last executing test programs: 33m45.004793088s ago: executing program 0 (id=167): r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2a) close(0xffffffffffffffff) r3 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f00000001c0)={0x8, 0xffffffffffffffff}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000380)}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x5, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000002c0)=@attr_other={0x0, 0x8, 0x108, &(0x7f0000000000)=0xc000000000000000}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x4, 0x2, 0x0}) syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r0, &(0x7f0000000b80)={0x0, &(0x7f0000000100)=[@hvc={0x32, 0x40, {0x84000015, [0x100000001, 0x8000000000000000, 0xffffffffffffffff, 0xee24, 0xfffffffffffeffff]}}], 0x40}, &(0x7f0000000040)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r8 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) r11 = syz_kvm_add_vcpu$arm64(r8, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r11, 0x4010aeab, &(0x7f0000000180)=@arm64_sys={0x603000000013d801, &(0x7f0000000000)=0x1}) r12 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x1) r13 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r13, 0xae01, 0x2d) r14 = syz_kvm_vgic_v3_setup(r10, 0x1, 0xb7d193957cf26944) ioctl$KVM_SET_DEVICE_ATTR(r14, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x0, 0x3, &(0x7f0000000200)=0x8080000}) syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil) 33m38.178969054s ago: executing program 1 (id=168): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0xa8200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x27) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) syz_kvm_vgic_v3_setup(r1, 0x4, 0x1a0) r2 = eventfd2(0x2, 0x80000) r3 = eventfd2(0xf, 0x80001) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r3, 0x0, 0x2, r2}) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x10) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r3, 0x10000, 0x0, r2}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0xa8200, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x27) syz_kvm_vgic_v3_setup(r5, 0x4, 0x1a0) r6 = eventfd2(0x2, 0x80000) r7 = eventfd2(0xf, 0x80001) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000100)={r7, 0x0, 0x2, r6}) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000000)={r6, 0x8, 0x2, r6}) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000040)={r7, 0x0, 0x1}) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r9, r10, &(0x7f0000b95000/0x400000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000de9000/0x4000)=nil, 0x930, 0x1000017, 0x28031, 0xffffffffffffffff, 0x0) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r12 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r11, 0xae04) mmap$KVM_VCPU(&(0x7f0000c58000/0x1000)=nil, r12, 0x2000003, 0xaf832, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x6, 0x8032, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_ONE_REG(r10, 0x4010aeab, &(0x7f0000000100)=@arm64_sys={0x603000000013c000}) 33m26.096051852s ago: executing program 0 (id=169): r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x29) openat$kvm(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r6, 0x4010aeab, &(0x7f0000000000)=@arm64_fp_extra={0x60200000001000d5, 0xfffffffffffffffe}) r7 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r2, 0x0) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x300) syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0xffffffffffffffa7) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x2) r14 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r11, 0xae04) r15 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, r14, 0x1000002, 0x13, r13, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r15, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r13, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x454303, 0x0) r16 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40800, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000007c0)=@x86={0xa, 0x2, 0xfb, 0x0, 0x8, 0x0, 0x2, 0x23, 0x80, 0x9, 0x40, 0x7, 0x0, 0x7, 0xd4a, 0x9, 0xee, 0x6, 0x5, '\x00', 0x5, 0x5}) ioctl$KVM_CREATE_VM(r16, 0x40049409, 0x6) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) r17 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) ioctl$KVM_CREATE_VM(r17, 0x541b, 0x2004001c) 33m22.348914154s ago: executing program 1 (id=170): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x1}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0xeffffffd, 0x801) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x200, 0x4000, 0x4, r2, 0x1}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000001340)={0x3, 0x0, 0x2, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x1000000000003, 0x0, 0x2, r2, 0xf}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r6, 0x400454d8, 0x1000000008) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x8, 0xf, 0x0, 0x5, 0x6, 0x6, 0x6, 0x54, 0x86, 0xdd, 0x68, 0x0, 0x20b, 0x0, 0x0, 0x3, 0x5, 0x5, '\x00', 0x1, 0x3}) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r9, 0x4010ae67, &(0x7f0000000200)={0xc000, 0x11000, 0x1}) write$eventfd(r8, &(0x7f00000001c0)=0x3, 0x50) 33m10.545706935s ago: executing program 1 (id=171): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f0000000040)={0xe000, 0x2000}) (async) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f0000000040)={0xe000, 0x2000}) syz_kvm_setup_cpu$arm64(r4, r2, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f00000000c0)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}], 0x1, 0x0, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0x801c581f, 0x0) (async) ioctl$KVM_CREATE_VM(r5, 0x801c581f, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000100)={0x1000020, 0x1}) (async) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000100)={0x1000020, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 33m8.119046639s ago: executing program 0 (id=172): r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000000080)={0x100000000, 0x3}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f00000001c0)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4}) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x8, 0x108, &(0x7f0000000340)=0xfffffffffffffffc}) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f00000000c0)=@attr_other={0x0, 0x1e5f, 0x1, &(0x7f0000000140)=0xc060}) ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000080)={0x1fd, 0x4, 0xeeee8000, 0x2000, &(0x7f0000ffd000/0x2000)=nil, 0x10000, r3}) r7 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r7, 0x0, 0x0, 0x0) r8 = syz_kvm_add_vcpu$arm64(r0, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) close(0x4) close(0x5) ioctl$KVM_RUN(r8, 0xae80, 0x0) 32m58.318376501s ago: executing program 0 (id=173): r0 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000400)={0x0, &(0x7f0000000000)=[@its_setup={0x82, 0x28, {0x4, 0x3, 0x1f}}, @irq_setup={0x46, 0x18, {0x4, 0x3cd}}, @hvc={0x32, 0x40, {0x84000003, [0x540d2395, 0x7, 0x0, 0xfffffffffffffff9]}}, @code={0xa, 0xb4, {"40108bd20080b0f2e10180d2020080d2030180d2040080d2020000d4a0d191d200a0b8f2c10180d2e20080d2030080d2440080d2020000d4007008d5007008d580ba97d200c0b8f2810180d2c20080d2230080d2c40080d2020000d40094202e00c784d200e0b8f2010080d2c20180d2830180d2e40080d2020000d4002c205e401085d20080b8f2e10080d2c20180d2030080d2a40080d2020000d4007008d5"}}, @smc={0x1e, 0x40, {0x40000000, [0x8001, 0x100000001, 0xfffffffffffffffc, 0x8000, 0x4]}}, @its_setup={0x82, 0x28, {0x0, 0x3, 0x23f}}, @its_send_cmd={0xaa, 0x28, {0xa, 0x1, 0x2, 0x7, 0x2, 0x8, 0x2}}, @code={0xa, 0x84, {"00b0004f000000900040002f007008d5000c207e007008d5a0dc96d20020b8f2410180d2020180d2c30080d2440080d2020000d4008008d560418bd20000b0f2e10180d2620080d2a30080d2e40080d2020000d440208cd20000b0f2810080d2620180d2230180d2c40180d2020000d4"}}, @its_setup={0x82, 0x28, {0x2, 0x2, 0xe3}}, @eret={0xe6, 0x18, 0x6}, @msr={0x14, 0x20, {0x609e, 0x4a}}, @msr={0x14, 0x20, {0x603000000013df10}}, @eret={0xe6, 0x18, 0xffffffffffff61c5}, @its_setup={0x82, 0x28, {0x4, 0x1, 0x27a}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x0, 0x0, 0x3, 0x9, 0x8}}, @uexit={0x0, 0x18, 0xfffffffffffffffd}, @msr={0x14, 0x20, {0x603000000013e534, 0x800}}, @msr={0x14, 0x20, {0x603000000013e290, 0x83}}, @svc={0x122, 0x40, {0xffff, [0x8000000000000001, 0x978, 0xe, 0x5, 0xc]}}, @mrs={0xbe, 0x18, {0x603000000013c4c9}}, @msr={0x14, 0x20, {0x603000000013f518, 0xd}}], 0x400}, &(0x7f0000000440)=[@featur1={0x1, 0xa4}], 0x1) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = ioctl$KVM_GET_STATS_FD_cpu(r0, 0xaece) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000480)={0x1, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f00000004c0)={0xee, "14854183d8a5524341437de43c0e7eb77d053e72236c36afd44c0af0f3c1ee2e402179acf5ac35256a7ed808151293439bc7182bee8069dbc773e71c92608eb71b812931d3ffbce9efc310efa69d9f02280996a9a24df49d4244c6b853cafb8abbac3dce77b2480d6695eb990207eccaf6cdf1a554b8ae1cd428de1ce6524849e2739593a6d4098a8c02a276f9cd3a72860eba28f4fa82678ed016fd6f29decce4cb0354f26847b6f103acec2b103efcfa2700547252b21c3147a6ec04e04ca0a871f4123eabd8afccd21bd3caa6181f65cae81552e315bd8e5741d444c7e4f7ac6bbc2d149d79f3e7b0e822fa57"}) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f00000005c0)={0xa8, 0x0, 0x1}) ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000640)={0xe4, 0x0, 0x5}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000006c0)={0x1}) ioctl$KVM_RUN(r1, 0xae80, 0x0) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) ioctl$KVM_S390_VCPU_FAULT(r0, 0x4008ae52, &(0x7f0000000700)=0x7) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x10000, 0x1, 0xfec00000, 0x1000, &(0x7f0000ffa000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0xa) r3 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000c40)={0x0, &(0x7f0000000780)=[@memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x380, 0x1, 0x1}}, @code={0xa, 0x6c, {"000028d5007008d500d8212e604591d200c0b0f2210180d2e20180d2430080d2240080d2020000d4e00300aa000028d5c0978ad20000b0f2810080d2020080d2c30080d2640080d2020000d4000480da0020601e00c0631e"}}, @svc={0x122, 0x40, {0x84000006, [0x10, 0x7d8e, 0x2, 0x58, 0xa]}}, @svc={0x122, 0x40, {0x400, [0x3, 0x100, 0x3, 0xa000, 0x5058]}}, @msr={0x14, 0x20, {0x603000000013de93, 0x9}}, @eret={0xe6, 0x18, 0x4f}, @msr={0x14, 0x20, {0x603000000013c085, 0x8000}}, @code={0xa, 0x6c, {"1f0000ab00008028000008d5000008d500d4a02ee04280d20020b0f2210080d2220180d2e30080d2e40080d2020000d40000699e000008d5607189d200c0b8f2c10180d2220080d2e30080d2640080d2020000d4000028d5"}}, @code={0xa, 0x9c, {"805287d200e0b8f2810080d2c20080d2a30180d2640180d2020000d4000028d560ba90d200c0b0f2810180d2420080d2c30180d2e40080d2020000d480f89fd200e0b0f2410180d2a20080d2230180d2640180d2020000d4009c004f0000003200000035007008d50038212e40bc9ad20020b0f2410080d2820080d2a30080d2c40180d2020000d4"}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xffe0, 0x1, 0xa}}, @its_setup={0x82, 0x28, {0x4, 0x3, 0xc}}, @memwrite={0x6e, 0x30, @generic={0xc000, 0x8c7, 0x3d99, 0x2}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x1, 0x3, 0x10, 0x1, 0x2, 0x4}}, @msr={0x14, 0x20, {0x603000000013deea, 0xffffffffffffffff}}, @memwrite={0x6e, 0x30, @generic={0x2000, 0xe13, 0x9}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x0, 0x3, 0xc, 0x80000}}, @eret={0xe6, 0x18, 0x7fff}, @smc={0x1e, 0x40, {0x1000000, [0x80000001, 0x7, 0x9, 0x5, 0x1]}}, @uexit={0x0, 0x18, 0x3}, @its_setup={0x82, 0x28, {0x2, 0x3, 0x23d}}, @svc={0x122, 0x40, {0xc400000c, [0x4, 0x0, 0x6, 0x7da]}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x0, 0x2, 0x8, 0x8001, 0xffffffff, 0x3}}, @eret={0xe6, 0x18, 0x1}], 0x4bc}, &(0x7f0000000c80)=[@featur1={0x1, 0xb2}], 0x1) syz_kvm_setup_cpu$arm64(r2, r3, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000e80)=[{0x0, &(0x7f0000000cc0)=[@eret={0xe6, 0x18, 0x6}, @uexit={0x0, 0x18, 0x3}, @memwrite={0x6e, 0x30, @generic={0x8000000, 0x10f, 0x4, 0x8}}, @msr={0x14, 0x20, {0x603000000013df57, 0x7}}, @its_setup={0x82, 0x28, {0xb, 0x2, 0x2b6}}, @irq_setup={0x46, 0x18, {0x2, 0xec}}, @msr={0x14, 0x20, {0x603000000013c201, 0x1fc00000000000}}, @svc={0x122, 0x40, {0x84000003, [0xffffffffffffffc0, 0x4, 0x100000000, 0x4, 0x6]}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x1, 0x3, 0x2, 0x3, 0xca0, 0x2}}, @hvc={0x32, 0x40, {0xc5000020, [0xfff, 0x2, 0x8, 0x8]}}, @eret={0xe6, 0x18, 0x9}, @irq_setup={0x46, 0x18, {0x2, 0x3cb}}], 0x1b8}], 0x1, 0x0, &(0x7f0000000ec0)=[@featur1={0x1, 0x6}], 0x1) ioctl$KVM_CAP_PTP_KVM(r2, 0x4068aea3, &(0x7f0000000f00)) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x35) syz_kvm_setup_cpu$arm64(r4, r3, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000001200)=[{0x0, &(0x7f0000000f80)=[@svc={0x122, 0x40, {0x800, [0xfc1e, 0x1, 0x7, 0x2, 0xffffffffffffffff]}}, @eret={0xe6, 0x18, 0xc}, @eret={0xe6, 0x18, 0x3}, @msr={0x14, 0x20, {0x603000000013e71a, 0x6}}, @code={0xa, 0x84, {"00c8a05e00004078804f8dd20080b8f2210080d2620180d2c30180d2640080d2020000d4404799d20080b0f2210080d2420180d2c30180d2840180d2020000d4a0c49cd20080b8f2410180d2220180d2630080d2640080d2020000d400004029000c00380084e00d00008079008008d5"}}, @code={0xa, 0x6c, {"007008d5007008d500a0a00de0a882d20060b0f2a10080d2620080d2030180d2a40080d2020000d4008008d51020601e000028d50054000f008008d580ef99d20020b0f2210080d2420180d2a30180d2040080d2020000d4"}}, @irq_setup={0x46, 0x18, {0x2, 0x5e}}, @hvc={0x32, 0x40, {0x84000004, [0xfffffffffffffffe, 0x6, 0xffffffffffff0000, 0x7fffffff, 0x5]}}, @smc={0x1e, 0x40, {0x1, [0xffffffff, 0x8000, 0x7, 0x0, 0x1000]}}, @svc={0x122, 0x40, {0x84000052, [0x2, 0x2, 0x2, 0x400, 0x3]}}], 0x258}], 0x1, 0x0, &(0x7f0000001240)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000001280)={0x40000, 0x1000}) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f00000012c0)=@x86={0x3, 0xd, 0x9, 0x0, 0xffff92f7, 0xff, 0x8, 0x7, 0x1, 0x5, 0x4d, 0x0, 0x0, 0x80, 0x7f, 0x3, 0x10, 0x2, 0xa, '\x00', 0xe, 0x1}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000001300)={0x5, 0x3, 0x100000, 0x2000, &(0x7f0000c32000/0x2000)=nil}) ioctl$KVM_GET_REGS(r3, 0x8360ae81, &(0x7f0000001340)) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$KVM_SET_SIGNAL_MASK(r0, 0x4004ae8b, &(0x7f0000001400)={0x5e, "2e2af249ab9cb29d9efa1c8c4ebb47a31171b4973a9736ad54a745ee6f9817be96d23785ba18944be9240a45bb7c8a17b30f6d405920a03cd4eb1f4850ef655dd5beafe73a40f384a97703ffc16af13df9bed9f923d462482e280d9be6b4"}) munmap(&(0x7f0000003000/0x3000)=nil, 0x3000) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000001480)=0x2) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000001500)=@attr_irq_timer={0x0, 0x1, 0x0, &(0x7f00000014c0)=0x12}) ioctl$KVM_ARM_PREFERRED_TARGET(r0, 0x8020aeaf, &(0x7f0000001540)) 32m57.572650746s ago: executing program 1 (id=174): munmap$KVM_VCPU(0x0, 