last executing test programs: 1h52m31.573421486s ago: executing program 0 (id=117): r0 = eventfd2(0xfe, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={r0, 0xc8}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1000c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x80) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x8, 0xf, 0x0, 0x5, 0x6, 0x1, 0x8, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x8, '\x00', 0x94, 0x8001}) write$eventfd(r4, &(0x7f00000001c0)=0x3, 0xfdef) 1h52m26.233574709s ago: executing program 0 (id=118): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x300001fe0000, 0x2}) munmap$KVM_VCPU(0x0, 0x1000000000) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x2000003, 0x40010, r2, 0x200001fe0000) 1h52m19.044616801s ago: executing program 0 (id=120): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x406040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x3, 0x2}}, @its_send_cmd={0xaa, 0x28, {0x4, 0x1, 0x80000, 0xfffc, 0x0, 0x8, 0x2}}], 0x50}, 0x0, 0x0) (async) syz_kvm_vgic_v3_setup(r5, 0x1, 0x100) r8 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0) r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) (async) r10 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) (async) close(r10) (async) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000240)=0x8080000}) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, 0x0) (async) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r3, 0x4068aea3, &(0x7f0000000340)={0xdf, 0x0, 0x2000}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) (async) r12 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f000022c000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) (async) syz_kvm_add_vcpu$arm64(r12, &(0x7f00000009c0)={0x0, &(0x7f0000000240)=[@mrs={0xbe, 0x18, {0x603000000013e602}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x0, 0x4, 0x10, 0x4, 0x6, 0x4}}, @code={0xa, 0x84, {"007008d5008008d50000281e00a4200de0289fd20000b8f2610180d2220080d2230180d2440180d2020000d400e68dd20000b0f2c10080d2620080d2e30180d2440080d2020000d4007c202e007008d5c0bb85d20060b8f2210180d2c20080d2230180d2040080d2020000d4007008d5"}}, @mrs={0xbe, 0x18, {0x603000000013f080}}, @irq_setup={0x46, 0x18, {0x1, 0x12c}}, @uexit={0x0, 0x18, 0x7}, @msr={0x14, 0x20, {0x603000000013e668, 0x9}}, @smc={0x1e, 0x40, {0x0, [0xfffffffffffffffd, 0x1, 0x7, 0x40, 0x6]}}, @code={0xa, 0xcc, {"800d8bd20080b8f2c10180d2020080d2c30180d2e40180d2020000d4000028d500ab8cd20060b0f2010080d2220180d2030180d2e40180d2020000d4e06c9cd20080b8f2810180d2020080d2c30080d2a40180d2020000d4007008d5c0c98ad200c0b8f2e10180d2220180d2630180d2640180d2020000d4007008d560098cd20060b8f2210080d2620080d2030180d2040180d2020000d480bb82d200c0b0f2a10180d2220180d2c30180d2640080d2020000d40000c06d"}}, @eret={0xe6, 0x18, 0x6}, @msr={0x14, 0x20, {0x603000000013df54, 0x400000000000}}, @irq_setup={0x46, 0x18, {0x4, 0x179}}, @irq_setup={0x46, 0x18, {0x0, 0x4c}}, @irq_setup={0x46, 0x18, {0x4, 0x10e}}, @hvc={0x32, 0x40, {0xc4000004, [0x1d2, 0x0, 0x8000, 0x2, 0x6]}}, @svc={0x122, 0x40, {0x5000000, [0x3, 0x10000, 0x910000000000, 0xa6f5, 0x100]}}, @eret={0xe6, 0x18, 0xcab8f6120}, @eret={0xe6, 0x18, 0x5e}, @code={0xa, 0x54, {"00d8a15e0000001b007008d5007008d50000439e00000053000028d500008092207696d200e0b0f2a10180d2a20080d2630080d2a40080d2020000d40004006e"}}, @code={0xa, 0x9c, {"007008d500000018803190d20060b0f2010080d2020180d2e30080d2c40180d2020000d400e4002fc0cc9dd20080b8f2810080d2220080d2c30080d2440080d2020000d440259bd200c0b0f2610180d2c20180d2030180d2640180d2020000d4000028d540508ad20040b8f200e8a05e621080d2030180d2840080d2020000d400d0205e0020004f"}}, @smc={0x1e, 