last executing test programs: 1h22m1.154497911s ago: executing program 1 (id=146): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000bfe000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000b80)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r5, 0x4010aeac, &(0x7f0000000000)=@arm64_fw={0x6030000000140000, &(0x7f0000000200)=0x10003}) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CAP_ARM_MTE(r6, 0x4068aea3, &(0x7f0000000000)) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_DEVICE_ATTR_vm(r7, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)={0xef000000, 0x1000, 0x2}}) r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000140)={0x0, &(0x7f0000000200)=[@smc={0x1e, 0x40, {0x86000000, [0x10000, 0xfff, 0x7e8, 0x7, 0x4000004]}}], 0x40}, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 1h21m52.995791389s ago: executing program 1 (id=148): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r1 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x2a) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) (async) ioctl$KVM_SET_USER_MEMORY_REGION2(r6, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0xa7000, &(0x7f0000ffc000/0x2000)=nil, 0x4000}) (async) r7 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000b80)={0x0, 0x0}, &(0x7f0000000bc0)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_SET_ONE_REG(r7, 0x4010aeac, &(0x7f0000000000)=@arm64_fw={0x6030000000140000, &(0x7f0000000200)=0x10002}) (async) r8 = syz_kvm_add_vcpu$arm64(r1, &(0x7f0000000b80)={0x0, &(0x7f0000000100)=[@hvc={0x32, 0x40, {0x84000015, [0x100000001, 0x8000000000000000, 0xffffffffffffffff, 0xee24, 0xfffffffffffeffff]}}], 0x40}, &(0x7f0000000040)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r10, 0x4020aeae, &(0x7f00000002c0)={0x5}) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x2d) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, &(0x7f0000000040)={0x7, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r13, 0x4018aee3, &(0x7f00000002c0)=@attr_other={0x0, 0x7, 0x10001, 0x0}) (async) r14 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r14, 0xae03, 0xf5) (async) ioctl$KVM_SET_ONE_REG(r10, 0x4010aeac, &(0x7f0000000000)=@arm64_sys={0x603000000013c038, &(0x7f0000000080)=0x1}) 1h21m42.797637336s ago: executing program 1 (id=150): r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) (async) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x1, 0x8, 0xb, 0x0, 0x2, 0x6, 0x6, 0x9, 0x8, 0x8, 0x6, 0x2, 0x0, 0x6, 0x6, 0xe2, 0x1, 0x29, 0x0, '\x00', 0x10, 0x6}) (async) r5 = openat$kvm(0x0, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000000)={0x7}) (async) eventfd2(0x0, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) (async) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r9, &(0x7f00000001c0)=0x1, 0x11) r10 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x2a) r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000b80)={0x0, 0x0}, &(0x7f0000000bc0)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_SET_ONE_REG(r12, 0x4010aeac, &(0x7f0000000000)=@arm64_fw={0x6030000000140000, &(0x7f0000000200)=0x10002}) (async) r13 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000000)={0x0, 0x0}, &(0x7f00000000c0)=[@featur1={0x1, 0x5}], 0x1) (async) r14 = syz_kvm_add_vcpu$arm64(r0, &(0x7f0000000b80)={0x0, &(0x7f0000000100)=[@smc={0x1e, 0x40, {0x84000003, [0x80000000000000, 0x53960c3d, 0xac8, 0x2, 0x7fffffffffffffff]}}], 0x40}, &(0x7f00000001c0)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r14, 0xae80, 0x0) ioctl$KVM_SET_ONE_REG(r13, 0x4010aeac, &(0x7f0000000140)=@arm64_sys={0x603000000013dea7, 0x0}) 1h21m36.962752114s ago: executing program 1 (id=152): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000180)={0x1fe, 0x4, 0x80a0000, 0x1000, &(0x7f0000c09000/0x1000)=nil, 0x1000, r2}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000080)={0x0, 0x4, 0x5000, 0x2000, &(0x7f0000ffd000/0x2000)=nil, 0x4000000000, r2}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3}) r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, r6, 0x3000001, 0x11, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000240)={0x1ff, 0x5, 0x2, 0x1000, &(0x7f0000ffd000/0x1000)=nil, 0x9, r5}) 1h21m31.142707849s ago: executing program 1 (id=153): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0x40086602, 0x110e22ffff) (async) r3 = syz_kvm_vgic_v3_setup(r1, 0x2, 0x40) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000040)=@attr_riscv64=@attr_ctrl={0x0, 0x1, 0x1, 0x0}) 1h21m26.087408139s ago: executing program 1 (id=155): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xfffffffffffffffc) ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f0000000180)={0xb6, 0x0, 0x464e}) openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) munmap(&(0x7f0000e33000/0x2000)=nil, 0x2000) munmap(&(0x7f0000136000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r8, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0x3}) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0xc0189436, 0x1ffffffc) syz_memcpy_off$KVM_EXIT_HYPERCALL(r9, 0x20, &(0x7f0000000080)="fb0149dd033be3abf4001b0000005a9610fbff67521ce16f8f1f449a7ab2aa76c829d2262f000200000000000001000000000000000000000020001e91114900", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r8, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x600657af12600f2, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000000c0)={0x7, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r12, 0x4018aee3, 0xffffffffffffffff) 1h20m42.360336641s ago: executing program 32 (id=154): openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xfffffffeffffffff) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3d) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x5d) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_ARM_VCPU_INIT(r9, 0x4020aeae, &(0x7f0000000340)={0x5}) r10 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r6, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r10, 0x20, &(0x7f0000000080)="fb01db06033ce3c60100a29ea6ab8031d1dfd92f0000dc0320002c005a9610fbff67521c966f8f1f4408357070c2c7aadad0b207000000000400", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000036000/0x3000)=nil, 0x930, 0x3000007, 0x10, r2, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000040), 0xa00f2, 0x408) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) munmap(&(0x7f0000e51000/0x4000)=nil, 0x4000) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) munmap(&(0x7f000000f000/0x2000)=nil, 0x2000) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f0000000200)={0x1c, 0x42f6, 0xb}) r11 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x34) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) 1h20m39.569139077s ago: executing program 33 (id=155): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xfffffffffffffffc) ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f0000000180)={0xb6, 0x0, 0x464e}) openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) munmap(&(0x7f0000e33000/0x2000)=nil, 0x2000) munmap(&(0x7f0000136000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r8, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0x3}) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0xc0189436, 0x1ffffffc) syz_memcpy_off$KVM_EXIT_HYPERCALL(r9, 0x20, &(0x7f0000000080)="fb0149dd033be3abf4001b0000005a9610fbff67521ce16f8f1f449a7ab2aa76c829d2262f000200000000000001000000000000000000000020001e91114900", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r8, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x600657af12600f2, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000000c0)={0x7, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r12, 0x4018aee3, 0xffffffffffffffff) 52m12.599152004s ago: executing program 3 (id=409): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2e) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x5, 0x800) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x8000000008000800, 0x0, 0x0, r3, 0x2}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000000)={0x1, 0x0, 0x0, r3, 0x2}) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_IRQ_LINE(r5, 0x4008ae61, &(0x7f0000000080)={0x0, 0xffffff6f}) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1000009, 0x16831, 0xffffffffffffffff, 0x0) ioctl$KVM_IRQ_LINE(r5, 0x4008ae61, &(0x7f00000001c0)={0x0, 0xffffffff}) r6 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x5) syz_kvm_setup_cpu$arm64(r0, r6, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000100)=[{0x0, 0x0}], 0x1, 0x0, &(0x7f00000003c0)=[@featur2={0x1, 0x17}], 0x1) ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, &(0x7f0000000140)=@arm64_core={0x6030000000100042, &(0x7f0000000000)=0x801b}) 52m2.014088615s ago: executing program 3 (id=411): mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x100000b, 0x16831, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x2000001, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000080)={0x2, 0x0, [{0x922, 0x5, 0x1, 0x0, @irqchip={0x3, 0x9}}, {0x0, 0x5, 0x1, 0x0, @msi={0x2da1, 0xff, 0x8, 0x1be}}]}) 51m57.168866929s ago: executing program 2 (id=412): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000bfe000/0x400000)=nil, &(0x7f00000005c0)=[{0x0, &(0x7f00000002c0)=[@its_setup={0x82, 0x28, {0x0, 0x1, 0x274}}, @its_setup={0x82, 0x28, {0x2, 0x1, 0x17}}, @msr={0x14, 0x20, {0x603000000013dce4, 0x6}}, @irq_setup={0x46, 0x18, {0x4, 0x1d}}, @its_setup={0x82, 0x28, {0x401, 0x4, 0x1b7}}, @irq_setup={0x46, 0x18, {0x0, 0xaf}}, @code={0xa, 0x84, {"007008d5007008d5c0358cd20080b0f2010180d2c20080d2a30080d2e40080d2020000d4405e9ed200c0b0f2c10180d2420080d2030180d2640180d2020000d40074200e007008d540aa9cd200e0b0f2210180d2c20080d2230080d2040080d2020000d4009c005f0000031e00004028"}}, @eret={0xe6, 0x18, 0x5}, @smc={0x1e, 0x40, {0x200, [0x6, 0xffffffffffffffff, 0x3, 0x10000, 0x1]}}, @hvc={0x32, 0x40, {0x400, [0x1, 0x4, 0x6e, 0x4, 0x800]}}, @hvc={0x32, 0x40, {0x200, [0x4, 0x9, 0x10000, 0x75b, 0x101]}}, @hvc={0x32, 0x40, {0x84000012, [0x0, 0x3, 0x40, 0x151, 0x1]}}, @uexit={0x0, 0x18, 0x8}, @its_setup={0x82, 0x28, {0x0, 0x2, 0xbf}}, @uexit={0x0, 0x18, 0x8}, @eret={0xe6, 0x18, 0xc}, @msr={0x14, 0x20, {0x603000000013c000, 0x28}}], 0x2f4}], 0x1, 0x0, &(0x7f0000000600)=[@featur1={0x1, 0x11}], 0x1) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r3, 0x4018aee2, &(0x7f0000000100)=@attr_irq_timer={0x0, 0x1, 0x1, &(0x7f0000000280)=0x18}) 51m54.538859737s ago: executing program 3 (id=413): r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f00000003c0)={0xdf, 0x0, 0x2000}) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x101e40, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x28) syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000b75000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000140)={0x0, &(0x7f0000000640)=[@uexit={0x0, 0x18, 0x7fff}, @msr={0x14, 0x20, {0x603000000013df6d, 0x10000}}, @its_setup={0x82, 0x28, {0x1, 0x3, 0x15b}}, @smc={0x1e, 0x40, {0xc4000012, [0x2, 0x1, 0x200, 0x0, 0x5]}}, @mrs={0xbe, 0x18, {0x603000000013c64a}}, @its_setup={0x82, 0x28, {0x1, 0x3, 0x30a}}, @hvc={0x32, 0x40, {0x84000052, [0xa, 0x8, 0xfff, 0xc4, 0x2]}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x1, 0x2, 0xe, 0x9, 0x6, 0x1}}, @uexit={0x0, 0x18, 0x5}, @msr={0x14, 0x20, {0x603000000013801c, 0x1}}, @its_setup={0x82, 0x28, {0x0, 0x4, 0x3e8}}, @smc={0x1e, 0x40, {0xc400000c, [0x9, 0x7f, 0x2, 0xe0b3, 0xe7]}}, @eret={0xe6, 0x18}, @its_setup={0x82, 0x28, {0x4, 0x1, 0x362}}, @svc={0x122, 0x40, {0x800, [0x400, 0x10000000000, 0x6, 0x0, 0x451]}}, @msr={0x14, 0x20, {0x603000000013df00, 0xfffffffffffffff7}}, @svc={0x122, 0x40, {0x80008000, [0x159, 0x1, 0x9, 0x2bb5, 0x5]}}, @irq_setup={0x46, 0x18, {0x1, 0x3af}}, @irq_setup={0x46, 0x18, {0x1, 0xed}}, @msr={0x14, 0x20, {0x603000000013e6d1, 0x5}}, @eret={0xe6, 0x18, 0x9}, @memwrite={0x6e, 0x30, @generic={0xdddd1000, 0x2bc, 0x8, 0xd}}, @memwrite={0x6e, 0x30, @generic={0xf000, 0x3b7, 0x1d39, 0x4}}, @svc={0x122, 0x40, {0x84000003, [0x8000, 0x7ff, 0xffffffffffff4c10, 0x2, 0x6]}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x1, 0x4, 0xc, 0x253ee994, 0x6, 0x2}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x0, 0x0, 0x3, 0x8, 0x8}}, @irq_setup={0x46, 0x18, {0x0, 0x4f}}, @svc={0x122, 0x40, {0x31000000, [0x0, 0x8, 0x1, 0xffffffff80000001, 0x7fffffff]}}], 0x478}, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x1, 0x200000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x2, 0x3, 0x100000, 0x2000, &(0x7f000000f000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xeeee8000, 0x1000, &(0x7f0000f15000/0x1000)=nil}) syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000bfe000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000200)={0x10201, 0x0, 0xb000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f00000002c0)={0x2710, 0x3, 0x200000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000100)={0x0, 0x2, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) r7 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f000022c000/0x400000)=nil) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f00000004c0)={0x7, 0x0, [{0x7, 0x2, 0x1, 0x0, @irqchip={0x9c8, 0x9f0a}}, {0x1, 0x1, 0x1, 0x0, @irqchip={0x6, 0x10001}}, {0x0, 0x1, 0x0, 0x0, @sint={0x7, 0x9}}, {0x4, 0x2, 0x1, 0x0, @irqchip={0x8, 0x88}}, {0x4f, 0x2, 0x1, 0x0, @sint={0x2, 0x3}}, {0xf7a3, 0x1, 0x0, 0x0, @irqchip={0x4, 0xffff}}, {0x9, 0x5, 0x1, 0x0, @irqchip={0xfff, 0x6}}]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x601, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000140)={0x1, 0x5, 0x0, 0x1000, &(0x7f0000e6e000/0x1000)=nil}) r11 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) 51m48.124053052s ago: executing program 2 (id=414): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x18) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r5, 0x4068aea3, 0x0) syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@mrs={0xbe, 0x18, {0x603000000013c038}}], 0x18}, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 51m40.871992974s ago: executing program 3 (id=415): r0 = openat$kvm(0x0, &(0x7f0000000100), 0x202001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x38) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async, rerun: 32) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x88201, 0x0) (rerun: 32) r3 = openat$kvm(0x0, 0x0, 0x8280, 0x0) (async) r4 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000300)=[@featur2={0x1, 0x491cab28f0f6d128}], 0x1) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000080)="4200eee491ca24e00d0003000098bea5038b6db300cd411a0000000000000001a8092240f0ee5c0030521e10000000830000000000000000010000000000000000000000591f9b21", 0x0, 0xffffffffffffff1f) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, 0xffffffffffffffff, 0x0) (async, rerun: 64) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) (rerun: 64) ioctl$KVM_SET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee1, &(0x7f00000002c0)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0x1}) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async, rerun: 32) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x18) (async, rerun: 32) r7 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r7, 0x0, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x25) (async, rerun: 64) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) (async, rerun: 64) munmap(&(0x7f0000e51000/0x4000)=nil, 0x4000) (async, rerun: 64) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) (async) munmap(&(0x7f000000f000/0x2000)=nil, 0x2000) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) (async) ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000040)={0x7, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f0000000280)=@attr_arm64={0x0, 0x0, 0x3, 0x0}) (async) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) 51m40.235301433s ago: executing program 2 (id=416): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x309480, 0x0) (async, rerun: 64) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) (rerun: 64) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x2000003, 0x2013, r3, 0x0) (async, rerun: 64) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) (async, rerun: 64) munmap(&(0x7f0000000000/0x4000)=nil, 0x4000) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_GUEST_MEMFD(r6, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r6, 0x40a0ae49, &(0x7f0000000240)={0x1fe, 0x4, 0xeeee8000, 0x2000, &(0x7f0000000000/0x2000)=nil, 0x0, r7}) (async) ioctl$KVM_SET_USER_MEMORY_REGION2(r6, 0x40a0ae49, &(0x7f0000000080)={0x2710, 0x4, 0x100000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil, 0x8000, r7}) (async) mmap$KVM_VCPU(&(0x7f0000007000/0x2000)=nil, r4, 0x3000003, 0x2011, r3, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) 51m34.265594235s ago: executing program 2 (id=417): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0xaf832, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0xaf832, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000d8e000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) munmap$KVM_VCPU(0x0, 0x1000000000) (async) munmap$KVM_VCPU(0x0, 0x1000000000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f00000000c0)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0xc004aea7, &(0x7f0000000000)=0x1) (async) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0xc004aea7, &(0x7f0000000000)=0x1) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000100)={0x1000020, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 51m33.057737501s ago: executing program 3 (id=418): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x57) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r1 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$KVM_CREATE_VM(r3, 0x400454d1, 0xf) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x30) munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) r4 = eventfd2(0x8, 0x801) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={r4, 0xc8, 0x0, r4}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2b) ioctl$KVM_IRQFD(r8, 0x4020ae76, &(0x7f0000000040)={r4, 0x5, 0x1, r4}) ioctl$KVM_CREATE_VM(r7, 0x400454e2, 0x1000110c23001c) 51m26.255915988s ago: executing program 2 (id=419): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) (async) r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffd000/0x1000)=nil, r1, 0x0, 0x110, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r0, 0x5452, 0x3a) 51m21.638401338s ago: executing program 2 (id=420): r0 = openat$kvm(0x0, &(0x7f0000000280), 0x103080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = syz_kvm_vgic_v3_setup(r1, 0x1, 0x40) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_ARM_VCPU_INIT(r6, 0x4020aeae, &(0x7f0000000080)={0x5, 0x1}) ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, &(0x7f0000000040)=@arm64_fw={0x6030000000140003, &(0x7f0000000000)=0x2}) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000180)={0x0, &(0x7f0000000000)=[@hvc={0x32, 0x40, {0x84000051, [0x84000050, 0x7, 0x1, 0xc, 0x7fff]}}], 0x40}, 0x0, 0x0) ioctl$KVM_GET_REGS(r9, 0x8360ae81, &(0x7f00000001c0)) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, &(0x7f0000000100)=@attr_arm64={0x0, 0x1, 0x4, &(0x7f0000000040)=0x2}) r10 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r12 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000b80)={0x0, &(0x7f0000000100)=[@smc={0x1e, 0x40, {0x8400000a, [0x84000003, 0xa, 0x0, 0x6, 0xf]}}], 0x40}, &(0x7f00000000c0)=[@featur1={0x1, 0x4}], 0x1) r13 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) r15 = mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) syz_kvm_setup_syzos_vm$arm64(r14, &(0x7f0000000000/0x400000)=nil) syz_memcpy_off$KVM_EXIT_HYPERCALL(r15, 0x20, &(0x7f0000000240)="37e68986ad644f5dc57bbc1ff382863b67f3eee57a32ec911d95f88f3dd8ea716e4a29cefbd440b2ecf83f57baf33b0c97182970a47ef45c954e42f2055384921830f6e273d2eb30", 0x0, 0x2a2019ac5ed2a1ef) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) mmap$KVM_VCPU(&(0x7f0000000000/0xc00000)=nil, 0x930, 0xf, 0x32, 0xffffffffffffffff, 0x0) close(r14) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) 51m7.47104183s ago: executing program 3 (id=421): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x101000, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, 0x0) (async) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f00000000c0)={0x0, &(0x7f0000000380)=[@its_setup={0x82, 0x28, {0x3, 0x1, 0x39d}}], 0x28}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r2, 0xffffffffffbffffc, 0x120) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x4f832, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000240)=@attr_arm64={0x0, 0x4, 0x2, 0x0}) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r7 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x25) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f00000001c0)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x4, 0x3f, 0x0}) (async) r10 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r10, 0x4020aeae, &(0x7f0000000100)={0x5, 0x18}) (async) ioctl$KVM_GET_ONE_REG(r10, 