0x1000000000) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) r0 = mmap$KVM_VCPU(&(0x7f0000c79000/0x4000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000f1a000/0x4000)=nil, 0x930, 0x0, 0x9032, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_memcpy_off$KVM_EXIT_MMIO(r0, 0x20, &(0x7f0000000040)="7222e967a79c7877d1c226fe3d1bc460c21f31e54b6f57d1", 0x0, 0x18) ioctl$KVM_GET_API_VERSION(r1, 0xae00, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_ARM_SET_COUNTER_OFFSET(r2, 0x4010aeb5, &(0x7f0000000000)={0x401, 0x8001}) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xc, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x20000000) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) 32m51.845977446s ago: executing program 0 (id=175): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x402, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, 0x0) 32m51.193171965s ago: executing program 1 (id=176): r0 = eventfd2(0x0, 0x0) r1 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000bfd000/0x400000)=nil) write$eventfd(r0, 0xffffffffffffffff, 0x0) 32m44.903312818s ago: executing program 1 (id=177): r0 = eventfd2(0x1, 0x1) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x40000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_vgic_v3_setup(r2, 0x1, 0x100) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x33) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000040)={r0, 0x6, 0x3, r0}) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000100)={0x1, 0x0, [{0x3, 0x2, 0x0, 0x0, @sint={0x7fbf, 0x5}}]}) write$eventfd(r0, &(0x7f0000000000)=0x1000007, 0x8) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xf4) 32m44.636317114s ago: executing program 0 (id=178): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x88201, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x25) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000380)=[@mrs={0xbe, 0x18, {0x603000000013c520}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x0, 0x0, 0x7, 0x5, 0x0, 0x4}}, @irq_setup={0x46, 0x18, {0x3, 0x28}}, @uexit={0x0, 0x18, 0x5}], 0x70}, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_ARM_VCPU_INIT(r6, 0x4020aeae, &(0x7f0000000040)={0x5}) ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, &(0x7f0000000100)=@arm64_sys={0x603000000013c119, &(0x7f0000000000)=0xe2}) r7 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil) r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) syz_kvm_vgic_v3_setup(r8, 0x1, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r10, 0x4018aee1, &(0x7f0000000000)=@attr_other={0x0, 0x6, 0x4, &(0x7f0000000080)=0x800}) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r10, 0x4018aee1, &(0x7f0000000280)=@attr_pmu_irq={0x0, 0x0, 0x0, &(0x7f0000000240)=0xe7}) 31m57.546139869s ago: executing program 32 (id=177): r0 = eventfd2(0x1, 0x1) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x40000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_vgic_v3_setup(r2, 0x1, 0x100) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x33) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000040)={r0, 0x6, 0x3, r0}) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000100)={0x1, 0x0, [{0x3, 0x2, 0x0, 0x0, @sint={0x7fbf, 0x5}}]}) write$eventfd(r0, &(0x7f0000000000)=0x1000007, 0x8) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xf4) 31m52.372887496s ago: executing program 33 (id=178): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x88201, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x25) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000380)=[@mrs={0xbe, 0x18, {0x603000000013c520}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x0, 0x0, 0x7, 0x5, 0x0, 0x4}}, @irq_setup={0x46, 0x18, {0x3, 0x28}}, @uexit={0x0, 0x18, 0x5}], 0x70}, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_ARM_VCPU_INIT(r6, 0x4020aeae, &(0x7f0000000040)={0x5}) ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, &(0x7f0000000100)=@arm64_sys={0x603000000013c119, &(0x7f0000000000)=0xe2}) r7 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil) r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) syz_kvm_vgic_v3_setup(r8, 0x1, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r10, 0x4018aee1, &(0x7f0000000000)=@attr_other={0x0, 0x6, 0x4, &(0x7f0000000080)=0x800}) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r10, 0x4018aee1, &(0x7f0000000280)=@attr_pmu_irq={0x0, 0x0, 0x0, &(0x7f0000000240)=0xe7}) 21m32.770127472s ago: executing program 3 (id=214): r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r2, 0x4068aea3, &(0x7f0000000000)={0xef, 0x0, 0x7}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x5d) eventfd2(0xe, 0x801) r4 = eventfd2(0x0, 0x0) close(r4) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x1}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x8, 0xf, 0x0, 0x5, 0x6, 0x6, 0x6, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x1000009, 0x0, 0x0, 0x3, 0x5, 0x8, '\x00', 0x1, 0x400000000002}) syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x0, 0x100000f, 0x12, 0xffffffffffffffff, 0x0) r7 = syz_kvm_add_vcpu$arm64(r0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@mrs={0xbe, 0x18, {0x603000000013c807}}], 0x18}, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 21m16.691612783s ago: executing program 3 (id=215): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f00000000c0)=@arm64_sys={0x603000000013dce0, &(0x7f0000000000)=0x43ff}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000100)=@arm64={0x8, 0x8, 0x80, '\x00', 0xc}) r3 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013c4f1, 0x8000}}, @msr={0x14, 0x20, {0x603000000013c4f2, 0x8000}}, @msr={0x14, 0x20, {0x603000000013dce0, 0x8000}}, @msr={0x14, 0x20, {0x603000000013dce2, 0x8000}}, @msr={0x14, 0x20, {0x603000000013dce3, 0x8000}}, @msr={0x14, 0x20, {0x603000000013dce4, 0x8000}}, @msr={0x14, 0x20, {0x603000000013dce8, 0x8000}}], 0xe0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r6, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r2, 0x4018aee1, &(0x7f00000000c0)=@attr_pmu_init) ioctl$KVM_RUN(r2, 0xae80, 0x0) close(0x4) openat$kvm(0x0, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) close(r7) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1d) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_ARM_VCPU_INIT(r9, 0x4020aeae, &(0x7f0000000080)={0x5, 0x1}) ioctl$KVM_CAP_ARM_SYSTEM_SUSPEND(r8, 0x4068aea3, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) close(0x5) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r2, 0x4018aee2, &(0x7f00000002c0)=@attr_pmu_init) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 21m7.132402508s ago: executing program 2 (id=216): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48) (async) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r2, 0x0) (async) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x2000007, 0x30d2a4fbfbea96b8, 0xffffffffffffffff, 0x0) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000000)) (async) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x401c5820, &(0x7f0000000100)=@attr_other={0x0, 0x5, 0xfffffffffffffff7, 0x0}) (async) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x2, 0x23ac5f9b426ec4b2, 0xffffffffffffffff, 0x0) (async) r5 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000540)={0x0, &(0x7f0000000b00)=[@uexit={0x0, 0x18, 0x2}, @uexit={0x0, 0x18, 0x8000}, @code={0xa, 0x84, {"002c000e008008d50000406c005880d200a0b0f2210080d2a20180d2430080d2040080d2020000d40038207e80578ed20020b8f2e10180d2c20180d2230180d2440180d2020000d40008c0dae0819fd200c0b0f2010180d2c20180d2030180d2440180d2020000d4007008d5003c0053"}}, @eret={0xe6, 0x18, 0x9}, @svc={0x122, 0x40, {0x84000053, [0x2, 0x941, 0x4, 0x7, 0x3]}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xffd0, 0x6, 0x4}}, @smc={0x1e, 0x40, {0x84000011, [0x80000000, 0x3, 0x5, 0x99bec8c, 0x5]}}, @hvc={0x32, 0x40, {0xc5000021, [0x0, 0x0, 0xfffffffffffffbff, 0x0, 0x9]}}, @irq_setup={0x46, 0x18, {0x2, 0x29e}}, @uexit={0x0, 0x18, 0x7}, @eret={0xe6, 0x18, 0x9d}, @irq_setup={0x46, 0x18, {0x3, 0xd2}}, @smc={0x1e, 0x40, {0x4, [0x3ff, 0x2, 0x9, 0xffffffffffffffff, 0xf88]}}, @uexit={0x0, 0x18, 0x8}, @its_setup={0x82, 0x28, {0x4, 0x0, 0x279}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x4, 0x8000000000000001}}, @uexit={0x0, 0x18, 0x5}, @irq_setup={0x46, 0x18, {0x3, 0x28}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80c0000, 0x300, 0xc8, 0x3}}, @smc={0x1e, 0x40, {0x84000003, [0x1, 0x92e, 0x5, 0x54, 0x81]}}, @its_setup={0x82, 0x28, {0x4, 0x0, 0x6b}}, @eret={0xe6, 0x18, 0x4}, @svc={0x122, 0x40, {0xc5000020, [0xffffffffffffffff, 0x5, 0x0, 0x0, 0x1]}}, @smc={0x1e, 0x40, {0xc4000053, [0x6, 0x9, 0x80000000, 0x80, 0x2]}}, @its_setup={0x82, 0x28, {0x0, 0x0, 0xe3}}, @uexit={0x0, 0x18, 0x7}, @smc={0x1e, 0x40, {0x3f000000, [0x5, 0x5, 0x9, 0x7fffffff]}}, @its_setup={0x82, 0x28, {0x3, 0x8, 0x1}}, @smc={0x1e, 0x40, {0x20, [0x8, 0x6e0000000000, 0x4, 0x7fd, 0x2000000000]}}, @memwrite={0x6e, 0x30, @generic={0x8080000, 0x929, 0x7f4, 0x1}}], 0x544}, &(0x7f0000000580)=[@featur2={0x1, 0x41}], 0x1) mmap$KVM_VCPU(&(0x7f0000000000/0x3000)=nil, 0x930, 0x300000e, 0x13, r5, 0x0) 21m1.34561681s ago: executing program 3 (id=217): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2e) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x30}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f00000002c0)=@arm64_core={0x603000000010003c, &(0x7f0000000240)=0x8000000003b93}) r3 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, r4, 0x2800002, 0x4010, 0xffffffffffffffff, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, r4, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x20200, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_vgic_v3_setup(r8, 0x3, 0x340) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r9, 0x4018aee1, &(0x7f0000000240)=@attr_irq_timer={0x0, 0x1, 0x435d278e9d37e2af, &(0x7f0000000200)=0x15}) r10 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000bfe000/0x400000)=nil) r11 = syz_kvm_add_vcpu$arm64(r10, 0x0, &(0x7f0000000bc0)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_SET_ONE_REG(r11, 0x4010aeac, &(0x7f0000000000)=@arm64_fw={0x6030000000140000, 0x0}) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) (rerun: 64) syz_kvm_vgic_v3_setup(r6, 0x1, 0x3a0) r12 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x0, 0x100000a, 0x80010, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r12, 0x20, &(0x7f00000000c0)="600593545f12ddde29c4f4733797ae3172cd653bdeb84bf9a6d24f982a681783c88e9b0b6b03885a81b01afa3cb1a8dcfdb79ff9c367c1680eb6e52a7ade4347ed1453e7798271b5", 0x0, 0x48) 20m57.12015014s ago: executing program 2 (id=218): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000300)={0x0, 0x0}, 0x0, 0x0) r4 = syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8}) ioctl$KVM_GET_DEVICE_ATTR(r4, 0x4018aee2, &(0x7f00000002c0)=@attr_riscv64=@attr_imsic={0x0, 0x1, 0x4, 0xfffffffffffffffe}) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = mmap$KVM_VCPU(&(0x7f0000dd4000/0x3000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143222c0ead9a1621ba24f023314cc4bf610d6a743ad4913923b8364e5f00000000000200", 0x0, 0x48) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r9 = mmap$KVM_VCPU(&(0x7f0000e58000/0x2000)=nil, 0x930, 0x280000b, 0x11, r8, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r9, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29) r10 = mmap$KVM_VCPU(&(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0, 0x4266da3ee1032932, r3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000000)={0x1fe, 0x4, 0xdddd1000, 0x2000, &(0x7f00003c5000/0x2000)=nil}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r10, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff9ca6445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4933923b8364e5f73ea2fc43ac1abfc0200", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r8, 0x0) r11 = eventfd2(0x0, 0x0) close(r11) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f0, 0x1f01) write$eventfd(r11, &(0x7f0000000280)=0x3, 0x8) ioctl$KVM_SET_DEVICE_ATTR_vm(r6, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000140)={0x6, 0x1ff, 0x1}}) r12 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f00000001c0)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r14, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x10002, 0x5, 0x3000, 0x2000, &(0x7f0000ecc000/0x2000)=nil}) syz_kvm_setup_cpu$arm64(r13, 0xffffffffffffffff, &(0x7f0000001000/0x400000)=nil, &(0x7f0000000140)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0xfffffffffffffe50) ioctl$KVM_SET_DEVICE_ATTR(r14, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x8, 0x100, &(0x7f0000000200)=0x8000000000000000}) 20m40.731688109s ago: executing program 2 (id=219): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x6) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000100)={0x1d7, 0x4}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r2, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x16, 0x4, 0x1}}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r2, r3, &(0x7f0000b74000/0x400000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f0000000240)=[@smc={0x1e, 0x40, {0xc5000020, [0x6, 0x5f9, 0x3, 0x401, 0x1000]}}], 0x40}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 20m40.300261855s ago: executing program 3 (id=220): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ARM_SET_COUNTER_OFFSET(r1, 0x4010aeb5, 0xfffffffffffffffe) r2 = openat$kvm(0x0, &(0x7f0000000000), 0x2c6242, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000b80)={0x0, &(0x7f0000000100)=[@smc={0x1e, 0x40, {0x8400000a, [0x84000000, 0xa, 0x0, 0x6, 0x10]}}], 0x40}, &(0x7f00000000c0)=[@featur1={0x1, 0x4}], 0x1) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@msr={0x14, 0x20, {0x603000000013e7fc, 0x8000}}], 0x20}, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r9, 0x4018aee1, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 20m27.383667459s ago: executing program 2 (id=221): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) (async) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000600)={0x0, &(0x7f0000000300)=[@memwrite={0x6e, 0x30, @generic={0x40000, 0xf94, 0x80, 0x4}}, @hvc={0x32, 0x40, {0x84000001, [0x10000, 0x8, 0x1, 0xfffffffffffffffb, 0x7fffffffffffffff]}}, @its_setup={0x82, 0x28, {0x3, 0x4, 0x21d}}, @its_send_cmd={0xaa, 0x28, {0xb, 0x1, 0x1, 0x2, 0x9, 0x0, 0x1}}, @hvc={0x32, 0x40, {0xc5000020, [0xfffffffffffffffa, 0x1, 0x8, 0x1, 0x100000000]}}, @msr={0x14, 0x20, {0xc06000000027cd02, 0x4}}, @svc={0x122, 0x40, {0x4, [0x1ff, 0xe, 0x21, 0x9, 0x5]}}, @irq_setup={0x46, 0x18, {0x1, 0x17b}}, @svc={0x122, 0x40, {0x8000, [0xa, 0x9, 0x5, 0x6, 0x1]}}, @smc={0x1e, 0x40, {0x84000012, [0x9, 0xf97, 0x7, 0xd]}}, @hvc={0x32, 0x40, {0x86000000, [0x8000000, 0x7, 0x8, 0x3, 