0x40, {0x8400000c, [0x8c6, 0x80000001, 0x3, 0xffff, 0x4]}}, @hvc={0x32, 0x40, {0x84000005, [0x8, 0x9, 0x7, 0x9, 0x6]}}, @uexit={0x0, 0x18, 0x8000}, @eret={0xe6, 0x18, 0x3}, @code={0xa, 0xb4, {"1f0000eac02f89d200a0b0f2610180d2e20080d2830180d2640180d2020000d440b598d200c0b0f2a10180d2820180d2030080d2440180d2020000d4007008d5007008d540d79cd20000b0f2c10080d2420080d2630080d2640080d2020000d4e0b89ed200a0b0f2c10080d2220080d2430180d2640180d2020000d4a0ed83d200e0b0f2210080d2820180d2830080d2040180d2020000d40008285e007008d5"}}, @svc={0x122, 0x40, {0xc5000021, [0x9, 0x5, 0x229, 0x3000000000, 0x9]}}, @hvc={0x32, 0x40, {0x2, [0x5, 0xa0, 0x10, 0x6, 0x3]}}, @memwrite={0x6e, 0x30, @generic={0x70000, 0x7f6, 0xfffffffffffffff8, 0x4}}, @code={0xa, 0x84, {"000028d5000008d5007008d5206b90d200c0b0f2e10180d2020080d2430180d2440180d2020000d4007008d5006999d20020b0f2a10080d2c20180d2030180d2e40180d2020000d4008008d50004007f0000003840c383d20060b8f2e10180d2820080d2030180d2240180d2020000d4"}}, @eret={0xe6, 0x18, 0x3}, @hvc={0x32, 0x40, {0x84000051, [0x3, 0x8, 0x3, 0x40, 0x7]}}], 0x748}, &(0x7f0000000a00)=[@featur2={0x1, 0x64}], 0x1) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42800, 0x0) (async) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) (async) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0) ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) 1h52m8.627307054s ago: executing program 0 (id=122): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x2}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x1, 0x80000, 0x10000, 0x0, 0x2, 0x2}}], 0x50}, 0x0, 0x0) (async) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_GET_REGS(r3, 0x8360ae81, &(0x7f0000000240)) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1h52m1.586859528s ago: executing program 0 (id=124): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}, @its_setup={0x82, 0x28, {0x1, 0x1, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x3}}], 0x68}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000240)=@attr_arm64={0x0, 0x4, 0x0, 0x0}) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r6 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r5, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$arm64(r3, r6, 0xfffffffffffffffe) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$arm64(r3, r6, 0xffffffffffffffff) 1h51m53.181402211s ago: executing program 0 (id=126): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000180)=[@uexit={0x0, 0x18, 0x8}, @irq_setup={0x46, 0x18, {0x3, 0x30c}}, @smc={0x1e, 0x40, {0xc400000e, [0x7, 0x3ff, 0x9, 0x133, 0x7]}}, @eret={0xe6, 0x18, 0x6}, @its_setup={0x82, 0x28, {0x4, 0x0, 0x35e}}, @smc={0x1e, 0x40, {0x84000010, [0x4, 0x9, 0x8, 0x40, 0x8000]}}, @its_send_cmd={0xaa, 0x28, {0x6, 0x1, 0x0, 0x4, 0xffff7fff, 0x0, 0x1}}], 0x118}, 0x0, 0x0) (async) r3 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000180)=[@uexit={0x0, 0x18, 0x8}, @irq_setup={0x46, 0x18, {0x3, 0x30c}}, @smc={0x1e, 0x40, {0xc400000e, [0x7, 0x3ff, 0x9, 0x133, 0x7]}}, @eret={0xe6, 0x18, 0x6}, @its_setup={0x82, 0x28, {0x4, 0x0, 0x35e}}, @smc={0x1e, 0x40, {0x84000010, [0x4, 0x9, 0x8, 0x40, 0x8000]}}, @its_send_cmd={0xaa, 0x28, {0x6, 0x1, 0x0, 0x4, 0xffff7fff, 0x0, 0x1}}], 0x118}, 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x3}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x29) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x19, 