0x4010aeab, &(0x7f00000000c0)=@arm64_core={0x6030000000100000, &(0x7f00000001c0)=0x2}) 50m34.909620624s ago: executing program 34 (id=420): r0 = openat$kvm(0x0, &(0x7f0000000280), 0x103080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = syz_kvm_vgic_v3_setup(r1, 0x1, 0x40) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_ARM_VCPU_INIT(r6, 0x4020aeae, &(0x7f0000000080)={0x5, 0x1}) ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, &(0x7f0000000040)=@arm64_fw={0x6030000000140003, &(0x7f0000000000)=0x2}) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000180)={0x0, &(0x7f0000000000)=[@hvc={0x32, 0x40, {0x84000051, [0x84000050, 0x7, 0x1, 0xc, 0x7fff]}}], 0x40}, 0x0, 0x0) ioctl$KVM_GET_REGS(r9, 0x8360ae81, &(0x7f00000001c0)) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, &(0x7f0000000100)=@attr_arm64={0x0, 0x1, 0x4, &(0x7f0000000040)=0x2}) r10 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r12 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000b80)={0x0, &(0x7f0000000100)=[@smc={0x1e, 0x40, {0x8400000a, [0x84000003, 0xa, 0x0, 0x6, 0xf]}}], 0x40}, &(0x7f00000000c0)=[@featur1={0x1, 0x4}], 0x1) r13 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) r15 = mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) syz_kvm_setup_syzos_vm$arm64(r14, &(0x7f0000000000/0x400000)=nil) syz_memcpy_off$KVM_EXIT_HYPERCALL(r15, 0x20, &(0x7f0000000240)="37e68986ad644f5dc57bbc1ff382863b67f3eee57a32ec911d95f88f3dd8ea716e4a29cefbd440b2ecf83f57baf33b0c97182970a47ef45c954e42f2055384921830f6e273d2eb30", 0x0, 0x2a2019ac5ed2a1ef) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) mmap$KVM_VCPU(&(0x7f0000000000/0xc00000)=nil, 0x930, 0xf, 0x32, 0xffffffffffffffff, 0x0) close(r14) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) 50m21.128615067s ago: executing program 35 (id=421): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x101000, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, 0x0) (async) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f00000000c0)={0x0, &(0x7f0000000380)=[@its_setup={0x82, 0x28, {0x3, 0x1, 0x39d}}], 0x28}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r2, 0xffffffffffbffffc, 0x120) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x4f832, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000240)=@attr_arm64={0x0, 0x4, 0x2, 0x0}) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r7 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x25) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f00000001c0)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x4, 0x3f, 0x0}) (async) r10 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r10, 0x4020aeae, &(0x7f0000000100)={0x5, 0x18}) (async) ioctl$KVM_GET_ONE_REG(r10, 0x4010aeab, &(0x7f00000000c0)=@arm64_core={0x6030000000100000, &(0x7f00000001c0)=0x2}) 41m21.787510029s ago: executing program 5 (id=449): r0 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x2041, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) (async) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) r6 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r5, 0x3, 0x11, r4, 0x40000) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4a85400005a9610fbff67521cf66f8fd22627e7000000f700000000000000f200", 0x0, 0x48) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32) r7 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r8, 0x40086602, 0x110e22ffff) (async) ioctl$KVM_CHECK_EXTENSION(r8, 0x40086602, 0x110e22ffff) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) (async) r9 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f00000000c0)="f610f5b33c962b62c00d0914345792dd23a78cdac1300e5e167ce3c540e94f06530dc539e8c1d98289a14446bb8d486f0060cb76b4abc705083f72adeea32830e92b6c89e7b929ff", 0x0, 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) (async) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000040)={0x1, 0x0, 0xdddd1000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r11, 0xc018aec0, &(0x7f00000000c0)={0x1}) (async) ioctl$KVM_CREATE_DEVICE(r11, 0xc018aec0, &(0x7f00000000c0)={0x1}) syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000ba9000/0x400000)=nil) (async) syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000ba9000/0x400000)=nil) 41m8.170507244s ago: executing program 5 (id=451): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000080)={0x100000000, 0x3}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000080), 0x18300, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x100000002000002) r9 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r7, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffc000/0x3000)=nil, r9, 0x1, 0x12, r8, 0x0) r10 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r7, 0xae04) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r13, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) ioctl$KVM_SET_ONE_REG(r13, 0x4010aeac, &(0x7f00000000c0)=@riscv64_timer={0x0, &(0x7f0000000100)=0x7}) mmap$KVM_VCPU(&(0x7f0000ffd000/0x2000)=nil, r10, 0x1000001, 0x12, r8, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x3, 0x27, 0x6, 0x0, 0x4, 0x9, 0xff, 0x7, 0xc7, 0x43, 0x5, 0x7, 0x0, 0x5, 0x2e, 0xd7, 0x10, 0xaa, 0x7, '\x00', 0x2, 0x100000000000000}) write$eventfd(r14, &(0x7f00000001c0)=0x9, 0x1d) r15 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r15, 0xae41, 0x2) ioctl$KVM_CAP_ARM_USER_IRQ(r15, 0x4068aea3, 0xffffffffffffffff) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x20000e) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000140)={0x2, 0x4, 0xf000, 0x1000, &(0x7f0000e21000/0x1000)=nil, 0x0, r2}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000240)={0x10001, 0x4, 0x8000000, 0x2000, &(0x7f0000ffd000/0x2000)=nil, 0x10000, r2}) 40m57.038399719s ago: executing program 4 (id=452): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x4}}], 0x28}, 0x0, 0x0) r4 = syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) r6 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0x80087601, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x8, 0x88, &(0x7f0000000000)=0x10}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000002c0)=@attr_other={0x0, 0x9, 0x5, 0x0}) 40m43.970326015s ago: executing program 5 (id=453): r0 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) munmap$KVM_VCPU(0x0, 0x100000000) (async) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) (async) r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, r5, 0x8, 0x13, r4, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ffd000/0x2000)=nil, r5, 0x1000001, 0x12, r4, 0x0) r6 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000840)={0x0, &(0x7f00000008c0)=[@uexit={0x0, 0x18, 0x1}, @its_send_cmd={0xaa, 0x28, {0xb, 0x1, 0x3, 0x10, 0x3, 0x4, 0x2}}, @its_send_cmd={0xaa, 0x28, {0x4, 0x1, 0x1, 0xb, 0x100, 0x7, 0x3}}, @smc={0x1e, 0x40, {0x100, [0xffffffffffffffff, 0x6, 0x6f, 0x1, 0x4]}}, @mrs={0xbe, 0x18, {0x603000000013dee3}}, @smc={0x1e, 0x40, {0x1, [0x2, 0x5, 0xc90, 0x2, 0x80000001]}}, @code={0xa, 0x84, {"c07c8ad20040b8f2610180d2c20080d2030080d2840180d2020000d4007008d500709f0ce05d8ad200e0b8f2e10180d2220080d2c30180d2e40080d2020000d4007008d5007008d5000028d5007008d5007008d580d385d20080b8f2810080d2820080d2230080d2c40080d2020000d4"}}, @svc={0x122, 0x40, {0xf600ff21, [0xcf8, 0x1fe000000000000, 0x5, 0x3ff, 0x5]}}, @hvc={0x32, 0x40, {0x1000000, [0x6, 0x6, 0x1, 0x7f, 0x7a]}}, @smc={0x1e, 0x40, {0x84000011, [0x0, 0x1, 0x1, 0x70f, 0x2]}}, @its_setup={0x82, 0x28, {0x3, 0x4, 0x121}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x1, 0x2, 0xe, 0x0, 0x10000, 0x4}}, @mrs={0xbe, 0x18, {0xf36f30661e645f96}}, @irq_setup={0x46, 0x18, {0x2, 0x127}}, @msr={0x14, 0x20, {0x603000000013c005, 0x8000}}, @code={0xa, 0x6c, {"00800048c04886d20040b8f2e10180d2620180d2a30080d2840180d2020000d40050005e007008d5007008d50000c06c000008d540e197d20000b8f2610080d2a20180d2630080d2240180d2020000d4e0079f9a007008d5"}}, @code={0xa, 0x84, {"600a96d200a0b8f2a10180d2620180d2630180d2c40080d2020000d4000008d5e01197d200e0b0f2a10180d2820180d2430180d2e40080d2020000d4000028d5007008d5007008d5008008d5008008d5007008d5e0989bd20040b0f2210180d2c20180d2c30080d2440080d2020000d4"}}, @code={0xa, 0x54, {"00044038000008d50004006e00b4202e007008d5000028d5000008d5007008d5007008d5a03f91d200e0b0f2e10180d2e20080d2430080d2840180d2020000d4"}}, @msr={0x14, 0x20, {0x603000000013c00a}}, @mrs={0xbe, 0x18, {0x603000000013c03a}}, @irq_setup={0x46, 0x18, {0x4, 0xee}}, @smc={0x1e, 0x40, {0x8000, [0x2, 0x7, 0x8000000000000000, 0x3ff, 0x6]}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80e0000, 0x0, 0x800, 0x8}}, @code={0xa, 0x84, {"007008d5e03684d20020b8f2e10180d2820080d2630080d2c40180d2020000d4007008d5009c202e20048fd20000b8f2010080d2a20080d2c30080d2640080d2020000d4007008d520b497d200c0b8f2c10180d2020180d2630080d2c40180d2020000d40000609e0080202e000080d2"}}, @code={0xa, 0xb4, {"007008d5c00998d20000b0f2010080d2020180d2e30180d2640080d2020000d4a0919dd20040b0f2410080d2c20180d2030080d2c40080d2020000d4407e88d200e0b8f2610080d2220180d2230080d2840180d2020000d4007008d50000007d406682d20000b0f2010080d2e20180d2630180d2840180d2020000d4000000d10054205e40628fd20080b0f2e10080d2a20180d2e30080d2a40180d2020000d4"}}, @irq_setup={0x46, 0x18, {0x4, 0x24d}}, @msr={0x14, 0x20, {0x603000000013c802, 0x7fff}}, @code={0xa, 0x6c, {"607b8ed20080b8f2c10180d2420180d2630080d2e40080d2020000d40084200e003c004e008008d50000001f007008d50024c09a00a0000d00a4e00d607892d20080b0f2a10180d2820180d2e30080d2640180d2020000d4"}}, @mrs={0xbe, 0x18, {0x603000000013df02}}, @hvc={0x32, 0x40, {0x80000001, [0xc, 0x1, 0x6, 0x7, 0x6]}}, @eret={0xe6, 0x18, 0xfffffffffffffffe}, @svc={0x122, 0x40, {0x1000, [0xf, 0x1, 0x20, 0x6, 0xa]}}], 0x774}, &(0x7f0000000880)=[@featur1={0x1, 0x10}], 0x1) mmap$KVM_VCPU(&(0x7f0000ced000/0xf000)=nil, r5, 0x800000, 0x2010, r6, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x8010, 0xffffffffffffffff, 0x9000000) (async) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x2000001, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x0) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) (async) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000100)={0x7, 0xffffffffffffffff}) (async) r10 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) (async) r12 = syz_kvm_add_vcpu$arm64(0x0, 0x0, 0x0, 0x0) (async) syz_kvm_add_vcpu$arm64(0x0, 0x0, 0x0, 0x0) r13 = syz_kvm_vgic_v3_setup(r11, 0x2, 0x100) ioctl$KVM_RUN(r12, 0xae80, 0x0) (async) ioctl$KVM_IRQ_LINE(r11, 0x4008ae61, &(0x7f0000000180)={0x1010020, 0x1}) (async) ioctl$KVM_IRQFD(r11, 0x4020ae76, &(0x7f0000000380)={r13, 0x7f, 0x2}) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f0000000180)=@attr_other={0x0, 0x1, 0x8, &(0x7f00000000c0)=0x45d4970}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32) (async) r14 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0xaf832, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r14, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32) 40m40.530506322s ago: executing program 4 (id=454): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x17) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x20200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@its_setup={0x82, 0x28, {0x1, 0x10000000000004, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x3, 0x40000008, 0x10000, 0x0, 0x105, 0x2}}], 0x50}, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_kvm_vgic_v3_setup(r4, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r8 = syz_kvm_vgic_v3_setup(r2, 0x3, 0x40) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000240)={0x6, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r11, 0x800454d7, 0x110e22ffff) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f0000000100)=@attr_other={0x0, 0x6, 0x382bc665, &(0x7f0000000280)=0x8001}) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f0000000080)=@attr_riscv64=@attr_addr={0x0, 0x1, @imsic=0x3, &(0x7f0000000000)=0x40}) 40m29.653474277s ago: executing program 5 (id=455): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0x5421, 0x6) r1 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) munmap(&(0x7f0000293000/0x1000)=nil, 0x1000) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x2002, 0x0) syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r5, 0x4010aeac, &(0x7f0000000280)=@arm64_sve={0x60800000001504f7, &(0x7f0000000140)=0x9}) syz_kvm_vgic_v3_setup(r3, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x161642, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000240)=@x86={0xe, 0x7, 0x8, 0x0, 0xd, 0x2, 0x2, 0xff, 0x78, 0x3, 0x10, 0xff, 0x0, 0x70, 0x0, 0xb, 0x2, 0xc2, 0x7f, '\x00', 0xa, 0x4}) syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, 0xfffffffffffffffe, 0x0, 0xfffffffffffffee9) r6 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_kvm_vgic_v3_setup(r7, 0x0, 0x0) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0) syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000740)={0x0, &(0x7f0000000340)=[@mrs={0xbe, 0x18, {0x603000000013f528}}, @irq_setup={0x46, 0x18, {0x0, 0x1ab}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x1, 0x3, 0x8, 0xad, 0x7, 0x4}}, @code={0xa, 0x84, {"00ae94d20040b0f2010080d2420180d2230080d2c40080d2020000d4807885d20060b8f2e10180d2e20080d2e30180d2e40080d2020000d4009c202e008008d5007008d500a8212ec01b9cd20060b0f2410180d2e20080d2c30180d2240180d2020000d4006860380040251e0000206b"}}, @mrs={0xbe, 0x18, {0x603000000013802f}}, @eret={0xe6, 0x18, 0xd}, @eret={0xe6, 0x18, 0x6}, @smc={0x1e, 0x40, {0x84000006, [0x8, 0xa, 0x9c, 0x4, 0x7fffffff]}}, @mrs={0xbe, 0x18, {0x603000000013e08f}}, @msr={0x14, 0x20, {0x603000000013de96, 0x5}}, @uexit={0x0, 0x18, 0xcd7}, @its_setup={0x82, 0x28, {0x0, 0x4, 0x31d}}, @its_setup={0x82, 0x28, {0x3, 0x3, 0x19d}}, @irq_setup={0x46, 0x18, {0x0, 0x1e5}}, @svc={0x122, 0x40, {0x80003fff, [0x3, 0x1ff, 0x9, 0x40, 0x8001]}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x0, 0x4, 0x5, 0x4cd, 0xe}}, @irq_setup={0x46, 0x18, {0x3, 0x163}}, @svc={0x122, 0x40, {0x10, [0xa, 0x81, 0x5, 0x9, 0x4]}}, @svc={0x122, 0x40, {0x4000, [0x6, 0xfffffffffffffff5, 0x4154, 0x9]}}, @uexit={0x0, 0x18, 0x29a4}, @mrs={0xbe, 0x18, {0x603000000013a11b}}, @hvc={0x32, 0x40, {0x0, [0x1, 0x7e, 0x6, 0x1, 0xffffffffffff0001]}}, @svc={0x122, 0x40, {0x80003fff, [0x6, 0xdc3, 0x1, 0xffff, 0x2]}}], 0x3cc}, &(0x7f0000000780)=[@featur1={0x1, 0x4}], 0x1) r9 = syz_kvm_add_vcpu$arm64(r1, &(0x7f0000000080)={0x0, &(0x7f0000000800)=[@mrs={0xbe, 0x18, {0x603000000013dce9}}, @hvc={0x32, 0x40, {0x84000006, [0x7fffffff, 0x0, 0x5e9b, 0x7, 0x4]}}], 0x58}, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 40m25.088741896s ago: executing program 4 (id=456): r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2a) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) (async) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x7f, 0x4, 0x3, 0x0, 0x8, 0x9, 0x8, 0x8b, 0x4, 0x0, 0xf, 0x0, 0x0, 0xebf, 0x6, 0x0, 0xd, 0xfe, 0x3, '\x00', 0x3, 0x8}) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x3, 0xffffffffffffffff, 0x1}) write$eventfd(r5, &(0x7f00000001c0)=0x9, 0x1d) close(0xffffffffffffffff) (async) syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) (async) r6 = syz_kvm_add_vcpu$arm64(r0, &(0x7f0000000b80)={0x0, &(0x7f0000000100)=[@hvc={0x32, 0x40, {0x84000015, [0x100000001, 0x8000000000000000, 0xffffffffffffffff, 0xee24, 0xfffffffffffeffff]}}], 0x40}, &(0x7f0000000040)=[@featur1={0x1, 0x4}], 0x1) r7 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r10 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r9, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r10, 0x20, &(0x7f0000000080)="fb0149dd033be3abf408020000001b0000005a9610fbff67521ce16f8f1f449a7ab2aa76c829d2262f00000000000000000200df38000000000000000020001e91114900", 0x0, 0xfda9) (async) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r12, 0x40a0ae49, &(0x7f0000000240)={0x1ff, 0x5, 0x2, 0x1000, &(0x7f0000ffd000/0x1000)=nil, 0x9}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r9, 0x0) (async) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x600657af12600f2, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) 40m14.937809631s ago: executing program 5 (id=457): r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) r4 = syz_kvm_add_vcpu$arm64(r0, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r4, 0x4018aee1, &(0x7f0000000040)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000280)={0x14, 0xff}}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r7, 0x400454ca, 0x110c23001c) 40m13.335803408s ago: executing program 4 (id=458): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r3, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f00000001c0)="fb0149dd833be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8faa767969d22627e700", 0x0, 0x48) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x28) ioctl$KVM_CAP_HALT_POLL(r6, 0x4068aea3, &(0x7f0000000080)={0xa8, 0x300, 0x3}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r3, 0x0) r7 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a97f2, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0) syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000140)={0x0, &(0x7f0000000000)=[@irq_setup={0x46, 0x18, {0x2, 0x2c0}}], 0x18}, 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0x401c5820, 0x20000007) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil) r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@its_setup={0x82, 0x28, {0x3, 0x4, 0x2}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x0, 0x40400000, 0x7, 0x10000, 0x0, 0x1}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r8, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r10, 0xae80, 0x0) 40m1.758861374s ago: executing program 5 (id=459): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x31) (async, rerun: 32) r2 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000180)={0x0, &(0x7f0000000080)=[@svc={0x122, 0x40, {0x84000000, [0x7, 0x6a06, 0x2, 0x3, 0x7]}}, @msr={0x14, 0x20, {0x603000000013e718, 0x1}}, @smc={0x1e, 0x40, {0x8400fdf5, [0x7fffffffffffffff, 0x8, 0xb2, 0x1, 0x7]}}, @irq_setup={0x46, 0x18, {0x2, 0x37}}, @svc={0x122, 0x40, {0xc1000043, [0x0, 0x6, 0x8, 0x3, 0x4]}}], 0xf8}, &(0x7f00000001c0)=[@featur2={0x1, 0x10}], 0x1) (rerun: 32) syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000500)=[{0x0, &(0x7f0000000580)=[@memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x40, 0x6, 0x8}}, @uexit={0x0, 0x18, 0x800}, @code={0xa, 0x6c, {"000080290070000e007c001b008008d50078205e000008d500d0200e60328ed20080b8f2c10080d2820180d2030080d2a40080d2020000d4200f8cd20080b8f2c10080d2e20080d2c30080d2440080d2020000d40000249e"}}, @mrs={0xbe, 0x18, {0x603000000013e100}}, @uexit={0x0, 0x18, 0xffff}, @svc={0x122, 0x40, {0x8400000b, [0x3, 0x5, 0x3, 0x6, 0x80000000]}}, @svc={0x122, 0x40, {0xc4000004, [0xd2, 0x5, 0xc, 0x4, 0xb]}}, @code={0xa, 0xcc, {"e02f80d20060b8f2610180d2c20180d2230080d2640080d2020000d4000028d5c03a8cd20040b8f2c10080d2a20180d2e30180d2c40180d2020000d4007008d50000007960c48fd200e0b0f2c10180d2c20080d2230180d2a40180d2020000d4e01791d20060b8f2410180d2020180d2c30180d2e40180d2020000d4000028d560d99fd20080b0f2610180d2c20080d2630080d2c40080d2020000d4207098d200a0b8f2810080d2020080d2630080d2e40180d2020000d4"}}, @code={0xa, 0x0, {"007008d540fe84d20040b8f2e10180d2a20080d2830080d2240080d2020000d40068202e000028d500fc209b00806088008c000f607280d20060b8f2210080d2a20080d2830180d2840080d2020000d40078200e007c0013"}}, @smc={0x1e, 0x40, {0xc5000021, [0x23f, 0x8, 0x9, 0x5a17000000000, 0x5]}}, @smc={0x1e, 0x40, {0x84000010, [0x3, 0x0, 0x7, 0x800, 0x8]}}, @eret={0xe6, 0x18, 0x18a7}], 0xfffffffffffffc20}], 0x1, 0x0, &(0x7f0000000540)=[@featur2={0x1, 0x40}], 0x1) (async) r3 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32) (async) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x100000c, 0x4d832, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x1, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000240)=@attr_other={0x0, 0xffff, 0x9, &(0x7f0000000200)}) (async, rerun: 32) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f00000002c0)=@riscv64_smstateen_csr={0x8030000003020000, &(0x7f0000000280)=0x4}) (rerun: 32) mmap$KVM_VCPU(&(0x7f0000ff8000/0x4000)=nil, 0x0, 0x3000005, 0x41812, r0, 0x0) 39m57.588873018s ago: executing program 4 (id=460): munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000b80)={0x0, &(0x7f0000000100)=[@smc={0x1e, 0x40, {0x8400000a, [0x84000001, 0xa, 0x0, 0x6, 0x10]}}], 0x40}, &(0x7f00000000c0)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x4f832, 0xffffffffffffffff, 0x2000) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) mmap$KVM_VCPU(&(0x7f00007f7000/0x4000)=nil, r4, 0x1, 0x810, 0xffffffffffffffff, 0x0) 39m18.452178778s ago: executing program 4 (id=461): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000000)=@arm64={0x6, 0x6, 0xad, '\x00', 0x76}) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f00000000c0)=0xa) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000080)={0x4000, 0x110000, 0x1}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x8080000, 0x8, 0x8, 0xc, 0xe6, 0x40, 0x9, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x3, 0x0, 0x42, 0x5, 0x7d, 0x6, 0x36, 