_vcpu$arm64(0x0, 0x0, 0x0, 0xffffffffffffff2b) r9 = syz_kvm_vgic_v3_setup(r7, 0x2, 0x100) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_IRQ_LINE(r7, 0x4008ae61, &(0x7f0000000180)={0x1010020, 0x1}) ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f0000000380)={r9, 0x7f, 0x2}) r10 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000c0c000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) r12 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r13, r14, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x20}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r14, 0x4010aeab, &(0x7f0000000100)=@arm64_core={0x603000000010004e, &(0x7f00000000c0)=0x80003fb}) r15 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil) r16 = syz_kvm_add_vcpu$arm64(r15, &(0x7f0000000180)={0x0, &(0x7f00000001c0)}, &(0x7f0000000300)=[@featur1={0x1, 0x92}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r16, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) 1h2m5.278504837s ago: executing program 3 (id=145): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000140)=@x86={0x7, 0x1, 0x7, 0x0, 0x3, 0x0, 0x4, 0x6, 0x2, 0xc8, 0x4, 0x5, 0x0, 0x81, 0xef, 0x3b, 0xb6, 0x6, 0x38, '\x00', 0x80, 0x1}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0xc) r3 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}, 0x0, 0x0) r5 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000340)={0x1a64afb6, 0xe000, 0x4, r5}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)={0x4, 0x10123000, 0xbc, 0x0, 0x2}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x88400, 0x0) ioctl$KVM_GET_API_VERSION(r6, 0xae00, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x3) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000180)={0x6, 0xffffffff, 0x0, r2, 0xa}) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) (async) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000140)=@x86={0x7, 0x1, 0x7, 0x0, 0x3, 0x0, 0x4, 0x6, 0x2, 0xc8, 0x4, 0x5, 0x0, 0x81, 0xef, 0x3b, 0xb6, 0x6, 0x38, '\x00', 0x80, 0x1}) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, 0x0) (async) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0xc) (async) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) (async) syz_kvm_add_vcpu$arm64(r3, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}, 0x0, 0x0) (async) eventfd2(0x0, 0x0) (async) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000340)={0x1a64afb6, 0xe000, 0x4, r5}) (async) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)={0x4, 0x10123000, 0xbc, 0x0, 0x2}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x88400, 0x0) (async) ioctl$KVM_GET_API_VERSION(r6, 0xae00, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x3) (async) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000180)={0x6, 0xffffffff, 0x0, r2, 0xa}) (async) 1h1m58.681840505s ago: executing program 4 (id=146): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x8, 0x5, 0x0, 0x950, 0x2, 0x2, 0x6, 0x1, 0x2, 0x4d, 0x8, 0x0, 0x7, 0x5bd, 0x1, 0xc5, 0xc4, 0x3, '\x00', 0x2, 0x5}) ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000080)={0x5}) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000280)=@arm64_sys={0x603000000013c006, &(0x7f0000000240)=0x2}) 1h1m49.62730996s ago: executing program 3 (id=147): openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xe) write$eventfd(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x8) syz_kvm_setup_syzos_vm$arm64(r0, &(0x7f0000c00000/0x400000)=nil) (async) r1 = syz_kvm_setup_syzos_vm$arm64(r0, &(0x7f0000c00000/0x400000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001640), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xea) (async) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xea) r3 = syz_kvm_add_vcpu$arm64(r1, &(0x7f00000000c0)={0x0, &(0x7f00000002c0)=[@memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x18, 0xff, 0x8}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x1, 0x2, 0x0, 0xfffffffd, 0x1, 0x3}}, @irq_setup={0x46, 0x18, {0x2, 0xc4}}], 0x70}, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x8102, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x2c) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async) r6 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r7, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x1000, 0x2}}) ioctl$KVM_SET_DEVICE_ATTR_vm(r7, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x57fd, 0x2}}) (async) ioctl$KVM_SET_DEVICE_ATTR_vm(r7, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x57fd, 0x2}}) openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) (async) r8 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = syz_kvm_vgic_v3_setup(r9, 0x3, 0xa0) r11 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) (async) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000bff000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r13, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) (async) r14 = syz_kvm_add_vcpu$arm64(r13, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r14, 0x4010aeab, &(0x7f0000000180)=@arm64_extra={0x603000000013c009, &(0x7f0000000200)=0x4}) ioctl$KVM_GET_DEVICE_ATTR(r10, 0x4018aee2, &(0x7f0000000240)=@attr_arm64={0x0, 0x7, 0x3, &(0x7f0000000100)=0x4}) ioctl$KVM_GET_DEVICE_ATTR(r10, 0x4018aee2, &(0x7f0000000280)=@attr_arm64={0x0, 0x5, 0x0, &(0x7f0000000240)=0x2}) ioctl$KVM_SET_USER_MEMORY_REGION2(r5, 0x40a0ae49, &(0x7f0000000040)={0x1fd, 0x4, 0x10000, 0x2000, &(0x7f0000ffe000/0x2000)=nil, 0xfffffffffffff000}) (async) ioctl$KVM_SET_USER_MEMORY_REGION2(r5, 0x40a0ae49, &(0x7f0000000040)={0x1fd, 0x4, 0x10000, 0x2000, &(0x7f0000ffe000/0x2000)=nil, 0xfffffffffffff000}) syz_kvm_vgic_v3_setup(r0, 0x1, 0x100) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vm(r0, 0x4018aee2, &(0x7f0000000180)=@attr_other={0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000040)=0x40}) (async) ioctl$KVM_GET_DEVICE_ATTR_vm(r0, 0x4018aee2, &(0x7f0000000180)=@attr_other={0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000040)=0x40}) ioctl$KVM_GET_STATS_FD_vm(r5, 0xaece) 1h1m47.63707105s ago: executing program 4 (id=148): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x12) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000280)=[@irq_setup={0x46, 0x18, {0x4, 0xf3}}, @memwrite={0x6e, 0x30, @generic={0x50000, 0x423, 0x7}}, @uexit={0x0, 0x18, 0x5d9d}, @its_send_cmd={0xaa, 0x28, {0xe, 0x1, 0x2, 0x6, 0x400, 0xb4, 0x1}}], 0x88}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) r4 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x2}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x4, 0x80003, 0xa, 0x0, 0x2, 0x2}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r7, 0x1, 0x100) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r9, 0xae80, 0x0) r11 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r12, 0x4018aee1, &(0x7f0000000000)=@attr_other={0x0, 0x0, 0x4, &(0x7f0000000240)=0xffffffff}) close(r1) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1h1m31.700505127s ago: executing program 4 (id=149): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0x80111500, 0x20000000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) munmap$KVM_VCPU(0x0, 0x1000000000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x2000001, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x2a) openat$kvm(0x0, 0x0, 0x80000, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f00003af000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f00000000c0)={0x0, &(0x7f0000000280)=[@irq_setup={0x46, 0x18, {0x3, 0x21}}], 0x18}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r5, 0x1, 0x320) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000240)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) munmap(&(0x7f0000011000/0xc00000)=nil, 0xc00000) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f0000000000)=@attr_arm64={0x0, 0x4, 0x0, 0x0}) eventfd2(0x0, 0x0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000000)=0xb) r9 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r10 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r9, 0xae04) mmap$KVM_VCPU(&(0x7f0000e5f000/0x3000)=nil, r10, 0x3, 0x13, r2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1f) r11 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) munmap(&(0x7f0000608000/0x2000)=nil, 0x2000) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r12, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r12, 0x4018aee1, &(0x7f0000000000)=@attr_set_pmu={0x0, 0x0, 0x3, 0xfffffffffffffffe}) 1h1m30.528802993s ago: executing program 3 (id=150): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2f) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000000280)=@attr_irq_timer={0x0, 0x1, 0x1, &(0x7f0000000240)=0x13}) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x18, {"201003d5"}}], 0x18}, 0x0, 0x0) r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) r9 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r8, 0x3, 0x11, r7, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$arm64(r7, r9, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$arm64(r7, r9, 0xaaaa) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$arm64(r7, r9, 0xffffffffffffffff) 1h1m7.369733172s ago: executing program 3 (id=151): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x33) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x19) syz_kvm_setup_cpu$arm64(r2, r3, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000006c0)=[{0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x5d0}], 0x1, 0x0, &(0x7f0000000700)=[@featur2={0x1, 0x20}], 0x1) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x2041, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r8, 0x3, 0x11, r7, 0x40000) r9 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) r13 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r11, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffc000/0x3000)=nil, r13, 0x1, 0x11, r12, 0x0) r14 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r11, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, r14, 0x8, 0x13, r12, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x2000)=nil, r14, 0x1000001, 0x12, r12, 0x0) r15 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r16 = syz_kvm_add_vcpu$arm64(r15, &(0x7f0000000b80)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r16, 0x4010aeac, &(0x7f0000000000)=@arm64_fw={0x6030000000140000, &(0x7f0000000040)=0x5}) 1h1m4.954797034s ago: executing program 4 (id=152): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x88601, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xfffffffffffffffd) syz_kvm_setup_cpu$arm64(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil, &(0x7f0000000280)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000200)={0x3, "e0b52f"}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x8, 0xf, 0x0, 0x5, 0x6, 0x86, 0x6, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x8, '\x00', 0x1, 0x7}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r4, &(0x7f00000001c0), 0xe80) r5 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x2000003, 0x2013, r5, 0x0) close(r5) ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r3, 0x4068aea3, &(0x7f00000000c0)={0xe4, 0x0, 0x100}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000007, 0x23ac5f9b426eccb2, 0xffffffffffffffff, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r7, 0x4008ae6a, &(0x7f00000001c0)={0x3, 0x0, [{0x3, 0x1, 0x0, 0x0, @msi={0x8, 0x3, 0x1, 0x2}}, {0x400, 0x2, 0x0, 0x0, @msi={0x2, 0x3, 0xb, 0x5}}, {0xffff8657, 0x2, 0x2, 0x0, @sint={0xff}}]}) 1h0m52.499479111s ago: executing program 4 (id=153): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0xdddd1000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000000)={0x1, 0x0, &(0x7f0000ffb000/0x3000)=nil}) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r2 = openat$kvm(0x0, &(0x7f0000000140), 0x40002, 0x0) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r3, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000040)={0x5, 0x7ff, 0x2}}) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000180)={0x0, &(0x7f0000000080)=[@hvc={0x32, 0x40, {0x8600ff01, [0x7fffffff, 0x101, 0xfb4, 0x1, 0x8]}}], 0x40}, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x3}) r6 = openat$kvm(0x0, &(0x7f0000000140), 0x400, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f00000000c0)={0x7, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f0000000340)=@attr_arm64={0x0, 0x0, 0x2, &(0x7f0000000240)=0x4}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x9c, 0xf, 0x0, 0x7ff, 0x8, 0x82, 0x46, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x20100001, 0xffc0001, 0x0, 0x3, 0xa, 0x8, '\x00', 0x1, 0x8000093}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4000ae84, 0x0) write$eventfd(r11, &(0x7f00000001c0)=0x3, 0xfdef) 1h0m19.936445297s ago: executing program 35 (id=151): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x33) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x19) syz_kvm_setup_cpu$arm64(r2, r3, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000006c0)=[{0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="be000000000000001800000000000000fbde130000003060aa0000000000000028000000000000000900030000000c000000ff0f000009000000020000000000000000000000000018000000000000006e000000000000006e0000000000000030000000000000000000040000000000390700000000000002000000000000000e00000000000000e60000000000000018000000000000000200000000000000e6000000000000001800000000000000ff7f00000000000000000000000000001800000000000000f9ffffffffffffffe600000000000000180000000000000008000000000000000000000000000000180000000000000009000000000000000000000000000000180000000000000000100000000000006e0000000000000030000000000000000000080800000000f8ff0000000000000600000000000000010000000000000046000000000000001800000000000000020000003b0200008200000000000000280000000000000003000000000000000400000000000000ed010000000000000a000000000000005400000000000000006c200e000028d5604598d200e0b0f2810180d2620080d2230180d2840080d2020000d40000407c0000601f007008d5000028d50000191e000008d500c0251ec0035fd61400000000000000200000000000000090e2130000003060e8c00000000000003200000000000000400000000000000012000084000000008cb9000000000000060000000000000006000000000000000700000000000000fa720000000000004600000000000000180000000000000004000000d30300000000000000000000180000000000000007000000000000000a000000000000009c00000000000000807d96d20040b0f2410180d2420180d2a30180d2c40080d2020000d41f0000f1007008d5007008d5008008d5a0db8cd20020b0f2011580d2220080d2e30080d2440180d2020000d4409985d200a0b8f2e10180d2020180d2030180d2a40080d2020000d4000028d50010601e60579dd20080b8f2010180d2420080d2e30080d2840180d2020000d4c0035fd60a000000000000006c000000000000000000191e000020cb007008d5405f84d20080b0f2610180d2e20180d2a30080d2c40180d2020000d40024c01a0084007f000028d5007008d520e990d20040b0f2c10180d2e20180d2630180d2640180d2020000d4000028d5c0035fd60a00000000000000840000000000000040bc8ad20060b0f2810180d2420080d2830080d2240080d2020000d4008060880004003840b490d200a0b8f2210080d2620180d2030080d2e40080d2020000d4007008d5008008d500e0c00d40f88cd20020b8f2a10180d2220180d2430180d2240080d2020000d40060202e008008d5c0035fd6aa0000000000000028000000000000000101030000000900000004000000020000000100000000008200000000000000280000000000000004000000000000000200000000000000af020000000000002201000000000000400000000000000002000084000000000000008000000000040000000000000000000000000000004000000000000000010000000000000032000000000000004000fe0000000000000200000000000005000000000000005700000000000000c360000000000000950a000000000000030000000000000082000000000000002800000000000000000000000000000002000000000000008b02000000000000e6000000000000001800000000000000010000000000000082000000000000002800000000000000020000000000000003000000000000009a030000000000002201000000000000400000000000000000000031000000000700000000000000ebce0000000000000700000000000000030000000000000005000000000000008200000000000000280000000000000001000000000000000000000000000000d5020000000000001400000000000000200000000000000065e61300000030600101000000000000000000000000000018000000000000000200000000000000"], 0x5d0}], 0x1, 0x0, &(0x7f0000000700)=[@featur2={0x1, 0x20}], 0x1) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x2041, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r8, 0x3, 0x11, r7, 0x40000) r9 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) r13 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r11, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffc000/0x3000)=nil, r13, 0x1, 0x11, r12, 0x0) r14 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r11, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, r14, 0x8, 0x13, r12, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x2000)=nil, r14, 0x1000001, 0x12, r12, 0x0) r15 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r16 = syz_kvm_add_vcpu$arm64(r15, &(0x7f0000000b80)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r16, 0x4010aeac, &(0x7f0000000000)=@arm64_fw={0x6030000000140000, &(0x7f0000000040)=0x5}) 1h0m4.739063873s ago: executing program 36 (id=153): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0xdddd1000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000000)={0x1, 0x0, &(0x7f0000ffb000/0x3000)=nil}) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r2 = openat$kvm(0x0, &(0x7f0000000140), 0x40002, 0x0) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r3, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000040)={0x5, 0x7ff, 0x2}}) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000180)={0x0, &(0x7f0000000080)=[@hvc={0x32, 0x40, {0x8600ff01, [0x7fffffff, 0x101, 0xfb4, 0x1, 0x8]}}], 0x40}, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x3}) r6 = openat$kvm(0x0, &(0x7f0000000140), 0x400, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f00000000c0)={0x7, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f0000000340)=@attr_arm64={0x0, 0x0, 0x2, &(0x7f0000000240)=0x4}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x9c, 0xf, 0x0, 0x7ff, 0x8, 0x82, 0x46, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x20100001, 0xffc0001, 0x0, 0x3, 0xa, 0x8, '\x00', 0x1, 0x8000093}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4000ae84, 