0x9b, 0xf, 0x0, 0x5, 0x8, 0x82, 0x42, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x100001, 0x129, 0x0, 0x3, 0xa, 0x8, '\x00', 0x1, 0x80000000}) mmap$KVM_VCPU(&(0x7f0000c45000/0x1000)=nil, 0x0, 0x7, 0x8010, r3, 0x0) (async) r7 = mmap$KVM_VCPU(&(0x7f0000c45000/0x1000)=nil, 0x0, 0x7, 0x8010, r3, 0x0) syz_memcpy_off$KVM_EXIT_MMIO(r7, 0x20, &(0x7f0000000080)="fe36437a89694beffad698f323c6de0a6f12b832c38f7d9e", 0x0, 0x18) write$eventfd(r6, &(0x7f00000001c0)=0x3, 0x8e80) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r8 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r8, 0x4018aee1, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) (async) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r9, 0x4018aee3, 0xffffffffffffffff) (async) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r9, 0x4018aee3, 0xffffffffffffffff) r10 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x33) syz_kvm_vgic_v3_setup(r10, 0x4, 0x200) r11 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000c0c000/0x2000)=nil, r11, 0x0, 0x80031, 0xffffffffffffffff, 0x0) syz_kvm_setup_syzos_vm$arm64(r0, &(0x7f0000c00000/0x400000)=nil) (async) r12 = syz_kvm_setup_syzos_vm$arm64(r0, &(0x7f0000c00000/0x400000)=nil) r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000180)={0x0, &(0x7f0000000580)=[@msr={0x14, 0x20, {0x603000000013df48, 0x10000}}, @eret={0xe6, 0x18, 0x1000}, @smc={0x1e, 0x40, {0x80008000, [0x800, 0x4, 0x3, 0x6, 0x100]}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xfff4, 0x8001, 0x3}}, @svc={0x122, 0x40, {0x6000000, [0x7ff, 0x4, 0x0, 0x100000000, 0x2]}}, @its_send_cmd={0xaa, 0x28, {0xe, 0x0, 0x1, 0x3, 0xffffffff, 0x5, 0x3}}, @hvc={0x32, 0x40, {0xc400000e, [0x9, 0xb4e, 0x8000000000000001, 0x5, 0x2]}}, @code={0xa, 0x9c, {"e02580d20040b8f2210180d2e20080d2230180d2040180d2020000d4607f8fd20060b8f2610080d2c20180d2030080d2840080d2020000d400e8a00e80808ad20080b0f2610080d2a20080d2e30080d2240180d2020000d4807190d20080b0f2610080d2e20080d2430080d2040080d2020000d4000028d50004002f000028d500a0202e000028d5"}}, @smc={0x1e, 0x40, {0x14e00003e, [0x8, 0x7, 0x3, 0x5, 0x2c]}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x0, 0x0, 0x7, 0x5, 0x1, 0x4}}, @uexit={0x0, 0x18, 0x3}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80c0000, 0x400, 0x800, 0x5}}, @its_setup={0x82, 0x28, {0x1, 0x0, 0x3b3}}, @memwrite={0x6e, 0x30, @generic={0xc000, 0x587, 0x24000000000000}}, @uexit={0x0, 0x18, 0x2}, @svc={0x122, 0x40, {0xc4000011, [0x5, 0x4, 0x7fffffffffffffff, 0xffff, 0xffffffff]}}, @its_setup={0x82, 0x28, {0x0, 0x1, 0x7d}}, @eret={0xe6, 0x18, 0xa}, @svc={0x122, 0x40, {0x80008000, [0x1, 0x40a, 0x6, 0x4, 0x7]}}], 0x3cc}, 0x0, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r8, 0xc008ae67, &(0x7f0000000000)={0x8, 0x5}) (async) ioctl$KVM_IRQ_LINE_STATUS(r8, 0xc008ae67, &(0x7f0000000000)={0x8, 0x5}) ioctl$KVM_RUN(r13, 0xae80, 0x0) 1h51m6.901456834s ago: executing program 32 (id=126): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000180)=[@uexit={0x0, 0x18, 0x8}, @irq_setup={0x46, 0x18, {0x3, 0x30c}}, @smc={0x1e, 0x40, {0xc400000e, [0x7, 0x3ff, 0x9, 0x133, 0x7]}}, @eret={0xe6, 0x18, 0x6}, @its_setup={0x82, 0x28, {0x4, 0x0, 0x35e}}, @smc={0x1e, 0x40, {0x84000010, [0x4, 0x9, 0x8, 0x40, 0x8000]}}, @its_send_cmd={0xaa, 0x28, {0x6, 0x1, 0x0, 0x4, 0xffff7fff, 0x0, 0x1}}], 0x118}, 0x0, 0x0) (async) r3 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000180)=[@uexit={0x0, 0x18, 0x8}, @irq_setup={0x46, 0x18, {0x3, 0x30c}}, @smc={0x1e, 0x40, {0xc400000e, [0x7, 