0x0, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0x7, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x3, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x16, 0x88, 0xab, 0x8, 0x9, 0x9, 0xf7, 0x97}, {0xdddd1000, 0xdddd0000, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0x3000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xd000, 0xc000, 0xa, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x81}, {0x7000, 0x30}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0xfec00000, [0x6800000000000000, 0x4, 0x3, 0x8]}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0xd, 0x9, 0xb, 0x0, 0x5, 0x6, 0x6, 0x6, 0x48, 0x88, 0x64, 0x9, 0x0, 0x9, 0x40006, 0xe, 0x3, 0x7, 0x0, '\x00', 0x10, 0x6}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r6, &(0x7f00000001c0)=0x1, 0x11) ioctl$KVM_RUN(r3, 0xae80, 0x0) 39m13.989604899s ago: executing program 36 (id=459): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x31) (async, rerun: 32) r2 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000180)={0x0, &(0x7f0000000080)=[@svc={0x122, 0x40, {0x84000000, [0x7, 0x6a06, 0x2, 0x3, 0x7]}}, @msr={0x14, 0x20, {0x603000000013e718, 0x1}}, @smc={0x1e, 0x40, {0x8400fdf5, [0x7fffffffffffffff, 0x8, 0xb2, 0x1, 0x7]}}, @irq_setup={0x46, 0x18, {0x2, 0x37}}, @svc={0x122, 0x40, {0xc1000043, [0x0, 0x6, 0x8, 0x3, 0x4]}}], 0xf8}, &(0x7f00000001c0)=[@featur2={0x1, 0x10}], 0x1) (rerun: 32) syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000500)=[{0x0, &(0x7f0000000580)=[@memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x40, 0x6, 0x8}}, @uexit={0x0, 0x18, 0x800}, @code={0xa, 0x6c, {"000080290070000e007c001b008008d50078205e000008d500d0200e60328ed20080b8f2c10080d2820180d2030080d2a40080d2020000d4200f8cd20080b8f2c10080d2e20080d2c30080d2440080d2020000d40000249e"}}, @mrs={0xbe, 0x18, {0x603000000013e100}}, @uexit={0x0, 0x18, 0xffff}, @svc={0x122, 0x40, {0x8400000b, [0x3, 0x5, 0x3, 0x6, 0x80000000]}}, @svc={0x122, 0x40, {0xc4000004, [0xd2, 0x5, 0xc, 0x4, 0xb]}}, @code={0xa, 0xcc, {"e02f80d20060b8f2610180d2c20180d2230080d2640080d2020000d4000028d5c03a8cd20040b8f2c10080d2a20180d2e30180d2c40180d2020000d4007008d50000007960c48fd200e0b0f2c10180d2c20080d2230180d2a40180d2020000d4e01791d20060b8f2410180d2020180d2c30180d2e40180d2020000d4000028d560d99fd20080b0f2610180d2c20080d2630080d2c40080d2020000d4207098d200a0b8f2810080d2020080d2630080d2e40180d2020000d4"}}, @code={0xa, 0x0, {"007008d540fe84d20040b8f2e10180d2a20080d2830080d2240080d2020000d40068202e000028d500fc209b00806088008c000f607280d20060b8f2210080d2a20080d2830180d2840080d2020000d40078200e007c0013"}}, @smc={0x1e, 0x40, {0xc5000021, [0x23f, 0x8, 0x9, 0x5a17000000000, 0x5]}}, @smc={0x1e, 0x40, {0x84000010, [0x3, 0x0, 0x7, 0x800, 0x8]}}, @eret={0xe6, 0x18, 0x18a7}], 0xfffffffffffffc20}], 0x1, 0x0, &(0x7f0000000540)=[@featur2={0x1, 0x40}], 0x1) (async) r3 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32) (async) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x100000c, 0x4d832, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x1, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000240)=@attr_other={0x0, 0xffff, 0x9, &(0x7f0000000200)}) (async, rerun: 32) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f00000002c0)=@riscv64_smstateen_csr={0x8030000003020000, &(0x7f0000000280)=0x4}) (rerun: 32) mmap$KVM_VCPU(&(0x7f0000ff8000/0x4000)=nil, 0x0, 0x3000005, 0x41812, r0, 0x0) 38m30.599095409s ago: executing program 37 (id=461): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000000)=@arm64={0x6, 0x6, 0xad, '\x00', 0x76}) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f00000000c0)=0xa) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000080)={0x4000, 0x110000, 0x1}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x8080000, 0x8, 0x8, 0xc, 0xe6, 0x40, 0x9, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x3, 0x0, 0x42, 0x5, 0x7d, 0x6, 0x36, 0x0, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0x7, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x3, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x16, 0x88, 0xab, 0x8, 0x9, 0x9, 0xf7, 0x97}, {0xdddd1000, 0xdddd0000, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0x3000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xd000, 0xc000, 0xa, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x81}, {0x7000, 0x30}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0xfec00000, [0x6800000000000000, 0x4, 0x3, 0x8]}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0xd, 0x9, 0xb, 0x0, 0x5, 0x6, 0x6, 0x6, 0x48, 0x88, 0x64, 0x9, 0x0, 0x9, 0x40006, 0xe, 0x3, 0x7, 0x0, '\x00', 0x10, 0x6}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r6, &(0x7f00000001c0)=0x1, 0x11) ioctl$KVM_RUN(r3, 0xae80, 0x0) 26m31.758211218s ago: executing program 6 (id=501): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000000), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ARM_VCPU_INIT(r3, 0x4020aeae, &(0x7f0000000040)={0x4, 0x5}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) mmap$KVM_VCPU(&(0x7f0000e31000/0x2000)=nil, r4, 0x1, 0x2012, r3, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x2000001, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x0) r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000996000/0x4000)=nil, r5, 0x300000a, 0x2010, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) 26m13.710393104s ago: executing program 6 (id=503): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x27) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x9}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r6, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r8, 0xae80, 0x0) mmap$KVM_VCPU(0x0, 0x50000, 0x3, 0x11, r4, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000700)={0x7, 0xffffffffffffffff}) ioctl$KVM_GET_DEVICE_ATTR(r10, 0x4018aee2, &(0x7f00000000c0)=@attr_other={0x0, 0x60e1, 0xff, &(0x7f0000000080)=0xb}) 26m13.710133384s ago: executing program 7 (id=504): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0xfffffffa, 0x80001) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000140)={0x80, 0x4, 0x0, r4}) syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) (async) syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000000)={0x1, 0x37d03030d7a92616}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000180)={0x5000}) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000180)={0x5000}) r5 = syz_kvm_add_vcpu$arm64(r1, &(0x7f0000000080)={0x0, &(0x7f0000000200)=[@msr={0x14, 0x20, {0x603000000013dce5, 0x9}}, @smc={0x1e, 0x40, {0xc4000007, [0x6, 0x3, 0x3, 0x936, 0x45]}}, @irq_setup={0x46, 0x18, {0x4, 0x1c4}}, @smc={0x1e, 0x40, {0x1000, [0x4, 0x5, 0x1ff, 0x9, 0xfff]}}, @its_send_cmd={0xaa, 0x28, {0x5, 0x1, 0x3, 0x1, 0x9, 0x8001, 0x2}}, @code={0xa, 0x54, {"007008d500c0671e000028d500f4a02e00e4002f007008d500e186d20020b8f2010080d2e20180d2a30080d2e40080d2020000d4000880b8007008d5007008d5"}}, @uexit={0x0, 0x18, 0x2}, @uexit={0x0, 0x18, 0x8000000000000001}, @code={0xa, 0x6c, {"0004407c000028d5007008d5803a96d20000b0f2a10180d2420080d2c30180d2440180d2020000d4007008d500a0df0ca00485d200a0b8f2010180d2220080d2a30080d2440080d2020000d4007008d50088202e000c00bc"}}], 0x1d0}, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@mrs={0xbe, 0x18, {0x603000000013c017}}], 0x18}, 0x0, 0x0) (async) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@mrs={0xbe, 0x18, {0x603000000013c017}}], 0x18}, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) 25m57.800219742s ago: executing program 7 (id=505): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_ARM_SYSTEM_SUSPEND(r3, 0x4068aea3, &(0x7f0000000040)={0xb1}) eventfd2(0x3, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r4, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r4, 0x0) r6 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) ioctl$KVM_CHECK_EXTENSION(r6, 0x40086602, 0x110ca32020) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_STATS_FD_cpu(r4, 0xaece) 25m56.567696571s ago: executing program 6 (id=506): r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000001c0)={0x8, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ARM_VCPU_INIT(r5, 0x4020aeae, &(0x7f0000000080)={0x5}) ioctl$KVM_SET_ONE_REG(r5, 0x4010aeac, &(0x7f0000000280)=@arm64_sys={0x603000000013c807, &(0x7f0000000240)=0x2}) (async) ioctl$KVM_SET_ONE_REG(r5, 0x4010aeac, &(0x7f0000000280)=@arm64_sys={0x603000000013c807, &(0x7f0000000240)=0x2}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4}) (async) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x8, 0x100, &(0x7f0000000080)=0x8000000000000000}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000280)=@attr_arm64={0x0, 0x4, 0x2, 0x0}) 25m38.884335586s ago: executing program 6 (id=507): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000000)={0x7}) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000080)={0x0, 0x6000, 0x0, r4}) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f00000000c0)={0x8}) ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f0000000000)={0x6000, 0x0, 0x0, 0x1, 0x20000000}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r5, 0x8927, 0x110c230004) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f0000000000)={0xfffffffa, 0xd8, 0x2}) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_ARM_VCPU_INIT(r10, 0x4020aeae, &(0x7f0000000340)={0x5}) ioctl$KVM_GET_ONE_REG(r10, 0x4010aeab, &(0x7f0000000180)=@arm64_fw={0x6030000000140003, 0xfffffffffffffffe}) r11 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r8, r11, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="46000000000000d14a3f060080000000010e563a06c1c65b2e788a1894e200000180000000"], 0x18}], 0x1, 0x0, 0x0, 0x0) syz_kvm_vgic_v3_setup(r8, 0x1, 0x100) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_IRQ_LINE(r8, 0x4008ae61, &(0x7f0000000100)={0x1000020, 0x1}) ioctl$KVM_RUN(r11, 0xae80, 0x0) 25m38.205922646s ago: executing program 7 (id=508): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r4 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, r3, 0x1000002, 0x13, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48) r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x2, 0x0, &(0x7f0000000000)=0xf4020000}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r2, 0x0) ioctl$KVM_CAP_PTP_KVM(r6, 0x4068aea3, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) openat$kvm(0x0, &(0x7f0000000040), 0x454303, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40800, 0x0) ioctl$KVM_CREATE_VM(r8, 0x40049409, 0x6) 25m21.098631549s ago: executing program 7 (id=509): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r2, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000000)={0x0, 0x0}, &(0x7f00000000c0)=[@featur1={0x1, 0x5}], 0x1) r9 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000b80)={0x0, &(0x7f0000000100)=[@smc={0x1e, 0x40, {0x84000003, [0x80000000000000, 0x3, 0xac8, 0x2, 0x8000000000000000]}}], 0x40}, &(0x7f00000001c0)=[@featur2={0x1, 0x18}], 0x1) munmap(&(0x7f0000ee4000/0x1000)=nil, 0x1000) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_GET_ONE_REG(r8, 0x4010aeab, &(0x7f0000000140)=@arm64_fp={0x604000000010005c, &(0x7f0000000080)=0x2f7}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6ab0000000037c4b85400005a9610fbff67521ce16f8f1f44927a835673312b54ebb2aa76c869d22627a4702d8a00", 0x0, 0xffffffffffffff3e) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) r10 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x0) eventfd2(0x4, 0x1) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000000)=@arm64_sys={0x603000000013c102, &(0x7f0000000140)=0x1}) ioctl$KVM_CREATE_VM(r10, 0x401c5820, 0x20000007) 25m9.430618611s ago: executing program 6 (id=510): openat$kvm(0x0, &(0x7f0000000080), 0x40000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x62600, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2c) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r3 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x20200, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x3) r6 = syz_kvm_vgic_v3_setup(r5, 0x3, 0x40) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000100)=@attr_other={0x0, 0x6, 0x382bc664, &(0x7f0000000140)=0x8004}) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r8, 0x8927, 0x110c230004) r9 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000b80)={0x0, 0x0}, &(0x7f0000000bc0)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_SET_ONE_REG(r10, 0x4010aeac, &(0x7f0000000000)=@arm64_fw={0x6030000000140000, &(0x7f0000000200)=0x10000}) r11 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000b80)={0x0, &(0x7f0000000400)=[@svc={0x122, 0x40, {0xc5000021, [0x10001, 0x9, 0x5, 0xa, 0x8000000000000000]}}], 0x40}, &(0x7f0000000040)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r11, 0xae80, 0x0) syz_kvm_vgic_v3_setup(r1, 0x3, 0x80) r12 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000c00000/0x400000)=nil) r15 = syz_kvm_add_vcpu$arm64(r14, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x2}}], 0x28}, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r15, 0x4010aeac, &(0x7f0000000100)=@arm64_extra={0x603000000013c103, &(0x7f00000000c0)=0xa0}) r16 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r16, 0xae04) 25m6.208097226s ago: executing program 7 (id=511): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) 24m54.766104957s ago: executing program 7 (id=512): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x400000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x21) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0x8, 0x1}) (async) ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000080)=@arm64_sys={0x603000000013c4f6, &(0x7f0000000000)=0x9}) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x31) r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r6, 0x4018aee1, 0xfffffffffffffffe) (async) r7 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) (async) syz_kvm_vgic_v3_setup(r4, 0x2, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f0000000100)=@x86={0x80, 0x5, 0x3, 0x0, 0x2, 0x0, 0x8, 0x5, 0xf, 0x7, 0x2, 0xb, 0x0, 0x6, 0x6, 0x3, 0x6b, 0xe, 0x10, '\x00', 0x95, 0xf}) r9 = syz_kvm_vgic_v3_setup(r4, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x9}) (async) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x5, 0x0, &(0x7f0000000000)=0x8}) 24m46.881557526s ago: executing program 6 (id=513): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0xdddd1000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r3, 0xc018aec0, &(0x7f00000000c0)={0x1}) r4 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r4, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) r5 = syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000140)=@attr_riscv64=@attr_ctrl={0x0, 0x1, 0x1, &(0x7f0000000040)=0x6}) 24m7.25771628s ago: executing program 38 (id=512): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x400000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x21) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0x8, 0x1}) (async) ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000080)=@arm64_sys={0x603000000013c4f6, &(0x7f0000000000)=0x9}) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x31) r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r6, 0x4018aee1, 0xfffffffffffffffe) (async) r7 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) (async) syz_kvm_vgic_v3_setup(r4, 0x2, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f0000000100)=@x86={0x80, 0x5, 0x3, 0x0, 0x2, 0x0, 0x8, 0x5, 0xf, 0x7, 0x2, 0xb, 0x0, 0x6, 0x6, 0x3, 0x6b, 0xe, 0x10, '\x00', 0x95, 0xf}) r9 = syz_kvm_vgic_v3_setup(r4, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x9}) (async) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x5, 0x0, &(0x7f0000000000)=0x8}) 23m54.978192288s ago: executing program 39 (id=513): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0xdddd1000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r3, 0xc018aec0, &(0x7f00000000c0)={0x1}) r4 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r4, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) r5 = syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000140)=@attr_riscv64=@attr_ctrl={0x0, 0x1, 0x1, &(0x7f0000000040)=0x6}) 14m45.415936366s ago: executing program 8 (id=522): mmap$KVM_VCPU(&(0x7f0000010000/0x1000)=nil, 0x930, 0x100000f, 0x9032, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000010000/0x1000)=nil, 0x930, 0x100000f, 0x9032, 0xffffffffffffffff, 0x0) r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000680)="38ce8347fc1e86008cfc72bb352c8659dcc9225b48cb5cb00c73b0b33018748e73f7f1f493e89c859e17625ad1b19ca88da9c227db3473a7fd4ce992bfc316bd22ccc646cd69c728", 0x0, 0x48) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000680)="38ce8347fc1e86008cfc72bb352c8659dcc9225b48cb5cb00c73b0b33018748e73f7f1f493e89c859e17625ad1b19ca88da9c227db3473a7fd4ce992bfc316bd22ccc646cd69c728", 0x0, 0x48) r1 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000700)={0x0, &(0x7f0000000000)=[@its_send_cmd={0xaa, 0x28, {0xe, 0x0, 0x4, 0x8, 0x1, 0x7, 0x3}}, @smc={0x1e, 0x40, {0xc400000c, [0x1, 0x2, 0x9501, 0x7, 0xf]}}, @smc={0x1e, 0x40, {0x80007fff, [0x7, 0x7fffffff, 0x5, 0x1, 0xdd8]}}, @eret={0xe6, 0x18, 0x2}, @mrs={0xbe, 0x18, {0x603000000013e664}}, @code={0xa, 0x84, {"007008d50004000f000000541f000072603b9cd200c0b8f2e10180d2a20180d2c30080d2a40180d2020000d4000028d500008013c0278cd20000b0f2c10080d2820080d2030180d2e40180d2020000d4a08e86d20060b0f2c10080d2620080d2830180d2240180d2020000d400809f0c"}}, @uexit={0x0, 0x18, 0x6}, @msr={0x14, 0x20, {0x6030000000138015, 0x40}}, @its_setup={0x82, 0x28, {0x4, 0x3, 0x179}}, @svc={0x122, 0x40, {0xc4000004, [0x8, 0x10, 0x8000, 0x5]}}, @code={0xa, 0x9c, {"0078214e000028d5e09887d20020b8f2010180d2c20080d2630180d2440180d2020000d4a07486d20080b8f2810080d2420180d2030080d2040180d2020000d4007008d580849cd20000b0f2a10080d2820180d2230080d2e40180d2020000d4007008d5007008d5006c81d200e0b0f2810080d2220080d2c30080d2040080d2020000d400fc205e"}}, @msr={0x14, 0x20, {0x603000000013dead, 0x4}}, @its_setup={0x82, 0x28, {0x4, 0x0, 0xed}}, @code={0xa, 0x6c, {"009389d200a0b0f2010180d2e20080d2230080d2240080d2020000d4008008d50048212e000028d5007008d50058000e00004093007008d5008008d580e88fd20060b0f2010180d2020180d2630180d2640180d2020000d4"}}, @code={0xa, 0xb4, {"007008d580048bd20020b8f2c10180d2a20180d2e30080d2a40180d2020000d40000008a00000008c0f495d20060b8f2c10180d2a20180d2830180d2240080d2020000d4401e92d20040b0f2610180d2620180d2030180d2640180d2020000d4007008d5001f84d20000b8f2c10180d2e20180d2c30080d2a40080d2020000d4000008d5a03094d200a0b8f2a10180d2620180d2a30080d2e40180d2020000d4"}}, @hvc={0x32, 0x40, {0x84000050, [0x7, 0x8, 0x9, 0x3, 0x81]}}, @uexit={0x0, 0x18, 0x7}, @irq_setup={0x46, 0x18, {0x0, 0xff}}, @code={0xa, 0x84, {"604e9cd20000b0f2610180d2e20180d2a30180d2e40080d2020000d4007008d5008008d5000008d5000040ad008008d500000032608781d20020b8f2a10080d2420180d2630080d2a40080d2020000d400e19bd200a0b0f2010080d2c20180d2a30180d2a40080d2020000d40040601e"}}, @svc={0x122, 0x40, {0x84000007, [0x0, 0x3, 0x0, 0x4, 0x100]}}, @svc={0x122, 0x40, {0xc4000005, [0x4, 0x0, 0x3ff, 0x3, 0x6]}}, @code={0xa, 0xb4, {"008008d5007008d500e4202e601a80d20000b0f2410180d2020080d2830180d2c40180d2020000d4a0fe8fd200c0b0f2810180d2420080d2430180d2240080d2020000d4004c205ee0328fd20020b0f2a10080d2c20180d2a30180d2840080d2020000d4806b8dd20080b8f2810080d2a20080d2030080d2c40080d2020000d4000028d580279ad20080b8f2010180d2e20080d2c30180d2640080d2020000d4"}}, @eret={0xe6, 0x18, 0x4}, @hvc={0x32, 0x40, {0x86000000, [0x9c8, 0xfffffffffffffffe, 0x10001, 0x0, 0xff]}}], 0x680}, &(0x7f0000000740)=[@featur1={0x1, 0x2}], 0x1) ioctl$KVM_ARM_VCPU_INIT(r1, 0x4020aeae, &(0x7f0000000780)={0x2}) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0) 14m30.438632573s ago: executing program 8 (id=523): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) r3 = ioctl$KVM_CREATE_VM(r2, 0x894c, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xb701, 0x0) (async, rerun: 64) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 64) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) mmap$KVM_VCPU(0x0, 0x50000, 0x3, 0x13012, r7, 0x0) (async) r8 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0x6}) (async) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_DEVICE_ATTR(r9, 0xb702, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r10, 0xae03, 0x5d) 14m4.601740811s ago: executing program 8 (id=525): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x7) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000100)={0x0, &(0x7f0000000000)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x3, 0x40000000, 0x10000, 0x0, 0x0, 0x80000002}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 13m44.732337143s ago: executing program 8 (id=527): r0 = mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x0, 0xf, 0x110, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_MMIO(r0, 0x20, &(0x7f0000000000)="92b4e540268541aa7a26213d203bf941aff6fb2a3a7c6bc1", 0x0, 0x18) r1 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r2 = syz_kvm_add_vcpu$arm64(r1, &(0x7f0000000400)={0x0, &(0x7f0000000040)=[@code={0xa, 