0x0) write$eventfd(r11, &(0x7f00000001c0)=0x3, 0xfdef) 34m13.199545056s ago: executing program 5 (id=307): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0x80087601, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x380, 0x0}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x110, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f00000001c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e700", 0x0, 0x48) 34m6.509193043s ago: executing program 6 (id=308): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 32) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (rerun: 32) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r2, r3, &(0x7f0000b74000/0x400000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x40}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$arm64(r2, r3, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000880)=[{0x0, 0x0}], 0x1, 0x0, &(0x7f00000008c0)=[@featur2={0x1, 0x1a}], 0x1) r4 = eventfd2(0x8, 0x80003) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc9, 0x3, r4}) (async, rerun: 32) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (rerun: 32) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0xd, 0x9, 0xb, 0x0, 0x5, 0x6, 0x6, 0x26, 0x48, 0x86, 0xdd, 0x9, 0x0, 0x6, 0x973, 0xe, 0x3, 0x5, 0x0, '\x00', 0x10, 0x6}) (async) write$eventfd(r6, &(0x7f00000001c0)=0x3, 0x50) 33m56.502810798s ago: executing program 6 (id=309): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000140)="c4036005bfa72e776192a7c4a7a70f3427903c3d25b3742abb823cf9e15fec61a5574d27a6f97c66c216af7c7c3e636de4b441d2170edb7788deeeaa2f0280f1cf0e954a56173dbf", 0x0, 0x48) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x2d) r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil) r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) r11 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r13, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee1, 0x0) ioctl$KVM_GET_REG_LIST(r10, 0xc008aeb0, &(0x7f0000000300)) r14 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r14, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) r15 = mmap$KVM_VCPU(&(0x7f0000def000/0x4000)=nil, 0x0, 0x1000002, 0x1010, r2, 0x0) munmap$KVM_VCPU(r15, 0x9) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r14, 0x4018aee1, &(0x7f00000002c0)=@attr_set_pmu={0x0, 0x0, 0x3, &(0x7f00000001c0)=0xff}) r16 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r16, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1000009, 0x16831, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r16, 0x4020ae46, &(0x7f0000000040)={0x1fd, 0x2, 0xffffffff, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000140)={0x80, 0x4}) write$eventfd(0xffffffffffffffff, &(0x7f0000000000)=0xfffffffffffffffe, 0x8) 33m52.312523635s ago: executing program 5 (id=310): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x400401, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x400000000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x300, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000bfd000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000080)={0x0, &(0x7f0000000600)=[@memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x4, 0x4, 0x4}}], 0x30}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 33m38.691087516s ago: executing program 5 (id=311): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) openat$kvm(0x0, 0x0, 0x0, 0x0) (async) ioctl$KVM_ARM_VCPU_INIT(r3, 0x4020aeae, &(0x7f0000000000)={0x5, 0x18}) (async) ioctl$KVM_ARM_VCPU_FINALIZE(r3, 0x4004aec2, &(0x7f0000000180)=0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_ARM_VCPU_INIT(r3, 0x4020aeae, &(0x7f0000000000)={0x5, 0x18}) (async) syz_kvm_vgic_v3_setup(r2, 0x3, 0x180) (async) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000bc4000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) syz_kvm_add_vcpu$arm64(r5, &(0x7f00000001c0)={0x0, &(0x7f0000000300)=[@mrs={0xbe, 0x18, {0x603000000013c522}}, @msr={0x14, 0x20, {0x6662, 0x6}}, @code={0xa, 0x6c, {"40e49fd200e0b8f2c10080d2820080d2e30180d2040080d2020000d4007008d5007008d5000820bc000028d50080009b0018000e008008d580fb99d20080b0f2c10080d2a20180d2c30080d2240180d2020000d40020000f"}}, @its_setup={0x82, 0x28, {0x0, 0x2, 0xe1}}, @msr={0x14, 0x20, {0x603000000013df4e, 0x94}}, @uexit={0x0, 0x18, 0x6bd0}, @svc={0x122, 0x40, {0x84000050, [0x8001, 0x3e, 0x9, 0x100000001, 0xc43d]}}, @uexit={0x0, 0x18, 0x72b}, @eret={0xe6, 0x18}, @smc={0x1e, 0x40, {0x1, [0x3, 0x1, 0x89, 0xc76a, 0x2]}}, @code={0xa, 0xb4, {"007008d50000003d60c984d20020b0f2210080d2e20080d2230180d2040080d2020000d4000008d5e0599fd20040b0f2210080d2820180d2230080d2640180d2020000d4007008d520019ed20020b0f2010180d2020180d2e30080d2a40080d2020000d400b185d20020b8f2610080d2c20180d2030080d2240080d2020000d4000040ade06588d200c0b8f2210080d2c20080d2830180d2e40080d2020000d4"}}, @its_setup={0x82, 0x28, {0x2, 0x0, 0x8e}}, @mrs={0xbe, 0x18, {0x603000000013f600}}, @hvc={0x32, 0x40, {0x8, [0x8, 0x8000000000000001, 0x28, 0x7fffffff, 0x2a2]}}, @svc={0x122, 0x40, {0x84000004, [0x8, 0x100000000, 0x800, 0x0, 0x8af]}}, @smc={0x1e, 0x40, {0x84000011, [0x9, 0x1, 0xe9ae, 0x6, 0x8]}}, @eret={0xe6, 0x18, 0x5}, @smc={0x1e, 0x40, {0x8, [0xa, 0xce, 0xfffffffffffffffb, 0x1, 0x7]}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x0, 0x2, 0xa, 0x28, 0xcfb2}}, @svc={0x122, 0x40, {0xc4000005, [0x5, 0x83c7, 0x3, 0x80000001, 0x3]}}, @eret={0xe6, 0x18, 0x5}, @svc={0x122, 0x40, {0x80, [0x2, 0x6, 0x6, 0xffffffffffff7fff, 0x5]}}, @mrs={0xbe, 0x18, {0x26e3}}, @its_setup={0x82, 0x28, {0x1, 0x1, 0x2ce}}, @code={0xa, 0x84, {"00709f0c007008d5200185d20080b8f2010080d2a20080d2430180d2640080d2020000d4c0e781d20000b0f2c10080d2e20180d2e30180d2440080d2020000d40040e21e0098a12e000008d500c8a10ec0e085d200c0b8f2010180d2220080d2630080d2a40080d2020000d4007008d5"}}, @its_send_cmd={0xaa, 0x28, {0x4, 0x1, 0x2, 0x6, 0xa, 0x9, 0x1}}, @smc={0x1e, 0x40, {0x84000012, [0x6, 0x4, 0x9, 0x2, 0xfd9]}}, @its_setup={0x82, 0x28, {0x3, 0x1, 0x288}}, @irq_setup={0x46, 0x18, {0x3, 0x14}}, @its_send_cmd={0xaa, 0x28, {0x4, 0x0, 0x3, 0x8, 0xf, 0x3, 0x2}}, @uexit={0x0, 0x18, 0x6}, @msr={0x14, 0x20, {0x603000000013c663, 0x5f}}], 0x64c}, 0x0, 0x0) (async) syz_kvm_vgic_v3_setup(r4, 0x2, 0x100) (async) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r4, 0x4018aee1, &(0x7f00000002c0)=@attr_other={0x0, 0x0, 0x62a0, &(0x7f0000000180)=0x10}) (async) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000b80)={0x0, &(0x7f0000000080)=[@hvc={0x32, 0x0, {0x84000001, [0x9, 0x8, 0x5, 0x603c8354, 0x200]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1) (async) ioctl$KVM_IRQ_LINE(r7, 0x4008ae61, &(0x7f0000000000)={0x0, 0x100}) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async) r10 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil) r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@mrs={0xbe, 0x18, {0x603000000013df40}}], 0x18}, &(0x7f0000000100)=[@featur2={0x1, 0x21}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r13, 0x4018aee1, &(0x7f0000000140)=@attr_pmu_init) (async) r14 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r10, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r14, 0x3, 0x11, r13, 0x0) (async) ioctl$KVM_RUN(r13, 0xae80, 0x0) 33m32.728745492s ago: executing program 6 (id=312): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r4, 0x0) mmap$KVM_VCPU(&(0x7f0000e04000/0x2000)=nil, 0x930, 0x1, 0x11, r4, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x0, 0x8, 0x13, r4, 0x0) mmap$KVM_VCPU(&(0x7f0000011000/0x3000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x0, 0x8032, 0xffffffffffffffff, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x380, 0x0}) 33m25.640748647s ago: executing program 5 (id=313): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0x40086602, 0x110e22ffff) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) r4 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f00000001c0)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4}) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x8, 0x100, &(0x7f0000000200)=0x8000000000000000}) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000280)=@attr_arm64={0x0, 0x4, 0x2, 0x0}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_GET_ONE_REG(r9, 0x4010aeab, 0x0) ioctl$KVM_CREATE_VM(r3, 0x400454de, 0x110e22fffb) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r12, 0x400454d0, 0x0) 33m11.189514629s ago: executing program 6 (id=314): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2d) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xc020660b, 0xe1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r5, &(0x7f00000001c0)=0x1, 0x11) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r6, &(0x7f00000001c0)=0x4, 0x4d) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap$KVM_VCPU(0x0, 0x50000, 0x3, 0x11, r7, 0x0) munmap$KVM_VCPU(0x0, 0x200) 33m5.461128776s ago: executing program 5 (id=315): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x21) close(0xffffffffffffffff) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r2, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) (async, rerun: 32) mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0) (rerun: 32) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x31) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) (async) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0xd, 0x9, 0xd, 0x0, 0x2, 0x6, 0x6, 0x6, 0x48, 0x88, 0xf7, 0x9, 0x0, 0x9, 0x6, 0xa, 0x3, 0x8, 0x0, '\x00', 0x10, 0x6}) (async) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r6, &(0x7f00000001c0)=0x8100000001, 0x2d73) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000080)="fb4149dd033be3ac2ca5a22332a70000000000000071b14c94a6ab8031d1dfd90f05000000010000521ce16f8f1f449a7a8356733169d22627e700", 0x0, 0x29) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) (async, rerun: 64) r7 = eventfd2(0x6, 0x800) (rerun: 64) r8 = openat$kvm(0x0, &(0x7f0000000280), 0x40000, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0xea12157bff932e6}) (async) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0x40086602, 0x20000000) (async, rerun: 32) r11 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil) (rerun: 32) syz_kvm_add_vcpu$arm64(r11, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) (async) syz_kvm_vgic_v3_setup(r9, 0x1, 0x100) (async) ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) r13 = eventfd2(0x1, 0x0) ioctl$KVM_IOEVENTFD(r9, 0x4040ae79, &(0x7f0000000100)={0x2, 0x8080000, 0x8, r13}) (async) ioctl$KVM_SET_DEVICE_ATTR(r12, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) (async) ioctl$KVM_IOEVENTFD(r9, 0x4040ae79, &(0x7f00000002c0)={0xcae, 0x1000, 0x0, r7}) 32m56.50380804s ago: executing program 6 (id=316): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) openat$kvm(0x0, &(0x7f0000000080), 0x4000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) munmap$KVM_VCPU(0x0, 0x1000000000) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000040)=@arm64_core={0x6030000000100050, 0x0}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r8, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r9, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r8, 0x0) r10 = eventfd2(0x0, 0x0) close(r10) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) write$eventfd(r10, &(0x7f0000000180)=0x5, 0xfffffde3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013809c, 0x8000}}, @msr={0x14, 0x20, {0x603000000013c081, 0x8000}}], 0x40}, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0xb000, 0x14000, 0x1}) 32m50.258442971s ago: executing program 5 (id=317): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xc0000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0xe623, 0x801) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r5, r6, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r6, 0x4004ae8b, &(0x7f00000000c0)={0x6, "95fd6d9bdb39"}) ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, &(0x7f00000002c0)=@arm64_fw={0x6030000000140002, &(0x7f0000000000)=0x7}) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000140)={r2, 0x10c8, 0x3, r2}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x21) openat$kvm(0xffffffffffffff9c, 0x0, 0x8001, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) r12 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r11, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r12, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r11, 0x0) r13 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r13, 0x40086602, 0x20000000) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r14, 0x400454e2, 0x30) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r15 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x2710, 0x0, 0x41000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) ioctl$KVM_SET_MP_STATE(r15, 0x4004ae99, 0xffffffffffffffff) 32m42.250694158s ago: executing program 6 (id=318): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2280c0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r2, 0x4018aee1, &(0x7f0000000040)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000000)={0x1, 0x2}}) ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000080)={0x5}) r3 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r3, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ce5000/0x1000)=nil, 0x930, 0x6, 0x4102932, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil) ioctl$KVM_GET_ONE_REG(r6, 0x4010aeab, &(0x7f0000000180)=@arm64_sys={0x603000000013d801, &(0x7f0000000000)=0x1}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000280)=@arm64_sys={0x603000000013c006, &(0x7f0000000240)=0x2}) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x7b8) 32m3.491162014s ago: executing program 37 (id=317): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xc0000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0xe623, 0x801) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r5, r6, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r6, 0x4004ae8b, &(0x7f00000000c0)={0x6, "95fd6d9bdb39"}) ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, &(0x7f00000002c0)=@arm64_fw={0x6030000000140002, &(0x7f0000000000)=0x7}) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000140)={r2, 0x10c8, 0x3, r2}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x21) openat$kvm(0xffffffffffffff9c, 0x0, 0x8001, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) r12 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r11, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r12, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r11, 0x0) r13 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r13, 0x40086602, 0x20000000) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r14, 0x400454e2, 0x30) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r15 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x2710, 0x0, 0x41000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) ioctl$KVM_SET_MP_STATE(r15, 0x4004ae99, 0xffffffffffffffff) 31m53.480267407s ago: executing program 38 (id=318): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2280c0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r2, 0x4018aee1, &(0x7f0000000040)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000000)={0x1, 0x2}}) ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000080)={0x5}) r3 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r3, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ce5000/0x1000)=nil, 0x930, 0x6, 0x4102932, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil) ioctl$KVM_GET_ONE_REG(r6, 0x4010aeab, &(0x7f0000000180)=@arm64_sys={0x603000000013d801, &(0x7f0000000000)=0x1}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000280)=@arm64_sys={0x603000000013c006, &(0x7f0000000240)=0x2}) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x7b8) 20m3.892458147s ago: executing program 8 (id=344): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) openat$kvm(0x0, &(0x7f0000000140), 0x101000, 0x0) (async) r1 = openat$kvm(0x0, &(0x7f0000000140), 0x101000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r3, 0x4020aeae, &(0x7f0000000100)={0x5, 0x18}) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000000)=@arm64_core={0x6030000000100008, &(0x7f0000000040)=0x8000000000000005}) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) (async) r5 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f00000001c0)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4}) (async) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4}) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x2}) (async) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x2}) r8 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x0, 0x0}) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f00000000c0)={0x8, 0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) ioctl$KVM_CREATE_VM(r9, 0x800454cf, 0x0) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000180)={0x8}) r11 = syz_kvm_vgic_v3_setup(r10, 0x3, 0xa0) ioctl$KVM_GET_DEVICE_ATTR(r11, 0x4018aee2, &(0x7f00000001c0)=@attr_arm64={0x0, 0x8, 0x2, &(0x7f0000000000)=0x676}) (async) ioctl$KVM_GET_DEVICE_ATTR(r11, 0x4018aee2, &(0x7f00000001c0)=@attr_arm64={0x0, 0x8, 0x2, &(0x7f0000000000)=0x676}) 19m47.216832587s ago: executing program 8 (id=346): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 64) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (rerun: 64) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x23) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x46cc00, 0x0) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x3, 0x8003, 0x10000000004}}], 0x28}, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) r6 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x2}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x1, 0x80000, 0xfffd, 0x0, 0x0, 0x2}}], 0x50}, 0x0, 0x0) (async) syz_kvm_vgic_v3_setup(r7, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async, rerun: 64) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) (async, rerun: 64) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) r11 = syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_GET_DEVICE_ATTR(r11, 0x4018aee2, &(0x7f0000000200)=@attr_arm64={0x0, 0x1, 0x304, &(0x7f00000001c0)=0x7}) 