0x3ff, 0x9, 0x133, 0x7]}}, @eret={0xe6, 0x18, 0x6}, @its_setup={0x82, 0x28, {0x4, 0x0, 0x35e}}, @smc={0x1e, 0x40, {0x84000010, [0x4, 0x9, 0x8, 0x40, 0x8000]}}, @its_send_cmd={0xaa, 0x28, {0x6, 0x1, 0x0, 0x4, 0xffff7fff, 0x0, 0x1}}], 0x118}, 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x3}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x29) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x19, 0x9b, 0xf, 0x0, 0x5, 0x8, 0x82, 0x42, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x100001, 0x129, 0x0, 0x3, 0xa, 0x8, '\x00', 0x1, 0x80000000}) mmap$KVM_VCPU(&(0x7f0000c45000/0x1000)=nil, 0x0, 0x7, 0x8010, r3, 0x0) (async) r7 = mmap$KVM_VCPU(&(0x7f0000c45000/0x1000)=nil, 0x0, 0x7, 0x8010, r3, 0x0) syz_memcpy_off$KVM_EXIT_MMIO(r7, 0x20, &(0x7f0000000080)="fe36437a89694beffad698f323c6de0a6f12b832c38f7d9e", 0x0, 0x18) write$eventfd(r6, &(0x7f00000001c0)=0x3, 0x8e80) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r8 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r8, 0x4018aee1, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) (async) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r9, 0x4018aee3, 0xffffffffffffffff) (async) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r9, 0x4018aee3, 0xffffffffffffffff) r10 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x33) syz_kvm_vgic_v3_setup(r10, 0x4, 0x200) r11 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000c0c000/0x2000)=nil, r11, 0x0, 0x80031, 0xffffffffffffffff, 0x0) syz_kvm_setup_syzos_vm$arm64(r0, &(0x7f0000c00000/0x400000)=nil) (async) r12 = syz_kvm_setup_syzos_vm$arm64(r0, &(0x7f0000c00000/0x400000)=nil) r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000180)={0x0, &(0x7f0000000580)=[@msr={0x14, 0x20, {0x603000000013df48, 0x10000}}, @eret={0xe6, 0x18, 0x1000}, @smc={0x1e, 0x40, {0x80008000, [0x800, 0x4, 0x3, 0x6, 0x100]}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xfff4, 0x8001, 0x3}}, @svc={0x122, 0x40, {0x6000000, [0x7ff, 0x4, 0x0, 0x100000000, 0x2]}}, @its_send_cmd={0xaa, 0x28, {0xe, 0x0, 0x1, 0x3, 0xffffffff, 0x5, 0x3}}, @hvc={0x32, 0x40, {0xc400000e, [0x9, 0xb4e, 0x8000000000000001, 0x5, 0x2]}}, @code={0xa, 0x9c, {"e02580d20040b8f2210180d2e20080d2230180d2040180d2020000d4607f8fd20060b8f2610080d2c20180d2030080d2840080d2020000d400e8a00e80808ad20080b0f2610080d2a20080d2e30080d2240180d2020000d4807190d20080b0f2610080d2e20080d2430080d2040080d2020000d4000028d50004002f000028d500a0202e000028d5"}}, @smc={0x1e, 0x40, {0x14e00003e, [0x8, 0x7, 0x3, 0x5, 0x2c]}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x0, 0x0, 0x7, 0x5, 0x1, 0x4}}, @uexit={0x0, 0x18, 0x3}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80c0000, 0x400, 0x800, 0x5}}, @its_setup={0x82, 0x28, {0x1, 0x0, 0x3b3}}, @memwrite={0x6e, 0x30, @generic={0xc000, 0x587, 0x24000000000000}}, @uexit={0x0, 0x18, 0x2}, @svc={0x122, 0x40, {0xc4000011, [0x5, 0x4, 0x7fffffffffffffff, 0xffff, 0xffffffff]}}, @its_setup={0x82, 0x28, {0x0, 0x1, 0x7d}}, @eret={0xe6, 0x18, 0xa}, @svc={0x122, 0x40, {0x80008000, [0x1, 0x40a, 0x6, 0x4, 0x7]}}], 0x3cc}, 0x0, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r8, 0xc008ae67, &(0x7f0000000000)={0x8, 0x5}) (async) ioctl$KVM_IRQ_LINE_STATUS(r8, 0xc008ae67, &(0x7f0000000000)={0x8, 0x5}) ioctl$KVM_RUN(r13, 0xae80, 0x0) 1h28m40.429124497s ago: executing program 1 (id=373): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x28) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f0000000280)={0xdf, 0x0, 