0x84, {"007008d5e05083d20020b0f2e10080d2820180d2230080d2440180d2020000d460db9cd20020b8f2610080d2420080d2630180d2640080d2020000d4007008d580a794d20080b8f2210180d2620080d2e30080d2440080d2020000d4007008d500d4200e007008d5000480da000008d5"}}, @hvc={0x32, 0x40, {0xffff, [0x1, 0x0, 0x0, 0x7, 0x3]}}, @uexit={0x0, 0x18}, @svc={0x122, 0x40, {0x40000000, [0x8000, 0x7fffffffffffffff, 0x3, 0x81, 0x8]}}, @svc={0x122, 0x40, {0x80003fff, [0xca4c, 0x4, 0xdd2f, 0x0, 0x3ff]}}, @smc={0x1e, 0x40, {0x0, [0x10000, 0xffffffff, 0x0, 0x81, 0x3]}}, @svc={0x122, 0x40, {0x3000000, [0x7f, 0x0, 0x0, 0x0, 0xfffffffffffffff8]}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0xe00, 0xb}}, @memwrite={0x6e, 0x30, @generic={0x6000, 0x742, 0x81, 0xf}}, @msr={0x14, 0x20, {0x603000000013c642}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80a0000, 0xc00, 0x7, 0x9}}, @its_setup={0x82, 0x28, {0x3, 0x2, 0x1d1}}, @hvc={0x32, 0x40, {0x0, [0x9, 0x0, 0xfffffffffffffffb, 0x10000, 0x101]}}, @memwrite={0x6e, 0x30, @generic={0xeeee8000, 0xda5, 0x3, 0x8}}, @its_setup={0x82, 0x28, {0x0, 0x1, 0x223}}, @msr={0x14, 0x20, {0x6030000000138024, 0x8}}, @smc={0x1e, 0x40, {0x86000001, [0x9, 0x2, 0x9, 0x800, 0x43]}}], 0x3ac}, &(0x7f0000000440)=[@featur2={0x1, 0x2}], 0x1) r3 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f00000004c0)={0x0, &(0x7f0000000480)=[@uexit={0x0, 0x18, 0x5}, @msr={0x14, 0x20, {0x603000000013ff10, 0x5}}], 0x38}, &(0x7f0000000500)=[@featur1={0x1, 0x21}], 0x1) ioctl$KVM_CAP_HALT_POLL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000540)={0xb6, 0x0, 0xffffffff}) syz_memcpy_off$KVM_EXIT_MMIO(r0, 0x20, &(0x7f00000005c0)="dc443fae33ccf7f6e6d29b7ccd5b021f6ebbe086a9c8e79c", 0x0, 0x18) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3c) r6 = ioctl$KVM_GET_STATS_FD_cpu(r4, 0xaece) ioctl$KVM_SET_USER_MEMORY_REGION2(r5, 0x40a0ae49, &(0x7f0000000600)={0x1ff, 0x3, 0x7000, 0x1000, &(0x7f0000f8f000/0x1000)=nil, 0xc8, r6}) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f00000006c0)={0x4, 0x0, &(0x7f0000ec4000/0x4000)=nil}) ioctl$KVM_GET_DEVICE_ATTR(r6, 0x4018aee2, &(0x7f0000000740)=@attr_arm64={0x0, 0x1, 0x0, &(0x7f0000000700)=0x7}) r7 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000b00)={0x0, &(0x7f0000000780)=[@eret={0xe6, 0x18, 0x463}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x800, 0x2}}, @memwrite={0x6e, 0x30, @generic={0x54000, 0xe4c, 0x4}}, @svc={0x122, 0x40, {0x80000000, [0x3, 0x1f29, 0x9, 0xea, 0x31]}}, @svc={0x122, 0x40, {0x84000011, [0x2, 0x100, 0x5, 0x0, 0x10001]}}, @uexit={0x0, 0x18, 0x91da}, @irq_setup={0x46, 0x18, {0x0, 0x2a0}}, @mrs={0xbe, 0x18, {0x6030000000138005}}, @irq_setup={0x46, 0x18, {0x1, 0x349}}, @mrs={0xbe, 0x18, {0x603000000013deb9}}, @its_setup={0x82, 0x28, {0x3, 0x2, 0x1ba}}, @memwrite={0x6e, 0x30, @generic={0x7000, 0xd51, 0x5, 0x3}}, @svc={0x122, 0x40, {0x20, [0x80000000, 0x3, 0x4, 0x2, 0x8]}}, @hvc={0x32, 0x40, {0x84000012, [0x3, 0x81, 0x1, 0x7fff, 0xffffffff]}}, @its_setup={0x82, 0x28, {0x4, 0x0, 0x37e}}, @its_setup={0x82, 0x28, {0x1, 0x0, 0x2c5}}, @smc={0x1e, 0x40, {0x3000000, [0x1, 0x91, 0x94, 0x9, 0x7fffffff]}}, @its_send_cmd={0xaa, 0x28, {0xa, 0x0, 0x3, 0xd, 0x5d0f, 0x4, 0x4}}, @its_setup={0x82, 0x28, {0x0, 0x4, 0x3f}}, @mrs={0xbe, 0x18, {0x603000000013e64b}}, @msr={0x14, 0x20, {0x6030000000139820, 0x2}}], 0x360}, &(0x7f0000000b40)=[@featur1={0x1, 0xf4}], 0x1) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r7, 0x4018aee3, &(0x7f0000000bc0)=@attr_irq_timer={0x0, 0x1, 0x0, &(0x7f0000000b80)=0x11}) r8 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000e80)={0x0, &(0x7f0000000c00)=[@msr={0x14, 0x20, {0xc06000000027d619, 0x4}}, @mrs={0xbe, 0x18, {0x603000000013e536}}, @eret={0xe6, 0x18, 0x101}, @its_send_cmd={0xaa, 0x28, {0xc, 0x1, 0x3, 0x6, 0x7, 0x3, 0x3}}, @mrs={0xbe, 0x18, {0x6030000000138015}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x90, 0x1}}, @svc={0x122, 0x40, {0x80008000, [0xf, 0xd45a, 0x1, 0x4, 0x8]}}, @svc={0x122, 0x40, {0x40000000, [0x7, 0x10, 0x691, 0x7, 0x5359]}}, @eret={0xe6, 0x18, 0x6}, @hvc={0x32, 0x40, {0x8000, [0x7, 0x8, 0x1, 0x1, 0x81]}}, @msr={0x14, 0x20, {0x60300000001383ce, 0x80000001}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x180, 0x9, 0x1}}, @msr={0x14, 0x20, {0x0, 0xebc6}}, @svc={0x122, 0x40, {0x84000012, [0x98, 0x4, 0x7, 0x100000000, 0x3ff]}}], 0x248}, &(0x7f0000000ec0)=[@featur2={0x1, 0x24}], 0x1) ioctl$KVM_SET_SREGS(r8, 0x4000ae84, &(0x7f0000000f00)={{0xeeee8001, 0xa000, 0x3, 0x9, 0x1, 0x1, 0x9, 0x6, 0x3, 0x4, 0xe, 0x2}, {0xeeee8000, 0x100000, 0xb, 0x2, 0x6, 0xe, 0x3, 0x2, 0x0, 0x58, 0x3, 0x3}, {0x70000, 0xeeef0000, 0xb, 0x0, 0x85, 0x5, 0x7, 0x6b, 0xb, 0x1, 0xdf}, {0x60000, 0xe000, 0x3, 0x8, 0x2, 0x7, 0x9, 0x4, 0x9, 0x3, 0x0, 0x6}, {0xc000, 0x8000000, 0x4, 0x8, 0x3, 0x4, 0x8, 0x7, 0x2, 0xfa, 0x34, 0x89}, {0xc000, 0x54000, 0xa, 0x1, 0xc5, 0x65, 0x5, 0x5, 0x4, 0x6, 0x81, 0xd}, {0x3000, 0x8000000, 0x3, 0x9, 0xb8, 0x8, 0xd, 0x2, 0x8, 0x7, 0x0, 0x10}, {0xffecbfff, 0xffff1000, 0x0, 0x1, 0xb3, 0x5b, 0xb, 0x8, 0xfa, 0x6, 0x8, 0x6}, {0x200000, 0x2}, {0x0, 0xfffc}, 0x50028, 0x0, 0xfec00004, 0x620, 0x1, 0x0, 0xeefd6001, [0x2, 0x2, 0x1, 0x5]}) ioctl$KVM_SET_SIGNAL_MASK(r8, 0x4004ae8b, &(0x7f0000001040)={0xf0, "2c9597a54fbd9b00623c0c49ce0f0124cf8c6835b413cf6cba778d944fb726d440794bf9a7244f22d6c4cd1312c6d779b831baf695a5fcaa3147a7e39f352f4167e6242b6241fd83c7890f2d607920fbd3fd792e4b7d7d9f00be4f98db9e6c243f0683ea3cbc3d683cb94f86b26ccf6bcb00066faabcc80a8fa3407fc7972fa0144be312ed0dcafdd153cc679e798a1d43165aab11ca5d0ff55fea29e036d22e2334024458742b6abfd7302251704a0cdcd937a286c121c634e379b053019b581ed7dddd16a844be1d22dba0784ba3e47d5e1eef754e9182cda590939f6ea8f688f6b05b2cb1f3a4814dff3aefaed8ed"}) ioctl$KVM_GET_MP_STATE(r8, 0x8004ae98, &(0x7f0000001140)) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000001180)="fc0b4424f350859bc8e87efb058a100e86fdc8b069fea88fb3702a1ac88a4fb07afd7298f02c55bc2e7d874fc4bd7819287cd438f896ff9463be9a66fa8d9d62def0163734c479da", 0x0, 0x48) ioctl$KVM_SET_SREGS(r4, 0x4000ae84, &(0x7f0000001200)={{0x7000, 0x50000, 0x8, 0x4, 0x0, 0x4, 0x5, 0x7, 0x9, 0x8, 0x3, 0x8}, {0xffff1000, 0x0, 0xb, 0x47, 0x0, 0x3, 0x4, 0xff, 0xf, 0xe5, 0xff, 0x5}, {0x56000, 0x0, 0x9, 0x8, 0x7, 0x4, 0x1, 0x40, 0xd, 0x9, 0x6, 0x7}, {0x2000, 0x25000, 0xc, 0x3, 0x3, 0x0, 0x8, 0x0, 0x3, 0x1, 0x1b, 0x7f}, {0x25000, 0x62000, 0xb, 0x0, 0x10, 0x4, 0x3, 0x8, 0x8, 0x4, 0xd4, 0x2}, {0x41000, 0x60000, 0xb, 0xd8, 0x2, 0x78, 0x2, 0x7, 0x2, 0x7, 0x0, 0x1}, {0x2be37f6133f25928, 0x5000, 0xd, 0x3, 0x0, 0x1, 0xff, 0x6, 0x80, 0x9, 0x4, 0xf}, {0x2000, 0x54000, 0xa, 0x6, 0x85, 0xd1, 0x81, 0x81, 0x2f, 0x8, 0x6, 0x5}, {0xffff1000, 0xc8}, {0xffffffff, 0x1}, 0x40000001, 0x0, 0xf000, 0x0, 0xc, 0x800, 0x80a0000, [0x5, 0xd920, 0x9, 0x8]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000001340), 0x501000, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f00000013c0)=@attr_arm64={0x0, 0x4, 0x3, &(0x7f0000001380)=0x7}) ioctl$KVM_ARM_VCPU_INIT(r8, 0x4020aeae, &(0x7f0000001400)={0x4, 0x2d}) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_GET_REGS(r9, 0x8360ae81, &(0x7f0000001440)) syz_kvm_vgic_v3_setup(r6, 0x3, 0xa0) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000001500)) r10 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4040aea0, &(0x7f0000001540)=@arm64={0x10, 0x65, 0x1, '\x00', 0x52}) 13m29.311346935s ago: executing program 8 (id=529): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0x40086602, 0x20000000) ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7) r4 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000240)={0x0, &(0x7f0000000280)=[@its_setup={0x82, 0x28, {0x2, 0x0, 0x19f}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x0, 0x4, 0xf, 0x0, 0x8, 0x1}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xffd0, 0xff, 0xe}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x0, 0x4, 0xd, 0x8, 0x5}}, @svc={0x122, 0x40, {0x84000050, [0x7, 0x3, 0x7, 0x0, 0x17a]}}, @its_send_cmd={0xaa, 0x28, {0x15, 0x0, 0x4, 0xb, 0x0, 0x3, 0x4}}, @memwrite={0x6e, 0x30, @generic={0xffff1000, 0x87c, 0x3, 0x4}}, @mrs={0xbe, 0x18, {0x603000000013df5e}}, @mrs={0xbe, 0x18, {0x603000000013c005}}, @memwrite={0x6e, 0x30, @generic={0xa000, 0x5e2, 0x2, 0x2}}], 0x1a0}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x5}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r7, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_SET_DEVICE_ATTR_vm(r6, 0x4018aee1, &(0x7f0000000100)=@attr_other={0x0, 0x7, 0x0, &(0x7f0000000040)=0x1000000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 13m6.210646286s ago: executing program 8 (id=531): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2c) ioctl$KVM_ARM_SET_COUNTER_OFFSET(r0, 0x4010aeb5, &(0x7f0000000100)={0x0, 0x80}) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r3, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000140)={0x0, 0x0}, 0x0, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x28) ioctl$KVM_CAP_HALT_POLL(r6, 0x4068aea3, &(0x7f00000001c0)={0xb6, 0x2000000}) r7 = syz_kvm_vgic_v3_setup(r2, 0x3, 0x40) r8 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x30) ioctl$KVM_SIGNAL_MSI(r9, 0x4020aea5, &(0x7f0000000000)={0x200000, 0xdddd1000, 0x4, 0x1, 0x9c}) r10 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x25) ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f00000001c0)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x4, 0x2, 0x0}) close(r4) close(0x4) close(r7) close(0x5) 12m18.08790579s ago: executing program 40 (id=531): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2c) ioctl$KVM_ARM_SET_COUNTER_OFFSET(r0, 0x4010aeb5, &(0x7f0000000100)={0x0, 0x80}) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r3, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000140)={0x0, 0x0}, 0x0, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x28) ioctl$KVM_CAP_HALT_POLL(r6, 0x4068aea3, &(0x7f00000001c0)={0xb6, 0x2000000}) r7 = syz_kvm_vgic_v3_setup(r2, 0x3, 0x40) r8 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x30) ioctl$KVM_SIGNAL_MSI(r9, 0x4020aea5, &(0x7f0000000000)={0x200000, 0xdddd1000, 0x4, 0x1, 0x9c}) r10 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x25) ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f00000001c0)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x4, 0x2, 0x0}) close(r4) close(0x4) close(r7) close(0x5) 3m18.10718702s ago: executing program 9 (id=563): r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r3 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000a80000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000180)={0x0, &(0x7f0000000240)=[@svc={0x122, 0x0, {0x30000000, [0x2, 0x7ff, 0x6030, 0xffffffff80000000, 0x7fff]}}], 0x20}, &(0x7f0000000300)=[@featur1={0x1, 0x22}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r6, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x88601, 0x0) ioctl$KVM_DIRTY_TLB(r6, 0x4010aeaa, &(0x7f0000000080)={0x200, 0xdd}) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil) r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@smc={0x1e, 0x40, {0x8400000a, [0x84000006, 0x7, 0xaca, 0x2, 0x10]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r13, 0xae80, 0x0) r14 = ioctl$KVM_CREATE_GUEST_MEMFD(r9, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x2000003, 0x2013, r14, 0x0) close(r10) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000007, 0x23ac5f9b426eccb2, 0xffffffffffffffff, 0x0) ioctl$KVM_ARM_VCPU_INIT(r7, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) ioctl$KVM_SET_ONE_REG(r7, 0x4010aeac, &(0x7f00000000c0)=@arm64_sys={0x603000000013dce0, &(0x7f0000000000)=0x5}) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xffff) syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000bff000/0x400000)=nil) r15 = syz_kvm_add_vcpu$arm64(r0, &(0x7f0000000b80)={0x0, &(0x7f00000002c0)=[@hvc={0x32, 0x40, {0x84000003, [0xa00000000, 0x4, 0x4, 0x9, 0x4d]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r15, 0xae80, 0x0) 2m57.549452228s ago: executing program 0 (id=533): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2c) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x11) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000a, 0x11, r5, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r5, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r5, 0x4018aee2, &(0x7f00000001c0)=@attr_pmu_init) r6 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x1a) ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, &(0x7f0000000100)=@arm64_fw={0x6030000000140002, &(0x7f0000000000)=0x1}) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x10, 0xffffffffffffffff, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x3c) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r8, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r9, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r8, 0x0) r10 = eventfd2(0xfffffff7, 0x80801) close(r10) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r12, 0x4010ae67, &(0x7f0000000000)={0x4000, 0x13000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000380)={0x6000, 0x25000, 0x1}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r12, 0x4010ae68, &(0x7f00000003c0)={0x4, 0xa7e9ea20e9018807, 0x1}) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) write$eventfd(r10, &(0x7f0000000180)=0x5, 0xfffffde3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x13, r5, 0x0) 2m49.278156414s ago: executing program 9 (id=564): r0 = openat$kvm(0x0, &(0x7f0000000280), 0x103080, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r4 = mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000240)="37e68986ad644f5dc57bbc1ff382863b67f3eee57a32ec911d95f88f3dd8ea716e4a29cefbd440b2ecf83f57baf33b0c97182970a47ef45c954e42f2055384921830f6e273d2eb30", 0x0, 0x2a2019ac5ed2a1ef) syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000000000/0x400000)=nil) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000100)="746abf250f7959c813e4adfb369b808022e69fe80cfadce4a1259e77bab54ac9749537b3d016bb7f745a6e22d2f9ff443f19467748a3fe02c239457600", 0x0, 0xfffffffffffffec5) r6 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x20000, 0x0) close(0x5) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x2b) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x5) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x3}) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20400, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x9b, 0xf, 0x0, 0x5, 0x8, 0x82, 0x46, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x100001, 0xffc0000, 0x0, 0x3, 0xa, 0x8, '\x00', 0x1, 0x93}) ioctl$KVM_SET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000040)=@attr_pmu_init) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4000ae84, &(0x7f0000000200)={{0x0, 0x1000, 0x1, 0x3a, 0x0, 0x9, 0xba, 0xc, 0x2, 0x6, 0x0, 0x9}, {0xeeef0000, 0x0, 0xd, 0x1, 0xfc, 0x1, 0x5, 0xc, 0x7, 0x4, 0x6, 0x6}, {0x0, 0xeeee8000, 0x8, 0x9, 0x6, 0x7, 0x3, 0xdb, 0x8, 0x1, 0x1}, {0x2, 0xe000, 0x0, 0x55, 0x7f, 0x80, 0x4, 0x4, 0xa, 0x1, 0x8, 0x9}, {0x6000, 0x0, 0x0, 0x38, 0x0, 0x6, 0x8, 0x1, 0x81, 0x93, 0x7f, 0x8}, {0xdddd1000, 0x41000, 0xd, 0x5, 0x9, 0x5, 0x2, 0x8, 0x81, 0xf, 0x5, 0xfe}, {0xffff1000, 0xb000, 0x14, 0x1, 0x1, 0x7b, 0xfd, 0x9, 0x6a, 0xe, 0x8, 0xd1}, {0xeeef0000, 0x7000, 0x4, 0x3, 0x0, 0x0, 0x7, 0xfa, 0x10, 0x2, 0x2, 0x1}, {0x40000, 0x2}, {0x8000000, 0xc71}, 0x20000002, 0x0, 0x1000, 0x8, 0x8, 0x8000, 0x7000, [0x3, 0x8000000000000000, 0x89, 0x1]}) write$eventfd(r12, &(0x7f00000001c0)=0x3, 0xfdef) r13 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, r13, 0x2, 0x12, r9, 0x0) syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f000000f000/0x400000)=nil) mmap$KVM_VCPU(&(0x7f0000010000/0x4000)=nil, r13, 0x100000a, 0x12, r9, 0x0) ioctl$KVM_SET_MP_STATE(r6, 0x4004ae99, &(0x7f0000000000)=0x6) 2m32.02574951s ago: executing program 0 (id=565): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x2}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x1, 0x1, 0x10002, 0xfffffff9, 0x0, 0x2}}], 0x50}, 0x0, 0x0) (async) syz_kvm_vgic_v3_setup(r1, 0x81, 0x0) (async) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000007, 0x4f833, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) (async) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) (async) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) (async) munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000) munmap(&(0x7f0000938000/0x4000)=nil, 0x4000) (async) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) (async) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000240)={0x3, 0x81}) munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000) (async) mmap$KVM_VCPU(&(0x7f000028a000/0x1000)=nil, 0x930, 0x0, 0x9032, 0xffffffffffffffff, 0x0) (async) munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) (async) munmap(&(0x7f0000eed000/0x4000)=nil, 0x4000) (async) munmap(&(0x7f0000011000/0xc00000)=nil, 0xc00000) (async) munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000) (async) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) (async) ioctl$KVM_IRQ_LINE_STATUS(r5, 0xc008ae67, &(0x7f0000000000)={0x7, 0x2}) (async) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r6, 0x4018aee1, &(0x7f00000002c0)=@attr_pmu_irq={0x0, 0x0, 0x0, &(0x7f0000000280)=0x8001}) (async) ioctl$KVM_CHECK_EXTENSION_VM(r5, 0xae03, 0xe4) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) 2m20.581914235s ago: executing program 9 (id=566): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xd6, 0x80000001}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xfffffffffffffffd) r1 = openat$kvm(0x0, &(0x7f0000000100), 0x40040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x9}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r4 = mmap$KVM_VCPU(&(0x7f0000eab000/0x2000)=nil, 0x930, 0x1800002, 0x30, r3, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000280)="d6011813013c360000000000f4ff8000802346cbd98762c7795582ba3948ecff090001000000000000000000040000000100", 0x0, 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80403, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80403, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r6, 0xc040aed4, 0x0) (async) r7 = ioctl$KVM_CREATE_GUEST_MEMFD(r6, 0xc040aed4, 0x0) syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000b59000/0x400000)=nil) (async) r8 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000b59000/0x400000)=nil) ioctl$KVM_IRQ_LINE_STATUS(r7, 0xc008ae67, 0x0) (async) ioctl$KVM_IRQ_LINE_STATUS(r7, 0xc008ae67, 0x0) syz_kvm_add_vcpu$arm64(r8, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) (async) r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) r10 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) (async) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) r13 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r12, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r13, 0x20, &(0x7f0000000080)="fb0149dd033be3ac4e37c4005a9614fbff67521ce16f8f09449a7a836b73312954000000000000000000000000000000000000000000000000000000dc6900", 0x0, 0x2e) mmap$KVM_VCPU(&(0x7f0000bc2000/0x3000)=nil, 0x930, 0x300000c, 0x11, r12, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) eventfd2(0x0, 0x0) (async) r14 = eventfd2(0x0, 0x0) close(r14) (async) close(r14) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x88c80, 0x0) r15 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000008000/0x3000)=nil, r15, 0x2000004, 0x4010, r9, 0x0) r16 = eventfd2(0xd, 0x0) close(r16) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) 2m13.258755229s ago: executing program 0 (id=567): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0xa7000, &(0x7f0000ffc000/0x2000)=nil, 0x4000}) r2 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xc0189436, 0x172) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ARM_VCPU_INIT(r5, 0x4020aeae, &(0x7f0000000000)={0x5}) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0xb, 0x23ac5f9b426ec4b2, 0xffffffffffffffff, 0x0) 1m57.402531321s ago: executing program 9 (id=568): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x509000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r2, &(0x7f00000001c0)=0x1, 0x11) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r3, &(0x7f00000001c0)=0x4, 0x4d) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x29) r8 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r10, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=[@svc={0x122, 0x40, {0x80000000, [0x5, 0x3, 0x4, 0x59e4, 0x9]}}, @svc={0x122, 0x40, {0x84000009, [0x7, 0xffffffffffffffff, 0x67a, 0x1, 0xde4]}}, @memwrite={0x6e, 0x30, @generic={0x3000, 0x91f, 0x7, 0x2}}, @msr={0x14, 0x20, {0x603000000013e669}}, @svc={0x122, 0x40, {0x5000000, [0x1, 0xfffffffffffffff8, 0x6, 0xffffffff, 0x7fffffffffffffff]}}, @irq_setup={0x46, 0x18, {0x4, 0xa9}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x58, 0x2}}, @its_setup={0x82, 0x28, {0x3, 0x2, 0x242}}, @hvc={0x32, 0x40, {0xc4000014, [0x7, 0x8000, 0x2, 0xfffffffffffffffa, 0x8000]}}, @smc={0x1e, 0x40, {0x84000052, [0xff, 0x100000001, 0x4ee9, 0x40, 0x4]}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80e0000, 0x80, 0x401, 0x3}}, @svc={0x122, 0x40, {0x84000001, [0xffffffff8e6b5f17, 0x3, 0x81, 0xfa2, 0x100000000]}}, @hvc={0x32, 