19m31.886641543s ago: executing program 7 (id=347): mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x0, 0x8032, 0xffffffffffffffff, 0x0) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000380)=@arm64_sys={0x603000000013c016, &(0x7f0000000000)=0x5}) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0xf, 0x32, 0xffffffffffffffff, 0x0) 19m26.742921813s ago: executing program 8 (id=348): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r4, 0x5421, &(0x7f0000000100)={0x0, 0x11}) ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000100)={0x5, 0x18}) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x2d) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f00000001c0)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000100)=@attr_riscv64=@attr_imsic={0x0, 0x1, 0x7fffffff, &(0x7f0000000080)=0x33}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f00000000c0)={0x5, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f00000002c0)=@attr_other={0x0, 0x8, 0x108, &(0x7f0000000000)=0xc000000000000000}) syz_kvm_setup_cpu$arm64(r6, 0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil, &(0x7f0000000180)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x4, 0x2, 0x0}) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000000)=@arm64_sve_vls={0x606000000015ffff, 0xffffffffffffffff}) 19m14.739198362s ago: executing program 7 (id=349): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x1}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x8, 0xf, 0x0, 0x5, 0x6, 0x6, 0x6, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x9, 0x0, 0x0, 0x3, 0x5, 0x8, '\x00', 0x1, 0x400000000002}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000140)={0x4, 0x0, [{0x1, 0x2, 0x1, 0x0, @msi={0x5, 0x4ec6}}, {0x9, 0x3, 0x1, 0x0, @adapter={0xd4ff, 0x0, 0x0, 0x6}}, {0x4, 0x0, 0x0, 0x0, @msi={0x0, 0x0, 0x0, 0x3}}, {0x0, 0x0, 0x0, 0x0, @msi={0x0, 0x0, 0x0, 0x100}}]}) write$eventfd(r2, &(0x7f00000001c0)=0x3, 0x49) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_ARM_VCPU_INIT(0xffffffffffffffff, 0x4020aeae, &(0x7f0000000340)={0x5}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_ARM_SET_COUNTER_OFFSET(r7, 0x4010aeb5, &(0x7f0000000140)={0x1}) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) r9 = openat$kvm(0x0, &(0x7f0000000280), 0x103080, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) r11 = syz_kvm_vgic_v3_setup(r10, 0x1, 0x40) ioctl$KVM_GET_DEVICE_ATTR(r11, 0x4018aee2, &(0x7f0000000100)=@attr_riscv64=@attr_aplic={0x0, 0x1, @valid=0x1ddc, &(0x7f0000000000)=0x4}) mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, r8, 0xd, 0x10, 0xffffffffffffffff, 0x0) close(r5) 19m1.880300335s ago: executing program 8 (id=350): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x88601, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x2000003, 0x2013, r2, 0x0) close(r2) mmap$KVM_VCPU(&(0x7f0000000000/0xc00000)=nil, 0x930, 0xf, 0x32, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x101800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) (async) r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r6, 0x1, 0x100) (async) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r8, 0x4018aee1, &(0x7f0000000040)=@attr_irq_timer={0x0, 0x1, 0x0, &(0x7f0000000000)=0x1e}) (async) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) (async) r11 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x20) ioctl$KVM_GET_DEVICE_ATTR_vm(r11, 0x4018aee2, &(0x7f0000000180)=@attr_other={0x0, 0x9, 0x3, &(0x7f0000000140)=0x4}) (async) ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f00000001c0)={0x5, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_DEVICE_ATTR(r12, 0x4018aee1, &(0x7f0000000240)=@attr_other={0x0, 0x0, 0xb58, &(0x7f0000000200)=0x4}) r13 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r14 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r15, 0xc040aed4, 0xfffffffffffffffe) (async) r16 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) r17 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r16, r17, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_ONE_REG(r17, 0x4010aeac, &(0x7f0000000100)=@arm64_sys={0x603000000013df1a, &(0x7f00000000c0)=0x3}) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) 18m49.469063454s ago: executing program 7 (id=351): mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x0, 0x3000003, 0x2010, 0xffffffffffffffff, 0x9000000) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000) munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000) munmap(&(0x7f0000e76000/0x12000)=nil, 0x12000) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000f1a000/0x4000)=nil, 0x930, 0x0, 0x9032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000fed000/0x3000)=nil, 0x930, 0x0, 0x20010, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x100000c, 0x6832, 0xffffffffffffffff, 0x0) munmap$KVM_VCPU(0x0, 0x1000000000) r0 = mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000e, 0x24132, 0xffffffffffffffff, 0x0) munmap$KVM_VCPU(r0, 0x401) r1 = eventfd2(0xfffffffa, 0x80001) write$eventfd(r1, &(0x7f0000000200)=0x8, 0x8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f000064b000/0x4000)=nil, 0x0, 0x100000d, 0x9032, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000667000/0x2000)=nil, 0x2000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x300, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x28) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r3, 0x4068aea3, &(0x7f0000000280)={0xdf, 0x0, 0xf800}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x8) mmap$KVM_VCPU(&(0x7f0000e31000/0x2000)=nil, 0x930, 0xa, 0x11, r4, 0x40000) 18m37.300337743s ago: executing program 8 (id=352): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000180)={0x0, &(0x7f0000000380)=[@msr={0x14, 0x20, {0x1fad, 0x9}}, @mrs={0xbe, 0x18, {0x6030000000138067}}], 0x38}, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000027000/0x13000)=nil, 0x930, 0x3, 0x4102932, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000000240)="fb4149dd033be3ac2cc4a22332fdaa8de0418df24200000000a6ab8031d1dfd92f0000000001ffffffff9610fbff77521ce10d8f6b69d22627e700", 0x0, 0xffffffffffffffca) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b6565d2f1, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r4, 0x4018aee1, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$arm64(r6, 0xffffffffffffffff, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000140)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r6, 0x4068aea3, &(0x7f0000000000)={0xe4, 0x0, 0x7}) 18m30.163775936s ago: executing program 7 (id=353): r0 = openat$kvm(0x0, &(0x7f0000000240), 0x10000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000001c0)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4}) r3 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000400)={0x0, &(0x7f0000000280)=[@hvc={0x32, 0x40, {0x6000000, [0x4de, 0x100000001, 0x3ff, 0x0, 0x2]}}, @memwrite={0x6e, 0x30, @generic={0x9000, 0xf5f, 0x3c, 0x4}}, @eret={0xe6, 0x18, 0x8}, @hvc={0x32, 0x40, {0xc4000011, [0x0, 0xc756, 0x0, 0x2]}}, @msr={0x14, 0x20, {0x603000000013deb5, 0x465000004}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x1, 0x4, 0x0, 0x80000000, 0x5, 0x3}}, @svc={0x122, 0x40, {0xc4000001, [0xc, 0x3, 0x2, 0x9, 0xffffffff]}}], 0x150}, &(0x7f0000000440)=[@featur1={0x1, 0x9c}], 0x1) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f00000004c0)=@riscv64_d={0x8020000006000035, &(0x7f0000000480)=0xa3}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000080)=@attr_other={0x0, 0x8, 0x4, &(0x7f0000000040)=0xfffbfffffffffffa}) 18m16.447403414s ago: executing program 7 (id=354): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000100)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x7fff}}], 0x20}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) r4 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r7, 0x4018aee1, &(0x7f0000000040)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000000)={0x7ff, 0x401}}) ioctl$KVM_PRE_FAULT_MEMORY(r7, 0xc040aed5, &(0x7f00000000c0)={0xeeee0000, 0x112000}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000040)=@arm64_sys={0x603000000013df43, &(0x7f0000000000)=0x8}) 18m10.600381009s ago: executing program 8 (id=355): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x101, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x7fff}}, @msr={0x14, 0x20, {0x603000000013dce4, 0x1}}], 0x40}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x33) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x7fffffff) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = eventfd2(0x8, 0x80800) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000000)={0x48, 0xdddd1000, 0x0, r9}) close(r9) close(r8) ioctl$KVM_CREATE_VM(r6, 0x400454e2, 0x1000110c23001c) 18m0.841367283s ago: executing program 7 (id=356): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CAP_ARM_SYSTEM_SUSPEND(r1, 0x4068aea3, &(0x7f00000000c0)) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000000)={0x0, &(0x7f0000000040)=[@smc={0x1e, 0x40, {0x8400000e, [0x99b, 0x100000003, 0x5, 0x101, 0x10]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000b46000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000240)={0x1fe, 0x3, 0xffff6000, 0x1000, &(0x7f0000e49000/0x1000)=nil}) r6 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x8, 0xff, 0x0, 0x5, 0x6, 0x86, 0x6, 0x4b, 0x86, 0xdd, 0x68, 0x0, 0xc0000000, 0x11, 0x0, 0x3, 0x5, 0x8, '\x00', 0x1, 0x8000093}) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r9, &(0x7f00000001c0)=0xffffff7f, 0xff25) r10 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[@msr={0x14, 0x20, {0x603000000013df7f, 0x8000}}], 0x20}, &(0x7f0000000280)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r12, 0x4018aee1, &(0x7f00000002c0)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f00000000c0)={0x1, 0x298, 0x1}}) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17m24.281465515s ago: executing program 39 (id=355): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x101, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x7fff}}, @msr={0x14, 0x20, {0x603000000013dce4, 0x1}}], 0x40}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x33) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x7fffffff) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = eventfd2(0x8, 0x80800) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000000)={0x48, 0xdddd1000, 0x0, r9}) close(r9) close(r8) ioctl$KVM_CREATE_VM(r6, 0x400454e2, 0x1000110c23001c) 17m10.879784994s ago: executing program 40 (id=356): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CAP_ARM_SYSTEM_SUSPEND(r1, 0x4068aea3, &(0x7f00000000c0)) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000000)={0x0, &(0x7f0000000040)=[@smc={0x1e, 0x40, {0x8400000e, [0x99b, 0x100000003, 0x5, 0x101, 0x10]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000b46000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000240)={0x1fe, 0x3, 0xffff6000, 0x1000, &(0x7f0000e49000/0x1000)=nil}) r6 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x8, 0xff, 0x0, 0x5, 0x6, 0x86, 0x6, 0x4b, 0x86, 0xdd, 0x68, 0x0, 0xc0000000, 0x11, 0x0, 0x3, 0x5, 0x8, '\x00', 0x1, 0x8000093}) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r9, &(0x7f00000001c0)=0xffffff7f, 0xff25) r10 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[@msr={0x14, 0x20, {0x603000000013df7f, 0x8000}}], 0x20}, &(0x7f0000000280)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r12, 0x4018aee1, &(0x7f00000002c0)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f00000000c0)={0x1, 0x298, 0x1}}) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m44.658315939s ago: executing program 1 (id=389): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_ARM_VCPU_INIT(0xffffffffffffffff, 0x4020aeae, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r8, 0x4018aee3, &(0x7f0000000180)=@attr_other={0x0, 0xffffffff, 0x80080, 0x0}) r9 = syz_kvm_add_vcpu$arm64(r5, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r9, 0x4018aee1, &(0x7f0000000000)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0x20e4586c}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x900c0, 0x0) r10 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) mmap$KVM_VCPU(&(0x7f0000e60000/0x1000)=nil, r10, 0xd, 0x13, r9, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) r11 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r11, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r2, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x4000, 0x0) 2m37.798283047s ago: executing program 9 (id=390): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x2e) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r3, r4, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000100)=[{0x0, 0x0}], 0x1, 0x0, &(0x7f00000003c0)=[@featur2={0x1, 0x17}], 0x1) ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f0000000140)=@arm64_core={0x6030000000100042, &(0x7f0000000000)=0x11}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000080)=@arm64={0xe6, 0x7, 0x8, '\x00', 0xff}) ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x100000c, 0x16831, 0xffffffffffffffff, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r5, 0x4018aee1, &(0x7f0000000040)=@attr_irq_timer={0x0, 0x1, 0x0, &(0x7f0000000000)=0x10}) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, 0x0) 2m21.038876087s ago: executing program 1 (id=391): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) r1 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x29) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r4 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r3, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0xffffffffffffffa7) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r3, 0x0) openat$kvm(0x3f, &(0x7f0000000040), 0x785000, 0x0) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x3) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r8, 0x4018aee1, &(0x7f0000000080)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0xfffffffffffffff8}) r9 = eventfd2(0xeffffffd, 0x801) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000000)={0x200, 0x4000, 0x4, r9, 0x1}) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000001340)={0x3, 0x0, 0x1, r9, 0x3}) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f00000000c0)={0x3, 0x0, 0x1, r9, 0xf}) 2m8.675282437s ago: executing program 9 (id=392): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000000)="a5920cde26834aa184e7c68682e19a3807d00f8b1a7c3e2dae4d8bf46a11d12093c2dd078e772ac86399a31ce1b22623f070b95932ccb50e492079aac2512f89406d6d6c6c066e5c", 0x0, 0x48) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, &(0x7f00000002c0)="ce40000024040000010000040e000700", 0x0, 0x18) r3 = syz_kvm_vgic_v3_setup(0xffffffffffffffff, 0x3, 0x40) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x8) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_IRQ_LINE(r4, 0x4008ae61, &(0x7f0000000000)={0x0, 0x80000001}) ioctl$KVM_IRQ_LINE_STATUS(r4, 0xc008ae67, &(0x7f0000000100)={0x0, 0x81}) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000100)=@attr_other={0x0, 0x1, 0x4, &(0x7f00000000c0)=0x6}) syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f0000000240)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x7fff}}, @irq_setup={0x46, 0x18, {0x4, 0x97}}], 0x38}, &(0x7f0000000340)=[@featur1={0x1, 0x18}], 0x1) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x115ec1, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0) syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0x40086602, 0x4000000e) ioctl$KVM_CAP_DIRTY_LOG_RING(r7, 0x4068aea3, &(0x7f0000000500)) r9 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) syz_kvm_vgic_v3_setup(r4, 0x1, 0x40) r11 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, 0xfffffffffffffffe) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000040)=@attr_arm64={0x0, 0x7, 0x0, &(0x7f0000000300)=0x802}) 1m55.636029203s ago: executing program 1 (id=393): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) openat$kvm(0x0, &(0x7f0000000080), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x19) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000bfe000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000180)=[@svc={0x122, 0x40, {0x80000002, [0x1, 0x80, 0x10, 0xff]}}], 0x40}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x4, 0x100) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) munmap(&(0x7f000000f000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000010000/0x1000)=nil, 0x930, 0x100000f, 0x9032, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000300)="fb4149dd033b89868d4d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67525673312b01040000000000002627e7000000000000000200", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x12, r5, 0x0) r6 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r7, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r8 = eventfd2(0x70, 0x0) close(r0) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x0) write$eventfd(r8, &(0x7f0000000100)=0x40000000000005, 0x8) r9 = eventfd2(0x0, 0x0) close(r9) r10 = eventfd2(0x0, 0x0) close(r10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xc0c82, 0x0) mmap$KVM_VCPU(&(0x7f0000008000/0x3000)=nil, 0x0, 0x0, 0x2011, r3, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, 0x930, 0x200000e, 0x2011, r5, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) 1m44.250958509s ago: executing program 9 (id=394): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x3, 0x4f832, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0xf, 0x4f832, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000f3c000/0x2000)=nil, 0x0, 0x1000002, 0x110, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) (async) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x10, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) r2 = eventfd2(0x5, 0x800) write$eventfd(r2, &(0x7f0000000000)=0xffffffffffffffff, 0x8) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) (async) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) munmap(&(0x7f0000e76000/0x12000)=nil, 0x12000) (async) munmap(&(0x7f0000e76000/0x12000)=nil, 0x12000) mmap$KVM_VCPU(&(0x7f0000f1a000/0x4000)=nil, 0x930, 0x0, 