0x11000}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000540)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x8002, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x2c) ioctl$KVM_SET_USER_MEMORY_REGION2(r4, 0x40a0ae49, &(0x7f0000000040)={0x1fd, 0x4, 0x10000, 0x2000, &(0x7f0000ffe000/0x2000)=nil, 0xfffffffffffff000}) 1h28m38.492712031s ago: executing program 2 (id=374): openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f0000000040)={0xdf, 0x0, 0x20000}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap$KVM_VCPU(0x0, 0x50000, 0x3, 0x11, r2, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000280), 0x103080, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x3}) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r6, 0x800454d2, 0x40) r7 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=[@featur2={0x1, 0x2}], 0x1) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f00000000c0)=@arm64={0x6, 0x81, 0x2, '\x00', 0x20000000006}) ioctl$KVM_GET_MP_STATE(r7, 0x8004ae98, &(0x7f0000000000)) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1000009, 0x16831, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r9, 0x8040aeb6, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x0, 0x0}) ioctl$KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000100)=@attr_other={0x0, 0xa92, 0x3, &(0x7f00000002c0)=0x5}) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) 1h28m31.952840475s ago: executing program 1 (id=375): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000380)={0x10000, 0x3, 0xffff1000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x2, 0x3, 0x4000, 0x2000, &(0x7f000000f000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000001c0)={0x3, 0x0, 0x6000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) r1 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x15) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000000)={0x0, &(0x7f00000003c0)}, &(0x7f0000000280)=[@featur2={0x1, 0x1}], 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_kvm_add_vcpu$arm64(r1, &(0x7f0000000180)={0x0, &(0x7f00000002c0)}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xfa, 0x3}) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x11, r7, 0x0) r8 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) syz_kvm_vgic_v3_setup(r9, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000100)={0x8}) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r9, 0x4068aea3, &(0x7f0000000400)) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x0, 0x1000009, 0x16831, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0x0, &(0x7f0000000480), 0x109000, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r6, 0x4004ae8b, &(0x7f00000004c0)={0x1000, "73d2b7b4e7ea1b03cb889d9c2e91631f4d56f5561e6e9c33b67b3bbeb082bda59528a92fd177b887263a11987171f1ce7fd90a0c03ee4735be7e9c8479b4580aaf596164995e03b4275524fcbe811b3dd62f6dbeadfa0e5f47eb809dc22bac86a67fa61682b6c396211e9fa9308814b853c4a292ccf33700387b11c363d42d7413b3b938ee77d1e2dfec7b2fac059c92171850f56f05c809367755ec4171f7fb91bab7f78b6584df74944b890c37d896b3005c68ed92f8472161f10494b0593a08973d2ac3833ed941dd8be11115bd9bb0b6c426e432c43bee45ce369fa45e7c29d932bb4c71890afcde57aa8ea5a0bc58d39a3c234585fcbc5cb136faac28d8a673baaea9a41a3dc5c34a580c51c1530ee0ecf5e39cc2f8086bcc1ac4f517dbf61deb3897b277ff78dbd5beb337978c57b9b5ffcf5f482101243b8cf880ca464f0e0f64e4e1c2d0e72e6c7a722339217ae17f89db03bfece210cbb098f497eaf1d659087bd8716050cd475a71c756345ecaaf58a402fa21fc619dfa821cba202fc20cfc64b63c63e389c8de1b36ef5c1175bd5c665e287dde3ecbe7c745