0x7fffffff]}}, @code={0xa, 0x54, {"008008d5c08086d20020b8f2210080d2420080d2a30080d2640080d2020000d40000402c00409f0c007008d50004407c000028d5000008d50000311e008008d5"}}, @eret={0xe6, 0x18, 0x9}, @mrs={0xbe, 0x18, {0x603000000013c65d}}, @its_setup={0x82, 0x28, {0x2, 0x2, 0x24b}}], 0x2e4}, &(0x7f0000000640)=[@featur1={0x1, 0x14}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async) r4 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r4, 0x0, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r5, 0x4018aee1, &(0x7f0000000040)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000280)={0x14, 0xff}}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x8080000, 0x8, 0x4, 0xc, 0xe6, 0x40, 0x9, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x3, 0x0, 0x42, 0x5, 0x7d, 0x6, 0x36, 0x0, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0x7, 0x6, 0x5, 0x42, 0x8b, 0xff, 0x8, 0x3, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x9, 0x16, 0x88, 0xab, 0x8, 0x9, 0x9, 0xf7, 0x97}, {0xdddd1000, 0xdddd0000, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0x3000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xd000, 0xc000, 0xa, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x81}, {0x7000, 0x30}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0xfec00000, [0x6800000000000000, 0x4, 0x3, 0x8]}) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, 0x0) r7 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil) r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x2}}], 0x28}, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r10, 0x4010aeac, &(0x7f0000000100)=@arm64_extra={0x603000000013c103, &(0x7f00000000c0)=0xa0}) write$eventfd(r3, &(0x7f00000001c0)=0x9, 0x5d) 20m23.862948667s ago: executing program 3 (id=222): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x28081, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000769000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000380)={0x0, &(0x7f0000000100)=[@smc={0x1e, 0x40, {0x84000002, [0x3, 0x3, 0x2, 0x3f8b, 0x3448]}}], 0x40}, &(0x7f00000000c0)=[@featur2={0x1, 0x4}], 0x1) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000b80)={0x0, &(0x7f0000000100)=[@smc={0x1e, 0x40, {0x84000003, [0x80000000000000, 0x53960c3d, 0xac8, 0x2, 0x7fffffffffffffff]}}], 0x40}, &(0x7f00000001c0)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0xd, 0x5, 0xb, 0x0, 0x2, 0x6, 0x6, 0x9, 0x8, 0x89, 0x6, 0x2, 0x0, 0x6, 0x6, 0xe2, 0x3, 0x29, 0x0, '\x00', 0x10, 0x6}) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r9, &(0x7f00000001c0), 0xe80) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 20m12.361202227s ago: executing program 2 (id=223): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f00000000c0)=@arm64_sys={0x603000000013dce0, &(0x7f0000000000)=0x43ff}) (async) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r2, 0x4018aee1, &(0x7f00000000c0)=@attr_pmu_init) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) close(0x4) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) (async) openat$kvm(0x0, &(0x7f0000000100), 0x40100, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x33) (async) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0xfffffffffffffffd) ioctl$KVM_ARM_VCPU_INIT(r3, 0x4020aeae, &(0x7f0000000080)={0x5, 0x1}) (async) ioctl$KVM_CAP_ARM_SYSTEM_SUSPEND(0xffffffffffffffff, 0x4068aea3, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x0, 0x100000b, 0x10, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x9000000) (async) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) (async) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) (async) munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000) (async) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) (async) munmap(&(0x7f0000eb4000/0x2000)=nil, 0x2000) (async) munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000) munmap(&(0x7f0000482000/0x2000)=nil, 0x2000) (async) munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000) 20m6.402419459s ago: executing program 3 (id=224): r0 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r1 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000000)=[@its_setup={0x82, 0x28, {0x4, 0x2, 0x36c}}, @uexit={0x0, 0x18, 0x9}, @code={0xa, 0x6c, {"c0238fd20080b0f2610180d2620080d2030080d2840180d2020000d4c0818ed20020b8f2010180d2820080d2a30080d2640080d2020000d4000008d50000611e003c004e000008d500003fd6007008d50074000f007008d5"}}, @svc={0x122, 0x40, {0x8400000c, [0x9, 0x1, 0x4, 0x0, 0x3]}}], 0xec}, &(0x7f0000000140)=[@featur1={0x1, 0x1}], 0x1) mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, r0, 0x2000004, 0x100010, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0x5452, 0xa00000000000000) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x34) 19m57.983406197s ago: executing program 2 (id=225): r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r4 = mmap$KVM_VCPU(&(0x7f0000005000/0x2000)=nil, r3, 0x80000e, 0x11, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) r5 = eventfd2(0x0, 0x0) close(r5) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0x4000)=nil, r6, 0x3000009, 0x11, r2, 0x0) write$eventfd(r5, &(0x7f0000000000)=0x2, 0x8) syz_kvm_vgic_v3_setup(r1, 0x2, 0x200) 19m18.781355795s ago: executing program 34 (id=224): r0 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r1 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000000)=[@its_setup={0x82, 0x28, {0x4, 0x2, 0x36c}}, @uexit={0x0, 0x18, 0x9}, @code={0xa, 0x6c, {"c0238fd20080b0f2610180d2620080d2030080d2840180d2020000d4c0818ed20020b8f2010180d2820080d2a30080d2640080d2020000d4000008d50000611e003c004e000008d500003fd6007008d50074000f007008d5"}}, @svc={0x122, 0x40, {0x8400000c, [0x9, 0x1, 0x4, 0x0, 0x3]}}], 0xec}, &(0x7f0000000140)=[@featur1={0x1, 0x1}], 0x1) mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, r0, 0x2000004, 0x100010, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0x5452, 0xa00000000000000) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x34) 19m9.311444955s ago: executing program 35 (id=225): r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r4 = mmap$KVM_VCPU(&(0x7f0000005000/0x2000)=nil, r3, 0x80000e, 0x11, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) r5 = eventfd2(0x0, 0x0) close(r5) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0x4000)=nil, r6, 0x3000009, 0x11, r2, 0x0) write$eventfd(r5, &(0x7f0000000000)=0x2, 0x8) syz_kvm_vgic_v3_setup(r1, 0x2, 0x200) 12m9.391117533s ago: executing program 4 (id=226): openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) (async) r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1b) mmap$KVM_VCPU(&(0x7f0000c0c000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000c0c000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x14000, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x18) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x18) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) (async) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f00000001c0)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000000)=0x9}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1fe, 0x1, 0xf000, 0x2000, &(0x7f0000ee9000/0x2000)=nil}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000140)=@attr_other={0x0, 0x8, 0x100, &(0x7f0000000080)=0xfffffffffffffff7}) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x30, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x30, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000) (async) munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) (async) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000) munmap(&(0x7f0000482000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x100010, 0xffffffffffffffff, 0x0) munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000) mmap$KVM_VCPU(&(0x7f0000f1a000/0x4000)=nil, 0x930, 0x3000002, 0x110, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000f1a000/0x4000)=nil, 0x930, 0x3000002, 0x110, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xc, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x20000000) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000280)=@attr_arm64={0x0, 0x3, 0x5, 0x0}) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) (async) r5 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000180)={0x0, &(0x7f0000000000)=[@memwrite={0x6e, 0x5bb2174777e4af5c, @generic={0xd000, 0x115, 0x400, 0x5}}], 0x30}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r6, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) (async) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r6, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) r7 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) 12m6.761525289s ago: executing program 5 (id=227): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x29) r1 = syz_kvm_setup_syzos_vm$arm64(r0, &(0x7f0000bff000/0x400000)=nil) r2 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r3 = syz_kvm_add_vcpu$arm64(r1, &(0x7f0000000340)={0x0, &(0x7f0000000000)=[@its_send_cmd={0xaa, 0x28, {0xd, 0x1, 0x1, 0xd, 0x6, 0x6, 0x2}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x18, 0x38ed, 0xa}}, @irq_setup={0x46, 0x18, {0x3, 0x356}}, @irq_setup={0x46, 0x18, {0x3, 0x296}}, @uexit={0x0, 0x18, 0x1}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x0, 0x1}}, @hvc={0x32, 0x40, {0x84000050, [0x9, 0xffffffff80000000, 0x5, 0x10000, 0x8]}}, @irq_setup={0x46, 0x18, {0x0, 0x133}}, @its_setup={0x82, 0x28, {0x1, 0x1, 0x3b1}}, @code={0xa, 0x84, {"0000004a0000406d000000bde01d8dd200c0b8f2e10080d2a20080d2230080d2240180d2020000d460cc8fd20020b8f2a10080d2a20080d2c30080d2840080d2020000d4000000a8008008d520ab8bd20060b0f2010080d2a20180d2c30080d2440180d2020000d400fc202e000000eb"}}, @eret={0xe6, 0x18, 0xfffffffffffffff1}, @eret={0xe6, 0x18, 0x1}, @eret={0xe6, 0x18, 0x774}, @memwrite={0x6e, 0x30, @generic={0x2000, 0x47e, 0x4, 0x4}}, @eret={0xe6, 0x18, 0xc}, @msr={0x14, 0x20, {0x603000000013c015, 0x1}}, @code={0xa, 0x6c, {"0088212e000008d5007008d5e09e8ed20040b8f2010080d2c20180d2e30080d2240080d2020000d40070202e007008d5000028d500000048003c205ec0a88bd200c0b0f2010180d2420180d2630180d2c40180d2020000d4"}}, @hvc={0x32, 0x40, {0x84000010, [0x7, 0x0, 0x5, 0xd]}}], 0x330}, &(0x7f0000000380)=[@featur2={0x1, 0x5}], 0x1) r4 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x3000)=nil, r2, 0x2000001, 0x40010, r3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000003c0)={0x4, 0x0, 0x30000, 0x2000, &(0x7f0000d41000/0x2000)=nil}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x80000, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x200) ioctl$KVM_CAP_ARM_USER_IRQ(r0, 0x4068aea3, &(0x7f0000000440)) r6 = ioctl$KVM_GET_STATS_FD_cpu(r3, 0xaece) ioctl$KVM_CAP_DIRTY_LOG_RING(r6, 0x4068aea3, &(0x7f00000004c0)={0xc0, 0x0, 0x5000}) syz_kvm_add_vcpu$arm64(r1, &(0x7f0000000a80)={0x0, &(0x7f0000000540)=[@memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0xffd0, 0xf278}}, @svc={0x122, 0x40, {0x84000006, [0xb, 0xfffffffffffffffb, 0x9, 0x6, 0x9c]}}, @its_setup={0x82, 0x28, {0x2, 0x1, 0x314}}, @hvc={0x32, 0x40, {0xc5000021, [0x3, 0x5, 0x1000, 0x0, 0x9]}}, @svc={0x122, 0x40, {0x20, [0xffffffffffffffff, 0xff, 0x7678, 0x3, 0x7]}}, @eret={0xe6, 0x18, 0xf621}, @hvc={0x32, 0x40, {0xa50907071eb6e602, [0x1ce0, 0x20, 0x9, 0x1, 0x7fffffffffffffff]}}, @irq_setup={0x46, 0x18, {0x1, 0x2bf}}, @smc={0x1e, 0x40, {0xc4000053, [0x80, 0x81, 0x4826, 0x7, 0xd0a]}}, @code={0xa, 0x6c, {"c0b18dd200a0b0f2210080d2c20080d2e30080d2040180d2020000d400b8a12e007008d500b8217e007008d5000020ca0000c068405899d20020b0f2a10080d2e20080d2a30080d2a40080d2020000d40000c0290064007f"}}, @svc={0x122, 0x40, {0x84000006, [0x3, 0x2, 0xc15, 0x9, 0x3]}}, @irq_setup={0x46, 0x18, {0x4, 0x227}}, @code={0xa, 0xb4, {"000028d50000029ec0e994d20040b0f2010080d2220080d2e30180d2e40180d2020000d440299bd20040b8f2410080d2020080d2430080d2240180d2020000d4000008d5e0aa93d200c0b0f2210180d2620180d2030180d2c40180d2020000d4007008d5000008d5404694d200c0b8f2210080d2220180d2030180d2040080d2020000d420798fd20060b8f2210080d2e20180d2830180d2840080d2020000d4"}}, @its_send_cmd={0xaa, 0x28, {0x4, 0x0, 0x3, 0xa, 0xfffffffe, 0xf, 0x1}}, @irq_setup={0x46, 0x18, {0x4, 0x28f}}, @its_send_cmd={0xaa, 0x28, {0x5, 0x1, 0x3, 0xb, 0xffff, 0x1000, 0x2}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x0, 0x2, 0xb, 0xd80, 0x8, 0x3}}, @eret={0xe6, 0x18, 0xff0}, @smc={0x1e, 0x40, {0x31000000, [0xde24, 0x4284, 0x2, 0xd, 0x2]}}, @svc={0x122, 0x40, {0xffff, [0x3, 0x1fb, 0x5, 0x4, 0x8000]}}, @eret={0xe6, 0x18, 0x4}, @mrs={0xbe, 0x18, {0x603000000013dea0}}, @code={0xa, 0x6c, {"00f8b02e604280d200e0b0f2e10180d2a20180d2a30180d2240080d2020000d40084004f007008d5a07f96d20080b8f2e10180d2e20180d2830080d2e40080d2020000d4007008d50060df0c007008d5000028d5007008d5"}}], 0x504}, &(0x7f0000000ac0)=[@featur1={0x1, 0x9}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vm(r6, 0x4018aee1, &(0x7f0000000b40)=@attr_other={0x0, 0x100, 0xd, &(0x7f0000000b00)=0x3}) ioctl$KVM_IRQ_LINE_STATUS(r6, 0xc008ae67, &(0x7f0000000b80)={0x2, 0x2}) close(r0) ioctl$KVM_ARM_VCPU_INIT(r6, 0x4020aeae, &(0x7f0000000bc0)={0x0, 0x88}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000c00)="f431e12b2050432cb02b4b7c7ae373f4d04c125adfdcf18d9b2027726a3e6b5159020ebceafeb004401ba3e2746363352f0ebd54cc45c4238d3566dcc624fcdee8c0fca23dfccb8a", 0x0, 0x48) syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r6, 0x4068aea3, &(0x7f0000000c80)={0xe4, 0x0, 0x6}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000d00)={0x10202, 0x207f24a8e43691f5, 0x8080000, 0x1000, &(0x7f0000e8c000/0x1000)=nil}) munmap(&(0x7f0000fce000/0x1000)=nil, 0x1000) ioctl$KVM_ASSIGN_SET_MSIX_NR(r6, 0x4008ae73, &(0x7f0000000d40)={0x1, 0x6}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x38) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000d80)="1f5ecf7a1d3c1d08229cfcf5c782246f069b7320c203d284714495f14cc4cc6e81ee7ba247424e27cc919b78bacc38253e745b59ca11e1ed66f9de39c1bda17c80a6d3f1db86939b", 0x0, 0x48) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000000e00)={0xdddd1000, 0x0, 0x1}) syz_kvm_setup_cpu$arm64(r6, r3, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000001200)=[{0x0, &(0x7f0000000e40)=[@smc={0x1e, 0x40, {0x86000000, [0x4, 0xd, 0x3ff, 0xffff, 0x800]}}, @its_send_cmd={0xaa, 0x28, {0x4, 0x0, 0x2, 0xe, 0x6025, 0x3}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80c0000, 0x4}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x2000, 0x7, 0x2}}, @mrs={0xbe, 0x18, {0x603000000013c032}}, @uexit={0x0, 0x18, 0x800}, @its_send_cmd={0xaa, 0x28, {0x5, 0x1, 0x2, 0xd, 0x4, 0x9}}, @eret={0xe6, 0x18, 0x5}, @msr={0x14, 0x20, {0x603000000013df01, 0x8}}, @svc={0x122, 0x40, {0xc28394adaab11233, [0x4, 0x8, 0xfffffffffffffff7, 0x6fc6, 0x6]}}, @msr={0x14, 0x20, {0x603000000013def3, 0x8}}, @hvc={0x32, 0x40, {0xc5000020, [0x9, 0xfffffffffffffffa, 0x8, 0x5, 