0x9032, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000f1a000/0x4000)=nil, 0x930, 0x0, 0x9032, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4360ae82, 0x0) mmap$KVM_VCPU(&(0x7f0000fed000/0x3000)=nil, 0x930, 0x0, 0x4030031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) (async) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) munmap(&(0x7f0000011000/0xc00000)=nil, 0xc00000) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) (async) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x3000000, 0x4d832, 0xffffffffffffffff, 0x0) munmap(&(0x7f00004df000/0x3000)=nil, 0x3000) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3}) (async) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, r4, 0x2000003, 0x2013, r3, 0xff010000) 1m35.905354664s ago: executing program 1 (id=395): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000140), 0x2900, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000040)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r5, 0x4010aeab, &(0x7f0000000000)=@arm64_core={0x603000000010000c, &(0x7f0000000080)=0x80000000}) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_ARM_SET_COUNTER_OFFSET(r7, 0x8040aeb6, 0xfffffffffffffffe) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000bfe000/0x400000)=nil) ioctl$KVM_GET_DEVICE_ATTR(r8, 0x4018aee2, &(0x7f0000000100)=@attr_other={0x0, 0x8, 0x40000000000000, 0x0}) r9 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=[@irq_setup={0x46, 0x18, {0x1, 0x3c9}}], 0x18}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r10, 0xfffffffffffffffd, 0x60) r13 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000640)=@riscv64_csr={0x8030000000300000, &(0x7f0000000600)=0x9}) r15 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r16 = ioctl$KVM_CREATE_VM(r15, 0xae01, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee3, &(0x7f00000000c0)=@attr_irq_timer={0x0, 0x1, 0x0, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r16, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0xeeef0000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r16, 0xc018aec0, &(0x7f00000000c0)={0x1}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r14, 0x4010ae68, &(0x7f0000000040)={0xe000, 0x2000}) r17 = eventfd2(0x9, 0x1) ioctl$KVM_IOEVENTFD(r10, 0x4040ae79, &(0x7f0000000000)={0x3, 0x8001002, 0x1, r17}) ioctl$KVM_RUN(r12, 0xae80, 0x0) 1m22.67933988s ago: executing program 9 (id=396): mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x0, 0x100000f, 0x8010, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000) munmap(&(0x7f0000482000/0x2000)=nil, 0x2000) openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x1}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) r3 = eventfd2(0x9, 0x80001) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r3, 0x7}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x8, 0xf, 0x0, 0x5, 0x6, 0xa6, 0x9, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x0, 0x189, 0x0, 0x3, 0x5, 0x8, '\x00', 0x1, 0x96}) write$eventfd(r2, &(0x7f00000001c0)=0x3, 0xfdef) 1m7.090017366s ago: executing program 1 (id=397): mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000400)={0x0, &(0x7f0000000000)=[@uexit={0x0, 0x18, 0x7}, @irq_setup={0x46, 0x18, {0x1, 0x232}}, @mrs={0xbe, 0x18, {0x603000000013c081}}, @eret={0xe6, 0x18}, @mrs={0xbe, 0x18, {0x6030000000138045}}, @code={0xa, 0x84, {"007008d5806a9ed200a0b0f2e10080d2620180d2a30080d2440080d2020000d4c02a84d20060b0f2c10080d2c20180d2030180d2a40180d2020000d40000231e0024c01a0030005fa01495d20040b8f2410180d2620080d2a30180d2840080d2020000d4000008d500fc000f0000639e"}}, @hvc={0x32, 0x40, {0x800, [0x7, 0x2, 0x44, 0xf, 0x6]}}, @hvc={0x32, 0x40, {0x80007fff, [0xffffffffffffffff, 0x9, 0xb56, 0x0, 0x401]}}, @svc={0x122, 0x40, {0x4, [0x0, 0x2, 0x8, 0x3a6, 0x3]}}, @hvc={0x32, 0x40, {0x1, [0x3, 0x100, 0xffffffff, 0x144, 0x8000000000000001]}}, @mrs={0xbe, 0x18, {0xa050000000340973}}, @smc={0x1e, 0x40, {0x84000002, [0x1b7, 0x1, 0x7ff, 0x401, 0xe2ed]}}, @mrs={0xbe, 0x18, {0x603000000013e710}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x10, 0x9fa3}}, @memwrite={0x6e, 0x30, @generic={0x5000, 0x855, 0x4}}, @its_setup={0x82, 0x28, {0x0, 0x1, 0xeb}}, @msr={0x14, 0x20, {0x6030000000138025, 0x4}}, @svc={0x122, 0x40, {0x8400000d, [0xe, 0xfc00000000000000, 0xffff, 0x1]}}, @irq_setup={0x46, 0x18, {0x4, 0x2d0}}, @smc={0x1e, 0x40, {0x84000014, [0x5bcf, 0x4, 0x4, 0xdfb, 0x200]}}, @svc={0x122, 0x40, {0xc400004f, [0x8, 0x10001, 0x400, 0xa, 0x27]}}], 0x3ec}, &(0x7f0000000440)=[@featur1={0x1, 0x2}], 0x1) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000fed000/0x3000)=nil, 0x930, 0x0, 0x4030031, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xc, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x20000000) 1m6.066666681s ago: executing program 9 (id=398): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000080)=[@mrs={0xbe, 0x18, {0x301800000009f344}}], 0x18}, &(0x7f0000000100)=[@featur2={0x1, 0xa7}], 0x1) (async) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000080)=[@mrs={0xbe, 0x18, {0x301800000009f344}}], 0x18}, &(0x7f0000000100)=[@featur2={0x1, 0xa7}], 0x1) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r3, 0x4018aee2, &(0x7f0000000200)=@attr_other={0x0, 0x4, 0x6, &(0x7f00000001c0)=0x8000000000000001}) r4 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r4, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r7, 0x4010aeab, &(0x7f0000000180)=@arm64_sys={0x603000000013d801, &(0x7f0000000000)=0x1}) (async) ioctl$KVM_GET_ONE_REG(r7, 0x4010aeab, &(0x7f0000000180)=@arm64_sys={0x603000000013d801, &(0x7f0000000000)=0x1}) r8 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f0000000000)=[@hvc={0x32, 0x40, {0x84000052, [0x5, 0x81, 0x9, 0x4, 0x2]}}, @hvc={0x32, 0x40, {0x8400000b, [0x4d5c, 0x800, 0x2, 0xb, 0xfff]}}], 0x80}, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 53.019285174s ago: executing program 1 (id=399): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f00000004c0)={0x0, &(0x7f0000000400)=[@svc={0x122, 0x40, {0x40, [0x3, 0x9, 0xfffffffffffffffe, 0x3, 0x9]}}, @code={0xa, 0x6c, {"00000072000008d500a4a00d408a84d20040b0f2810180d2620080d2e30180d2c40080d2020000d4006c202e000008d500b4200e40b196d20080b8f2610180d2e20180d2e30080d2a40180d2020000d4007008d5000028d5"}}], 0xac}, &(0x7f0000000500)=[@featur2={0x1, 0x10}], 0x1) ioctl$KVM_GET_REG_LIST(r3, 0xc008aeb0, &(0x7f0000000540)={0x3, [0x81000000, 0x7, 0x5ba]}) (async) ioctl$KVM_GET_REG_LIST(r3, 0xc008aeb0, &(0x7f0000000540)={0x3, [0x81000000, 0x7, 0x5ba]}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x33) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x33) ioctl$KVM_RUN(r4, 0xc018ae85, 0xf0ff1f00000000) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x32) (async) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x32) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f00000000c0)={0x2, 0xffffffffffffffff, 0x1}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x3) eventfd2(0xb5f38000, 0x801) (async) r8 = eventfd2(0xb5f38000, 0x801) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000100)={0x1ff, 0xc000, 0x8, r8, 0xe}) syz_kvm_vgic_v3_setup(r7, 0x2, 0x40) (async) r9 = syz_kvm_vgic_v3_setup(r7, 0x2, 0x40) ioctl$KVM_HAS_DEVICE_ATTR(r9, 0x4018aee3, &(0x7f0000000040)=@attr_riscv64=@attr_ctrl={0x0, 0x1, 0x1, 0x0}) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_arm64(r11, 0x4208ae9b, &(0x7f00000001c0)={0x1, 0x0, {[0x1, 0xfff, 0xffffffffffffffff, 0x8, 0x7, 0x2, 0x7, 0x5, 0x9, 0xff, 0x401, 0x1, 0x10, 0x8b96, 0x6, 0x4], [0x7, 0x0, 0x7fffffff, 0x7, 0x1b, 0x4a8, 0x5, 0x1, 0x2, 0xffffffffffff2674, 0xf, 0x5, 0x7ff, 0x7, 0xff, 0x2b1947b1], [0xd, 0x4, 0x0, 0x5872, 0x3, 0x4, 0x180, 0x80000001, 0x7, 0x0, 0x1ff, 0xb, 0xa7b4, 0xfa, 0xfffffffffffffffd, 0x2], [0x9, 0x7, 0x5, 0x5, 0x200, 0xff80000000000000, 0x768, 0xc7fe, 0x6, 0x2, 0x0, 0x3, 0xc3, 0xfffffffffffffffe, 0x61, 0xc088]}}) (async) ioctl$KVM_SET_GUEST_DEBUG_arm64(r11, 0x4208ae9b, &(0x7f00000001c0)={0x1, 0x0, {[0x1, 0xfff, 0xffffffffffffffff, 0x8, 0x7, 0x2, 0x7, 0x5, 0x9, 0xff, 0x401, 0x1, 0x10, 0x8b96, 0x6, 0x4], [0x7, 0x0, 0x7fffffff, 0x7, 0x1b, 0x4a8, 0x5, 0x1, 0x2, 0xffffffffffff2674, 0xf, 0x5, 0x7ff, 0x7, 0xff, 0x2b1947b1], [0xd, 0x4, 0x0, 0x5872, 0x3, 0x4, 0x180, 0x80000001, 0x7, 0x0, 0x1ff, 0xb, 0xa7b4, 0xfa, 0xfffffffffffffffd, 0x2], [0x9, 0x7, 0x5, 0x5, 0x200, 0xff80000000000000, 0x768, 0xc7fe, 0x6, 0x2, 0x0, 0x3, 0xc3, 0xfffffffffffffffe, 0x61, 0xc088]}}) ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000000)={0x7, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r12, 0x4018aee1, &(0x7f0000000080)=@attr_arm64={0x0, 0x2, 0x3, &(0x7f0000000040)=0x1}) ioctl$KVM_GET_DEVICE_ATTR(r12, 0x4018aee2, &(0x7f0000000640)=@attr_other={0x0, 0x1, 0xc, &(0x7f0000000600)=0x2}) (async) ioctl$KVM_GET_DEVICE_ATTR(r12, 0x4018aee2, &(0x7f0000000640)=@attr_other={0x0, 0x1, 0xc, &(0x7f0000000600)=0x2}) 50.346784617s ago: executing program 9 (id=400): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x1, 0x8, 0xb, 0x0, 0x2, 0x6, 0x6, 0x9, 0x8, 0x8, 0x6, 0x2, 0x0, 0x6, 0x6, 0xe2, 0x1, 0x29, 0x0, '\x00', 0x10, 0x6}) r1 = openat$kvm(0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000000)={0x7}) eventfd2(0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r5, &(0x7f00000001c0)=0x1, 0x11) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000bc5000/0x400000)=nil) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r8, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x0, 0x6, 0x0}) syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000940)={0x0, &(0x7f00000009c0)=[@hvc={0x32, 0x40, {0x80000000, [0x604, 0x80, 0x2, 0x6, 0x1]}}, @hvc={0x32, 0x40, {0x200, [0x2, 0x400, 0x1ff, 0x81, 0x4dd]}}, @smc={0x1e, 0x40, {0x1000000, [0x1, 0xfffffffffffffffc, 0x1, 0x5898, 0x80]}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x1200, 0x7}}, @hvc={0x32, 0x40, {0x6000000, [0x3, 0x6, 0x1, 0x10, 0xad5]}}, @its_setup={0x82, 0x28, {0x3, 0x1, 0x6e}}, @svc={0x122, 0x40, {0x2000000, [0x5, 0x80000000, 0x3, 0x2, 0x2]}}, @hvc={0x32, 0x40, {0x84000004, [0x9, 0x9, 0x5, 0x7fffffffffffffff, 0xfd8]}}, @mrs={0xbe, 0x18, {0x603000000013c230}}, @code={0xa, 0x84, {"000795d20080b8f2e10180d2a20180d2430180d2c40180d2020000d4000028d5a09882d20040b8f2010080d2620180d2430180d2040080d2020000d4201b88d200c0b8f2a10180d2820180d2630080d2c40080d2020000d40008a0b800004079000008d5008008d500a8310e000008d5"}}, @svc={0x122, 0x40, {0xc4000053, [0x816, 0x100000000, 0x3, 0x2]}}, @svc={0x122, 0x40, {0x84000012, [0x4, 0x0, 0x2, 0xcfe, 0x3]}}, @eret={0xe6, 0x18, 0xffff}, @hvc={0x32, 0x40, {0xc5000021, [0xfffffffffffffffa, 0x4, 0x8c, 0x5, 0x5]}}, @code={0xa, 0x84, {"000000ad40a29bd20060b0f2a10180d2820180d2a30080d2840180d2020000d4007008d5007008d5008008d5000008d5008008d5e00e9cd200c0b8f2e10180d2c20080d2630180d2640180d2020000d400609f0ca09299d20000b0f2c10180d2620080d2030080d2240080d2020000d4"}}, @smc={0x1e, 0x40, {0x84000050, [0x10000, 0x101, 0x5, 0x8, 0x2]}}, @svc={0x122, 0x40, {0x400, [0x6c, 0x0, 0x1, 0xdeb00000, 0x9]}}, @uexit={0x0, 0x18, 0x8}, @its_send_cmd={0xaa, 0x28, {0xd, 0x1, 0x3, 0x10, 0x2, 0x21}}, @svc={0x122, 0x40, {0x0, [0x1, 0x7, 0x0, 0x4, 0x3]}}, @eret={0xe6, 0x18, 0x7}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0xf00, 0xffffffffffffffff, 0x2}}, @its_setup={0x82, 0x28, {0x2, 0x1, 0x2bc}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x1, 0x2, 0x10, 0xae, 0x10001, 0x3}}, @svc={0x122, 0x40, {0x84000051, [0xa318, 0xb2, 0x94, 0x400, 0x5]}}, @svc={0x122, 0x40, {0x4000, [0x8, 0x4, 0x7fff, 0x6, 0x40]}}, @svc={0x122, 0x40, {0xc400000c, [0x491a, 0x4, 0x4, 0x3, 0x8]}}], 0x628}, &(0x7f0000000980)=[@featur2], 0x1) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f0000000080)={0x3, 0x0, [{0xb00, 0x2, 0x0, 0x0, @adapter={0x2794, 0x6, 0x401, 0xedbc, 0x2}}, {0x0, 0x3, 0x1, 0x0, @adapter={0x7ff, 0x0, 0x1ff, 0x3, 0xe00}}, {0x1, 0x2, 0x0, 0x0, @adapter={0x5, 0x800, 0x1, 0x7fffffff, 0x6}}]}) 6.130626286s ago: executing program 41 (id=399): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f00000004c0)={0x0, &(0x7f0000000400)=[@svc={0x122, 0x40, {0x40, [0x3, 0x9, 0xfffffffffffffffe, 0x3, 0x9]}}, @code={0xa, 0x6c, {"00000072000008d500a4a00d408a84d20040b0f2810180d2620080d2e30180d2c40080d2020000d4006c202e000008d500b4200e40b196d20080b8f2610180d2e20180d2e30080d2a40180d2020000d4007008d5000028d5"}}], 0xac}, &(0x7f0000000500)=[@featur2={0x1, 0x10}], 0x1) ioctl$KVM_GET_REG_LIST(r3, 0xc008aeb0, &(0x7f0000000540)={0x3, [0x81000000, 0x7, 0x5ba]}) (async) ioctl$KVM_GET_REG_LIST(r3, 0xc008aeb0, &(0x7f0000000540)={0x3, [0x81000000, 0x7, 0x5ba]}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x33) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x33) ioctl$KVM_RUN(r4, 0xc018ae85, 0xf0ff1f00000000) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x32) (async) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x32) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f00000000c0)={0x2, 0xffffffffffffffff, 0x1}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x3) eventfd2(0xb5f38000, 0x801) (async) r8 = eventfd2(0xb5f38000, 0x801) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000100)={0x1ff, 0xc000, 0x8, r8, 0xe}) syz_kvm_vgic_v3_setup(r7, 0x2, 0x40) (async) r9 = syz_kvm_vgic_v3_setup(r7, 0x2, 0x40) ioctl$KVM_HAS_DEVICE_ATTR(r9, 0x4018aee3, &(0x7f0000000040)=@attr_riscv64=@attr_ctrl={0x0, 0x1, 0x1, 0x0}) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_arm64(r11, 0x4208ae9b, &(0x7f00000001c0)={0x1, 0x0, {[0x1, 0xfff, 0xffffffffffffffff, 0x8, 0x7, 0x2, 0x7, 0x5, 0x9, 0xff, 0x401, 0x1, 0x10, 0x8b96, 0x6, 0x4], [0x7, 0x0, 0x7fffffff, 0x7, 0x1b, 0x4a8, 0x5, 0x1, 0x2, 0xffffffffffff2674, 0xf, 0x5, 0x7ff, 0x7, 0xff, 0x2b1947b1], [0xd, 0x4, 0x0, 0x5872, 0x3, 0x4, 0x180, 0x80000001, 0x7, 0x0, 0x1ff, 0xb, 0xa7b4, 0xfa, 0xfffffffffffffffd, 0x2], [0x9, 0x7, 0x5, 0x5, 0x200, 0xff80000000000000, 0x768, 0xc7fe, 0x6, 0x2, 0x0, 0x3, 0xc3, 0xfffffffffffffffe, 0x61, 0xc088]}}) (async) ioctl$KVM_SET_GUEST_DEBUG_arm64(r11, 0x4208ae9b, &(0x7f00000001c0)={0x1, 0x0, {[0x1, 0xfff, 0xffffffffffffffff, 0x8, 0x7, 0x2, 0x7, 0x5, 0x9, 0xff, 0x401, 0x1, 0x10, 0x8b96, 0x6, 0x4], [0x7, 0x0, 0x7fffffff, 0x7, 0x1b, 0x4a8, 0x5, 0x1, 0x2, 0xffffffffffff2674, 0xf, 0x5, 0x7ff, 0x7, 0xff, 0x2b1947b1], [0xd, 0x4, 0x0, 0x5872, 0x3, 0x4, 0x180, 0x80000001, 0x7, 0x0, 0x1ff, 0xb, 0xa7b4, 0xfa, 0xfffffffffffffffd, 0x2], [0x9, 0x7, 0x5, 0x5, 0x200, 0xff80000000000000, 0x768, 0xc7fe, 0x6, 0x2, 0x0, 0x3, 0xc3, 0xfffffffffffffffe, 0x61, 0xc088]}}) ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000000)={0x7, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r12, 0x4018aee1, &(0x7f0000000080)=@attr_arm64={0x0, 0x2, 0x3, &(0x7f0000000040)=0x1}) ioctl$KVM_GET_DEVICE_ATTR(r12, 0x4018aee2, &(0x7f0000000640)=@attr_other={0x0, 0x1, 0xc, &(0x7f0000000600)=0x2}) (async) ioctl$KVM_GET_DEVICE_ATTR(r12, 0x4018aee2, &(0x7f0000000640)=@attr_other={0x0, 0x1, 0xc, &(0x7f0000000600)=0x2}) 0s ago: executing program 42 (id=400): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x1, 0x8, 0xb, 0x0, 0x2, 0x6, 0x6, 0x9, 0x8, 0x8, 0x6, 0x2, 0x0, 0x6, 0x6, 0xe2, 0x1, 0x29, 0x0, '\x00', 0x10, 0x6}) r1 = openat$kvm(0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000000)={0x7}) eventfd2(0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r5, &(0x7f00000001c0)=0x1, 0x11) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000bc5000/0x400000)=nil) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r8, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x0, 0x6, 0x0}) syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000940)={0x0, &(0x7f00000009c0)=[@hvc={0x32, 0x40, {0x80000000, [0x604, 0x80, 0x2, 0x6, 0x1]}}, @hvc={0x32, 0x40, {0x200, [0x2, 0x400, 0x1ff, 0x81, 0x4dd]}}, @smc={0x1e, 0x40, {0x1000000, [0x1, 0xfffffffffffffffc, 0x1, 0x5898, 0x80]}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x1200, 0x7}}, @hvc={0x32, 0x40, {0x6000000, [0x3, 0x6, 0x1, 0x10, 0xad5]}}, @its_setup={0x82, 0x28, {0x3, 0x1, 0x6e}}, @svc={0x122, 0x40, {0x2000000, [0x5, 0x80000000, 0x3, 0x2, 0x2]}}, @hvc={0x32, 0x40, {0x84000004, [0x9, 0x9, 0x5, 0x7fffffffffffffff, 0xfd8]}}, @mrs={0xbe, 0x18, {0x603000000013c230}}, @code={0xa, 0x84, {"000795d20080b8f2e10180d2a20180d2430180d2c40180d2020000d4000028d5a09882d20040b8f2010080d2620180d2430180d2040080d2020000d4201b88d200c0b8f2a10180d2820180d2630080d2c40080d2020000d40008a0b800004079000008d5008008d500a8310e000008d5"}}, @svc={0x122, 0x40, {0xc4000053, [0x816, 0x100000000, 0x3, 0x2]}}, @svc={0x122, 0x40, {0x84000012, [0x4, 0x0, 0x2, 0xcfe, 0x3]}}, @eret={0xe6, 0x18, 0xffff}, @hvc={0x32, 0x40, {0xc5000021, [0xfffffffffffffffa, 0x4, 0x8c, 0x5, 0x5]}}, @code={0xa, 0x84, {"000000ad40a29bd20060b0f2a10180d2820180d2a30080d2840180d2020000d4007008d5007008d5008008d5000008d5008008d5e00e9cd200c0b8f2e10180d2c20080d2630180d2640180d2020000d400609f0ca09299d20000b0f2c10180d2620080d2030080d2240080d2020000d4"}}, @smc={0x1e, 0x40, {0x84000050, [0x10000, 0x101, 0x5, 0x8, 0x2]}}, @svc={0x122, 0x40, {0x400, [0x6c, 0x0, 0x1, 0xdeb00000, 0x9]}}, @uexit={0x0, 0x18, 0x8}, @its_send_cmd={0xaa, 0x28, {0xd, 0x1, 0x3, 0x10, 0x2, 0x21}}, @svc={0x122, 0x40, {0x0, [0x1, 0x7, 0x0, 0x4, 0x3]}}, @eret={0xe6, 0x18, 0x7}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0xf00, 0xffffffffffffffff, 0x2}}, @its_setup={0x82, 0x28, {0x2, 0x1, 0x2bc}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x1, 0x2, 0x10, 0xae, 0x10001, 0x3}}, @svc={0x122, 0x40, {0x84000051, [0xa318, 0xb2, 0x94, 0x400, 0x5]}}, @svc={0x122, 0x40, {0x4000, [0x8, 0x4, 0x7fff, 0x6, 0x40]}}, @svc={0x122, 0x40, {0xc400000c, [0x491a, 0x4, 0x4, 0x3, 0x8]}}], 0x628}, &(0x7f0000000980)=[@featur2], 0x1) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f0000000080)={0x3, 0x0, [{0xb00, 0x2, 0x0, 0x0, @adapter={0x2794, 0x6, 0x401, 0xedbc, 0x2}}, {0x0, 0x3, 0x1, 0x0, @adapter={0x7ff, 0x0, 0x1ff, 0x3, 0xe00}}, {0x1, 0x2, 0x0, 0x0, @adapter={0x5, 0x800, 0x1, 0x7fffffff, 0x6}}]}) kernel console output (not intermixed with test programs): [ 351.280024][ T24] audit: type=1400 audit(350.490:74): avc: denied { read } for pid=3210 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 357.580410][ T24] audit: type=1400 audit(356.800:75): avc: denied { write } for pid=3265 