da7c1a9550dbab850eaf0742940c4ebf4569656911de3c293447d9da7c649c1fd0b2b10d01ae09fd729ffd57180d1f63fb5475057e158624947eb3bcce9aaf0fa8d4b6dfb2d6ec10db4f54f143cf45a803221b7a93cdf4cc4e7f16f29b4404efbba8422bea5dbd51d0cf3f06ab34c356b568de66370a89afb6af6fc956296d1b569a4facfba7773357306fbfca1ea7f924dd2c7c668a9aff1fcb37895aa828d7ca01182b51d825df4b8cc2d1d8271daed6411d57f26bd307636e2ae462d91ad7f9acf331956774f6068b7580acf941fb13e441e62c7777180b27db8c8bf8dc2e6dec5c07f981d05c89205c0df90e6c73eb3afa3ace10eaacebfbe17f0d429273419eb673da57bb6a1350d3033b8a69e283b0ac8853fdd6b9e5569b87df5638fb46ece90c809395ffc056657984adecb1d8237754a0cea140fdab1a0f1b7be14cd80f072e3e6d8d5807746b2eeb7a9f4ca2c0ed07d422dbb51a12c6a9dd84413da495dcd2711f3379acc213617ca77bdd856fa89e93d7f0b698f131300a3fe41d90be001c91fb8dc789f78dfbaa673f2bb7065113d2e0d93c6e45753ef56ac306754eb75f38b3fb230a1ca98f33e94dc89423d5b368751daadb07e97408d3d345867db5d7069c10ed452832753c6f2bdc2b078ce027790336ef0ff7429a70ee58d709022c1ec42aee188302b14b3f3074bac4a51207c9e0197e8b45989af28f36b93a48099eb3f1ac7dd3294efa8065cc95bc7f35fdb55a7a57f6609eb3d37e01cd74860590ced547193624e3e2501d8e2fa4b7986524958f21bcb8037306caa7d108e583500584dea4e034e3ed37b2d0a9e985c48ba5ccb6d5e5b33616b2c079c8bc553ee27fa8ea6521545ab52c4387a70afeeeb1ad4967c0859d90c618c74b90377daa4d9cd562559649493d2aa2e07105c37f31172022463db45b955a77e8006de504e9bff0b48bc237b90e3b13c62891c84b2d2c804aa3200f44d338d80970d74ec01026c6ed7a1a0e94a8cb2a89ad65e4ede18f4cc79db4f2889faa8a81777ab488879eac5a675ecec160426a1336048669b6b8c449b94f0c5d597417fb76d3f0f7ea2ca82ca5415c1ebfb7a06678d7923b7572bb541ba8b88b2815575f7889ee159c71ab6105cc760d98f5cf92e50e5bb37c07e7e16ef5c2b0dbbf7f8b7a8cacb11a35801fb07ecab111df7ab5e1cc42b4933bb270d98660422580aaf36f5f5d5f1c460fe006a9e9eec18095432a7444a93bb9388d4100a933b0ed27897490167f8146ad09be26ff213db3ca9f6f078b1e79efddd20e6fa564c41e777aef783401ecbe702797b16b9fd635a619a8ed74ba26c5750bc6516b153d4f78b75c05633a6a60a62c0db6828bec4e165e781976e19700dc5edfab4a18d38de8ba47ae8175e86f57d6bf2ab09cf0ded54187c98e866860da1ba0dc9dc32c2348e061ee64be1cb2dccf6663de4046a73cac1e4b86596c08d783338eb564f293fc26e32eaf98d78660007d4d1ef4fb53f282670569158fa0a79a70fc0e117e864da69ce83b7a78a6f5ff6471a60def0b333a501f9fb37afa4effaaf61664a4a11633ef29d5e16885e8304402d45bc28b4c40afef955a1476c166d767479cc1408163b8b07ad578110152c365e38b84ce7c572e2b297ca317d6cfc5762a7328075a9ba7558bdc23fecd81b34353939b76ef2064743dbfa6b875460d4ae8825296ae6ed6fe2b573acfb0da2c1aab214181d720c25bf314e8b4c766b2aa4749a4b39aa695f6c4c37d6c6331f529f48843756e5abf0b2db38d09929e13738646f667c7d5af6dcd7846591466ddd895abfe3fea70712a3991eb9cfc7fef76a7b1791eb0ad836c0c977f33f6519d42235e301c1caa8bc81c9028244dfdb56fd5be9f86d469fd1b8df0b43bfb0ef93fbe6f53e89a84aa2251f1333df0af4e71ceff820706a90d401789e02227f4400715d61b44078f0b82644b5323da03d9fc8efc701aeac5c99e0532cbc0d8c6334d74df9191d267711464f6dc5ff26f478615bf4a035af6e4dadd43b22336874d90283c53a2bd3c67ea0a1f17d66ea60714857813466a5f80c2d35906b6997beff639aa03e8dad8e31aa86711735cf1dbd54e5c0f690b4bb1d9da755b96bd868db1cc85fc6e5309ad21143db25b3f72a19a8db9a6baf05dd3f30d1971fd302a507f135c7b9d8070c32427f43ebb64dbb749edd3fa77f64676d464a4f191c80936710194008f7d29c7fa4da3975b91d6fce85bf6ec18d764580d3d04007ffa0c28650cc59d75c85b328ca2f6518f579ceb9602ea939bc8fb730ee16da40f0c57122cb214a6beb325f5949a8392b8a55b83f66b0769186bebbeba1b3cd1b3245850f8f18a4f629d52ca32b394d2735a49c2425ff366df376e4fac8edd9dd25e57e1ed9405cb7e3daa16838e573e0023e07e64f4ccdd69d6ac653dcb72a4ff07b3a9dc6f480360861a4f161ce8d0