0xd]}}, @smc={0x1e, 0x40, {0x2000000, [0x662f, 0x8, 0xe, 0x2, 0xeb4]}}, @uexit={0x0, 0x18, 0x100000000}, @code={0xa, 0x6c, {"80a292d20000b0f2e10180d2220080d2e30180d2640080d2020000d400809f0c007008d520fc99d20000b0f2e10080d2020180d2830180d2e40080d2020000d4007008d5008008d500000028007008d5000008d51f2003d5"}}, @its_send_cmd={0xaa, 0x28, {0xa, 0x1, 0x4, 0x5, 0xc, 0x7, 0x4}}, @svc={0x122, 0x40, {0x10, [0x9, 0x6, 0x2, 0x26, 0x7]}}, @its_setup={0x82, 0x28, {0x3, 0x3, 0x1b1}}, @hvc={0x32, 0x40, {0x80, [0x8, 0x1, 0x4, 0x9, 0x5]}}], 0x38c}], 0x1, 0x0, &(0x7f0000001240)=[@featur1={0x1, 0x20}], 0x1) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000001280)={0xcf96df2f477673f8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000001300)=@attr_riscv64=@attr_ctrl={0x0, 0x1, 0x1, &(0x7f00000012c0)=0x1}) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x0, 0x4, 0x40010, 0xffffffffffffffff, 0x0) 11m49.830566929s ago: executing program 4 (id=228): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2e) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r2, r3, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000100)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000140)=@arm64_core={0x603000000010000e, &(0x7f0000000000)=0x13}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000000)={0x0, &(0x7f0000000040)=[@smc={0x1e, 0x40, {0xc400000e, [0x99b, 0x100000003, 0x5, 0x101, 0x10]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1) r7 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f00000001c0)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4}) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x8, 0x4, &(0x7f0000000080)=0x8000}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 11m49.778884212s ago: executing program 5 (id=229): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x28081, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000769000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=[@featur2={0x1, 0x5}], 0x1) r4 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000380)={0x0, 0x0}, &(0x7f0000000280)=[@featur2={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_vgic_v3_setup(r1, 0x1, 0x380) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000000140)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000100)={0xb, 0x2, 0x1}}) ioctl$KVM_CREATE_GUEST_MEMFD(r7, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x50000, 0x0) r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, r8, 0x3000001, 0x1010, r4, 0x0) mmap$KVM_VCPU(&(0x7f00007dc000/0x2000)=nil, r8, 0xb, 0x30d2a4fbfbfad6b8, r3, 0x0) 11m21.983236774s ago: executing program 5 (id=230): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x4}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000004}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r2, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000240)={0x8, 0xffffffffffffffff}) r6 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x32) r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r8, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x3, 0x3, 0x10000000004}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000005}}], 0x50}, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r9, r10, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x20}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r10, 0x4010aeab, &(0x7f0000000100)=@arm64_core={0x603000000010004e, &(0x7f00000000c0)=0x80003fb}) r11 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae03, 0xa8) r12 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000c00000/0x400000)=nil) r15 = syz_kvm_add_vcpu$arm64(r14, &(0x7f0000000080)={0x0, &(0x7f0000000000)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0xe}}], 0x28}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r13, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000100)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r16, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000180)=0x8080000}) ioctl$KVM_RUN(r15, 0xae80, 0x0) ioctl$KVM_SIGNAL_MSI(r13, 0x4020aea5, &(0x7f0000000200)={0x8090040, 0x0, 0x0, 0x1, 0x10001}) r17 = openat$kvm(0x0, &(0x7f0000000040), 0x444380, 0x0) ioctl$KVM_CREATE_VM(r17, 0xae01, 0x0) 11m21.622971196s ago: executing program 4 (id=231): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x5, 0x1, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000bc2000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=[@featur2={0x1, 0x2}], 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000500)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000100)={0x0, &(0x7f0000000140)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r5, 0x2, 0x100) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_IRQ_LINE(r5, 0x4008ae61, &(0x7f0000000180)={0x1010020, 0x1}) r8 = eventfd2(0x1, 0x801) r9 = eventfd2(0xff, 0x0) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f00000001c0)={r8, 0x3, 0x2, r9}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 10m59.680641572s ago: executing program 4 (id=232): r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000001c0)={0x8}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2e) syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) 10m33.400293325s ago: executing program 36 (id=230): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x4}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000004}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r2, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000240)={0x8, 0xffffffffffffffff}) r6 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x32) r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r8, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x3, 0x3, 0x10000000004}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000005}}], 0x50}, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r9, r10, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x20}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r10, 0x4010aeab, &(0x7f0000000100)=@arm64_core={0x603000000010004e, &(0x7f00000000c0)=0x80003fb}) r11 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae03, 0xa8) r12 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000c00000/0x400000)=nil) r15 = syz_kvm_add_vcpu$arm64(r14, &(0x7f0000000080)={0x0, &(0x7f0000000000)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0xe}}], 0x28}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r13, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000100)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r16, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000180)=0x8080000}) ioctl$KVM_RUN(r15, 0xae80, 0x0) ioctl$KVM_SIGNAL_MSI(r13, 0x4020aea5, &(0x7f0000000200)={0x8090040, 0x0, 0x0, 0x1, 0x10001}) r17 = openat$kvm(0x0, &(0x7f0000000040), 0x444380, 0x0) ioctl$KVM_CREATE_VM(r17, 0xae01, 0x0) 10m9.891493954s ago: executing program 37 (id=232): r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000001c0)={0x8}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2e) syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) 2m33.752181979s ago: executing program 6 (id=233): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000240), 0x4802, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000080)=@x86={0x0, 0xfb, 0x3, 0x0, 0x10, 0x7, 0x6, 0xe, 0xf, 0x2, 0x6, 0xfd, 0x0, 0xc03, 0x8, 0x3, 0x10, 0x0, 0x0, '\x00', 0x87, 0xfffffffffffffffe}) (async) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000001c0)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) (async) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000280)=@attr_arm64={0x0, 0x4, 0x2, 0x0}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r4, r5, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f00000000c0)=[@mrs={0xbe, 0x18, {0x6030000000138055}}], 0x18}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) syz_kvm_vgic_v3_setup(r4, 0x1, 0x200) (async, rerun: 64) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x27) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r8, 0x4018aee3, &(0x7f0000000040)=@attr_other={0x0, 0x8, 0x10, 0x0}) (async) ioctl$KVM_IRQ_LINE(r4, 0x4008ae61, &(0x7f0000000100)={0x1000020, 0x1}) (async) syz_kvm_setup_cpu$arm64(0xffffffffffffffff, r5, &(0x7f00009ea000/0x400000)=nil, &(0x7f0000000140)=[{0x0, &(0x7f00000001c0)=[@eret={0xe6, 0x18, 0x9}, @code={0xa, 0x6c, {"e0fe8dd20080b8f2410080d2c20080d2030180d2040180d2020000d40008285e0000600d000000b50000601f1020601ec05d87d20040b8f2a10080d2a20180d2030080d2c40180d2020000d4000000b2000028d50060000e"}}, @msr={0x14, 0x20, {0x603000000013e530, 0x401}}, @mrs={0xbe, 0x18, {0x6030000000139f71}}, @irq_setup={0x46, 0x18, {0x0, 0xe}}, @its_setup={0x82, 0x28, {0x3, 0x0, 0x277}}, @its_setup={0x82, 0x28, {0x2, 0x1, 0x8e}}, @its_setup={0x82, 0x28, {0x0, 0x0, 0x362}}], 0x14c}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2m11.848326433s ago: executing program 6 (id=235): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_ARM_VCPU_INIT(r3, 0x4020aeae, &(0x7f0000000000)={0x3, 0x8}) (async) mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r3, 0x0) mmap$KVM_VCPU(&(0x7f0000e04000/0x2000)=nil, 0x930, 0x1, 0x11, r3, 0x0) (async) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, r4, 0x8, 0x13, r3, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ffd000/0x2000)=nil, r4, 0x1000001, 0x12, r3, 0x0) mmap$KVM_VCPU(&(0x7f0000027000/0x13000)=nil, r4, 0x3, 0x11, r3, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) 1m51.650069957s ago: executing program 6 (id=236): r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x27) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) munmap(&(0x7f000000f000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000010000/0x1000)=nil, 0x930, 0x100000f, 0x9032, 0xffffffffffffffff, 0x0) r5 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000b80)={0x0, 0x0}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1) syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1) r9 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000b80)={0x0, &(0x7f0000000080)=[@hvc={0x32, 0x40, {0x84000003, [0x7ab, 0x0, 0x4, 0x9, 0x4d]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000b80)={0x0, 0x0}, &(0x7f0000000bc0)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_SET_ONE_REG(r10, 0x4010aeac, &(0x7f0000000000)=@arm64_fw={0x6030000000140000, &(0x7f0000000200)=0x10000}) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) r14 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r15, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CLEAR_DIRTY_LOG(r15, 0xc018aec0, 0xfffffffffffffffe) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r13, 0x4018aee3, &(0x7f0000000040)=@attr_other={0x0, 0xffffffff, 0xa99, 0x0}) ioctl$KVM_S390_VCPU_FAULT(r10, 0x4008ae52, &(0x7f0000000080)=0x800) r16 = syz_kvm_add_vcpu$arm64(r0, &(0x7f0000000b80)={0x0, &(0x7f0000000100)=[@hvc={0x32, 0x40, {0xc4000012, [0x100000001, 0x8000000000000000, 0xffffffffffffffff, 0xee24, 0xffffffffffff0001]}}], 0x40}, &(0x7f0000000040)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r16, 0xae80, 0x0) 1m48.822708561s ago: executing program 7 (id=234): r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r2, 0x4068aea3, &(0x7f0000000000)={0xef, 0x0, 0x7}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x5d) eventfd2(0xe, 0x801) eventfd2(0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) write$eventfd(0xffffffffffffffff, &(0x7f00000001c0)=0x3, 0x50) syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x0, 0x100000f, 0x12, 0xffffffffffffffff, 0x0) r5 = syz_kvm_add_vcpu$arm64(r0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@mrs={0xbe, 0x18, {0x603000000013c807}}], 0x18}, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m23.848878994s ago: executing program 7 (id=237): mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000000, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0xdddd1000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r1, 0xc018aec0, &(0x7f00000000c0)={0x1}) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000000, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0xdddd1000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc018aec0, &(0x7f00000000c0)={0x1}) (async) 1m19.342401516s ago: executing program 6 (id=238): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000b80)={0x0, &(0x7f0000000100)=[@smc={0x1e, 0x40, {0x8400000a, [0x84000015, 0x7, 0xaca, 0x2, 0x10]}}], 0x40}, &(0x7f00000000c0)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) r4 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) (async, rerun: 64) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (rerun: 64) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000100)={0x7, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f00000002c0)=@attr_arm64={0x0, 0x4, 0x3, 0x0}) (async) r8 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x200) (async) r9 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f00000001c0)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000380)}) ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f00000002c0)=@attr_other={0x0, 0x8, 0x108, &(0x7f0000000000)=0xc000000000000000}) ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x4, 0x2, 0x0}) (async) ioctl$KVM_GET_DEVICE_ATTR(r11, 0x4018aee2, &(0x7f0000000040)=@attr_arm64={0x0, 0x9, 0x0, &(0x7f0000000000)=0x100000001}) (async) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r12, 0xae03, 0xe7) (async) r13 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil) r14 = syz_kvm_add_vcpu$arm64(r13, &(0x7f0000000180)={0x0, &(0x7f0000000780)=[@smc={0x1e, 0x40, {0x86000001, [0x0, 0x7fffffff, 0x9, 0x7fffffff, 0x5]}}, @code={0xa, 0x9c, {"007008d5802e93d20080b0f2810080d2420080d2630080d2640180d2020000d40058202e0000005e000860f8e02b91d20080b8f2210080d2e20180d2430080d2040180d2020000d40000600d000028d5c0ac89d20020b0f2a10180d2820180d2a30180d2e40180d2020000d4400d8bd20040b0f2210080d2c20080d2230180d2640180d2020000d4"}}, @smc={0x1e, 0x40, {0xc4000010, [0x36, 0x2, 0x6, 0x5, 0x7]}}, @svc={0x122, 0x40, {0x8600ff01, [0x81, 0x1, 0x2, 0x400, 0x7f]}}], 0x15c}, 0x0, 0x0) (async) r15 = eventfd2(0x5, 0x800) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000080)={0x10, 0x70000, 0x8, r15, 0x1}) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1) (async) ioctl$KVM_RUN(r14, 0xae80, 0x0) 1m2.641254067s ago: executing program 7 (id=239): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x64401, 0x0) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) (async) r1 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x25) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f00000001c0)={0x6}) (async) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f00000001c0)={0x6, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000340)=0xffffffffffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x5, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x5, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f00000001c0)={0x8, 