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 361.053927][ T24] audit: type=1400 audit(360.280:76): avc: denied { write } for pid=3270 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 364.313368][ T3210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.135155][ T24] audit: type=1400 audit(370.360:77): avc: denied { write } for pid=3275 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 374.629853][ T24] audit: type=1400 audit(373.840:78): avc: denied { write } for pid=3278 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 386.311104][ T24] audit: type=1400 audit(385.530:79): avc: denied { write } for pid=3283 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 391.051231][ T24] audit: type=1400 audit(390.260:80): avc: denied { write } for pid=3286 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 401.576805][ T24] audit: type=1400 audit(400.800:81): avc: denied { write } for pid=3291 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 404.979849][ T24] audit: type=1400 audit(404.200:82): avc: denied { write } for pid=3294 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 407.257859][ T3210] eql: remember to turn off Van-Jacobson compression on your slave devices [ 416.059810][ T24] audit: type=1400 audit(415.280:83): avc: denied { write } for pid=3300 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 419.511469][ T24] audit: type=1400 audit(418.730:84): avc: denied { write } for pid=3303 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 430.220038][ T24] audit: type=1400 audit(429.440:85): avc: denied { write } for pid=3308 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 433.811128][ T24] audit: type=1400 audit(433.030:86): avc: denied { write } for pid=3311 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 438.660870][ T24] audit: type=1400 audit(437.870:87): avc: denied { write } for pid=3313 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 442.020755][ T24] audit: type=1400 audit(441.240:88): avc: denied { write } for pid=3316 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 451.025453][ T24] audit: type=1400 audit(450.200:89): avc: denied { write } for pid=3320 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 455.710280][ T24] audit: type=1400 audit(454.930:90): avc: denied { write } for pid=3323 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 464.891503][ T24] audit: type=1400 audit(464.070:91): avc: denied { write } for pid=3327 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 468.414755][ T24] audit: type=1400 audit(467.640:92): avc: denied { write } for pid=3330 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 487.003708][ T24] audit: type=1400 audit(486.190:93): avc: denied { write } for pid=3340 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 490.534520][ T24] audit: type=1400 audit(489.760:94): avc: denied { write } for pid=3343 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 502.604603][ T24] audit: type=1400 audit(501.830:95): avc: denied { write } for pid=3349 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 506.329961][ T24] audit: type=1400 audit(505.550:96): avc: denied { write } for pid=3352 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 519.000378][ T24] audit: type=1400 audit(518.200:97): avc: denied { write } for pid=3356 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 522.423286][ T24] audit: type=1400 audit(521.620:98): avc: denied { write } for pid=3359 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:20727' (ED25519) to the list of known hosts. [ 551.361845][ T24] audit: type=1400 audit(550.580:99): avc: denied { name_bind } for pid=3364 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 552.733330][ T24] audit: type=1400 audit(551.960:100): avc: denied { execute } for pid=3365 comm="sh" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 552.767863][ T24] audit: type=1400 audit(551.990:101): avc: denied { execute_no_trans } for pid=3365 comm="sh" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 562.658538][ T24] audit: type=1400 audit(561.880:102): avc: denied { write } for pid=3366 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 564.721717][ T24] audit: type=1400 audit(563.930:103): avc: denied { write } for pid=3369 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 582.987254][ T24] audit: type=1400 audit(582.210:104): avc: denied { mounton } for pid=3365 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 583.025365][ T24] audit: type=1400 audit(582.250:105): avc: denied { mount } for pid=3365 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 583.102865][ T3365] cgroup: Unknown subsys name 'net' [ 583.155519][ T24] audit: type=1400 audit(582.380:106): avc: denied { unmount } for pid=3365 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 583.526265][ T3365] cgroup: Unknown subsys name 'cpuset' [ 583.632991][ T3365] cgroup: Unknown subsys name 'rlimit' [ 584.384177][ T24] audit: type=1400 audit(583.610:107): avc: denied { setattr } for pid=3365 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 584.403224][ T24] audit: type=1400 audit(583.620:108): avc: denied { mounton } for pid=3365 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 584.426833][ T24] audit: type=1400 audit(583.650:109): avc: denied { mount } for pid=3365 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 585.316145][ T3373] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 585.335053][ T24] audit: type=1400 audit(584.560:110): avc: denied { relabelto } for pid=3373 comm="mkswap" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 585.363154][ T24] audit: type=1400 audit(584.580:111): avc: denied { write } for pid=3373 comm="mkswap" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 585.525000][ T24] audit: type=1400 audit(584.740:112): avc: denied { read } for pid=3365 comm="syz-executor" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 585.540354][ T24] audit: type=1400 audit(584.760:113): avc: denied { open } for pid=3365 comm="syz-executor" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 585.588488][ T3365] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 639.433192][ T24] audit: type=1400 audit(638.660:114): avc: denied { execmem } for pid=3374 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 642.724065][ T24] audit: type=1400 audit(641.950:115): avc: denied { read } for pid=3376 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 642.758446][ T24] audit: type=1400 audit(641.960:116): avc: denied { open } for pid=3377 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 642.822902][ T24] audit: type=1400 audit(642.030:117): avc: denied { mounton } for pid=3376 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 643.036602][ T24] audit: type=1400 audit(642.250:118): avc: denied { module_request } for pid=3376 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 643.046148][ T24] audit: type=1400 audit(642.260:119): avc: denied { module_request } for pid=3377 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 643.987876][ T24] audit: type=1400 audit(643.210:120): avc: denied { sys_module } for pid=3377 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 664.131676][ T3376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 664.374312][ T3376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 664.429615][ T3377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 664.647548][ T3377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 675.393948][ T3376] hsr_slave_0: entered promiscuous mode [ 675.423942][ T3376] hsr_slave_1: entered promiscuous mode [ 676.324444][ T3377] hsr_slave_0: entered promiscuous mode [ 676.358528][ T3377] hsr_slave_1: entered promiscuous mode [ 676.378148][ T3377] debugfs: 'hsr0' already exists in 'hsr' [ 676.411717][ T3377] Cannot create hsr debugfs directory [ 681.481589][ T24] audit: type=1400 audit(680.700:121): avc: denied { create } for pid=3376 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 681.508409][ T24] audit: type=1400 audit(680.730:122): avc: denied { write } for pid=3376 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 681.558470][ T24] audit: type=1400 audit(680.780:123): avc: denied { read } for pid=3376 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 681.714034][ T3376] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 682.005157][ T3376] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 682.142748][ T3376] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 682.322295][ T3376] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 682.404858][ T3376] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 682.533230][ T3376] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 682.675066][ T3376] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 682.757753][ T3376] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 684.165856][ T3377] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 684.264614][ T3377] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 684.341156][ T3377] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 684.453141][ T3377] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 684.505955][ T3377] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 684.668420][ T3377] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 684.777151][ T3377] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 684.953968][ T3377] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 697.683415][ T3376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 700.594095][ T3377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 743.294703][ T3376] veth0_vlan: entered promiscuous mode [ 743.847385][ T3376] veth1_vlan: entered promiscuous mode [ 745.735177][ T3376] veth0_macvtap: entered promiscuous mode [ 746.072222][ T3376] veth1_macvtap: entered promiscuous mode [ 746.384783][ T3377] veth0_vlan: entered promiscuous mode [ 747.128516][ T3377] veth1_vlan: entered promiscuous mode [ 748.313682][ T3457] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.331401][ T3457] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.338525][ T3457] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.372132][ T3457] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.444926][ T3377] veth0_macvtap: entered promiscuous mode [ 750.045436][ T3377] veth1_macvtap: entered promiscuous mode [ 750.786972][ T24] audit: type=1400 audit(749.990:124): avc: denied { mounton } for pid=3376 comm="syz-executor" path="/syzkaller.ux3Ajd/syz-tmp" dev="vda" ino=1877 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 750.821294][ T24] audit: type=1400 audit(750.040:125): avc: denied { mount } for pid=3376 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 750.973701][ T24] audit: type=1400 audit(750.200:126): avc: denied { mounton } for pid=3376 comm="syz-executor" path="/syzkaller.ux3Ajd/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 751.106235][ T24] audit: type=1400 audit(750.330:127): avc: denied { mount } for pid=3376 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 751.463547][ T24] audit: type=1400 audit(750.670:128): avc: denied { mounton } for pid=3376 comm="syz-executor" path="/syzkaller.ux3Ajd/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 751.751863][ T24] audit: type=1400 audit(750.970:129): avc: denied { mounton } for pid=3376 comm="syz-executor" path="/syzkaller.ux3Ajd/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 752.627133][ T3413] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.632401][ T3413] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.677132][ T3413] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.707025][ T3413] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.805893][ T24] audit: type=1400 audit(752.020:130): avc: denied { unmount } for pid=3376 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 753.016558][ T24] audit: type=1400 audit(752.210:131): avc: denied { mounton } for pid=3376 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1544 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 753.202869][ T24] audit: type=1400 audit(752.430:132): avc: denied { mount } for pid=3376 comm="syz-executor" name="/" dev="gadgetfs" ino=3739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 753.824499][ T24] audit: type=1400 audit(753.010:133): avc: denied { mount } for pid=3376 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 755.772740][ T3376] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 757.050829][ T24] kauditd_printk_skb: 2 callbacks suppressed [ 757.057414][ T24] audit: type=1400 audit(756.270:136): avc: denied { read write } for pid=3376 comm="syz-executor" name="loop0" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 757.101020][ T24] audit: type=1400 audit(756.310:137): avc: denied { open } for pid=3376 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 757.194101][ T24] audit: type=1400 audit(756.380:138): avc: denied { ioctl } for pid=3376 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=636 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 767.633561][ T24] audit: type=1400 audit(766.860:139): avc: denied { read write } for pid=3529 comm="syz.0.1" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 767.658064][ T24] audit: type=1400 audit(766.870:140): avc: denied { open } for pid=3529 comm="syz.0.1" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 768.310955][ T24] audit: type=1400 audit(767.510:141): avc: denied { ioctl } for pid=3529 comm="syz.0.1" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 770.276869][ T24] audit: type=1400 audit(769.500:142): avc: denied { append } for pid=3531 comm="syz.1.2" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 772.644371][ T24] audit: type=1400 audit(771.800:143): avc: denied { create } for pid=3531 comm="syz.1.2" anonclass=[kvm-gmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 773.694668][ T24] audit: type=1400 audit(772.890:144): avc: denied { map } for pid=3531 comm="syz.1.2" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=3904 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 773.711836][ T24] audit: type=1400 audit(772.930:145): avc: denied { read } for pid=3531 comm="syz.1.2" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=3904 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 774.582980][ T24] audit: type=1400 audit(773.790:146): avc: denied { execute } for pid=3531 comm="syz.1.2" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=3928 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 813.135862][ T24] audit: type=1400 audit(812.310:147): avc: denied { ioctl } for pid=3559 comm="syz.1.12" path="net:[4026532627]" dev="nsfs" ino=4026532627 ioctlcmd=0xb703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 837.103484][ T24] audit: type=1400 audit(836.330:148): avc: denied { write } for pid=3571 comm="syz.0.16" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=4633 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 846.040839][ T3579] kvm [3579]: Failed to find VMA for hva 0x21016000 [ 846.292868][ T3577] kvm [3577]: Failed to find VMA for hva 0x209e1000 [ 930.157454][ T24] audit: type=1400 audit(929.340:149): avc: denied { write } for pid=3622 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 938.490130][ T24] audit: type=1400 audit(937.710:150): avc: denied { write } for pid=3631 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 947.151652][ T24] audit: type=1400 audit(946.360:151): avc: denied { map } for pid=3635 comm="syz.0.39" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 947.227009][ T24] audit: type=1400 audit(946.440:152): avc: denied { execute } for pid=3635 comm="syz.0.39" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1020.973541][ T24] audit: type=1400 audit(1020.190:153): avc: denied { execute } for pid=3677 comm="syz.1.54" path=2F32372F10FBFF67525673312B0104 dev="tmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1146.558479][ T3760] kvm [3759]: Unsupported guest access at: eeef0000 [ 1146.558479][ T3760] { Op0( 2), Op1( 0), CRn( 0), CRm( 6), Op2( 2), func_read }, [ 1246.135781][ T3457] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.921881][ T3457] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1249.685686][ T3457] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.582772][ T3457] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1268.987564][ T3457] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1269.306695][ T3457] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1269.522000][ T3457] bond0 (unregistering): Released all slaves [ 1271.104971][ T3457] hsr_slave_0: left promiscuous mode [ 1271.191036][ T3457] hsr_slave_1: left promiscuous mode [ 1271.609640][ T3457] veth1_macvtap: left promiscuous mode [ 1271.680684][ T3457] veth0_macvtap: left promiscuous mode [ 1271.687296][ T3457] veth1_vlan: left promiscuous mode [ 1271.703501][ T3457] veth0_vlan: left promiscuous mode [ 1274.804051][ T3826] kvm [3826]: Failed to find VMA for hva 0x20de6000 [ 1308.706223][ T24] audit: type=1400 audit(1307.930:154): avc: denied { write } for pid=3845 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1315.881210][ T24] audit: type=1400 audit(1315.090:155): avc: denied { write } for pid=3857 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1319.915640][ T3210] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1333.290073][ T24] audit: type=1400 audit(1332.500:156): avc: denied { write } for pid=3874 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1336.242165][ T3805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1336.542473][ T3805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1338.274728][ T3880] debugfs: 'vgic-its-state@8080000' already exists in '3880-10' [ 1338.901968][ T24] audit: type=1400 audit(1338.080:157): avc: denied { write } for pid=3882 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1343.065943][ T3210] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1354.035793][ T24] audit: type=1400 audit(1353.260:158): avc: denied { write } for pid=3896 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1360.237673][ T24] audit: type=1400 audit(1359.450:159): avc: denied { write } for pid=3904 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1362.483792][ T3805] hsr_slave_0: entered promiscuous mode [ 1362.574373][ T3805] hsr_slave_1: entered promiscuous mode [ 1362.650869][ T3805] debugfs: 'hsr0' already exists in 'hsr' [ 1362.659975][ T3805] Cannot create hsr debugfs directory [ 1364.755538][ T3210] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1380.081103][ T24] audit: type=1400 audit(1379.300:160): avc: denied { create } for pid=3805 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1380.101787][ T24] audit: type=1400 audit(1379.300:161): avc: denied { write } for pid=3805 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1380.242471][ T24] audit: type=1400 audit(1379.400:162): avc: denied { read } for pid=3805 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1380.345715][ T3805] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1380.646098][ T3805] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1380.781508][ T3805] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1381.115184][ T3805] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1381.168378][ T3805] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1381.483057][ T3805] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1381.583115][ T3805] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1381.768047][ T3805] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1385.617557][ T24] audit: type=1400 audit(1384.840:163): avc: denied { write } for pid=3918 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1392.591365][ T24] audit: type=1400 audit(1391.780:164): avc: denied { write } for pid=3934 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1396.881535][ T3210] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1397.146882][ T24] audit: type=1400 audit(1396.370:165): avc: denied { execmem } for pid=3938 comm="syz.0.