c71c70e33792fbea844b93895def207912c52056be61d22b8bc03977da557d8c326583fdb724f58d570afa5f39fd383b80dcf3b5f42d293096db55d210b3b4d2e6443d74390165f3290b576eef7c61c3ee9591f5636b2f54d298b8a169e94d58b9f87ab47dbaa6479a36121f8bbdcb10fb8d86fff1709e6c5a73966f86c0cb0e931e0d7faeac032d644b78c90004e84f66f53474814201297d0c3925ac9fcc09a08ffbcdbade2b33576c3791012b19b6880a439da6549c2485c3f7b3da4b43601fb0d9c726b6901123cc9a6d582367d0cd81548880b1b2db0163e191a19ec11a8e82acc8afed160cd2274beb2d0d6f7965f563e8933a1011e4f9e12fc9891f967e03e0af38d8df63ee2550b85448e7a8a98d50be5817248cbcecbda7ee54cc806c820da66c7eabd68582a513541e07a1c3bab31325f377974a9372e56958140eaa27e4073b6d41709bf65c17a56aba6a6b623434ade3054dce02ef7117578dd420e0716743bf7a985f1e49917bdf45e3153f852b8002b7149aa4e43334c97026506e2f218dab17585db7468a7da032c93ebd6e8d920b27a0aed40e9cf0f443a4b341ac7e62553c7920c4820e8a51905ed2aac56dcf4edebbb0813431dfa5c375485e062cf89c41b5fbea1b04f0df4cc35b2bd93fd4ec5406d97ffe27104e74f627696deb8b6b444ea4fcd7f0720e42d126e594d97ac494d5c0f71ddf85b19f271fc07959549aa3297dcfb89c4a065ad2bbd753d8a0c228420040f0826ce91a5b03f250921d4b7e03c32b3c6935cbf29edfc363fb3a714929132f9828a2ab5c08c4a3381707f2d0e16df6f9b0b0dcfc14165dd1c0778471a2f7b54572348e3b8187db456bc7a8cd8999618b4c6138d0a09a40372fc815eb0659999523e7f96c7849983d3c5075900f1f95041d316c04f1034423234eb6dcae33b28a573e3172190d7c31a78ff8fe51ac0543fe1952b7313a45360fe991a90f12d966ecf8d8aa4a564c5e4328759679f1c3a1bfefabb5be02cf5df89d96099b28925aa2c4bbeddfe169ab88ebd719b8515148fe2cf99ddaeb5cdeef2d8d94c25bdd2283903f18e36022b34fb7a6f7ec41f7881e0a9e682731635d1faef0bf29ec748392e78d677983949f7a8f30d34b0e9aae48a6d3bae8dd587bd143d0277f67a5bcdd08f7e580218c8c12e8507e1b515f1ac6351125c1fd288ccb521804b5db4f26c339cf737b17f60c099957e75fc8476e99ba1c36e50fd7999d83eb348a76560879a02eb83d22a7e6a3ae74eb7088ffacea41ee9a2f32fcac6330c70ddaa3917a6d75457bae18e84c5e91902777a490ca2fc1f89bde7b41b1df8a9446cc539b775b55a626d811abac7acf642a092d5b6be1cc3dbbc089dc78df46e08a301ed5f7d5885fd1062c31f1eaa4b4ef66536e1cd742f7842c9c50f63e931378c78d60ee39f36f9d511c98da40446a07b486deecadd5219deb8d2690829e9561a86d752968c3cd13b186388f56bcefa5ba14087974713351c2a55cd47366e336adcb0dc1bf961bcae1524a43073c881ecb7c3e962eec4bc90c66b66507d77d253e136e3ea078d53945827781e066f641818593eb70c994a22e526acfacccc199e7a0b8cada83d5773ad86069b7e902eef8b5b2c03e4592cd980185a22115f79effa021274f969ef65ed36a14b35501a97bd19c422b4a7259910ce9a9c3e202321f2de902febefd7a23b9c1ad7888581edf2edfe7d8932647c01848db748fba6a84a2c37f52db38b60459c619c854d6efa9c522f228428d50d54a505540a180632319ddc55b08b41092a8cef78636926424ccd15e078baba1d79652a7c4d1ee79198eeccbe4857f6bf437eb69b8f7340f536c0f351813798c1681e4312cedc68bcd4c6eaa3e305f12322c51e4bf4b7f9c88ff140ceeb833f6b63e303a7195d04a7aa99fc2266d052e2a2f19051cadce6967369c8d493ee0fc6ba8e0972fd025202df50825d3fd300e25c3f1e45fdda00da8824f0071ae3dbe54925331ad871081569d7190c9362b13ee248e988b719313ef5fbbe75d61bc60f4875f3666cc5ab684caf75f7bfbbdee708818f3431aca62fa669b83bd1af4e28afa535f3163bde39436365988064c636968ffec89e87b2bf2834fadc1407567e801052a499062b0923b4090686ebe3c69be96afe6d0c9f707b3e30d8754a4938bd459ae821a7d5fb8bf432cb3aeb283b28342cc7728fcf8a775f9ce97224140f5d0b0cab09882652d2864e5be78e57fb94772ced5e1dd2cde3c6945ec35b58baf83238f78d2c34629e8ed4eff5d5585124e19707fdb9c85d158954c98470bf0bc50bf9ca4b20e77d7dd5f045117529283a43837541f75e034356f7d97064ef3b38297654b43144ed9b5440e978c791f109fd65b6d35a6dbfe9434a07c14ff3779a489956f0897d2265e9e5b5f329b01e26b083f9c5c0ddb3c17b667280f9deb40db57c5bf04b3b103b331760793922fbaea640a483352b69846f6749e1bd3e465ef0a200181867bcb13ab9f445f37d43a5315b97f4a39dd812f7d6bdadac84f4852675992e903e824f1b6e2cb84cec74d4d81d237db385c8d97a71cbfdaf5739cfb5eb75c3192819b6af44ba9cfd94699bce9781f86882b2b501b8d274bc9baca099db27056440045bc02c54da14547347e7aa9c60a37e713fa46f5d9aafe2d1b64f6dd426e55b613be237ad217b3ff28a7ba7894d8c162e4e6127817ca"}) r10 