0xffffffffffffffff, 0x1}) (async) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f00000001c0)={0x8, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000002c0)=@attr_other={0x0, 0x8, 0x100, &(0x7f0000000300)=0xc000000000000000}) (async) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000002c0)=@attr_other={0x0, 0x8, 0x100, &(0x7f0000000300)=0xc000000000000000}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000380)=@attr_other={0x0, 0x8, 0x108, &(0x7f0000000000)=0xc000000000000000}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x4, 0x1, 0x0}) openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) (async) r6 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) (async) syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_HAS_DEVICE_ATTR_vm(r7, 0x4018aee3, &(0x7f0000000100)=@attr_other={0x0, 0xc5fb, 0x8, 0x0}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34) (async) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0xffffffffffffffff) ioctl$KVM_CAP_ARM_USER_IRQ(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240)) r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x1f) r11 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x2) ioctl$KVM_CREATE_IRQCHIP(r12, 0xae60) ioctl$KVM_CAP_HALT_POLL(r10, 0x4068aea3, &(0x7f00000001c0)={0xb6, 0x2000000}) (async) ioctl$KVM_CAP_HALT_POLL(r10, 0x4068aea3, &(0x7f00000001c0)={0xb6, 0x2000000}) r13 = ioctl$KVM_CREATE_GUEST_MEMFD(r8, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3}) munmap$KVM_VCPU(0x0, 0x1000000000) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x7, 0x12, r13, 0x200001fe0000) 54.159006469s ago: executing program 6 (id=240): r0 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f000000f000/0x4000)=nil, 0x930, 0xb, 0x30d2a4fbfbfad6b8, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000040)={0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x3}) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r5, 0x800454d3, 0x10000000000000) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x9000000) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000) munmap(&(0x7f0000482000/0x2000)=nil, 0x2000) munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000) munmap(&(0x7f0000e76000/0x12000)=nil, 0x12000) mmap$KVM_VCPU(&(0x7f0000dc1000/0x3000)=nil, 0x0, 0x0, 0x10, r2, 0x0) mmap$KVM_VCPU(&(0x7f0000f1a000/0x4000)=nil, 0x930, 0x0, 0x9032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000fed000/0x3000)=nil, 0x930, 0x0, 0x4030031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) 12.873283739s ago: executing program 38 (id=239): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x64401, 0x0) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) (async) r1 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x25) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f00000001c0)={0x6}) (async) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f00000001c0)={0x6, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000340)=0xffffffffffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x5, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x5, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f00000001c0)={0x8, 0xffffffffffffffff, 0x1}) (async) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f00000001c0)={0x8, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000002c0)=@attr_other={0x0, 0x8, 0x100, &(0x7f0000000300)=0xc000000000000000}) (async) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000002c0)=@attr_other={0x0, 0x8, 0x100, &(0x7f0000000300)=0xc000000000000000}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000380)=@attr_other={0x0, 0x8, 0x108, &(0x7f0000000000)=0xc000000000000000}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x4, 0x1, 0x0}) openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) (async) r6 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) (async) syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_HAS_DEVICE_ATTR_vm(r7, 0x4018aee3, &(0x7f0000000100)=@attr_other={0x0, 0xc5fb, 0x8, 0x0}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34) (async) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0xffffffffffffffff) ioctl$KVM_CAP_ARM_USER_IRQ(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240)) r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x1f) r11 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x2) ioctl$KVM_CREATE_IRQCHIP(r12, 0xae60) ioctl$KVM_CAP_HALT_POLL(r10, 0x4068aea3, &(0x7f00000001c0)={0xb6, 0x2000000}) (async) ioctl$KVM_CAP_HALT_POLL(r10, 0x4068aea3, &(0x7f00000001c0)={0xb6, 0x2000000}) r13 = ioctl$KVM_CREATE_GUEST_MEMFD(r8, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3}) munmap$KVM_VCPU(0x0, 0x1000000000) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x7, 0x12, r13, 0x200001fe0000) 0s ago: executing program 39 (id=240): r0 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f000000f000/0x4000)=nil, 0x930, 0xb, 0x30d2a4fbfbfad6b8, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000040)={0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x3}) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r5, 0x800454d3, 0x10000000000000) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x9000000) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000) munmap(&(0x7f0000482000/0x2000)=nil, 0x2000) munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000) munmap(&(0x7f0000e76000/0x12000)=nil, 0x12000) mmap$KVM_VCPU(&(0x7f0000dc1000/0x3000)=nil, 0x0, 0x0, 0x10, r2, 0x0) mmap$KVM_VCPU(&(0x7f0000f1a000/0x4000)=nil, 0x930, 0x0, 0x9032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000fed000/0x3000)=nil, 0x930, 0x0, 0x4030031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) kernel console output (not intermixed with test programs): [ 377.709429][ T24] audit: type=1400 audit(376.880:74): avc: denied { write } for pid=3260 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 381.550572][ T24] audit: type=1400 audit(380.730:75): avc: denied { write } for pid=3266 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 384.254838][ T3207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 394.139872][ T24] audit: type=1400 audit(393.280:76): avc: denied { write } for pid=3270 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 399.559664][ T24] audit: type=1400 audit(398.730:77): avc: denied { write } for pid=3273 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 415.812128][ T24] audit: type=1400 audit(415.000:78): avc: denied { write } for pid=3280 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 419.800119][ T24] audit: type=1400 audit(418.970:79): avc: denied { write } for pid=3283 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 430.113472][ T24] audit: type=1400 audit(429.300:80): avc: denied { write } for pid=3288 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 433.917891][ T24] audit: type=1400 audit(433.090:81): avc: denied { write } for pid=3291 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 436.544438][ T3207] eql: remember to turn off Van-Jacobson compression on your slave devices [ 443.575052][ T24] audit: type=1400 audit(442.760:82): avc: denied { write } for pid=3295 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 447.462188][ T24] audit: type=1400 audit(446.650:83): avc: denied { write } for pid=3298 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 460.020292][ T24] audit: type=1400 audit(459.200:84): avc: denied { write } for pid=3302 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 464.979446][ T24] audit: type=1400 audit(464.150:85): avc: denied { write } for pid=3305 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 470.380777][ T24] audit: type=1400 audit(469.560:86): avc: denied { write } for pid=3307 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 474.200684][ T24] audit: type=1400 audit(473.380:87): avc: denied { write } for pid=3310 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 486.290568][ T24] audit: type=1400 audit(485.470:88): avc: denied { write } for pid=3316 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 490.349465][ T24] audit: type=1400 audit(489.500:89): avc: denied { write } for pid=3319 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 495.696413][ T24] audit: type=1400 audit(494.880:90): avc: denied { write } for pid=3321 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 499.620643][ T24] audit: type=1400 audit(498.800:91): avc: denied { write } for pid=3324 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 520.430500][ T24] audit: type=1400 audit(519.610:92): avc: denied { write } for pid=3333 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 525.730650][ T24] audit: type=1400 audit(524.910:93): avc: denied { write } for pid=3336 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 535.229426][ T24] audit: type=1400 audit(534.400:94): avc: denied { write } for pid=3340 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 539.171995][ T24] audit: type=1400 audit(538.350:95): avc: denied { write } for pid=3343 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 552.200844][ T24] audit: type=1400 audit(551.370:96): avc: denied { write } for pid=3349 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 556.120587][ T24] audit: type=1400 audit(555.300:97): avc: denied { write } for pid=3352 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 567.793673][ T24] audit: type=1400 audit(566.980:98): avc: denied { write } for pid=3356 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 571.756025][ T24] audit: type=1400 audit(570.940:99): avc: denied { write } for pid=3359 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:56775' (ED25519) to the list of known hosts. [ 606.316350][ T24] audit: type=1400 audit(605.500:100): avc: denied { name_bind } for pid=3364 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 607.205689][ T24] audit: type=1400 audit(606.390:101): avc: denied { execute } for pid=3365 comm="sh" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 607.235994][ T24] audit: type=1400 audit(606.420:102): avc: denied { execute_no_trans } for pid=3365 comm="sh" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 632.065976][ T24] audit: type=1400 audit(631.250:103): avc: denied { mounton } for pid=3365 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 632.107556][ T24] audit: type=1400 audit(631.290:104): avc: denied { mount } for pid=3365 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 632.196546][ T3365] cgroup: Unknown subsys name 'net' [ 632.253894][ T24] audit: type=1400 audit(631.440:105): avc: denied { unmount } for pid=3365 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 632.674675][ T3365] cgroup: Unknown subsys name 'cpuset' [ 632.790444][ T3365] cgroup: Unknown subsys name 'rlimit' [ 633.172868][ T24] audit: type=1400 audit(632.350:106): avc: denied { setattr } for pid=3365 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 633.190370][ T24] audit: type=1400 audit(632.370:107): avc: denied { mounton } for pid=3365 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 633.216015][ T24] audit: type=1400 audit(632.400:108): avc: denied { mount } for pid=3365 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 634.971042][ T3368] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 634.990839][ T24] audit: type=1400 audit(634.170:109): avc: denied { relabelto } for pid=3368 comm="mkswap" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 635.022449][ T24] audit: type=1400 audit(634.200:110): avc: denied { write } for pid=3368 comm="mkswap" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 635.334595][ T24] audit: type=1400 audit(634.520:111): avc: denied { read } for pid=3365 comm="syz-executor" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 635.371228][ T24] audit: type=1400 audit(634.550:112): avc: denied { open } for pid=3365 comm="syz-executor" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 635.446486][ T3365] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 697.693486][ T24] audit: type=1400 audit(696.880:113): avc: denied { execmem } for pid=3369 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 704.617128][ T24] audit: type=1400 audit(703.800:114): avc: denied { read } for pid=3372 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 704.640301][ T24] audit: type=1400 audit(703.810:115): avc: denied { read } for pid=3371 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 704.656786][ T24] audit: type=1400 audit(703.840:116): avc: denied { open } for pid=3372 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 704.730820][ T24] audit: type=1400 audit(703.910:117): avc: denied { mounton } for pid=3371 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 704.977668][ T24] audit: type=1400 audit(704.160:118): avc: denied { module_request } for pid=3372 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 705.983970][ T24] audit: type=1400 audit(705.170:119): avc: denied { sys_module } for pid=3372 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 728.174027][ T3371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 728.436532][ T3371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 728.497781][ T3372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 728.847534][ T3372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 740.449587][ T3371] hsr_slave_0: entered promiscuous mode [ 740.476389][ T3371] hsr_slave_1: entered promiscuous mode [ 741.391696][ T3372] hsr_slave_0: entered promiscuous mode [ 741.422886][ T3372] hsr_slave_1: entered promiscuous mode [ 741.451878][ T3372] debugfs: 'hsr0' already exists in 'hsr' [ 741.460120][ T3372] Cannot create hsr debugfs directory [ 747.211213][ T24] audit: type=1400 audit(746.370:120): avc: denied { create } for pid=3371 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 747.255251][ T24] audit: type=1400 audit(746.440:121): avc: denied { write } for pid=3371 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 747.314299][ T24] audit: type=1400 audit(746.500:122): avc: denied { read } for pid=3371 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 747.427879][ T3371] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 747.772250][ T3371] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 747.816811][ T3371] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 748.133638][ T3371] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 748.236288][ T3371] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 748.396100][ T3371] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 748.601496][ T3371] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 748.710613][ T3371] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 