0x40, {0x4000, [0x8, 0x3, 0x9, 0x6, 0x3]}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x1, 0x1, 0x3, 0xfffffff7, 0x1, 0x3}}, @msr={0x14, 0x20, {0x603000000013dee3}}, @hvc={0x32, 0x40, {0x80000001, [0x7, 0x2, 0x7, 0x6, 0x9]}}, @irq_setup={0x46, 0x18, {0x1, 0x302}}, @msr={0x14, 0x20, {0x603000000013e6dc, 0x40}}, @msr={0x14, 0x20, {0x603000000013e712, 0x7}}, @uexit={0x0, 0x18, 0x100}, @mrs={0xbe, 0x18, {0x603000000013e531}}, @uexit={0x0, 0x18, 0x8}, @msr={0x14, 0x20, {0x6030000000138055, 0xe7}}, @msr={0x14, 0x20, {0x603000000013dea8, 0x307}}, @eret={0xe6, 0x18, 0xd}, @smc={0x1e, 0x40, {0x84000000, [0x2, 0x3, 0x0, 0x4, 0x7fffffff]}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x8100000, 0x100, 0xf}}, @msr={0x14, 0x20, {0x603000000013df66, 0x3}}, @hvc={0x32, 0x40, {0x84000051, [0x3, 0x7, 0x7f, 0x100000000, 0x6]}}, @irq_setup={0x46, 0x18, {0x2, 0x237}}], 0x518}, 0x0, 0x0) syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000080)={0x0, &(0x7f0000000340)}, 0x0, 0x0) r11 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x12) r12 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) ioctl$KVM_GET_MP_STATE(r12, 0x8004ae98, 0xfffffffffffffffe) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f0000000200)={0xb6, 0x0, 0x9}) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0xffffffffffffffa7) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000100)={0x202, 0x0, 0x1, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) eventfd2(0x6, 0x0) r13 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) r15 = ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r15, 0x4020aeae, &(0x7f0000000100)={0x5, 0x18}) 1m53.217233221s ago: executing program 0 (id=569): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x0, 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$KVM_ARM_VCPU_INIT(0xffffffffffffffff, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async, rerun: 64) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) (rerun: 64) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x100000c, 0x16831, 0xffffffffffffffff, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, 0x0) (async) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x1}) (async) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@arm64={0x8, 0x3, 0x5, '\x00', 0x3}) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r6, &(0x7f00000001c0)=0x3, 0xfdef) (async) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) r9 = ioctl$KVM_CREATE_VM(r8, 0x894c, 0x0) r10 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) (async) r11 = openat$kvm(0x0, &(0x7f0000000140), 0xc00, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil) syz_kvm_vgic_v3_setup(r12, 0x0, 0x0) (async, rerun: 64) r13 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x39) (rerun: 64) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0xffffffffffffffff) ioctl$KVM_ARM_VCPU_INIT(r14, 0x4020aeae, &(0x7f0000000280)={0x5, 0x8}) (async) ioctl$KVM_GET_VCPU_EVENTS(r14, 0x8040ae9f, &(0x7f0000000080)=@arm64) (async, rerun: 64) ioctl$KVM_CREATE_VCPU(r9, 0xb703, 0x0) (rerun: 64) 1m29.487676735s ago: executing program 9 (id=570): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x3) r3 = eventfd2(0x7, 0x80001) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000140)={r3, 0xc8, 0x3, r3}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r4, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)={0xef000000, 0x1000, 0x1}}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = openat$kvm(0x0, 0x0, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = eventfd2(0x6, 0x80801) ioctl$KVM_IOEVENTFD(r9, 0x4040ae79, &(0x7f00000001c0)={0x9, 0x8080000, 0x4, r10, 0x2}) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000100)={0x7, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f00000002c0)=@attr_arm64={0x0, 0x4, 0x0, 0x0}) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee1, &(0x7f00000000c0)=@attr_irq_timer={0x0, 0x1, 0x1, 0x0}) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x2f) ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r13, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0xdddd1000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r13, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r13, 0xc018aec0, &(0x7f00000000c0)={0x1}) r14 = eventfd2(0x3ff, 0x0) ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f0000000000)={r14, 0x5, 0x2, r14}) write$eventfd(r14, &(0x7f0000000080)=0x7, 0x8) syz_kvm_setup_cpu$arm64(r4, r5, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000140)=[{0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1e1bcaf44c6c90a8e31f7700000000000000400000d77859bf00100000840000ffff09a1c6d43800000000000000010400000000000003000000000000800000fcffffff000000000000"], 0x40}], 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m27.93996096s ago: executing program 0 (id=571): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd2(0xeffffffd, 0x801) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x7f, 0x4, 0x3, 0x0, 0x800, 0x9, 0xd, 0x8b, 0x4, 0x0, 0xf, 0xfe, 0x0, 0x2, 0x6, 0x0, 0xd, 0xfe, 0xa, '\x00', 0x0, 0xb}) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r7, 0x4068aea3, &(0x7f0000000200)={0xdf, 0x0, 0x10000}) write$eventfd(0xffffffffffffffff, &(0x7f00000001c0)=0x9, 0x1d) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000001340)={0x3, 0x0, 0x1, r5, 0xb}) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f00000000c0)={0x3, 0x0, 0x1, r5, 0xf}) r8 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000740)={0x10002, 0x40, 0x0, &(0x7f0000000340)=[0x5, 0x3cdf73e0, 0x9, 0x10, 0xfffffffffffffff2, 0xfffffffffffffffd, 0x2, 0x32, 0x8, 0x5, 0x100000001, 0x8a02, 0x7, 0xf9, 0x4, 0x100, 0x5, 0x9, 0x1c0, 0xffff, 0x2, 0x0, 0x100000001, 0x8000000000000001, 0xe, 0x1e, 0x7, 0x7ef, 0x10000, 0x4, 0x7, 0x2, 0x8, 0x1, 0xfffffffffffffffe, 0xf22, 0x9, 0x9de6, 0x5, 0xa, 0x401, 0x6, 0x6, 0x1, 0x2, 0x7fffffff, 0x4, 0x3, 0x3, 0x4, 0xfffffffffffffff3, 0x2, 0xfffffffffffffffb, 0x5, 0x1, 0x800, 0x6f09, 0xce7b, 0x8, 0x7ff, 0xfffffffffffffffb, 0x0, 0x38aa, 0x9, 0xffffffffffffffff, 0x400, 0xfff, 0x400, 0x7fff, 0x1, 0x2, 0x0, 0x7, 0x9, 0xbf, 0x800, 0x4, 0x3, 0x3, 0x6, 0x101, 0x80000001, 0x6, 0x487, 0x7cc2f64e, 0x0, 0x2008, 0xffffffff, 0x7, 0x4, 0x6b, 0x2, 0x0, 0xe9, 0x4, 0xfffffffffffffff8, 0x5, 0x40, 0x8, 0xffffffffffffffff, 0x7fffffffffffffff, 0x7ff, 0xffffffff, 0x7fff, 0x94f, 0x4, 0x8000000000, 0x1, 0x4, 0x0, 0x0, 0x6, 0x84, 0x10000000000a2, 0x6, 0x9, 0xe55, 0x5, 0x0, 0x8, 0x1, 0x0, 0x3, 0x1ff, 0x7fffffff, 0x900000000000, 0x6, 0x1]}) syz_kvm_add_vcpu$arm64(r8, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x81}], 0x1) syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013c65d, 0xfffdffffc1af0ec0}}], 0x20}, 0x0, 0xffffffffffffff92) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1e) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$KVM_CHECK_EXTENSION(r10, 0xae03, 0xe4) r11 = eventfd2(0x1, 0x80800) ioctl$KVM_GET_VCPU_MMAP_SIZE(r10, 0xae04) ioctl$KVM_IOEVENTFD(r9, 0x4040ae79, &(0x7f0000000000)={0x7, 0x30000, 0x8, r11, 0x6}) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ce5000/0x1000)=nil, 0x930, 0x6, 0x4102932, 0xffffffffffffffff, 0x0) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) munmap(&(0x7f0000cc9000/0x2000)=nil, 0x2000) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil) 53.755386446s ago: executing program 0 (id=572): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0xeffffffd, 0x801) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000001340)={0x3, 0x0, 0x1, r4, 0xb}) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000000c0)={0x3, 0x0, 0x1, r4, 0xf}) r5 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, 0x0) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f00000000c0)={0x0, &(0x7f0000000380)=[@its_setup={0x82, 0x28, {0x3, 0x1, 0x39d}}], 0x28}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0xffffffffffbffffc, 0x120) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x1}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x8, 0xf, 0x0, 0x5, 0x6, 0x6, 0x6, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x9, 0x0, 0x0, 0x3, 0x5, 0x8, '\x00', 0x1, 0x400000000002}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000140)) write$eventfd(r10, &(0x7f00000001c0)=0x3, 0x50) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r6, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x4f832, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x4, 0x4, 0x0}) 53.527701593s ago: executing program 9 (id=573): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x169300, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x34) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) r4 = ioctl$KVM_CREATE_VM(r3, 0x894c, 0x0) syz_kvm_setup_cpu$arm64(r4, 0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil, &(0x7f00000008c0)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) 6.190072979s ago: executing program 41 (id=572): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0xeffffffd, 0x801) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000001340)={0x3, 0x0, 0x1, r4, 0xb}) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000000c0)={0x3, 0x0, 0x1, r4, 0xf}) r5 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, 0x0) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f00000000c0)={0x0, &(0x7f0000000380)=[@its_setup={0x82, 0x28, {0x3, 0x1, 0x39d}}], 0x28}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0xffffffffffbffffc, 0x120) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x1}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x8, 0xf, 0x0, 0x5, 0x6, 0x6, 0x6, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x9, 0x0, 0x0, 0x3, 0x5, 0x8, '\x00', 0x1, 0x400000000002}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000140)) write$eventfd(r10, &(0x7f00000001c0)=0x3, 0x50) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r6, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x4f832, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x4, 0x4, 0x0}) 0s ago: executing program 42 (id=573): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x169300, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x34) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) r4 = ioctl$KVM_CREATE_VM(r3, 0x894c, 0x0) syz_kvm_setup_cpu$arm64(r4, 0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil, &(0x7f00000008c0)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 350.525904][ T24] audit: type=1400 audit(349.740:74): avc: denied { read } for pid=3211 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 356.768005][ T24] audit: type=1400 audit(355.960:75): avc: denied { write } for pid=3266 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 360.274745][ T24] audit: type=1400 audit(359.490:76): avc: denied { write } for pid=3271 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 363.305938][ T3211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.055213][ T24] audit: type=1400 audit(369.270:77): avc: denied { write } for pid=3276 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 373.466138][ T24] audit: type=1400 audit(372.670:78): avc: denied { write } for pid=3279 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 385.086346][ T24] audit: type=1400 audit(384.290:79): avc: denied { write } for pid=3284 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 389.766264][ T24] audit: type=1400 audit(388.970:80): avc: denied { write } for pid=3287 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 400.627431][ T24] audit: type=1400 audit(399.850:81): avc: denied { write } for pid=3293 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 404.107086][ T24] audit: type=1400 audit(403.330:82): avc: denied { write } for pid=3296 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 406.350868][ T3211] eql: remember to turn off Van-Jacobson compression on your slave devices [ 416.704864][ T24] audit: type=1400 audit(415.920:83): avc: denied { write } for pid=3303 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 420.061898][ T24] audit: type=1400 audit(419.280:84): avc: denied { write } for pid=3306 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 424.955651][ T24] audit: type=1400 audit(424.150:85): avc: denied { write } for pid=3308 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 428.377371][ T24] audit: type=1400 audit(427.600:86): avc: denied { write } for pid=3311 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 437.608406][ T24] audit: type=1400 audit(436.830:87): avc: denied { write } for pid=3316 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 440.974903][ T24] audit: type=1400 audit(440.180:88): avc: denied { write } for pid=3319 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 448.604873][ T24] audit: type=1400 audit(447.810:89): avc: denied { write } for pid=3322 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 453.151768][ T24] audit: type=1400 audit(452.350:90): avc: denied { write } for pid=3325 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 462.405965][ T24] audit: type=1400 audit(461.610:91): avc: denied { write } for pid=3329 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 465.905211][ T24] audit: type=1400 audit(465.120:92): avc: denied { write } for pid=3332 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 481.429742][ T24] audit: type=1400 audit(480.650:93): avc: denied { write } for pid=3340 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 484.950599][ T24] audit: type=1400 audit(484.170:94): avc: denied { write } for pid=3343 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 503.836029][ T24] audit: type=1400 audit(503.050:95): avc: denied { write } for pid=3352 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 507.835972][ T24] audit: type=1400 audit(507.050:96): avc: denied { write } for pid=3355 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 518.766568][ T24] audit: type=1400 audit(517.960:97): avc: denied { write } for pid=3358 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 522.375975][ T24] audit: type=1400 audit(521.570:98): avc: denied { write } for pid=3361 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:49837' (ED25519) to the list of known hosts. [ 552.300674][ T24] audit: type=1400 audit(551.520:99): avc: denied { name_bind } for pid=3366 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 553.077766][ T24] audit: type=1400 audit(552.300:100): avc: denied { execute } for pid=3367 comm="sh" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 553.098661][ T24] audit: type=1400 audit(552.310:101): avc: denied { execute_no_trans } for pid=3367 comm="sh" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 578.667841][ T24] audit: type=1400 audit(577.890:102): avc: denied { mounton } for pid=3367 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 578.701430][ T24] audit: type=1400 audit(577.920:103): avc: denied { mount } for pid=3367 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 578.778641][ T3367] cgroup: Unknown subsys name 'net' [ 578.830574][ T24] audit: type=1400 audit(578.050:104): avc: denied { unmount } for pid=3367 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 579.200320][ T3367] cgroup: Unknown subsys name 'cpuset' [ 579.305839][ T3367] cgroup: Unknown subsys name 'rlimit' [ 580.048139][ T24] audit: type=1400 audit(579.270:105): avc: denied { setattr } for pid=3367 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 580.068652][ T24] audit: type=1400 audit(579.280:106): avc: denied { mounton } for pid=3367 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 580.092480][ T24] audit: type=1400 audit(579.310:107): avc: denied { mount } for pid=3367 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 581.013745][ T3370] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 581.040542][ T24] audit: type=1400 audit(580.260:108): avc: denied { relabelto } for pid=3370 comm="mkswap" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 581.058450][ T24] audit: type=1400 audit(580.280:109): avc: denied { write } for pid=3370 comm="mkswap" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 581.237767][ T24] audit: type=1400 audit(580.450:110): avc: denied { read } for pid=3367 comm="syz-executor" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 581.252360][ T24] audit: type=1400 audit(580.470:111): avc: denied { open } for pid=3367 comm="syz-executor" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 581.299704][ T3367] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 635.069382][ T24] audit: type=1400 audit(634.290:112): avc: denied { execmem } for pid=3371 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 638.382216][ T24] audit: type=1400 audit(637.600:113): avc: denied { read } for pid=3373 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 638.407474][ T24] audit: type=1400 audit(637.630:114): avc: denied { read } for pid=3374 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 638.425821][ T24] audit: type=1400 audit(637.640:115): avc: denied { open } for pid=3374 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 638.497444][ T24] audit: type=1400 audit(637.700:116): avc: denied { mounton } for pid=3373 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 638.702339][ T24] audit: type=1400 audit(637.920:117): avc: denied { module_request } for pid=3373 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 639.586416][ T24] audit: type=1400 audit(638.800:118): avc: denied { sys_module } for pid=3374 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 660.420017][ T3374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 661.142398][ T3374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 661.602280][ T3373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 661.670937][ T24] audit: type=1400 audit(660.890:119): avc: denied { write } for pid=3417 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 662.270282][ T3373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 665.304792][ T24] audit: type=1400 audit(664.510:120): avc: denied { write } for pid=3422 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 674.617335][ T3374] hsr_slave_0: entered promiscuous mode [ 674.647219][ T3374] hsr_slave_1: entered promiscuous mode [ 676.351537][ T3373] hsr_slave_0: entered promiscuous mode [ 676.376024][ T3373] hsr_slave_1: entered promiscuous mode [ 676.396526][ T3373] debugfs: 'hsr0' already exists in 'hsr' [ 676.400720][ T3373] Cannot create hsr debugfs directory [ 681.585867][ T24] audit: type=1400 audit(680.800:121): avc: denied { create } for pid=3374 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 681.616158][ T24] audit: type=1400 audit(680.830:122): avc: denied { write } for pid=3374 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 681.652710][ T24] audit: type=1400 audit(680.870:123): avc: denied { read } for pid=3374 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 681.826922][ T3374] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 682.029747][ T3374] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 682.063360][ T3374] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 682.341913][ T3374] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 682.412977][ T3374] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 682.582590][ T3374] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 682.652728][ T3374] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 682.792330][ T3374] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 684.601791][ T3373] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 684.797390][ T3373] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 684.850958][ T3373] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 684.999261][ T3373] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 685.050394][ T3373] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 685.240685][ T3373] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 685.282393][ T3373] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 685.522029][ T3373] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 697.259792][ T3374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 701.798425][ T3373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 742.802551][ T3374] veth0_vlan: entered promiscuous mode [ 743.264694][ T3374] veth1_vlan: entered promiscuous mode [ 744.908080][ T3374] veth0_macvtap: entered promiscuous mode [ 745.247638][ T3374] veth1_macvtap: entered promiscuous mode [ 746.874407][ T3373] veth0_vlan: entered promiscuous mode [ 747.106525][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.121179][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.131071][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.344954][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.007314][ T3373] veth1_vlan: entered promiscuous mode [ 749.627219][ T24] audit: type=1400 audit(748.830:124): avc: denied { mount } for pid=3374 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 749.842998][ T24] audit: type=1400 audit(749.060:125): avc: denied { mounton } for pid=3374 