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1404.744921][ T3805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1427.792704][ T24] audit: type=1400 audit(1427.010:166): avc: denied { write } for pid=3965 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1437.566962][ T24] audit: type=1400 audit(1436.720:167): avc: denied { write } for pid=3973 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1453.770362][ T24] audit: type=1400 audit(1452.980:168): avc: denied { write } for pid=3986 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1460.933330][ T24] audit: type=1400 audit(1460.100:169): avc: denied { write } for pid=3996 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1473.567564][ T24] audit: type=1400 audit(1472.790:170): avc: denied { write } for pid=4006 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1481.172305][ T24] audit: type=1400 audit(1480.390:171): avc: denied { write } for pid=4016 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1494.632550][ T24] audit: type=1400 audit(1493.840:172): avc: denied { write } for pid=4028 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1498.350647][ T3805] veth0_vlan: entered promiscuous mode [ 1499.501955][ T3805] veth1_vlan: entered promiscuous mode [ 1502.511068][ T3805] veth0_macvtap: entered promiscuous mode [ 1502.896218][ T3805] veth1_macvtap: entered promiscuous mode [ 1503.595434][ T24] audit: type=1400 audit(1502.820:173): avc: denied { write } for pid=4034 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1505.811021][ T40] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1505.812117][ T40] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1505.836371][ T40] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1505.946099][ T40] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1510.593754][ T4036] kvm [4036]: Failed to find VMA for hva 0x20ddd000 [ 1517.807395][ T24] audit: type=1400 audit(1517.030:174): avc: denied { write } for pid=4044 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1525.004785][ T24] audit: type=1400 audit(1524.220:175): avc: denied { write } for pid=4050 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1536.063293][ T24] audit: type=1400 audit(1535.160:176): avc: denied { map } for pid=4057 comm="syz.0.127" path="pipe:[2733]" dev="pipefs" ino=2733 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1620.974641][ T3457] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1622.257287][ T3457] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1624.205817][ T3457] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1625.203839][ T3457] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1637.533260][ T3457] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1637.670885][ T3457] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1637.761367][ T3457] bond0 (unregistering): Released all slaves [ 1638.847305][ T3457] hsr_slave_0: left promiscuous mode [ 1638.954139][ T3457] hsr_slave_1: left promiscuous mode [ 1639.362474][ T3457] veth1_macvtap: left promiscuous mode [ 1639.365776][ T3457] veth0_macvtap: left promiscuous mode [ 1639.390656][ T3457] veth1_vlan: left promiscuous mode [ 1639.394486][ T3457] veth0_vlan: left promiscuous mode [ 1657.317123][ T3457] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1659.035664][ T3457] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1660.886870][ T3457] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1662.285790][ T3457] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1662.852637][ T24] audit: type=1400 audit(1662.050:177): avc: denied { write } for pid=4108 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1669.104859][ T24] audit: type=1400 audit(1668.230:178): avc: denied { write } for pid=4113 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1677.321375][ T3457] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1677.403182][ T3457] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1677.446157][ T3457] bond0 (unregistering): Released all slaves [ 1677.805982][ T3210] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1679.420777][ T3457] hsr_slave_0: left promiscuous mode [ 1679.552874][ T3457] hsr_slave_1: left promiscuous mode [ 1680.098273][ T3457] veth1_macvtap: left promiscuous mode [ 1680.103729][ T3457] veth0_macvtap: left promiscuous mode [ 1680.151716][ T3457] veth1_vlan: left promiscuous mode [ 1680.161499][ T3457] veth0_vlan: left promiscuous mode [ 1698.920856][ T24] audit: type=1400 audit(1698.140:179): avc: denied { write } for pid=4133 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1703.250028][ T24] audit: type=1400 audit(1702.460:180): avc: denied { write } for pid=4143 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1706.406487][ T3210] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1706.596604][ T4081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1706.822436][ T4081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1709.033737][ T4085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1709.216476][ T4085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1716.967678][ T24] audit: type=1400 audit(1716.190:181): avc: denied { write } for pid=4158 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1722.175771][ T24] audit: type=1400 audit(1721.360:182): avc: denied { write } for pid=4167 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1726.666763][ T3210] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1727.076449][ T4081] hsr_slave_0: entered promiscuous mode [ 1727.163854][ T4081] hsr_slave_1: entered promiscuous mode [ 1731.555404][ T4085] hsr_slave_0: entered promiscuous mode [ 1731.597525][ T4085] hsr_slave_1: entered promiscuous mode [ 1731.640599][ T4085] debugfs: 'hsr0' already exists in 'hsr' [ 1731.646273][ T4085] Cannot create hsr debugfs directory [ 1737.274823][ T24] audit: type=1400 audit(1736.500:183): avc: denied { write } for pid=4177 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1741.031760][ T24] audit: type=1400 audit(1740.240:184): avc: denied { write } for pid=4181 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1743.655112][ T3210] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1743.942834][ T4081] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1744.262495][ T4081] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1744.451116][ T4081] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1744.653243][ T4081] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1744.775526][ T4081] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1745.163714][ T4081] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1745.633872][ T4081] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1745.746949][ T4081] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1748.465163][ T4085] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1748.741391][ T4085] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1748.788259][ T4085] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1749.051850][ T4085] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1749.123048][ T4085] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1749.341825][ T4085] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1749.453468][ T4085] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1749.636017][ T4085] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1757.490465][ T24] audit: type=1400 audit(1756.700:185): avc: denied { write } for pid=4202 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1763.274167][ T24] audit: type=1400 audit(1762.490:186): avc: denied { write } for pid=4213 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1766.795138][ T4081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1767.542950][ T3210] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1771.065551][ T4085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1780.974302][ T24] audit: type=1400 audit(1780.200:187): avc: denied { write } for pid=4224 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1789.407461][ T24] audit: type=1400 audit(1788.630:188): avc: denied { write } for pid=4234 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1795.962062][ T3210] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1811.066093][ T24] audit: type=1400 audit(1810.280:189): avc: denied { write } for pid=4248 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1817.331555][ T24] audit: type=1400 audit(1816.490:190): avc: denied { write } for pid=4258 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1821.506463][ T3210] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1834.558111][ T24] audit: type=1400 audit(1833.780:191): avc: denied { write } for pid=4274 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1841.480868][ T24] audit: type=1400 audit(1840.700:192): avc: denied { write } for pid=4284 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1846.747592][ T3210] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1855.523218][ T4081] veth0_vlan: entered promiscuous mode [ 1856.521850][ T4081] veth1_vlan: entered promiscuous mode [ 1861.052805][ T4081] veth0_macvtap: entered promiscuous mode [ 1861.792328][ T4081] veth1_macvtap: entered promiscuous mode [ 1865.199531][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1865.203455][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1865.217171][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1865.333310][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1882.244792][ T4085] veth0_vlan: entered promiscuous mode [ 1883.252229][ T4085] veth1_vlan: entered promiscuous mode [ 1886.722255][ T4085] veth0_macvtap: entered promiscuous mode [ 1887.414141][ T4085] veth1_macvtap: entered promiscuous mode [ 1891.292189][ T4094] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1891.311277][ T3471] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1891.341797][ T3471] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1891.371395][ T3471] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1908.224910][ T24] audit: type=1400 audit(1907.430:193): avc: denied { write } for pid=4327 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1919.103288][ T24] audit: type=1400 audit(1918.320:194): avc: denied { write } for pid=4337 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1940.683728][ T24] audit: type=1400 audit(1939.890:195): avc: denied { write } for pid=4346 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1950.054489][ T24] audit: type=1400 audit(1949.260:196): avc: denied { write } for pid=4357 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1970.229785][ T24] audit: type=1400 audit(1969.410:197): avc: denied { write } for pid=4370 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1981.542381][ T24] audit: type=1400 audit(1980.760:198): avc: denied { write } for pid=4380 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2009.769809][ T24] audit: type=1400 audit(2008.990:199): avc: denied { write } for pid=4395 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2017.991990][ T24] audit: type=1400 audit(2017.190:200): avc: denied { write } for pid=4404 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2038.520439][ T24] audit: type=1400 audit(2037.740:201): avc: denied { write } for pid=4412 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2049.211433][ T24] audit: type=1400 audit(2048.410:202): avc: denied { write } for pid=4422 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2060.351510][ T24] audit: type=1400 audit(2059.550:203): avc: denied { write } for pid=4425 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2064.773913][ T24] audit: type=1400 audit(2063.990:204): avc: denied { write } for pid=4428 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2076.204597][ T24] audit: type=1400 audit(2075.400:205): avc: denied { write } for pid=4433 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2082.780655][ T24] audit: type=1400 audit(2081.990:206): avc: denied { write } for pid=4438 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2108.762578][ T24] audit: type=1400 audit(2107.960:207): avc: denied { write } for pid=4450 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2117.381436][ T24] audit: type=1400 audit(2116.600:208): avc: denied { write } for pid=4458 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2137.332671][ T24] audit: type=1400 audit(2136.540:209): avc: denied { write } for pid=4470 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2146.141508][ T24] audit: type=1400 audit(2145.280:210): avc: denied { write } for pid=4478 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2165.853299][ T4436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2166.624458][ T4436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2185.635610][ T4448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2186.816595][ T4448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2187.286289][ T4235] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2189.493458][ T4235] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2190.586245][ T4235] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2191.755368][ T4235] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2206.693709][ T4235] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2206.963639][ T4235] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2207.095136][ T4235] bond0 (unregistering): Released all slaves [ 2210.642485][ T4235] hsr_slave_0: left promiscuous mode [ 2210.884377][ T4235] hsr_slave_1: left promiscuous mode [ 2211.454190][ T4235] veth1_macvtap: left promiscuous mode [ 2211.466579][ T4235] veth0_macvtap: left promiscuous mode [ 2211.488532][ T4235] veth1_vlan: left promiscuous mode [ 2211.500816][ T4235] veth0_vlan: left promiscuous mode [ 2229.791264][ T4436] hsr_slave_0: entered promiscuous mode [ 2229.844226][ T4436] hsr_slave_1: entered promiscuous mode [ 2233.228483][ T4235] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2234.562727][ T4235] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2236.858003][ T4235] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2238.197182][ T4448] hsr_slave_0: entered promiscuous mode [ 2238.264822][ T4448] hsr_slave_1: entered promiscuous mode [ 2238.305027][ T4448] debugfs: 'hsr0' already exists in 'hsr' [ 2238.312977][ T4448] Cannot create hsr debugfs directory [ 2238.591444][ T4235] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2240.381683][ T24] audit: type=1400 audit(2239.550:211): avc: denied { write } for pid=4525 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2246.470945][ T24] audit: type=1400 audit(2245.690:212): avc: denied { write } for pid=4530 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2255.513418][ T4235] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2255.626648][ T4235] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2255.675226][ T4235] bond0 (unregistering): Released all slaves [ 2256.595833][ T3210] 8021q: adding VLAN 0 to HW filter on device eth13 [ 2257.366074][ T4235] hsr_slave_0: left promiscuous mode [ 2257.405265][ T4235] hsr_slave_1: left promiscuous mode [ 2257.705611][ T4235] veth1_macvtap: left promiscuous mode [ 2257.716176][ T4235] veth0_macvtap: left promiscuous mode [ 2257.725636][ T4235] veth1_vlan: left promiscuous mode [ 2257.753972][ T4235] veth0_vlan: left promiscuous mode [ 2278.553905][ T4436] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2278.868319][ T4436] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2279.541424][ T4436] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2279.922718][ T4436] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2279.996942][ T4436] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2280.342128][ T4436] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2280.490371][ T4436] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2280.747090][ T4436] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2285.316621][ T4448] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2285.647028][ T4448] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2285.796016][ T4448] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2286.152884][ T4448] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2286.286072][ T4448] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2286.551791][ T4448] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2286.731190][ T4448] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2287.111641][ T4448] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2291.521262][ T24] audit: type=1400 audit(2290.740:213): avc: denied { write } for pid=4543 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2297.981409][ T24] audit: type=1400 audit(2297.180:214): avc: denied { write } for pid=4560 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2302.651554][ T3210] 8021q: adding VLAN 0 to HW filter on device eth14 [ 2305.238069][ T4436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2311.234707][ T4448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2318.297432][ T24] audit: type=1400 audit(2317.520:215): avc: denied { write } for pid=4571 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2325.966843][ T24] audit: type=1400 audit(2325.160:216): avc: denied { write } for pid=4581 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2333.303936][ T3210] 8021q: adding VLAN 0 to HW filter on device eth15 [ 2354.323025][ T24] audit: type=1400 audit(2353.550:217): avc: denied { write } for pid=4595 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2361.395016][ T24] audit: type=1400 audit(2360.620:218): avc: denied { write } for pid=4604 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2365.983994][ T3210] 8021q: adding VLAN 0 to HW filter on device eth16 [ 2380.410556][ T24] audit: type=1400 audit(2379.620:219): avc: denied { write } for pid=4620 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2388.499982][ T24] audit: type=1400 audit(2387.700:220): avc: denied { write } for pid=4631 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2394.526940][ T3210] 8021q: adding VLAN 0 to HW filter on device eth17 [ 2412.635908][ T24] audit: type=1400 audit(2411.860:221): avc: denied { write } for pid=4646 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2419.641190][ T24] audit: type=1400 audit(2418.860:222): avc: denied { write } for pid=4656 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2423.056432][ T4436] veth0_vlan: entered promiscuous mode [ 2423.966330][ T4436] veth1_vlan: entered promiscuous mode [ 2425.836902][ T3210] 8021q: adding VLAN 0 to HW filter on device eth18 [ 2427.368441][ T4436] veth0_macvtap: entered promiscuous mode [ 2427.866835][ T4436] veth1_macvtap: entered promiscuous mode [ 2430.992567][ T4448] veth0_vlan: entered promiscuous mode [ 2432.635835][ T4448] veth1_vlan: entered promiscuous mode [ 2433.201061][ T4094] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2433.214959][ T4094] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2433.225528][ T4094] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2433.240300][ T4094] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2437.962380][ T4448] veth0_macvtap: entered promiscuous mode [ 2438.876291][ T4448] veth1_macvtap: entered promiscuous mode [ 2442.470367][ T3807] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2442.471673][ T3807] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2442.522183][ T3457] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2442.603097][ T4094] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2446.278445][ T24] audit: type=1400 audit(2445.500:223): avc: denied { write } for pid=4665 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2458.631142][ T24] audit: type=1400 audit(2457.830:224): avc: denied { write } for pid=4674 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2467.654664][ T3210] 8021q: adding VLAN 0 to HW filter on device eth19 [ 2500.361077][ T24] audit: type=1400 audit(2499.420:225): avc: denied { write } for pid=4698 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2513.303467][ T24] audit: type=1400 audit(2512.480:226): avc: denied { write } for pid=4709 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2521.647057][ T3210] 8021q: adding VLAN 0 to HW filter on device eth20 [ 2539.932910][ T24] audit: type=1400 audit(2539.130:227): avc: denied { write } for pid=4718 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2551.445933][ T24] audit: type=1400 audit(2550.660:228): avc: denied { write } for pid=4733 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2603.916277][ T24] audit: type=1400 audit(2603.140:229): avc: denied { write } for pid=4758 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2614.791357][ T24] audit: type=1400 audit(2614.010:230): avc: denied { write } for pid=4769 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2662.298547][ T24] audit: type=1400 audit(2661.520:231): avc: denied { write } for pid=4796 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2672.901016][ T24] audit: type=1400 audit(2672.090:232): avc: denied { write } for pid=4812 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2693.554049][ T24] audit: type=1400 audit(2692.660:233): avc: denied { write } for pid=4824 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2706.890530][ T24] audit: type=1400 audit(2706.090:234): avc: denied { write } for pid=4835 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2734.870539][ T24] audit: type=1400 audit(2734.020:235): avc: denied { write } for pid=4848 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2746.642967][ T24] audit: type=1400 audit(2745.850:236): avc: denied { write } for pid=4856 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2778.486175][ T24] audit: type=1400 audit(2777.690:237): avc: denied { write } for pid=4871 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2790.230275][ T24] audit: type=1400 audit(2789.420:238): avc: denied { write } for pid=4882 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2844.192794][ T24] audit: type=1400 audit(2843.230:239): avc: denied { write } for pid=4910 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2855.582040][ T24] audit: type=1400 audit(2854.790:240): avc: denied { write } for pid=4922 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2888.505987][ T24] audit: type=1400 audit(2887.720:241): avc: denied { write } for pid=4941 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2901.090247][ T24] audit: type=1400 audit(2900.310:242): avc: denied { write } for pid=4949 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2921.031456][ T24] audit: type=1400 audit(2920.240:243): avc: denied { write } for pid=4958 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2932.242944][ T24] audit: type=1400 audit(2931.440:244): avc: denied { write } for pid=4967 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3018.434758][ T5019] FAULT_INJECTION: forcing a failure. [ 3018.434758][ T5019] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 3018.451251][ T5019] CPU: 0 UID: 0 PID: 5019 Comm: syz.6.224 Not tainted syzkaller #0 PREEMPT [ 3018.451919][ T5019] Hardware name: linux,dummy-virt (DT) [ 3018.452402][ T5019] Call trace: [ 3018.452818][ T5019] show_stack+0x2c/0x3c (C) [ 3018.454811][ T5019] __dump_stack+0x30/0x40 [ 3018.455223][ T5019] dump_stack_lvl+0xd8/0x12c [ 3018.455566][ T5019] dump_stack+0x1c/0x28 [ 3018.455867][ T5019] should_fail_ex+0x56c/0x6d8 [ 3018.456156][ T5019] should_fail+0x14/0x24 [ 3018.456455][ T5019] should_fail_usercopy+0x20/0x30 [ 3018.456771][ T5019] simple_read_from_buffer+0xd0/0x294 [ 3018.457061][ T5019] proc_fail_nth_read+0x184/0x214 [ 3018.457373][ T5019] vfs_read+0x220/0x9d8 [ 3018.457678][ T5019] ksys_read+0x108/0x1fc [ 3018.457973][ T5019] __arm64_sys_read+0x98/0xcc [ 3018.458250][ T5019] invoke_syscall+0x94/0x1ec [ 3018.458585][ T5019] el0_svc_common+0x120/0x2f4 [ 3018.458890][ T5019] do_el0_svc+0x58/0x74 [ 3018.459163][ T5019] el0_svc+0x64/0x240 [ 3018.459481][ T5019] el0t_64_sync_handler+0x84/0x12c [ 3018.459758][ T5019] el0t_64_sync+0x198/0x19c [ 3070.524440][ T24] audit: type=1400 audit(3069.730:245): avc: denied { write } for pid=5042 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3080.193008][ T24] audit: type=1400 audit(3079.400:246): avc: denied { write } for pid=5045 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3512.767877][ T24] audit: type=1400 audit(3511.990:247): avc: denied { write } for pid=5262 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3523.690576][ T24] audit: type=1400 audit(3522.910:248): avc: denied { write } for pid=5273 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3688.998502][ T24] audit: type=1400 audit(3688.210:249): avc: denied { setattr } for pid=5353 comm="syz.5.313" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 3705.862975][ T24] audit: type=1400 audit(3705.040:250): avc: denied { mmap_zero } for pid=5357 comm="syz.6.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 3860.685771][ T5377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3861.076807][ T5377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3869.854132][ T5382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3870.361521][ T5382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3895.243358][ T5377] hsr_slave_0: entered promiscuous mode [ 3895.365120][ T5377] hsr_slave_1: entered promiscuous mode [ 3895.496751][ T5377] debugfs: 'hsr0' already exists in 'hsr' [ 3895.510516][ T5377] Cannot create hsr debugfs directory [ 3909.397797][ T5382] hsr_slave_0: entered promiscuous mode [ 3909.547231][ T5382] hsr_slave_1: entered promiscuous mode [ 3909.607306][ T5382] debugfs: 'hsr0' already exists in 'hsr' [ 3909.640934][ T5382] Cannot create hsr debugfs directory [ 3926.307240][ T5377] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 3926.775757][ T5377] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 3927.392212][ T5377] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 3927.678457][ T5377] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3928.503891][ T5377] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 3928.733563][ T5377] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 3929.832403][ T5377] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 3930.521844][ T5377] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 3938.191965][ T5382] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 3938.595503][ T5382] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 3938.805824][ T5382] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 3939.465523][ T5382] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3939.547648][ T5382] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 3939.978340][ T5382] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 3940.285844][ T5382] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 3940.650592][ T5382] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 3968.895319][ T5377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3979.595248][ T5382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3997.141267][ T24] audit: type=1400 audit(3996.290:251): avc: denied { write } for pid=5476 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4002.666351][ T5344] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4004.866808][ T5344] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4006.414554][ T5344] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4008.506400][ T5344] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4009.795493][ T24] audit: type=1400 audit(4008.940:252): avc: denied { write } for pid=5486 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4035.395833][ T5344] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 4036.042237][ T5344] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 4036.406979][ T5344] bond0 (unregistering): Released all slaves [ 4038.781238][ T5344] hsr_slave_0: left promiscuous mode [ 4038.930650][ T5344] hsr_slave_1: left promiscuous mode [ 4039.353231][ T5344] veth1_macvtap: left promiscuous mode [ 4039.356941][ T5344] veth0_macvtap: left promiscuous mode [ 4039.372082][ T5344] veth1_vlan: left promiscuous mode [ 4039.376184][ T5344] veth0_vlan: left promiscuous mode [ 4068.288298][ T5344] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4070.814090][ T5344] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4073.241573][ T5344] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4075.566459][ T5344] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4089.189804][ T24] audit: type=1400 audit(4088.410:253): avc: denied { write } for pid=5503 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4099.183576][ T24] audit: type=1400 audit(4098.370:254): avc: denied { write } for pid=5512 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4102.766331][ T5344] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 4104.035653][ T5344] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 4104.404315][ T5344] bond0 (unregistering): Released all slaves [ 4105.326439][ T3210] 8021q: adding VLAN 0 to HW filter on device eth21 [ 4106.437066][ T5344] hsr_slave_0: left promiscuous mode [ 4106.559716][ T5344] hsr_slave_1: left promiscuous mode [ 4107.035926][ T5344] veth1_macvtap: left promiscuous mode [ 4107.056365][ T5344] veth0_macvtap: left promiscuous mode [ 4107.106448][ T5344] veth1_vlan: left promiscuous mode [ 4107.151443][ T5344] veth0_vlan: left promiscuous mode [ 4148.386426][ T24] audit: type=1400 audit(4147.610:255): avc: denied { write } for pid=5524 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4157.971997][ T24] audit: type=1400 audit(4157.100:256): avc: denied { write } for pid=5535 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4163.506037][ T3210] 8021q: adding VLAN 0 to HW filter on device eth22 [ 4180.636113][ T24] audit: type=1400 audit(4179.860:257): avc: denied { write } for pid=5551 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4189.566325][ T24] audit: type=1400 audit(4188.720:258): avc: denied { write } for pid=5561 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4196.505782][ T3210] 8021q: adding VLAN 0 to HW filter on device eth24 [ 4212.520748][ T5377] veth0_vlan: entered promiscuous mode [ 4213.871385][ T5377] veth1_vlan: entered promiscuous mode [ 4217.651395][ T5377] veth0_macvtap: entered promiscuous mode [ 4218.411731][ T5377] veth1_macvtap: entered promiscuous mode [ 4222.231791][ T24] audit: type=1400 audit(4221.430:259): avc: denied { write } for pid=5577 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4223.001409][ T4219] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 4223.051518][ T3413] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 4223.065232][ T3413] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 4223.066153][ T3413] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 4224.211429][ T5382] veth0_vlan: entered promiscuous mode [ 4226.555822][ T5382] veth1_vlan: entered promiscuous mode [ 4230.774566][ T24] audit: type=1400 audit(4230.000:260): avc: denied { write } for pid=5582 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4231.856274][ T5382] veth0_macvtap: entered promiscuous mode [ 4232.841445][ T5382] veth1_macvtap: entered promiscuous mode [ 4236.973721][ T3468] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 4236.987322][ T3468] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 4237.031990][ T3468] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 4237.099889][ T3468] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 4238.138374][ T3210] 8021q: adding VLAN 0 to HW filter on device eth23 [ 4267.913215][ T24] audit: type=1400 audit(4267.130:261): avc: denied { write } for pid=5593 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4281.712592][ T24] audit: type=1400 audit(4280.910:262): avc: denied { write } for pid=5605 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4290.745895][ T3210] 8021q: adding VLAN 0 to HW filter on device eth25 [ 4323.662728][ T24] audit: type=1400 audit(4322.720:263): avc: denied { write } for pid=5618 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4337.194468][ T24] audit: type=1400 audit(4336.420:264): avc: denied { write } for pid=5628 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4346.707237][ T3210] 8021q: adding VLAN 0 to HW filter on device eth26 [ 4375.621902][ T24] audit: type=1400 audit(4374.840:265): avc: denied { write } for pid=5648 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4389.936272][ T24] audit: type=1400 audit(4389.140:266): avc: denied { write } for pid=5661 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4399.866577][ T3210] 8021q: adding VLAN 0 to HW filter on device eth27 [ 4419.211240][ T24] audit: type=1400 audit(4418.280:267): avc: denied { write } for pid=5669 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4433.174073][ T24] audit: type=1400 audit(4432.260:268): avc: denied { write } for pid=5678 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4474.824875][ T24] audit: type=1400 audit(4474.030:269): avc: denied { write } for pid=5696 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4488.233259][ T24] audit: type=1400 audit(4487.440:270): avc: denied { write } for pid=5706 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4498.037740][ T3210] 8021q: adding VLAN 0 to HW filter on device eth28 [ 4594.854592][ T24] audit: type=1400 audit(4594.040:271): avc: denied { write } for pid=5756 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4608.391794][ T24] audit: type=1400 audit(4607.500:272): avc: denied { write } for pid=5767 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4635.350213][ T24] audit: type=1400 audit(4634.570:273): avc: denied { write } for pid=5777 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4644.532789][ T24] audit: type=1400 audit(4643.700:274): avc: denied { write } for pid=5780 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4667.770508][ T24] audit: type=1400 audit(4666.950:275): avc: denied { write } for pid=5785 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4680.092425][ T24] audit: type=1400 audit(4679.300:276): avc: denied { write } for pid=5793 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4703.790296][ T24] audit: type=1400 audit(4703.000:277): avc: denied { write } for pid=5804 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4715.600143][ T24] audit: type=1400 audit(4714.780:278): avc: denied { write } for pid=5813 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4737.983469][ T24] audit: type=1400 audit(4737.100:279): avc: denied { write } for pid=5820 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4751.090009][ T24] audit: type=1400 audit(4750.280:280): avc: denied { write } for pid=5829 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4782.721888][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4783.185168][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4799.745181][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4800.246949][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4822.980020][ T24] audit: type=1400 audit(4822.150:281): avc: denied { write } for pid=5863 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4836.941404][ T24] audit: type=1400 audit(4836.060:282): avc: denied { write } for pid=5874 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4842.262564][ T3807] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4844.465547][ T3807] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4845.666909][ T5787] hsr_slave_0: entered promiscuous mode [ 4845.844441][ T5787] hsr_slave_1: entered promiscuous mode [ 4846.766981][ T3807] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4850.596724][ T3807] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4861.633370][ T24] audit: type=1400 audit(4860.810:283): avc: denied { write } for pid=5883 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4862.167282][ T5794] hsr_slave_0: entered promiscuous mode [ 4862.293531][ T5794] hsr_slave_1: entered promiscuous mode [ 4862.476224][ T5794] debugfs: 'hsr0' already exists in 'hsr' [ 4862.480820][ T5794] Cannot create hsr debugfs directory [ 4873.452747][ T24] audit: type=1400 audit(4872.570:284): avc: denied { write } for pid=5888 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4886.165437][ T3807] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 4886.318505][ T3807] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 4886.515890][ T3807] bond0 (unregistering): Released all slaves [ 4888.960543][ T3807] hsr_slave_0: left promiscuous mode [ 4889.065996][ T3807] hsr_slave_1: left promiscuous mode [ 4889.513973][ T3807] veth1_macvtap: left promiscuous mode [ 4889.517575][ T3807] veth0_macvtap: left promiscuous mode [ 4889.537187][ T3807] veth1_vlan: left promiscuous mode [ 4889.564509][ T3807] veth0_vlan: left promiscuous mode [ 4895.647917][ T24] audit: type=1400 audit(4894.870:285): avc: denied { write } for pid=5892 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4902.563214][ T24] audit: type=1400 audit(4901.730:286): avc: denied { write } for pid=5895 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4933.547253][ T3807] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4935.812886][ T3807] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4936.340883][ T5787] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 4936.771538][ T5787] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 4937.412571][ T3807] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4937.881362][ T5787] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 4938.274953][ T5787] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 4940.204013][ T5787] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 4940.873133][ T5787] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 4941.504615][ T3807] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4942.352597][ T5787] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 4942.648575][ T5787] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 4946.834139][ T24] audit: type=1400 audit(4945.910:287): avc: denied { write } for pid=5901 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4957.391304][ T24] audit: type=1400 audit(4956.560:288): avc: denied { write } for pid=5912 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4966.743609][ T3807] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 4967.142880][ T3807] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 4967.392107][ T3807] bond0 (unregistering): Released all slaves [ 4968.487518][ T3210] 8021q: adding VLAN 0 to HW filter on device eth29 [ 4970.381082][ T3807] hsr_slave_0: left promiscuous mode [ 4970.441580][ T3807] hsr_slave_1: left promiscuous mode [ 4970.812380][ T3807] veth1_macvtap: left promiscuous mode [ 4970.823056][ T3807] veth0_macvtap: left promiscuous mode [ 4970.836811][ T3807] veth1_vlan: left promiscuous mode [ 4970.940978][ T3807] veth0_vlan: left promiscuous mode [ 5002.985540][ T5794] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 5003.427705][ T5794] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 5003.631549][ T5794] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 5003.985945][ T5794] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 5004.190954][ T5794] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 5004.651652][ T5794] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 5004.827630][ T5794] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 5005.257820][ T5794] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 5009.511449][ T24] audit: type=1400 audit(5008.720:289): avc: denied { write } for pid=5919 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5014.235442][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 5019.359896][ T24] audit: type=1400 audit(5018.550:290): avc: denied { write } for pid=5934 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5036.936628][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 5056.780357][ T24] audit: type=1400 audit(5055.990:291): avc: denied { write } for pid=5950 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5067.964144][ T24] audit: type=1400 audit(5067.130:292): avc: denied { write } for pid=5961 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5074.893176][ T3210] 8021q: adding VLAN 0 to HW filter on device eth30 [ 5096.284668][ T24] audit: type=1400 audit(5095.410:293): avc: denied { write } for pid=5975 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5107.115915][ T24] audit: type=1400 audit(5106.330:294): avc: denied { write } for pid=5986 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5114.325223][ T3210] 8021q: adding VLAN 0 to HW filter on device eth31 [ 5139.231979][ T24] audit: type=1400 audit(5138.410:295): avc: denied { write } for pid=6004 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5149.050115][ T24] audit: type=1400 audit(5148.250:296): avc: denied { write } for pid=6014 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5155.887471][ T3210] 8021q: adding VLAN 0 to HW filter on device eth32 [ 5166.743699][ T5787] veth0_vlan: entered promiscuous mode [ 5167.845382][ T5794] veth0_vlan: entered promiscuous mode [ 5168.811626][ T24] audit: type=1400 audit(5167.980:297): avc: denied { write } for pid=6023 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5169.342338][ T5787] veth1_vlan: entered promiscuous mode [ 5170.635424][ T5794] veth1_vlan: entered promiscuous mode [ 5176.331656][ T5787] veth0_macvtap: entered promiscuous mode [ 5177.496475][ T5787] veth1_macvtap: entered promiscuous mode [ 5177.987127][ T5794] veth0_macvtap: entered promiscuous mode [ 5179.121493][ T5794] veth1_macvtap: entered promiscuous mode [ 5179.930376][ T24] audit: type=1400 audit(5179.120:298): avc: denied { write } for pid=6028 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5184.802714][ T40] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 5184.981554][ T3468] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 5185.156544][ T3413] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 5185.162706][ T3413] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 5187.035725][ T5797] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 5187.042156][ T5797] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 5187.070627][ T5797] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 5187.415245][ T4518] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 5196.960847][ T24] audit: type=1400 audit(5196.150:299): avc: denied { write } for pid=6030 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5210.482034][ T24] audit: type=1400 audit(5209.550:300): avc: denied { write } for pid=6038 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5237.010457][ T24] audit: type=1400 audit(5236.200:301): avc: denied { write } for pid=6044 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5252.261223][ T24] audit: type=1400 audit(5251.450:302): avc: denied { write } for pid=6061 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5281.720964][ T24] audit: type=1400 audit(5280.930:303): avc: denied { write } for pid=6071 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5291.141586][ T24] audit: type=1400 audit(5290.320:304): avc: denied { write } for pid=6075 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5314.634274][ T24] audit: type=1400 audit(5313.770:305): avc: denied { write } for pid=6078 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5327.833480][ T24] audit: type=1400 audit(5327.040:306): avc: denied { write } for pid=6091 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5352.572228][ T24] audit: type=1400 audit(5351.780:307): avc: denied { write } for pid=6101 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5368.162404][ T24] audit: type=1400 audit(5367.330:308): avc: denied { write } for pid=6113 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5398.003508][ T24] audit: type=1400 audit(5397.050:309): avc: denied { write } for pid=6121 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5413.075437][ T24] audit: type=1400 audit(5412.160:310): avc: denied { write } for pid=6132 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5441.220127][ T24] audit: type=1400 audit(5440.430:311): avc: denied { write } for pid=6140 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5454.813712][ T24] audit: type=1400 audit(5453.980:312): avc: denied { write } for pid=6151 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5478.804086][ T24] audit: type=1400 audit(5477.990:313): avc: denied { write } for pid=6155 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5493.803478][ T24] audit: type=1400 audit(5492.850:314): avc: denied { write } for pid=6170 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5518.030926][ T24] audit: type=1400 audit(5517.180:315): avc: denied { write } for pid=6179 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5533.171619][ T24] audit: type=1400 audit(5532.230:316): avc: denied { write } for pid=6187 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5563.827208][ T24] audit: type=1400 audit(5563.050:317): avc: denied { write } for pid=6196 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5579.081223][ T24] audit: type=1400 audit(5578.140:318): avc: denied { write } for pid=6207 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5603.722735][ T24] audit: type=1400 audit(5602.900:319): avc: denied { write } for pid=6213 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5619.391675][ T24] audit: type=1400 audit(5618.590:320): avc: denied { write } for pid=6224 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5642.701171][ T24] audit: type=1400 audit(5641.900:321): avc: denied { write } for pid=6230 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5658.490876][ T24] audit: type=1400 audit(5657.670:322): avc: denied { write } for pid=6247 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5677.447366][ T24] audit: type=1400 audit(5676.670:323): avc: denied { write } for pid=6249 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5684.300409][ T24] audit: type=1400 audit(5683.520:324): avc: denied { write } for pid=6252 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5714.570881][ T24] audit: type=1400 audit(5713.760:325): avc: denied { write } for pid=6258 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5727.678430][ T24] audit: type=1400 audit(5726.900:326): avc: denied { write } for pid=6266 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5735.836801][ T3210] 8021q: adding VLAN 0 to HW filter on device eth1 [ 5842.437242][ T6260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 5843.012334][ T6263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 5843.426862][ T6260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 5843.828075][ T6263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 5897.231221][ T6263] hsr_slave_0: entered promiscuous mode [ 5897.336192][ T6263] hsr_slave_1: entered promiscuous mode [ 5897.428096][ T6263] debugfs: 'hsr0' already exists in 'hsr' [ 5897.535122][ T6263] Cannot create hsr debugfs directory [ 5903.742998][ T6260] hsr_slave_0: entered promiscuous mode [ 5903.863464][ T6260] hsr_slave_1: entered promiscuous mode [ 5903.916887][ T6260] debugfs: 'hsr0' already exists in 'hsr' [ 5904.040677][ T6260] Cannot create hsr debugfs directory [ 5964.315517][ T6263] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 5965.233670][ T6263] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 5965.684980][ T6263] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 5966.428332][ T6263] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 5966.578305][ T6263] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 5967.112628][ T6263] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 5967.484228][ T6263] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 5968.217374][ T6263] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 5976.811148][ T6260] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 5977.245900][ T6260] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 5977.328074][ T6260] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 5978.123489][ T6260] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 5978.346875][ T6260] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 5978.874253][ T6260] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 5979.092749][ T6260] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 5979.457358][ T6260] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 6015.396538][ T6263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 6025.765269][ T6260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 6049.796014][ T3210] 8021q: adding VLAN 0 to HW filter on device eth2 [ 6091.531698][ T26] INFO: task syz.9.400:6240 blocked for more than 430 seconds. [ 6091.532773][ T26] Not tainted syzkaller #0 [ 6091.533665][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 6091.534160][ T26] task:syz.9.400 state:D stack:0 pid:6240 tgid:6240 ppid:5787 task_flags:0x400040 flags:0x00000011 [ 6091.536933][ T26] Call trace: [ 6091.537332][ T26] __switch_to+0x5e0/0xb70 (T) [ 6091.537916][ T26] __schedule+0x1e0c/0x38cc [ 6091.538392][ T26] schedule+0x1b4/0x274 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 6091.750544][ T26] schedule_timeout+0x68/0x1e4 [ 6091.757464][ T26] wait_for_completion+0x1b8/0x414 [ 6091.758156][ T26] __synchronize_srcu+0x1c8/0x208 [ 6091.762824][ T26] synchronize_srcu+0x668/0x8dc [ 6091.763439][ T26] mmu_notifier_unregister+0x33c/0x444 [ 6091.763945][ T26] kvm_put_kvm+0x69c/0xbbc [ 6091.764472][ T26] kvm_vm_release+0x58/0x78 [ 6091.764953][ T26] __fput+0x4ac/0x978 [ 6091.765410][ T26] ____fput+0x20/0x30 [ 6091.765821][ T26] task_work_run+0x1b8/0x250 [ 6091.766344][ T26] exit_to_user_mode_loop+0x110/0x188 [ 6091.766850][ T26] el0_svc+0x18c/0x240 [ 6091.767321][ T26] el0t_64_sync_handler+0x84/0x12c [ 6091.767783][ T26] el0t_64_sync+0x198/0x19c [ 6091.941612][ T26] [ 6091.941612][ T26] Showing all locks held in the system: [ 6091.953656][ T26] 1 lock held by khungtaskd/26: [ 6091.954277][ T26] #0: ffff800087e73598 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x4c/0x188 [ 6091.956846][ T26] 3 locks held by kworker/u4:3/40: [ 6091.957369][ T26] 1 lock held by klogd/3173: [ 6091.957727][ T26] 2 locks held by getty/3238: [ 6091.958050][ T26] #0: 82f00000124a60a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 6092.102087][ T26] #1: faff80008cbbb2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x314/0x11f8 [ 6092.103902][ T26] 2 locks held by syz-executor/3365: [ 6092.104260][ T26] 3 locks held by kworker/u4:0/3807: [ 6092.104569][ T26] 2 locks held by kworker/u4:9/4219: [ 6092.104901][ T26] #0: 09f000000d034140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x958/0x154c [ 6092.106660][ T26] #1: ffff80008ebc7ce8 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x978/0x154c [ 6092.108424][ T26] 2 locks held by kworker/u4:4/5344: [ 6092.281530][ T26] 3 locks held by kworker/u4:10/5379: [ 6092.281972][ T26] 3 locks held by kworker/u4:15/5497: [ 6092.282338][ T26] 3 locks held by kworker/u4:1/5797: [ 6092.282658][ T26] 2 locks held by kworker/u4:6/5839: [ 6092.282952][ T26] #0: 09f000000d034140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x958/0x154c [ 6092.284753][ T26] #1: ffff80008f3e7ce8 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x978/0x154c [ 6092.286545][ T26] 2 locks held by syz.1.399/6242: [ 6092.286905][ T26] 1 lock held by dhcpcd-run-hook/6431: [ 6092.287380][ T26] [ 6092.287648][ T26] ============================================= [ 6092.287648][ T26] [ 6092.290464][ T26] Kernel panic - not syncing: hung_task: blocked tasks [ 6092.300362][ T26] CPU: 0 UID: 0 PID: 26 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT [ 6092.301569][ T26] Hardware name: linux,dummy-virt (DT) [ 6092.302264][ T26] Call trace: [ 6092.302824][ T26] show_stack+0x2c/0x3c (C) [ 6092.303755][ T26] __dump_stack+0x30/0x40 [ 6092.304620][ T26] dump_stack_lvl+0x30/0x12c [ 6092.305536][ T26] dump_stack+0x1c/0x28 [ 6092.306339][ T26] vpanic+0x4cc/0x844 [ 6092.307117][ T26] vpanic+0x0/0x844 [ 6092.307801][ T26] hung_task_panic+0x0/0x2c [ 6092.308547][ T26] kthread+0x4cc/0x514 [ 6092.309356][ T26] ret_from_fork+0x10/0x20 [ 6092.311025][ T26] Kernel Offset: disabled [ 6092.311701][ T26] CPU features: 0x00000000,00d1802f,df1847a1,057ffe1f [ 6092.312821][ T26] Memory Limit: none [ 6092.314981][ T26] Rebooting in 86400 seconds..