749.982952][ T3372] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 750.064387][ T3372] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 750.142528][ T3372] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 750.243194][ T3372] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 750.391615][ T3372] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 750.533437][ T3372] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 750.664940][ T3372] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 750.847505][ T3372] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 766.855043][ T3371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 769.341116][ T3372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 818.676285][ T3371] veth0_vlan: entered promiscuous mode [ 819.274263][ T3371] veth1_vlan: entered promiscuous mode [ 822.450085][ T3372] veth0_vlan: entered promiscuous mode [ 822.693027][ T3371] veth0_macvtap: entered promiscuous mode [ 823.191206][ T3371] veth1_macvtap: entered promiscuous mode [ 823.621384][ T3372] veth1_vlan: entered promiscuous mode [ 826.782618][ T3421] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.825870][ T3421] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.852277][ T3421] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.860212][ T3421] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.043713][ T3372] veth0_macvtap: entered promiscuous mode [ 828.772478][ T3372] veth1_macvtap: entered promiscuous mode [ 830.581840][ T24] audit: type=1400 audit(829.730:123): avc: denied { mount } for pid=3371 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 830.819218][ T24] audit: type=1400 audit(829.990:124): avc: denied { mounton } for pid=3371 comm="syz-executor" path="/syzkaller.1fustT/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 831.201070][ T24] audit: type=1400 audit(830.340:125): avc: denied { mount } for pid=3371 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 831.800224][ T24] audit: type=1400 audit(830.980:126): avc: denied { mounton } for pid=3371 comm="syz-executor" path="/syzkaller.1fustT/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 832.015483][ T24] audit: type=1400 audit(831.190:127): avc: denied { mounton } for pid=3371 comm="syz-executor" path="/syzkaller.1fustT/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 832.423375][ T41] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.424871][ T41] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.500196][ T41] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.504102][ T41] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.931430][ T24] audit: type=1400 audit(832.110:128): avc: denied { unmount } for pid=3371 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 833.377866][ T24] audit: type=1400 audit(832.490:129): avc: denied { mounton } for pid=3371 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1548 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 833.583925][ T24] audit: type=1400 audit(832.660:130): avc: denied { mount } for pid=3371 comm="syz-executor" name="/" dev="gadgetfs" ino=3746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 834.064249][ T24] audit: type=1400 audit(833.240:131): avc: denied { mount } for pid=3371 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 834.251512][ T24] audit: type=1400 audit(833.330:132): avc: denied { mounton } for pid=3371 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 836.054677][ T3371] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 837.275723][ T24] kauditd_printk_skb: 1 callbacks suppressed [ 837.285403][ T24] audit: type=1400 audit(836.460:134): avc: denied { read write } for pid=3371 comm="syz-executor" name="loop1" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 837.310682][ T24] audit: type=1400 audit(836.490:135): avc: denied { open } for pid=3371 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 837.356549][ T24] audit: type=1400 audit(836.540:136): avc: denied { ioctl } for pid=3371 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=639 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 847.026749][ T24] audit: type=1400 audit(846.210:137): avc: denied { read } for pid=3523 comm="syz.1.2" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 847.141942][ T24] audit: type=1400 audit(846.250:138): avc: denied { open } for pid=3523 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 848.245195][ T24] audit: type=1400 audit(847.430:139): avc: denied { ioctl } for pid=3523 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae04 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 851.736758][ T24] audit: type=1400 audit(850.920:140): avc: denied { write } for pid=3525 comm="syz.0.1" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 904.399879][ T24] audit: type=1400 audit(903.570:141): avc: denied { ioctl } for pid=3560 comm="syz.1.10" path="net:[4026532627]" dev="nsfs" ino=4026532627 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 911.634703][ T24] audit: type=1400 audit(910.790:142): avc: denied { execute } for pid=3562 comm="syz.0.11" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=4481 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1014.282108][ T24] audit: type=1400 audit(1013.380:143): avc: denied { setattr } for pid=3607 comm="syz.0.25" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1038.710453][ T24] audit: type=1400 audit(1037.890:144): avc: denied { create } for pid=3621 comm="syz.1.30" anonclass=[kvm-gmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1039.722275][ T24] audit: type=1400 audit(1038.860:145): avc: denied { map } for pid=3621 comm="syz.1.30" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=5468 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1039.793822][ T24] audit: type=1400 audit(1038.930:146): avc: denied { read execute } for pid=3621 comm="syz.1.30" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=5468 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1068.037413][ T24] audit: type=1400 audit(1067.220:147): avc: denied { append } for pid=3634 comm="syz.0.35" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1068.486646][ T24] audit: type=1400 audit(1067.660:148): avc: denied { map } for pid=3634 comm="syz.0.35" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1068.556879][ T24] audit: type=1400 audit(1067.740:149): avc: denied { execute } for pid=3634 comm="syz.0.35" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1074.561684][ T24] audit: type=1400 audit(1073.720:150): avc: denied { write } for pid=3639 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1084.760593][ T24] audit: type=1400 audit(1083.920:151): avc: denied { write } for pid=3642 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1259.525871][ T3739] debugfs: 'vgic-its-state@8080000' already exists in '3739-9' [ 1286.107434][ T24] audit: type=1400 audit(1285.290:152): avc: denied { write } for pid=3754 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1294.075098][ T24] audit: type=1400 audit(1293.220:153): avc: denied { write } for pid=3763 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1301.392921][ T3767] kvm [3767]: Failed to find VMA for hva 0x21016000 [ 1384.592857][ T3807] KVM: debugfs: duplicate directory 3807-5 [ 1427.417433][ T3828] KVM: debugfs: duplicate directory 3828-7 [ 1428.327199][ T3828] KVM: debugfs: duplicate directory 3828-7 [ 1593.743844][ T3901] KVM: debugfs: duplicate directory 3901-5 [ 1603.125749][ T3915] kvm [3915]: Failed to find VMA for hva 0x20c01000 [ 1631.980261][ T24] audit: type=1400 audit(1631.160:154): avc: denied { map } for pid=3927 comm="syz.0.128" path="pipe:[2738]" dev="pipefs" ino=2738 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1707.896218][ T3958] kvm [3958]: Failed to find VMA for hva 0x20d8d000 [ 1737.223661][ T24] audit: type=1400 audit(1736.290:155): avc: denied { write } for pid=3968 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1747.462853][ T24] audit: type=1400 audit(1746.570:156): avc: denied { write } for pid=3978 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2017.524597][ T3446] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2018.764286][ T3446] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2019.885728][ T3446] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2021.566803][ T3446] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2037.137682][ T3446] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2037.312817][ T3446] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2037.401588][ T3446] bond0 (unregistering): Released all slaves [ 2039.703781][ T3446] hsr_slave_0: left promiscuous mode [ 2039.979216][ T3446] hsr_slave_1: left promiscuous mode [ 2040.903441][ T3446] veth1_macvtap: left promiscuous mode [ 2040.930625][ T3446] veth0_macvtap: left promiscuous mode [ 2040.960964][ T3446] veth1_vlan: left promiscuous mode [ 2040.983096][ T3446] veth0_vlan: left promiscuous mode [ 2059.660971][ T3446] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2060.677276][ T3446] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2061.851837][ T3446] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2062.924091][ T3446] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2068.503248][ T24] audit: type=1400 audit(2067.670:157): avc: denied { write } for pid=4125 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2073.260700][ T24] audit: type=1400 audit(2072.440:158): avc: denied { write } for pid=4134 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2076.083161][ T3446] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2076.196538][ T3446] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2076.247216][ T3446] bond0 (unregistering): Released all slaves [ 2076.915635][ T3207] 8021q: adding VLAN 0 to HW filter on device eth1 [ 2077.322081][ T3446] hsr_slave_0: left promiscuous mode [ 2077.364159][ T3446] hsr_slave_1: left promiscuous mode [ 2077.531095][ T3446] veth1_macvtap: left promiscuous mode [ 2077.534841][ T3446] veth0_macvtap: left promiscuous mode [ 2077.545858][ T3446] veth1_vlan: left promiscuous mode [ 2077.559525][ T3446] veth0_vlan: left promiscuous mode [ 2094.667015][ T24] audit: type=1400 audit(2093.850:159): avc: denied { write } for pid=4138 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2099.622424][ T24] audit: type=1400 audit(2098.800:160): avc: denied { write } for pid=4141 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2109.526493][ T24] audit: type=1400 audit(2108.710:161): avc: denied { write } for pid=4157 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2112.696282][ T24] audit: type=1400 audit(2111.880:162): avc: denied { write } for pid=4166 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2115.785748][ T3207] 8021q: adding VLAN 0 to HW filter on device eth2 [ 2122.032919][ T4106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2122.182498][ T4101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2122.331659][ T4106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2122.847704][ T4101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2123.566953][ T24] audit: type=1400 audit(2122.750:163): avc: denied { write } for pid=4178 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2128.306267][ T24] audit: type=1400 audit(2127.480:164): avc: denied { write } for pid=4184 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2131.747917][ T3207] 8021q: adding VLAN 0 to HW filter on device eth3 [ 2141.393219][ T24] audit: type=1400 audit(2140.580:165): avc: denied { write } for pid=4200 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2141.531884][ T4106] hsr_slave_0: entered promiscuous mode [ 2141.593328][ T4106] hsr_slave_1: entered promiscuous mode [ 2143.846049][ T4101] hsr_slave_0: entered promiscuous mode [ 2143.901449][ T4101] hsr_slave_1: entered promiscuous mode [ 2143.960875][ T4101] debugfs: 'hsr0' already exists in 'hsr' [ 2143.962829][ T4101] Cannot create hsr debugfs directory [ 2145.457124][ T24] audit: type=1400 audit(2144.640:166): avc: denied { write } for pid=4205 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2148.314711][ T3207] 8021q: adding VLAN 0 to HW filter on device eth4 [ 2157.343343][ T4106] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2157.842343][ T4106] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2158.033897][ T4106] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2158.614230][ T4106] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2158.706086][ T4106] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2159.061882][ T4106] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2159.253843][ T4106] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2159.673416][ T4106] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2162.060172][ T24] audit: type=1400 audit(2161.160:167): avc: denied { write } for pid=4211 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2165.033431][ T4101] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2165.386816][ T4101] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2165.536438][ T4101] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2165.892745][ T4101] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2166.040765][ T4101] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2166.399391][ T4101] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2166.561164][ T4101] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2166.857332][ T4101] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2170.353343][ T24] audit: type=1400 audit(2169.520:168): avc: denied { write } for pid=4226 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2175.035415][ T3207] 8021q: adding VLAN 0 to HW filter on device eth5 [ 2185.805094][ T4106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2187.791083][ T24] audit: type=1400 audit(2186.950:169): avc: denied { write } for pid=4245 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2190.755130][ T4101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2195.350434][ T24] audit: type=1400 audit(2194.480:170): avc: denied { write } for pid=4251 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2199.805493][ T3207] 8021q: adding VLAN 0 to HW filter on device eth6 [ 2221.712499][ T24] audit: type=1400 audit(2220.860:171): avc: denied { write } for pid=4269 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2230.301702][ T24] audit: type=1400 audit(2229.470:172): avc: denied { write } for pid=4278 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2235.957133][ T3207] 8021q: adding VLAN 0 to HW filter on device eth7 [ 2250.954145][ T24] audit: type=1400 audit(2250.130:173): avc: denied { write } for pid=4296 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2257.710211][ T24] audit: type=1400 audit(2256.890:174): avc: denied { write } for pid=4306 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2262.722392][ T3207] 8021q: adding VLAN 0 to HW filter on device eth8 [ 2281.598017][ T4106] veth0_vlan: entered promiscuous mode [ 2282.705371][ T4106] veth1_vlan: entered promiscuous mode [ 2287.104115][ T4106] veth0_macvtap: entered promiscuous mode [ 2288.274777][ T4106] veth1_macvtap: entered promiscuous mode [ 2288.931518][ T4101] veth0_vlan: entered promiscuous mode [ 2290.992218][ T4101] veth1_vlan: entered promiscuous mode [ 2293.090462][ T24] audit: type=1400 audit(2292.270:175): avc: denied { write } for pid=4329 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2293.896719][ T4104] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2293.936109][ T4104] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2293.941865][ T4104] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2293.954507][ T4104] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2297.654410][ T4101] veth0_macvtap: entered promiscuous mode [ 2299.044373][ T4101] veth1_macvtap: entered promiscuous mode [ 2301.796998][ T24] audit: type=1400 audit(2300.980:176): avc: denied { write } for pid=4333 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2302.981286][ T3446] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2302.995660][ T3446] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2303.006661][ T3446] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2303.033090][ T3446] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2345.505227][ T24] audit: type=1400 audit(2344.610:177): avc: denied { write } for pid=4357 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2357.550504][ T24] audit: type=1400 audit(2356.660:178): avc: denied { write } for pid=4367 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2378.597824][ T24] audit: type=1400 audit(2377.750:179): avc: denied { write } for pid=4377 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2387.713626][ T24] audit: type=1400 audit(2386.820:180): avc: denied { write } for pid=4384 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2408.555432][ T24] audit: type=1400 audit(2407.710:181): avc: denied { write } for pid=4397 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2420.207332][ T24] audit: type=1400 audit(2419.320:182): avc: denied { write } for pid=4407 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2457.640450][ T24] audit: type=1400 audit(2456.790:183): avc: denied { write } for pid=4425 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2468.810510][ T24] audit: type=1400 audit(2467.950:184): avc: denied { write } for pid=4432 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2489.322010][ T24] audit: type=1400 audit(2488.500:185): avc: denied { write } for pid=4444 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2498.997977][ T24] audit: type=1400 audit(2498.180:186): avc: denied { write } for pid=4450 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2527.085493][ T24] audit: type=1400 audit(2526.150:187): avc: denied { write } for pid=4465 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2538.905168][ T24] audit: type=1400 audit(2538.090:188): avc: denied { write } for pid=4473 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2552.556419][ T4479] KVM: debugfs: duplicate directory 4479-12 [ 2553.046582][ T4479] KVM: debugfs: duplicate directory 4479-12 [ 2556.787823][ T24] audit: type=1400 audit(2555.970:189): avc: denied { write } for pid=4480 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2565.521831][ T24] audit: type=1400 audit(2564.640:190): avc: denied { write } for pid=4487 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2582.129763][ T24] audit: type=1400 audit(2581.300:191): avc: denied { write } for pid=4489 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2594.256435][ T24] audit: type=1400 audit(2593.430:192): avc: denied { write } for pid=4500 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2847.725571][ T4570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2848.063906][ T4570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2857.396229][ T4575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2857.652969][ T4575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2877.541353][ T4570] hsr_slave_0: entered promiscuous mode [ 2877.613863][ T4570] hsr_slave_1: entered promiscuous mode [ 2877.734074][ T4570] debugfs: 'hsr0' already exists in 'hsr' [ 2877.753617][ T4570] Cannot create hsr debugfs directory [ 2892.554908][ T4575] hsr_slave_0: entered promiscuous mode [ 2892.643702][ T4575] hsr_slave_1: entered promiscuous mode [ 2892.677236][ T4575] debugfs: 'hsr0' already exists in 'hsr' [ 2892.753370][ T4575] Cannot create hsr debugfs directory [ 2904.980825][ T4570] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2905.332943][ T4570] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2906.495954][ T4570] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2906.799982][ T4570] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2907.430496][ T4570] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2907.642433][ T4570] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2908.540585][ T4570] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2908.901515][ T4570] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2917.387907][ T4575] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2918.102996][ T4575] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2918.273969][ T4575] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2919.017771][ T4575] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2919.185089][ T4575] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2919.721140][ T4575] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2919.909900][ T4575] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2920.514950][ T4575] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2928.000794][ T24] audit: type=1400 audit(2927.140:193): avc: denied { write } for pid=4643 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2941.380594][ T24] audit: type=1400 audit(2940.560:194): avc: denied { write } for pid=4661 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2944.516790][ T3880] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2947.613255][ T3880] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2949.863505][ T3880] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2952.912201][ T3880] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2962.536669][ T4570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2973.564786][ T3880] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2973.714418][ T3880] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2973.873632][ T3880] bond0 (unregistering): Released all slaves [ 2975.905648][ T3880] hsr_slave_0: left promiscuous mode [ 2976.033239][ T3880] hsr_slave_1: left promiscuous mode [ 2976.379746][ T3880] veth1_macvtap: left promiscuous mode [ 2976.386015][ T3880] veth0_macvtap: left promiscuous mode [ 2976.394816][ T3880] veth1_vlan: left promiscuous mode [ 2976.401968][ T3880] veth0_vlan: left promiscuous mode [ 3001.025274][ T4575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3003.361264][ T3880] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3005.767834][ T3880] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3007.995295][ T3880] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3010.285158][ T3880] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3021.230786][ T24] audit: type=1400 audit(3020.380:195): avc: denied { write } for pid=4683 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3031.614255][ T24] audit: type=1400 audit(3030.790:196): avc: denied { write } for pid=4695 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3035.267954][ T3880] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3035.502659][ T3880] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3035.645218][ T3880] bond0 (unregistering): Released all slaves [ 3036.395966][ T3207] 8021q: adding VLAN 0 to HW filter on device eth9 [ 3037.850771][ T3880] hsr_slave_0: left promiscuous mode [ 3038.161401][ T3880] hsr_slave_1: left promiscuous mode [ 3038.950555][ T3880] veth1_macvtap: left promiscuous mode [ 3038.970783][ T3880] veth0_macvtap: left promiscuous mode [ 3038.974996][ T3880] veth1_vlan: left promiscuous mode [ 3039.022044][ T3880] veth0_vlan: left promiscuous mode [ 3081.091081][ T24] audit: type=1400 audit(3080.240:197): avc: denied { write } for pid=4705 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3089.081191][ T24] audit: type=1400 audit(3088.190:198): avc: denied { write } for pid=4715 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3094.001582][ T3207] 8021q: adding VLAN 0 to HW filter on device eth10 [ 3108.909986][ T24] audit: type=1400 audit(3108.000:199): avc: denied { write } for pid=4730 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3116.133710][ T24] audit: type=1400 audit(3115.300:200): avc: denied { write } for pid=4740 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3122.600250][ T3207] 8021q: adding VLAN 0 to HW filter on device eth11 [ 3141.734582][ T24] audit: type=1400 audit(3140.910:201): avc: denied { write } for pid=4756 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3150.366924][ T24] audit: type=1400 audit(3149.550:202): avc: denied { write } for pid=4765 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3155.646060][ T3207] 8021q: adding VLAN 0 to HW filter on device eth12 [ 3164.941747][ T4570] veth0_vlan: entered promiscuous mode [ 3166.114753][ T4570] veth1_vlan: entered promiscuous mode [ 3168.712113][ T4575] veth0_vlan: entered promiscuous mode [ 3170.335952][ T4575] veth1_vlan: entered promiscuous mode [ 3171.573003][ T24] audit: type=1400 audit(3170.750:203): avc: denied { write } for pid=4780 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3171.994767][ T4570] veth0_macvtap: entered promiscuous mode [ 3172.815242][ T4570] veth1_macvtap: entered promiscuous mode [ 3175.170575][ T4575] veth0_macvtap: entered promiscuous mode [ 3176.129263][ T4575] veth1_macvtap: entered promiscuous mode [ 3178.877287][ T4109] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3178.912773][ T4109] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3178.950802][ T4109] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3178.963023][ T4109] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3180.486260][ T24] audit: type=1400 audit(3179.650:204): avc: denied { write } for pid=4783 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3182.742803][ T4109] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3182.759442][ T4109] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3182.774355][ T4109] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3183.234074][ T4646] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3187.797489][ T3207] 8021q: adding VLAN 0 to HW filter on device eth13 [ 3215.442385][ T24] audit: type=1400 audit(3214.560:205): avc: denied { write } for pid=4795 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3226.816746][ T24] audit: type=1400 audit(3225.970:206): avc: denied { write } for pid=4805 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3234.581735][ T3207] 8021q: adding VLAN 0 to HW filter on device eth14 [ 3259.541522][ T24] audit: type=1400 audit(3258.660:207): avc: denied { write } for pid=4816 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3271.749956][ T24] audit: type=1400 audit(3270.890:208): avc: denied { write } for pid=4822 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3280.002006][ T3207] 8021q: adding VLAN 0 to HW filter on device eth15 [ 3298.931149][ T24] audit: type=1400 audit(3298.030:209): avc: denied { write } for pid=4831 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3309.531027][ T24] audit: type=1400 audit(3308.600:210): avc: denied { write } for pid=4834 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3318.377208][ T3207] 8021q: adding VLAN 0 to HW filter on device eth16 [ 3329.680537][ T24] audit: type=1400 audit(3328.750:211): avc: denied { write } for pid=4841 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3340.409551][ T24] audit: type=1400 audit(3339.590:212): avc: denied { write } for pid=4850 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3382.106633][ T3733] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3384.747623][ T3733] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3387.997494][ T3733] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3392.635909][ T3733] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3415.662383][ T3733] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3415.796540][ T3733] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3415.926640][ T3733] bond0 (unregistering): Released all slaves [ 3420.791495][ T3733] hsr_slave_0: left promiscuous mode [ 3421.015202][ T3733] hsr_slave_1: left promiscuous mode [ 3422.230983][ T3733] veth1_macvtap: left promiscuous mode [ 3422.260227][ T3733] veth0_macvtap: left promiscuous mode [ 3422.332977][ T3733] veth1_vlan: left promiscuous mode [ 3422.343801][ T3733] veth0_vlan: left promiscuous mode [ 3427.199657][ T24] audit: type=1400 audit(3426.350:213): avc: denied { write } for pid=4892 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3435.403201][ T24] audit: type=1400 audit(3434.580:214): avc: denied { write } for pid=4899 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3457.150099][ T4835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3457.636488][ T4835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3461.451741][ T3733] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3463.272964][ T3733] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3464.865088][ T3733] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3466.576618][ T3733] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3476.289803][ T24] audit: type=1400 audit(3475.410:215): avc: denied { write } for pid=4912 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3487.723933][ T24] audit: type=1400 audit(3486.890:216): avc: denied { write } for pid=4924 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3495.540248][ T3733] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3495.726817][ T3733] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3495.881246][ T3733] bond0 (unregistering): Released all slaves [ 3496.812820][ T3207] 8021q: adding VLAN 0 to HW filter on device eth17 [ 3497.580189][ T3733] hsr_slave_0: left promiscuous mode [ 3497.688071][ T3733] hsr_slave_1: left promiscuous mode [ 3498.229821][ T3733] veth1_macvtap: left promiscuous mode [ 3498.230873][ T3733] veth0_macvtap: left