comm="syz-executor" path="/syzkaller.YxrcPc/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 749.988625][ T24] audit: type=1400 audit(749.210:126): avc: denied { mount } for pid=3374 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 750.248927][ T24] audit: type=1400 audit(749.460:127): avc: denied { mounton } for pid=3374 comm="syz-executor" path="/syzkaller.YxrcPc/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 750.428721][ T24] audit: type=1400 audit(749.650:128): avc: denied { mounton } for pid=3374 comm="syz-executor" path="/syzkaller.YxrcPc/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 750.812759][ T3373] veth0_macvtap: entered promiscuous mode [ 750.917385][ T24] audit: type=1400 audit(750.120:129): avc: denied { unmount } for pid=3374 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 751.067504][ T24] audit: type=1400 audit(750.290:130): avc: denied { mounton } for pid=3374 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1544 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 751.118895][ T3373] veth1_macvtap: entered promiscuous mode [ 751.170251][ T24] audit: type=1400 audit(750.370:131): avc: denied { mount } for pid=3374 comm="syz-executor" name="/" dev="gadgetfs" ino=3720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 751.387518][ T24] audit: type=1400 audit(750.610:132): avc: denied { mount } for pid=3374 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 751.501429][ T24] audit: type=1400 audit(750.720:133): avc: denied { mounton } for pid=3374 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 753.536221][ T3374] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 754.078580][ T3465] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.085406][ T3465] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.199910][ T3465] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.218164][ T3465] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.555274][ T24] kauditd_printk_skb: 1 callbacks suppressed [ 755.565577][ T24] audit: type=1400 audit(754.770:135): avc: denied { read write } for pid=3374 comm="syz-executor" name="loop0" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 755.566691][ T24] audit: type=1400 audit(754.770:136): avc: denied { open } for pid=3374 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 755.658470][ T24] audit: type=1400 audit(754.850:137): avc: denied { ioctl } for pid=3374 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=636 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 767.565869][ T24] audit: type=1400 audit(766.780:138): avc: denied { execute } for pid=3530 comm="syz.0.1" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=3782 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 770.037608][ T24] audit: type=1400 audit(769.220:139): avc: denied { read } for pid=3531 comm="syz.1.2" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 770.050478][ T24] audit: type=1400 audit(769.270:140): avc: denied { open } for pid=3531 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 770.411640][ T24] audit: type=1400 audit(769.630:141): avc: denied { ioctl } for pid=3531 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 770.458282][ T24] audit: type=1400 audit(769.680:142): avc: denied { append } for pid=3531 comm="syz.1.2" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 778.510680][ T24] audit: type=1400 audit(777.730:143): avc: denied { write } for pid=3543 comm="syz.0.4" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 780.530272][ T3548] kvm [3548]: Failed to find VMA for hva 0x21016000 [ 795.349555][ T24] audit: type=1400 audit(794.570:144): avc: denied { map } for pid=3557 comm="syz.0.9" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 795.369072][ T24] audit: type=1400 audit(794.590:145): avc: denied { execute } for pid=3557 comm="syz.0.9" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 796.391978][ T24] audit: type=1400 audit(795.600:146): avc: denied { create } for pid=3557 comm="syz.0.9" anonclass=[kvm-gmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 798.490024][ T24] audit: type=1400 audit(797.710:147): avc: denied { map } for pid=3557 comm="syz.0.9" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=4237 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 798.511868][ T24] audit: type=1400 audit(797.730:148): avc: denied { read } for pid=3557 comm="syz.0.9" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=4237 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 834.411625][ T24] audit: type=1400 audit(833.590:149): avc: denied { map } for pid=3582 comm="syz.0.17" path="pipe:[2732]" dev="pipefs" ino=2732 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 840.196082][ T24] audit: type=1400 audit(839.410:150): avc: denied { setattr } for pid=3591 comm="syz.0.19" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 858.930445][ T24] audit: type=1400 audit(858.150:151): avc: denied { ioctl } for pid=3599 comm="syz.0.22" path="net:[4026532632]" dev="nsfs" ino=4026532632 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1088.746277][ T24] audit: type=1400 audit(1087.960:152): avc: denied { ioctl } for pid=3772 comm="syz.1.76" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=7831 ioctlcmd=0xae49 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1207.933382][ T24] audit: type=1400 audit(1207.150:153): avc: denied { write } for pid=3849 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1215.188314][ T24] audit: type=1400 audit(1214.400:154): avc: denied { write } for pid=3857 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1523.251132][ T4032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1523.441813][ T4032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1525.712661][ T4035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1525.910322][ T4035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1543.138751][ T2177] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1544.290713][ T2177] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1545.051319][ T2177] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1546.237893][ T2177] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1550.412201][ T4032] hsr_slave_0: entered promiscuous mode [ 1550.478916][ T4032] hsr_slave_1: entered promiscuous mode [ 1550.556578][ T4032] debugfs: 'hsr0' already exists in 'hsr' [ 1550.559698][ T4032] Cannot create hsr debugfs directory [ 1554.511610][ T4035] hsr_slave_0: entered promiscuous mode [ 1554.611449][ T4035] hsr_slave_1: entered promiscuous mode [ 1554.711856][ T4035] debugfs: 'hsr0' already exists in 'hsr' [ 1554.724800][ T4035] Cannot create hsr debugfs directory [ 1560.638896][ T2177] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1561.041379][ T2177] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1561.178165][ T2177] bond0 (unregistering): Released all slaves [ 1562.730399][ T2177] hsr_slave_0: left promiscuous mode [ 1562.768691][ T2177] hsr_slave_1: left promiscuous mode [ 1562.995444][ T2177] veth1_macvtap: left promiscuous mode [ 1562.999196][ T2177] veth0_macvtap: left promiscuous mode [ 1563.011516][ T2177] veth1_vlan: left promiscuous mode [ 1563.036380][ T2177] veth0_vlan: left promiscuous mode [ 1578.022509][ T2177] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1579.051028][ T2177] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1580.065232][ T24] audit: type=1400 audit(1579.250:155): avc: denied { write } for pid=4105 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1580.272572][ T2177] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1581.670474][ T2177] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1584.316620][ T24] audit: type=1400 audit(1583.510:156): avc: denied { write } for pid=4109 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1585.294893][ T4032] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1585.478842][ T4032] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1585.566909][ T4032] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1585.709398][ T4032] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1586.277727][ T4032] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1586.512989][ T4032] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1586.572645][ T4032] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1586.828819][ T4032] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1592.046505][ T2177] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1592.111361][ T2177] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1592.178847][ T2177] bond0 (unregistering): Released all slaves [ 1592.992707][ T3211] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1593.200251][ T2177] hsr_slave_0: left promiscuous mode [ 1593.352765][ T2177] hsr_slave_1: left promiscuous mode [ 1593.607605][ T2177] veth1_macvtap: left promiscuous mode [ 1593.611044][ T2177] veth0_macvtap: left promiscuous mode [ 1593.629793][ T2177] veth1_vlan: left promiscuous mode [ 1593.640485][ T2177] veth0_vlan: left promiscuous mode [ 1607.970471][ T4035] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1608.316777][ T4035] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1608.420448][ T4035] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1608.774947][ T4035] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1608.822257][ T4035] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1609.176727][ T4035] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1609.275902][ T4035] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1609.521722][ T4035] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1610.361672][ T24] audit: type=1400 audit(1609.580:157): avc: denied { write } for pid=4120 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1617.267039][ T24] audit: type=1400 audit(1616.460:158): avc: denied { write } for pid=4135 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1627.093016][ T4032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1631.507312][ T4035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1633.494710][ T24] audit: type=1400 audit(1632.710:159): avc: denied { write } for pid=4147 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1638.544708][ T24] audit: type=1400 audit(1637.710:160): avc: denied { write } for pid=4156 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1642.062436][ T3211] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1654.545929][ T24] audit: type=1400 audit(1653.740:161): avc: denied { write } for pid=4170 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1659.976840][ T24] audit: type=1400 audit(1659.160:162): avc: denied { write } for pid=4179 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1663.637926][ T3211] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1675.680258][ T24] audit: type=1400 audit(1674.900:163): avc: denied { write } for pid=4195 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1682.416808][ T24] audit: type=1400 audit(1681.620:164): avc: denied { write } for pid=4204 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1687.289255][ T3211] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1697.836258][ T24] audit: type=1400 audit(1697.050:165): avc: denied { write } for pid=4218 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1700.103318][ T4032] veth0_vlan: entered promiscuous mode [ 1700.727913][ T4032] veth1_vlan: entered promiscuous mode [ 1703.186691][ T4032] veth0_macvtap: entered promiscuous mode [ 1703.628742][ T4032] veth1_macvtap: entered promiscuous mode [ 1704.377567][ T24] audit: type=1400 audit(1703.560:166): avc: denied { write } for pid=4227 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1705.980288][ T4035] veth0_vlan: entered promiscuous mode [ 1707.047537][ T4035] veth1_vlan: entered promiscuous mode [ 1707.618459][ T3430] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1707.632218][ T3430] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1707.640977][ T3430] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1707.659407][ T3430] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1708.639842][ T3211] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1711.246902][ T4035] veth0_macvtap: entered promiscuous mode [ 1711.709362][ T4035] veth1_macvtap: entered promiscuous mode [ 1714.782651][ T4043] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1714.786172][ T4043] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1714.815293][ T4043] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1714.821631][ T4043] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1723.985945][ T24] audit: type=1400 audit(1723.180:167): avc: denied { write } for pid=4232 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1733.796356][ T24] audit: type=1400 audit(1732.920:168): avc: denied { write } for pid=4244 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1739.682960][ T3211] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1758.166124][ T24] audit: type=1400 audit(1757.370:169): avc: denied { write } for pid=4257 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1767.085014][ T24] audit: type=1400 audit(1766.300:170): avc: denied { write } for pid=4266 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1773.012664][ T3211] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1792.165876][ T24] audit: type=1400 audit(1791.380:171): avc: denied { write } for pid=4280 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1801.149188][ T24] audit: type=1400 audit(1800.330:172): avc: denied { write } for pid=4284 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1808.307861][ T3211] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1848.626187][ T24] audit: type=1400 audit(1847.780:173): avc: denied { write } for pid=4325 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1859.495782][ T24] audit: type=1400 audit(1858.710:174): avc: denied { write } for pid=4337 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1888.399225][ T24] audit: type=1400 audit(1887.610:175): avc: denied { write } for pid=4354 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1896.885506][ T24] audit: type=1400 audit(1896.070:176): avc: denied { write } for pid=4362 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1923.507103][ T24] audit: type=1400 audit(1922.700:177): avc: denied { write } for pid=4381 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1933.428316][ T24] audit: type=1400 audit(1932.590:178): avc: denied { write } for pid=4395 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1946.971710][ T24] audit: type=1400 audit(1946.190:179): avc: denied { write } for pid=4405 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1955.293219][ T24] audit: type=1400 audit(1954.510:180): avc: denied { write } for pid=4414 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1982.066768][ T24] audit: type=1400 audit(1981.250:181): avc: denied { write } for pid=4431 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1992.004679][ T24] audit: type=1400 audit(1991.220:182): avc: denied { write } for pid=4441 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2011.587783][ T24] audit: type=1400 audit(2010.790:183): avc: denied { write } for pid=4455 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2019.750100][ T24] audit: type=1400 audit(2018.970:184): avc: denied { write } for pid=4463 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2037.407476][ T24] audit: type=1400 audit(2036.620:185): avc: denied { write } for pid=4474 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2048.455691][ T24] audit: type=1400 audit(2047.650:186): avc: denied { write } for pid=4483 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2062.679711][ T24] audit: type=1400 audit(2061.890:187): avc: denied { write } for pid=4490 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2071.187331][ T24] audit: type=1400 audit(2070.370:188): avc: denied { write } for pid=4502 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2086.717613][ T24] audit: type=1400 audit(2085.940:189): avc: denied { write } for pid=4515 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2096.795971][ T24] audit: type=1400 audit(2096.010:190): avc: denied { write } for pid=4527 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2260.958528][ T4631] kvm [4631]: Failed to find VMA for hva 0x20de8000 [ 2262.720328][ T4631] kvm [4631]: Failed to find VMA for hva 0x204ec000 [ 2424.486073][ T24] audit: type=1400 audit(2423.700:191): avc: denied { write } for pid=4719 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2432.906466][ T24] audit: type=1400 audit(2432.050:192): avc: denied { write } for pid=4728 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2561.405381][ T24] audit: type=1400 audit(2560.580:193): avc: denied { mmap_zero } for pid=4797 comm="syz.2.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 2568.188544][ T24] audit: type=1400 audit(2567.370:194): avc: denied { mmap_zero } for pid=4802 comm="syz.2.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 2724.061160][ T24] audit: type=1400 audit(2723.280:195): avc: denied { execute } for pid=4890 comm="syz.2.319" path="/sys/kernel/debug/kcov" dev="debugfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=file permissive=1 [ 2888.936443][ T24] audit: type=1400 audit(2888.150:196): avc: denied { write } for pid=4989 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2899.099855][ T24] audit: type=1400 audit(2898.320:197): avc: denied { write } for pid=5000 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2937.470070][ T5020] kvm [5020]: Failed to find VMA for hva 0x20c01000 [ 2937.507732][ T5022] kvm [5022]: Failed to find VMA for hva 0x20c01000 [ 3252.946161][ T24] audit: type=1400 audit(3252.160:198): avc: denied { write } for pid=5212 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3259.258598][ T24] audit: type=1400 audit(3258.460:199): avc: denied { write } for pid=5217 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3332.783093][ T5220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3333.073169][ T5220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3356.607255][ T5230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3356.966783][ T5230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3361.520322][ T5220] hsr_slave_0: entered promiscuous mode [ 3361.598709][ T5220] hsr_slave_1: entered promiscuous mode [ 3380.102730][ T5220] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 3380.576785][ T5220] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 3380.630587][ T5220] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 3380.909287][ T5220] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3381.005199][ T5220] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 3381.185711][ T5220] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 3381.287957][ T5220] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 3381.506156][ T5220] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 3389.321652][ T5230] hsr_slave_0: entered promiscuous mode [ 3389.456835][ T5230] hsr_slave_1: entered promiscuous mode [ 3389.506243][ T5230] debugfs: 'hsr0' already exists in 'hsr' [ 3389.514799][ T5230] Cannot create hsr debugfs directory [ 3406.875463][ T5230] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 3407.236591][ T5230] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 3407.439316][ T5230] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 3407.647821][ T5230] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3407.991251][ T5230] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 3408.230324][ T5230] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 3408.362823][ T5230] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 3408.612379][ T5230] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 3409.948388][ T5220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3443.919057][ T3459] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3445.805809][ T3459] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3447.169498][ T3459] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3448.568603][ T3459] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3451.111393][ T5230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3464.733481][ T3459] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3464.970407][ T3459] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3465.147367][ T3459] bond0 (unregistering): Released all slaves [ 3466.943103][ T3459] hsr_slave_0: left promiscuous mode [ 3467.209034][ T3459] hsr_slave_1: left promiscuous mode [ 3467.937750][ T3459] veth1_macvtap: left promiscuous mode [ 3467.969925][ T3459] veth0_macvtap: left promiscuous mode [ 3468.005656][ T3459] veth1_vlan: left promiscuous mode [ 3468.018731][ T3459] veth0_vlan: left promiscuous mode [ 3494.790957][ T3459] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3496.723217][ T3459] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3498.631614][ T3459] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3500.437071][ T3459] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3508.565344][ T24] audit: type=1400 audit(3507.770:200): avc: denied { write } for pid=5342 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3516.906821][ T24] audit: type=1400 audit(3516.120:201): avc: denied { write } for pid=5352 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3520.297254][ T3459] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3520.467706][ T3459] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3520.591161][ T3459] bond0 (unregistering): Released all slaves [ 3521.676377][ T3459] hsr_slave_0: left promiscuous mode [ 3521.758279][ T3459] hsr_slave_1: left promiscuous mode [ 3522.084749][ T3459] veth1_macvtap: left promiscuous mode [ 3522.088099][ T3459] veth0_macvtap: left promiscuous mode [ 3522.101818][ T3459] veth1_vlan: left promiscuous mode [ 3522.112932][ T3459] veth0_vlan: left promiscuous mode [ 3537.911005][ T3211] 8021q: adding VLAN 0 to HW filter on device eth9 [ 3555.296802][ T24] audit: type=1400 audit(3554.490:202): avc: denied { write } for pid=5368 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3563.012039][ T24] audit: type=1400 audit(3562.230:203): avc: denied { write } for pid=5377 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3567.132612][ T3211] 8021q: adding VLAN 0 to HW filter on device eth10 [ 3579.837003][ T24] audit: type=1400 audit(3579.050:204): avc: denied { write } for pid=5393 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3586.014859][ T24] audit: type=1400 audit(3585.210:205): avc: denied { write } for pid=5402 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3590.736442][ T3211] 8021q: adding VLAN 0 to HW filter on device eth11 [ 3590.861025][ T5220] veth0_vlan: entered promiscuous mode [ 3591.678332][ T5220] veth1_vlan: entered promiscuous mode [ 3594.357543][ T5220] veth0_macvtap: entered promiscuous mode [ 3594.940276][ T5220] veth1_macvtap: entered promiscuous mode [ 3598.226469][ T4046] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3598.245930][ T4046] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3598.266137][ T4046] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3598.280583][ T4046] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3608.098908][ T24] audit: type=1400 audit(3607.310:206): avc: denied { write } for pid=5414 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3617.928014][ T24] audit: type=1400 audit(3617.020:207): avc: denied { write } for pid=5423 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3621.707263][ T5230] veth0_vlan: entered promiscuous mode [ 3623.038758][ T5230] veth1_vlan: entered promiscuous mode [ 3625.223318][ T3211] 8021q: adding VLAN 0 to HW filter on device eth12 [ 3626.893371][ T5230] veth0_macvtap: entered promiscuous mode [ 3627.957605][ T5230] veth1_macvtap: entered promiscuous mode [ 3631.756563][ T3290] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3631.758222][ T3290] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3631.789270][ T3290] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3631.949263][ T3290] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3647.876767][ T24] audit: type=1400 audit(3646.990:208): avc: denied { write } for pid=5436 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3657.605616][ T24] audit: type=1400 audit(3656.820:209): avc: denied { write } for pid=5447 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3665.055335][ T3211] 8021q: adding VLAN 0 to HW filter on device eth13 [ 3687.525297][ T24] audit: type=1400 audit(3686.710:210): avc: denied { write } for pid=5462 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3697.878444][ T24] audit: type=1400 audit(3697.000:211): avc: denied { write } for pid=5473 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3704.422134][ T3211] 8021q: adding VLAN 0 to HW filter on device eth14 [ 3726.197321][ T24] audit: type=1400 audit(3725.250:212): avc: denied { write } for pid=5487 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3738.175884][ T24] audit: type=1400 audit(3737.370:213): avc: denied { write } for pid=5501 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3745.640003][ T3211] 8021q: adding VLAN 0 to HW filter on device eth15 [ 3774.415489][ T24] audit: type=1400 audit(3773.530:214): avc: denied { write } for pid=5521 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3785.356219][ T24] audit: type=1400 audit(3784.550:215): avc: denied { write } for pid=5532 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3793.317990][ T3211] 8021q: adding VLAN 0 to HW filter on device eth16 [ 3829.057624][ T24] audit: type=1400 audit(3828.160:216): avc: denied { write } for pid=5549 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3839.848767][ T24] audit: type=1400 audit(3839.040:217): avc: denied { write } for pid=5560 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3861.539165][ T24] audit: type=1400 audit(3860.710:218): avc: denied { write } for pid=5569 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3873.447219][ T24] audit: type=1400 audit(3872.580:219): avc: denied { write } for pid=5578 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3902.625260][ T24] audit: type=1400 audit(3901.820:220): avc: denied { write } for pid=5594 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3914.247638][ T24] audit: type=1400 audit(3913.460:221): avc: denied { write } for pid=5604 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3936.717313][ T24] audit: type=1400 audit(3935.940:222): avc: denied { write } for pid=5615 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3941.503274][ T24] audit: type=1400 audit(3940.720:223): avc: denied { write } for pid=5619 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3975.962929][ T24] audit: type=1400 audit(3975.180:224): avc: denied { write } for pid=5634 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3985.001075][ T24] audit: type=1400 audit(3984.220:225): avc: denied { write } for pid=5642 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4002.458012][ T24] audit: type=1400 audit(4001.670:226): avc: denied { write } for pid=5652 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4008.918808][ T24] audit: type=1400 audit(4008.140:227): avc: denied { write } for pid=5656 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4036.698184][ T24] audit: type=1400 audit(4035.910:228): avc: denied { write } for pid=5670 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4044.542554][ T3459] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4046.486796][ T24] audit: type=1400 audit(4045.660:229): avc: denied { write } for pid=5681 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4048.488585][ T3459] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4050.588533][ T3459] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4052.490268][ T3459] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4066.435588][ T24] audit: type=1400 audit(4065.650:230): avc: denied { write } for pid=5696 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4072.509222][ T24] audit: type=1400 audit(4071.700:231): avc: denied { write } for pid=5701 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4072.697709][ T3459] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 4073.142289][ T3459] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 4073.340790][ T3459] bond0 (unregistering): Released all slaves [ 4075.729090][ T3459] hsr_slave_0: left promiscuous mode [ 4075.814898][ T3459] hsr_slave_1: left promiscuous mode [ 4076.106412][ T3459] veth1_macvtap: left promiscuous mode [ 4076.109729][ T3459] veth0_macvtap: left promiscuous mode [ 4076.123401][ T3459] veth1_vlan: left promiscuous mode [ 4076.206886][ T3459] veth0_vlan: left promiscuous mode [ 4098.442944][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4098.978182][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4102.191777][ T3459] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4103.751998][ T3459] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4105.070467][ T3459] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4106.951495][ T3459] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4115.866918][ T24] audit: type=1400 audit(4115.070:232): avc: denied { write } for pid=5713 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4122.186841][ T24] audit: type=1400 audit(4121.400:233): avc: denied { write } for pid=5723 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4124.248704][ T3459] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 4124.416434][ T3459] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 4124.551415][ T3459] bond0 (unregistering): Released all slaves [ 4127.578531][ T3459] hsr_slave_0: left promiscuous mode [ 4127.687647][ T3459] hsr_slave_1: left promiscuous mode [ 4128.204561][ T3459] veth1_macvtap: left promiscuous mode [ 4128.208072][ T3459] veth0_macvtap: left promiscuous mode [ 4128.260505][ T3459] veth1_vlan: left promiscuous mode [ 4128.298666][ T3459] veth0_vlan: left promiscuous mode [ 4143.619676][ T3211] 8021q: adding VLAN 0 to HW filter on device eth17 [ 4156.031570][ T5633] hsr_slave_0: entered promiscuous mode [ 4156.137598][ T5633] hsr_slave_1: entered promiscuous mode [ 4162.258303][ T24] audit: type=1400 audit(4161.470:234): avc: denied { write } for pid=5739 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4166.467037][ T5659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4166.755229][ T24] audit: type=1400 audit(4165.970:235): avc: denied { write } for pid=5745 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4166.892897][ T5659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4170.476890][ T3211] 8021q: adding VLAN 0 to HW filter on device eth18 [ 4172.879002][ T5633] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 4173.309506][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 4173.415232][ T5633] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 4173.610236][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 4173.723185][ T5633] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 4173.956102][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 4174.013047][ T5633] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 4174.221463][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 4177.595120][ T24] audit: type=1400 audit(4176.760:236): avc: denied { write } for pid=5749 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4183.781657][ T24] audit: type=1400 audit(4182.980:237): avc: denied { write } for pid=5763 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4196.178933][ T5659] hsr_slave_0: entered promiscuous mode [ 4196.218941][ T5659] hsr_slave_1: entered promiscuous mode [ 4196.243319][ T5659] debugfs: 'hsr0' already exists in 'hsr' [ 4196.306246][ T5659] Cannot create hsr debugfs directory [ 4200.209017][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4202.076476][ T24] audit: type=1400 audit(4201.290:238): avc: denied { write } for pid=5776 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4210.362898][ T24] audit: type=1400 audit(4209.580:239): avc: denied { write } for pid=5781 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4216.307106][ T5659] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 4216.876187][ T5659] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 4217.030460][ T3211] 8021q: adding VLAN 0 to HW filter on device eth19 [ 4217.107899][ T5659] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 4217.487041][ T5659] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 4217.626458][ T5659] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 4218.051064][ T5659] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 4218.161877][ T5659] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 4218.718976][ T5659] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 4239.715230][ T24] audit: type=1400 audit(4238.920:240): avc: denied { write } for pid=5801 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4247.576275][ T24] audit: type=1400 audit(4246.760:241): avc: denied { write } for pid=5811 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4248.852930][ T5659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4253.269402][ T3211] 8021q: adding VLAN 0 to HW filter on device eth20 [ 4260.819451][ T24] audit: type=1400 audit(4260.040:242): avc: denied { write } for pid=5817 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4269.868676][ T24] audit: type=1400 audit(4269.050:243): avc: denied { write } for pid=5829 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4295.870164][ T24] audit: type=1400 audit(4295.090:244): avc: denied { write } for pid=5843 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4303.486589][ T24] audit: type=1400 audit(4302.680:245): avc: denied { write } for pid=5853 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4308.521617][ T3211] 8021q: adding VLAN 0 to HW filter on device eth21 [ 4328.617725][ T24] audit: type=1400 audit(4327.820:246): avc: denied { write } for pid=5870 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4333.388009][ T5633] veth0_vlan: entered promiscuous mode [ 4334.371940][ T5633] veth1_vlan: entered promiscuous mode [ 4338.466778][ T5633] veth0_macvtap: entered promiscuous mode [ 4339.117320][ T5633] veth1_macvtap: entered promiscuous mode [ 4339.484766][ T24] audit: type=1400 audit(4338.700:247): avc: denied { write } for pid=5879 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4343.347862][ T4881] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 4343.357863][ T4881] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 4343.387473][ T3430] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 4343.545909][ T5234] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 4347.739609][ T3211] 8021q: adding VLAN 0 to HW filter on device eth22 [ 4370.925734][ T24] audit: type=1400 audit(4370.040:248): avc: denied { write } for pid=5893 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4382.028096][ T24] audit: type=1400 audit(4381.200:249): avc: denied { write } for pid=5905 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4388.782993][ T5659] veth0_vlan: entered promiscuous mode [ 4390.257334][ T5659] veth1_vlan: entered promiscuous mode [ 4391.199861][ T3211] 8021q: adding VLAN 0 to HW filter on device eth23 [ 4395.308895][ T5659] veth0_macvtap: entered promiscuous mode [ 4396.548216][ T5659] veth1_macvtap: entered promiscuous mode [ 4401.073214][ T5687] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 4401.342038][ T3430] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 4401.395110][ T3430] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 4401.595999][ T5687] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 4426.113317][ T24] audit: type=1400 audit(4425.310:250): avc: denied { write } for pid=5922 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4437.697970][ T24] audit: type=1400 audit(4436.890:251): avc: denied { write } for pid=5932 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4445.710847][ T3211] 8021q: adding VLAN 0 to HW filter on device eth24 [ 4517.655642][ T24] audit: type=1400 audit(4516.850:252): avc: denied { write } for pid=5970 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4531.545634][ T24] audit: type=1400 audit(4530.750:253): avc: denied { write } for pid=5983 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4564.465146][ T24] audit: type=1400 audit(4563.560:254): avc: denied { write } for pid=6000 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4578.495480][ T24] audit: type=1400 audit(4577.700:255): avc: denied { write } for pid=6016 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4605.194995][ T24] audit: type=1400 audit(4604.410:256): avc: denied { write } for pid=6027 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4617.290954][ T24] audit: type=1400 audit(4616.410:257): avc: denied { write } for pid=6037 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4641.125078][ T24] audit: type=1400 audit(4640.230:258): avc: denied { write } for pid=6048 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4654.985266][ T24] audit: type=1400 audit(4654.180:259): avc: denied { write } for pid=6059 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4736.434909][ T24] audit: type=1400 audit(4735.610:260): avc: denied { write } for pid=6106 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4749.205951][ T24] audit: type=1400 audit(4748.400:261): avc: denied { write } for pid=6118 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4781.669114][ T24] audit: type=1400 audit(4780.860:262): avc: denied { write } for pid=6131 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4787.547779][ T6135] kvm [6135]: Failed to find VMA for hva 0x21016000 [ 4793.727434][ T24] audit: type=1400 audit(4792.830:263): avc: denied { write } for pid=6141 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4817.870975][ T24] audit: type=1400 audit(4817.090:264): avc: denied { write } for pid=6151 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4831.647073][ T24] audit: type=1400 audit(4830.840:265): avc: denied { write } for pid=6160 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4851.206897][ T24] audit: type=1400 audit(4850.380:266): avc: denied { write } for pid=6166 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4857.365264][ T24] audit: type=1400 audit(4856.560:267): avc: denied { write } for pid=6169 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4875.075508][ T24] audit: type=1400 audit(4874.230:268): avc: denied { write } for pid=6172 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4887.789403][ T24] audit: type=1400 audit(4887.010:269): avc: denied { write } for pid=6177 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4889.555753][ T5677] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4892.085682][ T5677] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4896.336139][ T5677] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4898.571961][ T5677] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4917.671380][ T5677] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 4917.907684][ T5677] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 4918.067088][ T5677] bond0 (unregistering): Released all slaves [ 4919.811855][ T5677] hsr_slave_0: left promiscuous mode [ 4920.207900][ T5677] hsr_slave_1: left promiscuous mode [ 4921.020985][ T5677] veth1_macvtap: left promiscuous mode [ 4921.077715][ T5677] veth0_macvtap: left promiscuous mode [ 4921.106863][ T5677] veth1_vlan: left promiscuous mode [ 4921.120661][ T5677] veth0_vlan: left promiscuous mode [ 4954.040693][ T5677] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4955.742459][ T5677] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4957.487088][ T5677] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4958.823351][ T5677] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4969.100434][ T24] audit: type=1400 audit(4968.250:270): avc: denied { write } for pid=6209 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4976.527616][ T24] audit: type=1400 audit(4975.740:271): avc: denied { write } for pid=6217 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4980.585530][ T5677] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 4981.034760][ T5677] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 4981.246616][ T5677] bond0 (unregistering): Released all slaves [ 4982.897987][ T3211] 8021q: adding VLAN 0 to HW filter on device eth25 [ 4983.121051][ T5677] hsr_slave_0: left promiscuous mode [ 4983.162976][ T5677] hsr_slave_1: left promiscuous mode [ 4983.636312][ T5677] veth1_macvtap: left promiscuous mode [ 4983.639654][ T5677] veth0_macvtap: left promiscuous mode [ 4983.651378][ T5677] veth1_vlan: left promiscuous mode [ 4983.717405][ T5677] veth0_vlan: left promiscuous mode [ 5023.166903][ T24] audit: type=1400 audit(5022.340:272): avc: denied { write } for pid=6228 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5028.966382][ T24] audit: type=1400 audit(5028.160:273): avc: denied { write } for pid=6238 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5033.860949][ T3211] 8021q: adding VLAN 0 to HW filter on device eth26 [ 5041.816096][ T24] audit: type=1400 audit(5041.030:274): avc: denied { write } for pid=6247 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5043.898999][ T6178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 5044.181187][ T6178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 5048.741042][ T6186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 5049.037155][ T24] audit: type=1400 audit(5048.250:275): avc: denied { write } for pid=6255 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5049.217626][ T6186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 5073.954926][ T24] audit: type=1400 audit(5073.170:276): avc: denied { write } for pid=6269 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5079.062319][ T6178] hsr_slave_0: entered promiscuous mode [ 5079.170552][ T6178] hsr_slave_1: entered promiscuous mode [ 5080.935735][ T24] audit: type=1400 audit(5080.150:277): avc: denied { write } for pid=6278 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5084.591937][ T6186] hsr_slave_0: entered promiscuous mode [ 5084.680848][ T6186] hsr_slave_1: entered promiscuous mode [ 5084.722363][ T6186] debugfs: 'hsr0' already exists in 'hsr' [ 5084.764855][ T6186] Cannot create hsr debugfs directory [ 5085.367478][ T3211] 8021q: adding VLAN 0 to HW filter on device eth27 [ 5101.522804][ T6178] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 5102.240743][ T6178] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 5102.383015][ T6178] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 5102.732372][ T6178] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 5102.832703][ T6178] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 5103.549009][ T6178] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 5103.550118][ T24] audit: type=1400 audit(5102.730:278): avc: denied { write } for pid=6285 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5103.807277][ T6178] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 5104.352629][ T6178] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 5110.856275][ T6186] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 5111.346070][ T6186] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 5111.433416][ T6186] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 5111.892589][ T6186] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 5112.033241][ T6186] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 5112.503260][ T6186] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 5112.761964][ T6186] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 5113.389517][ T6186] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 5113.705843][ T24] audit: type=1400 audit(5112.800:279): avc: denied { write } for pid=6296 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5121.877299][ T3211] 8021q: adding VLAN 0 to HW filter on device eth28 [ 5144.541292][ T24] audit: type=1400 audit(5143.740:280): avc: denied { write } for pid=6318 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5145.962876][ T6178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 5151.396464][ T6186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 5154.627335][ T24] audit: type=1400 audit(5153.710:281): avc: denied { write } for pid=6323 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5160.712367][ T3211] 8021q: adding VLAN 0 to HW filter on device eth29 [ 5198.087623][ T24] audit: type=1400 audit(5197.290:282): avc: denied { write } for pid=6342 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5209.312384][ T24] audit: type=1400 audit(5208.520:283): avc: denied { write } for pid=6352 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5216.447446][ T3211] 8021q: adding VLAN 0 to HW filter on device eth30 [ 5229.574764][ T24] audit: type=1400 audit(5228.760:284): avc: denied { write } for pid=6363 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5241.139058][ T24] audit: type=1400 audit(5240.310:285): avc: denied { write } for pid=6374 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5272.497641][ T24] audit: type=1400 audit(5271.700:286): avc: denied { write } for pid=6390 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5282.806567][ T24] audit: type=1400 audit(5281.890:287): avc: denied { write } for pid=6401 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5290.157248][ T3211] 8021q: adding VLAN 0 to HW filter on device eth31 [ 5307.207212][ T6178] veth0_vlan: entered promiscuous mode [ 5308.602454][ T6178] veth1_vlan: entered promiscuous mode [ 5314.962172][ T6186] veth0_vlan: entered promiscuous mode [ 5315.470014][ T6178] veth0_macvtap: entered promiscuous mode [ 5316.907615][ T6178] veth1_macvtap: entered promiscuous mode [ 5318.201752][ T6186] veth1_vlan: entered promiscuous mode [ 5324.035292][ T2177] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 5324.042718][ T2177] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 5324.185686][ T6183] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 5324.239138][ T5239] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 5327.142293][ T6186] veth0_macvtap: entered promiscuous mode [ 5328.819952][ T6186] veth1_macvtap: entered promiscuous mode [ 5332.949855][ T24] audit: type=1400 audit(5332.130:288): avc: denied { write } for pid=6418 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5335.020572][ T3290] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 5335.021779][ T3290] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 5335.025793][ T3290] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 5335.026547][ T3290] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 5346.302137][ T24] audit: type=1400 audit(5345.460:289): avc: denied { write } for pid=6423 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5357.221878][ T3211] 8021q: adding VLAN 0 to HW filter on device eth32 [ 5383.025524][ T24] audit: type=1400 audit(5382.220:290): avc: denied { write } for pid=6440 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5399.670625][ T24] audit: type=1400 audit(5398.760:291): avc: denied { write } for pid=6451 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5461.419399][ T24] audit: type=1400 audit(5460.630:292): avc: denied { write } for pid=6479 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5476.465111][ T24] audit: type=1400 audit(5475.670:293): avc: denied { write } for pid=6488 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5521.969980][ T24] audit: type=1400 audit(5521.160:294): avc: denied { write } for pid=6509 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5536.404831][ T24] audit: type=1400 audit(5535.600:295): avc: denied { write } for pid=6520 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5578.938295][ T24] audit: type=1400 audit(5578.100:296): avc: denied { write } for pid=6530 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5594.882637][ T24] audit: type=1400 audit(5594.050:297): avc: denied { write } for pid=6540 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5600.171842][ T5826] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5603.377188][ T5826] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5606.645040][ T5826] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5609.620753][ T5826] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5645.728051][ T5826] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 5646.355433][ T5826] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 5646.668047][ T5826] bond0 (unregistering): Released all slaves [ 5650.096995][ T5826] hsr_slave_0: left promiscuous mode [ 5650.208239][ T5826] hsr_slave_1: left promiscuous mode [ 5651.194708][ T5826] veth1_macvtap: left promiscuous mode [ 5651.195906][ T5826] veth0_macvtap: left promiscuous mode [ 5651.248697][ T5826] veth1_vlan: left promiscuous mode [ 5651.319677][ T5826] veth0_vlan: left promiscuous mode [ 5718.837660][ T24] audit: type=1400 audit(5718.040:298): avc: denied { write } for pid=6589 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5732.549070][ T24] audit: type=1400 audit(5731.710:299): avc: denied { write } for pid=6596 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5782.362327][ T6541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 5782.939075][ T6541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 5785.524841][ T24] audit: type=1400 audit(5784.650:300): avc: denied { write } for pid=6622 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5798.815323][ T24] audit: type=1400 audit(5798.030:301): avc: denied { write } for pid=6633 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5807.390549][ T3211] 8021q: adding VLAN 0 to HW filter on device eth33 [ 5823.866240][ T24] audit: type=1400 audit(5823.050:302): avc: denied { write } for pid=6641 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5836.592515][ T24] audit: type=1400 audit(5835.800:303): avc: denied { write } for pid=6649 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5836.866259][ T6541] hsr_slave_0: entered promiscuous mode [ 5837.030218][ T6541] hsr_slave_1: entered promiscuous mode [ 5884.000033][ T6541] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 5884.691637][ T6541] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 5884.847566][ T6541] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 5885.268838][ T6541] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 5885.385913][ T6541] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 5885.681464][ T24] audit: type=1400 audit(5884.900:304): avc: denied { write } for pid=6667 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5885.782479][ T6541] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 5885.873034][ T6541] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 5886.388882][ T6541] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 5899.406352][ T24] audit: type=1400 audit(5898.610:305): avc: denied { write } for pid=6681 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5909.593353][ T3211] 8021q: adding VLAN 0 to HW filter on device eth34 [ 5931.938447][ T6541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 5956.852860][ T24] audit: type=1400 audit(5956.070:306): avc: denied { write } for pid=6706 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5971.479443][ T24] audit: type=1400 audit(5970.680:307): avc: denied { write } for pid=6722 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5981.820124][ T3211] 8021q: adding VLAN 0 to HW filter on device eth35 [ 5997.536173][ T24] audit: type=1400 audit(5996.720:308): avc: denied { write } for pid=6731 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6010.535349][ T24] audit: type=1400 audit(6009.700:309): avc: denied { write } for pid=6743 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6064.355395][ T24] audit: type=1400 audit(6063.460:310): avc: denied { write } for pid=6771 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6077.588261][ T24] audit: type=1400 audit(6076.710:311): avc: denied { write } for pid=6783 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6087.082955][ T3211] 8021q: adding VLAN 0 to HW filter on device eth36 [ 6105.685707][ T6541] veth0_vlan: entered promiscuous mode [ 6107.287910][ T6541] veth1_vlan: entered promiscuous mode [ 6110.231162][ T24] audit: type=1400 audit(6109.450:312): avc: denied { write } for pid=6796 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6112.796910][ T6541] veth0_macvtap: entered promiscuous mode [ 6114.128947][ T6541] veth1_macvtap: entered promiscuous mode [ 6119.816789][ T6180] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 6119.842644][ T5309] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 6119.880328][ T2177] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 6119.952799][ T2177] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 6126.344866][ T24] audit: type=1400 audit(6125.540:313): avc: denied { write } for pid=6806 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6159.387154][ T24] audit: type=1400 audit(6158.590:314): avc: denied { write } for pid=6815 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6175.179622][ T24] audit: type=1400 audit(6174.400:315): avc: denied { write } for pid=6827 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6200.896409][ T24] audit: type=1400 audit(6200.070:316): avc: denied { write } for pid=6836 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6217.365001][ T24] audit: type=1400 audit(6216.530:317): avc: denied { write } for pid=6848 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6243.265170][ T24] audit: type=1400 audit(6242.460:318): avc: denied { write } for pid=6855 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6254.337183][ T24] audit: type=1400 audit(6253.530:319): avc: denied { write } for pid=6861 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6286.285903][ T24] audit: type=1400 audit(6285.480:320): avc: denied { write } for pid=6873 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6295.324793][ T24] audit: type=1400 audit(6294.540:321): avc: denied { write } for pid=6876 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6312.619745][ T24] audit: type=1400 audit(6311.810:322): avc: denied { write } for pid=6878 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6325.070817][ T24] audit: type=1400 audit(6324.130:323): avc: denied { write } for pid=6883 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6348.575381][ T24] audit: type=1400 audit(6347.780:324): avc: denied { write } for pid=6886 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6361.795276][ T24] audit: type=1400 audit(6360.970:325): avc: denied { write } for pid=6898 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6390.065491][ T24] audit: type=1400 audit(6389.250:326): avc: denied { write } for pid=6908 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6402.584922][ T24] audit: type=1400 audit(6401.770:327): avc: denied { write } for pid=6912 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6427.342748][ T24] audit: type=1400 audit(6426.520:328): avc: denied { write } for pid=6920 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6440.004636][ T24] audit: type=1400 audit(6439.200:329): avc: denied { write } for pid=6929 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6462.275221][ T24] audit: type=1400 audit(6461.420:330): avc: denied { write } for pid=6937 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6476.108874][ T24] audit: type=1400 audit(6475.330:331): avc: denied { write } for pid=6948 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6478.168096][ T6885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 6480.123224][ T6885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 6483.780796][ T6888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 6484.326841][ T6888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 6496.576467][ T24] audit: type=1400 audit(6495.690:332): avc: denied { write } for pid=6950 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6510.599325][ T24] audit: type=1400 audit(6509.650:333): avc: denied { write } for pid=6961 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6538.289963][ T6885] hsr_slave_0: entered promiscuous mode [ 6538.360719][ T6885] hsr_slave_1: entered promiscuous mode [ 6538.483108][ T6885] debugfs: 'hsr0' already exists in 'hsr' [ 6538.570502][ T6885] Cannot create hsr debugfs directory [ 6539.736077][ T24] audit: type=1400 audit(6538.900:334): avc: denied { write } for pid=6970 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6544.732155][ T6888] hsr_slave_0: entered promiscuous mode [ 6544.970052][ T6888] hsr_slave_1: entered promiscuous mode [ 6545.158606][ T6888] debugfs: 'hsr0' already exists in 'hsr' [ 6545.184867][ T6888] Cannot create hsr debugfs directory [ 6551.537045][ T24] audit: type=1400 audit(6550.720:335): avc: denied { write } for pid=6975 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6572.316573][ T24] audit: type=1400 audit(6571.490:336): avc: denied { write } for pid=6978 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6586.513342][ T24] audit: type=1400 audit(6585.730:337): avc: denied { write } for pid=6983 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6607.937822][ T24] audit: type=1400 audit(6607.150:338): avc: denied { write } for pid=6987 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6612.959154][ T6885] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 6613.761159][ T6885] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 6614.318300][ T6885] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 6615.226899][ T6885] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 6615.513013][ T6885] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 6616.380811][ T6885] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 6618.207696][ T6885] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 6618.962670][ T6885] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 6620.757281][ T24] audit: type=1400 audit(6619.960:339): avc: denied { write } for pid=6991 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6627.676402][ T6888] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 6628.568306][ T6888] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 6628.652843][ T6888] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 6629.488776][ T6888] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 6629.572130][ T6888] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 6630.392530][ T6888] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 6630.816610][ T6888] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 6631.278719][ T6888] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 6673.482263][ T6885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 6682.842362][ T6888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 6701.429134][ T26] INFO: task syz.0.572:6864 blocked for more than 430 seconds. [ 6701.471445][ T26] Not tainted syzkaller #0 [ 6701.512353][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 6701.546422][ T26] task:syz.0.572 state:D stack:0 pid:6864 tgid:6864 ppid:6541 task_flags:0x400040 flags:0x00000011 [ 6701.549688][ T26] Call trace: [ 6701.550226][ T26] __switch_to+0x5e0/0xb70 (T) [ 6701.552441][ T26] __schedule+0x1e0c/0x38cc [ 6701.553003][ T26] schedule+0x1b4/0x274 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 6701.744620][ T26] schedule_timeout+0x68/0x1e4 [ 6701.757251][ T26] wait_for_completion+0x1b8/0x414 [ 6701.757927][ T26] __synchronize_srcu+0x1c8/0x208 [ 6701.758442][ T26] synchronize_srcu+0x668/0x8dc [ 6701.758901][ T26] mmu_notifier_unregister+0x33c/0x444 [ 6701.759432][ T26] kvm_put_kvm+0x69c/0xbbc [ 6701.759956][ T26] kvm_vm_release+0x58/0x78 [ 6701.760442][ T26] __fput+0x4ac/0x978 [ 6701.760866][ T26] ____fput+0x20/0x30 [ 6701.761299][ T26] task_work_run+0x1b8/0x250 [ 6701.761805][ T26] exit_to_user_mode_loop+0x110/0x188 [ 6701.762333][ T26] el0_svc+0x18c/0x240 [ 6701.762836][ T26] el0t_64_sync_handler+0x84/0x12c [ 6701.763368][ T26] el0t_64_sync+0x198/0x19c [ 6701.916345][ T26] [ 6701.916345][ T26] Showing all locks held in the system: [ 6701.916937][ T26] 1 lock held by khungtaskd/26: [ 6701.917374][ T26] #0: ffff800087e93598 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x4c/0x188 [ 6701.919945][ T26] 2 locks held by kworker/u4:6/2177: [ 6701.920355][ T26] #0: 59f000000d034140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x958/0x154c [ 6701.922061][ T26] #1: ffff80008ea37ce8 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x978/0x154c [ 6702.086385][ T26] 1 lock held by klogd/3174: [ 6702.086840][ T26] 2 locks held by getty/3239: [ 6702.087137][ T26] #0: edf00000124a60a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 6702.088966][ T26] #1: 0dff80008cbdb2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x314/0x11f8 [ 6702.090676][ T26] 3 locks held by kworker/u4:1/3290: [ 6702.091000][ T26] 2 locks held by syz-executor/3367: [ 6702.091333][ T26] 2 locks held by kworker/u4:4/4881: [ 6702.091639][ T26] #0: 59f000000d034140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x958/0x154c [ 6702.093334][ T26] #1: ffff80008ea07ce8 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x978/0x154c [ 6702.343023][ T26] 2 locks held by kworker/u4:3/5640: [ 6702.355112][ T26] 2 locks held by kworker/u4:8/5687: [ 6702.355623][ T26] 2 locks held by kworker/u4:12/6183: [ 6702.355962][ T26] #0: 59f000000d034140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x958/0x154c [ 6702.357726][ T26] #1: ffff80008e367ce8 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x978/0x154c [ 6702.359398][ T26] 3 locks held by kworker/u4:14/6188: [ 6702.359807][ T26] 2 locks held by syz.9.573/6865: [ 6702.360173][ T26] 3 locks held by kworker/u4:5/7017: [ 6702.360517][ T26] 2 locks held by modprobe/7037: [ 6702.360803][ T26] 1 lock held by modprobe/7038: [ 6702.361087][ T26] 1 lock held by modprobe/7039: [ 6702.361526][ T26] [ 6702.361775][ T26] ============================================= [ 6702.361775][ T26] [ 6702.362743][ T26] Kernel panic - not syncing: hung_task: blocked tasks [ 6702.377536][ T26] CPU: 0 UID: 0 PID: 26 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT [ 6702.379090][ T26] Hardware name: linux,dummy-virt (DT) [ 6702.380148][ T26] Call trace: [ 6702.380985][ T26] show_stack+0x2c/0x3c (C) [ 6702.382076][ T26] __dump_stack+0x30/0x40 [ 6702.383096][ T26] dump_stack_lvl+0x30/0x12c [ 6702.384142][ T26] dump_stack+0x1c/0x28 [ 6702.385175][ T26] vpanic+0x4cc/0x844 [ 6702.385945][ T26] vpanic+0x0/0x844 [ 6702.386815][ T26] hung_task_panic+0x0/0x2c [ 6702.387839][ T26] kthread+0x4cc/0x514 [ 6702.388759][ T26] ret_from_fork+0x10/0x20 [ 6702.392322][ T26] Kernel Offset: disabled [ 6702.393152][ T26] CPU features: 0x00000000,00d1802f,df1847a1,057ffe1f [ 6702.394382][ T26] Memory Limit: none [ 6702.396754][ T26] Rebooting in 86400 seconds..