promiscuous mode [ 3498.273541][ T3733] veth1_vlan: left promiscuous mode [ 3498.280015][ T3733] veth0_vlan: left promiscuous mode [ 3522.096947][ T4847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3523.301893][ T4847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3524.357667][ T4835] hsr_slave_0: entered promiscuous mode [ 3524.493083][ T4835] hsr_slave_1: entered promiscuous mode [ 3525.230364][ T24] audit: type=1400 audit(3524.410:217): avc: denied { write } for pid=4933 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3531.975656][ T24] audit: type=1400 audit(3531.090:218): avc: denied { write } for pid=4939 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3544.765468][ T4835] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 3545.325082][ T4835] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 3545.502604][ T4835] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 3546.030743][ T4835] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3546.191749][ T4835] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 3546.537684][ T4835] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 3546.677964][ T4835] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 3547.275993][ T4835] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 3549.227994][ T24] audit: type=1400 audit(3548.400:219): avc: denied { write } for pid=4946 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3559.100219][ T24] audit: type=1400 audit(3558.270:220): avc: denied { write } for pid=4961 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3560.876047][ T4847] hsr_slave_0: entered promiscuous mode [ 3561.092728][ T4847] hsr_slave_1: entered promiscuous mode [ 3561.210338][ T4847] debugfs: 'hsr0' already exists in 'hsr' [ 3561.221365][ T4847] Cannot create hsr debugfs directory [ 3577.091961][ T24] audit: type=1400 audit(3576.150:221): avc: denied { write } for pid=4970 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3583.021514][ T4847] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 3583.317360][ T4847] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 3583.782372][ T4847] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 3584.123350][ T4847] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3584.576366][ T4847] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 3584.866943][ T4847] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 3584.987452][ T24] audit: type=1400 audit(3584.130:222): avc: denied { write } for pid=4974 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3585.081008][ T4847] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 3585.330656][ T4847] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 3587.256276][ T4835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3612.326517][ T24] audit: type=1400 audit(3611.500:223): avc: denied { write } for pid=4993 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3623.172722][ T24] audit: type=1400 audit(3622.230:224): avc: denied { write } for pid=5000 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3626.463539][ T4847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3631.556757][ T3207] 8021q: adding VLAN 0 to HW filter on device eth18 [ 3640.579921][ T24] audit: type=1400 audit(3639.730:225): avc: denied { write } for pid=5005 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3649.681201][ T24] audit: type=1400 audit(3648.780:226): avc: denied { write } for pid=5015 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3690.983667][ T24] audit: type=1400 audit(3690.120:227): avc: denied { write } for pid=5037 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3700.330034][ T24] audit: type=1400 audit(3699.450:228): avc: denied { write } for pid=5046 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3706.631784][ T3207] 8021q: adding VLAN 0 to HW filter on device eth19 [ 3715.566049][ T24] audit: type=1400 audit(3714.730:229): avc: denied { write } for pid=5054 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3726.712041][ T24] audit: type=1400 audit(3725.810:230): avc: denied { write } for pid=5065 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3747.015998][ T4835] veth0_vlan: entered promiscuous mode [ 3748.576890][ T4835] veth1_vlan: entered promiscuous mode [ 3753.235834][ T4835] veth0_macvtap: entered promiscuous mode [ 3754.586709][ T4835] veth1_macvtap: entered promiscuous mode [ 3759.122819][ T4667] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3759.131678][ T4861] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3759.132517][ T4861] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3759.133178][ T4861] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3765.950192][ T24] audit: type=1400 audit(3765.070:231): avc: denied { write } for pid=5083 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3777.080882][ T24] audit: type=1400 audit(3776.220:232): avc: denied { write } for pid=5090 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3786.455840][ T3207] 8021q: adding VLAN 0 to HW filter on device eth20 [ 3786.881857][ T4847] veth0_vlan: entered promiscuous mode [ 3788.697719][ T4847] veth1_vlan: entered promiscuous mode [ 3794.078903][ T4847] veth0_macvtap: entered promiscuous mode [ 3795.312259][ T4847] veth1_macvtap: entered promiscuous mode [ 3800.680726][ T3446] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3800.752560][ T41] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3800.776688][ T4667] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3800.803590][ T4662] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3823.190670][ T24] audit: type=1400 audit(3822.340:233): avc: denied { write } for pid=5108 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3838.120332][ T24] audit: type=1400 audit(3837.220:234): avc: denied { write } for pid=5120 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3848.426083][ T3207] 8021q: adding VLAN 0 to HW filter on device eth21 [ 3884.715119][ T24] audit: type=1400 audit(3883.860:235): avc: denied { write } for pid=5138 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3896.343694][ T24] audit: type=1400 audit(3895.440:236): avc: denied { write } for pid=5147 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3903.456063][ T3207] 8021q: adding VLAN 0 to HW filter on device eth22 [ 3915.361069][ T24] audit: type=1400 audit(3914.380:237): avc: denied { write } for pid=5150 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3928.550446][ T24] audit: type=1400 audit(3927.600:238): avc: denied { write } for pid=5155 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3958.909711][ T24] audit: type=1400 audit(3958.060:239): avc: denied { write } for pid=5160 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3973.659676][ T24] audit: type=1400 audit(3972.820:240): avc: denied { write } for pid=5170 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4010.506417][ T24] audit: type=1400 audit(4009.670:241): avc: denied { write } for pid=5184 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4023.071844][ T24] audit: type=1400 audit(4022.110:242): avc: denied { write } for pid=5188 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4032.736730][ T3207] 8021q: adding VLAN 0 to HW filter on device eth23 [ 4068.982042][ T24] audit: type=1400 audit(4068.120:243): avc: denied { write } for pid=5207 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4081.934859][ T24] audit: type=1400 audit(4081.110:244): avc: denied { write } for pid=5219 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4084.017368][ T5159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4084.745434][ T5159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4093.072673][ T3207] 8021q: adding VLAN 0 to HW filter on device eth24 [ 4093.575735][ T5164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4094.304061][ T5164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4130.280597][ T24] audit: type=1400 audit(4129.440:245): avc: denied { write } for pid=5235 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4143.626382][ T24] audit: type=1400 audit(4142.800:246): avc: denied { write } for pid=5244 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4145.054762][ T5159] hsr_slave_0: entered promiscuous mode [ 4145.244647][ T5159] hsr_slave_1: entered promiscuous mode [ 4145.431081][ T5159] debugfs: 'hsr0' already exists in 'hsr' [ 4145.484248][ T5159] Cannot create hsr debugfs directory [ 4157.113413][ T5164] hsr_slave_0: entered promiscuous mode [ 4157.207743][ T5164] hsr_slave_1: entered promiscuous mode [ 4157.287371][ T5164] debugfs: 'hsr0' already exists in 'hsr' [ 4157.405758][ T5164] Cannot create hsr debugfs directory [ 4173.730492][ T24] audit: type=1400 audit(4172.880:247): avc: denied { write } for pid=5250 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4187.103569][ T24] audit: type=1400 audit(4186.280:248): avc: denied { write } for pid=5255 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4197.054323][ T5159] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 4198.195062][ T5159] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 4198.613019][ T5159] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 4199.197453][ T5159] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 4199.434173][ T5159] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 4200.521754][ T5159] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 4201.140418][ T5159] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 4202.002605][ T5159] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 4214.277802][ T5164] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 4215.144266][ T5164] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 4215.413074][ T5164] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 4216.116281][ T5164] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 4216.384547][ T5164] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 4217.117221][ T5164] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 4217.325604][ T5164] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 4218.042716][ T5164] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 4218.709280][ T24] audit: type=1400 audit(4217.670:249): avc: denied { write } for pid=5260 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4237.370059][ T24] audit: type=1400 audit(4236.540:250): avc: denied { write } for pid=5282 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4267.003870][ T5159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4281.006140][ T5164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4316.030117][ T24] audit: type=1400 audit(4315.170:251): avc: denied { write } for pid=5305 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4336.615989][ T24] audit: type=1400 audit(4335.790:252): avc: denied { write } for pid=5314 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4338.621513][ T26] INFO: task syz.6.240:5141 blocked for more than 430 seconds. [ 4338.633125][ T26] Not tainted syzkaller #0 [ 4338.667669][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 4338.773985][ T26] task:syz.6.240 state:D stack:0 pid:5141 tgid:5141 ppid:4835 task_flags:0x400040 flags:0x00000011 [ 4338.870857][ T26] Call trace: [ 4338.872066][ T26] __switch_to+0x5e0/0xb70 (T) [ 4338.874329][ T26] __schedule+0x2554/0x3828 [ 4338.874872][ T26] schedule+0xac/0x278 [ 4338.875320][ T26] schedule_timeout+0x68/0x1ec [ 4338.875825][ T26] do_wait_for_common+0x270/0x428 [ 4338.876260][ T26] wait_for_completion+0x44/0x5c [ 4338.876708][ T26] __synchronize_srcu+0x1b4/0x1f4 [ 4338.877220][ T26] synchronize_srcu+0x668/0x8dc [ 4338.877755][ T26] mmu_notifier_unregister+0x320/0x428 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 4339.073237][ T26] kvm_put_kvm+0x69c/0xbbc [ 4339.074065][ T26] kvm_vm_release+0x58/0x78 [ 4339.074628][ T26] __fput+0x4ac/0x978 [ 4339.075098][ T26] ____fput+0x20/0x30 [ 4339.075569][ T26] task_work_run+0x1b8/0x250 [ 4339.076057][ T26] exit_to_user_mode_loop+0x110/0x188 [ 4339.076564][ T26] el0_svc+0x184/0x238 [ 4339.077032][ T26] el0t_64_sync_handler+0x84/0x12c [ 4339.077511][ T26] el0t_64_sync+0x198/0x19c [ 4339.181027][ T26] [ 4339.181027][ T26] Showing all locks held in the system: [ 4339.223267][ T26] 1 lock held by khungtaskd/26: [ 4339.259984][ T26] #0: ffff800087db4518 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire+0x0/0x44 [ 4339.262849][ T26] 2 locks held by kworker/u4:5/48: [ 4339.263226][ T26] #0: 1df000000d036540 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_one_work+0x804/0x1d5c [ 4339.265224][ T26] #1: ffff80008df87cb8 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x890/0x1d5c [ 4339.266941][ T26] 1 lock held by klogd/3170: [ 4339.267275][ T26] 2 locks held by getty/3235: [ 4339.267620][ T26] #0: 34f000001276a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 4339.457695][ T26] #1: 53ff80008cb4b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x314/0x1214 [ 4339.497268][ T26] 2 locks held by syz-executor/3365: [ 4339.497640][ T26] 3 locks held by kworker/u4:6/3446: [ 4339.497936][ T26] 3 locks held by kworker/u4:0/3733: [ 4339.579748][ T26] 2 locks held by kworker/u4:1/3880: [ 4339.580169][ T26] #0: 1df000000d036540 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_one_work+0x804/0x1d5c [ 4339.582100][ T26] #1: ffff8000a84c7cb8 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x890/0x1d5c [ 4339.583719][ T26] 3 locks held by kworker/u4:8/4109: [ 4339.584083][ T26] 3 locks held by kworker/u4:10/4646: [ 4339.584477][ T26] 3 locks held by kworker/u4:13/5079: [ 4339.584792][ T26] 2 locks held by syz.7.239/5134: [ 4339.585121][ T26] 3 locks held by kworker/u4:7/5259: [ 4339.585458][ T26] 2 locks held by kworker/u4:14/5279: [ 4339.585774][ T26] 2 locks held by dhcpcd-run-hook/5317: [ 4339.586211][ T26] [ 4339.586486][ T26] ============================================= [ 4339.586486][ T26] [ 4339.587458][ T26] Kernel panic - not syncing: hung_task: blocked tasks [ 4339.601846][ T26] CPU: 0 UID: 0 PID: 26 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT [ 4339.603465][ T26] Hardware name: linux,dummy-virt (DT) [ 4339.604557][ T26] Call trace: [ 4339.605454][ T26] show_stack+0x2c/0x3c (C) [ 4339.606566][ T26] __dump_stack+0x30/0x40 [ 4339.607566][ T26] dump_stack_lvl+0x30/0x12c [ 4339.608663][ T26] dump_stack+0x1c/0x28 [ 4339.609699][ T26] vpanic+0x4cc/0x844 [ 4339.610586][ T26] vpanic+0x0/0x844 [ 4339.611376][ T26] hung_task_panic+0x0/0x2c [ 4339.612483][ T26] kthread+0x4d4/0x51c [ 4339.613513][ T26] ret_from_fork+0x10/0x20 [ 4339.615493][ T26] Kernel Offset: disabled [ 4339.616278][ T26] CPU features: 0x00000000,0034600b,f7c647a1,057ffe1f [ 4339.617542][ T26] Memory Limit: none [ 4339.619925][ T26] Rebooting in 86400 seconds..