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x2b) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) r12 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r11, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r12, 0x20, &(0x7f00000001c0)="fb0400000000000000c4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f17312b54ebb2aa7fc869d22627e700", 0x0, 0x48) 1h28m28.686839436s ago: executing program 2 (id=376): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_ARM_VCPU_INIT(0xffffffffffffffff, 0x4020aeae, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r4, 0x4018aee1, &(0x7f0000000000)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0x20e4586c}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x900c0, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, 0x0) 1h28m22.106154885s ago: executing program 1 (id=377): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000280), 0x103080, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r4 = syz_kvm_vgic_v3_setup(r3, 0x1, 0x40) ioctl$KVM_GET_DEVICE_ATTR(r4, 0x4018aee2, &(0x7f0000000100)=@attr_riscv64=@attr_imsic={0x0, 0x1, 0xc08, &(0x7f0000000180)=0xf8b7}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_ARM_VCPU_INIT(r5, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) ioctl$KVM_SET_ONE_REG(r5, 0x4010aeac, &(0x7f00000000c0)=@arm64_sys={0x603000000013dce0, &(0x7f0000000000)=0x43ff}) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r5, 0x4018aee1, &(0x7f00000000c0)=@attr_pmu_init) ioctl$KVM_RUN(r5, 0xae80, 0x0) close(0x4) close(0x5) r6 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$KVM_SET_USER_MEMORY_REGION2(r7, 0x40a0ae49, 0x0) r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000a67000/0x400000)=nil) r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000140)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r9, 0x4010aeac, &(0x7f0000000080)=@arm64_sys={0x603000000013c807}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000900)={0x0, &(0x7f0000000300)=[@memwrite={0x6e, 0x30, @vgic_gicr={0x80a0000, 0x280, 0x656, 0x9}}, @smc={0x1e, 0x40, {0x84000010, [0x1, 0x40b4, 0xd29, 0x2000000000, 0xc43]}}, @svc={0x122, 0x40, {0x4, [0x0, 0xcca, 0x7f, 0x7, 0x4]}}, @its_send_cmd={0xaa, 0x28, {0xe, 0x1, 0x3, 0x8, 0x7, 0x3}}, @mrs={0xbe, 0x18, {0x603000000013df56}}, @svc={0x122, 0x40, {0x8400000c, [0x7, 0x5, 0xb09, 0x1, 0x1000]}}, @code={0xa, 0x9c, {"20a990d200e0b0f2810080d2c20180d2830080d2c40180d2020000d4606591d200a0b0f2410080d2620080d2c30080d2240080d2020000d4007008d500e8a05e000385d20080b8f2610180d2a20180d2e30080d2240180d2020000d4809c94d20060b8f2410180d2620080d2a30080d2440080d2020000d40000002e0020204e0000c06c0070204e"}}, @its_setup={0x82, 0x28, {0x4, 0x3, 0x13f}}, @svc={0x122, 0x40, {0x80000001, [0x6, 0x3, 0x6, 0x7, 0x4]}}, @code={0xa, 0xb4, {"009293d200c0b8f2810180d2220080d2e30080d2840180d2020000d4a0ce98d20040b0f2e10080d2620080d2e30080d2240180d2020000d4407b97d200e0b0f2810080d2020180d2230180d2e40080d2020000d4e05d9dd200c0b8f2810080d2220080d2030080d2a40180d2020000d400a4ff0d001a8ed20040b8f2610080d2620080d2830080d2840080d2020000d4007008d5007008d50024c09a007008d5"}}, @its_send_cmd={0xaa, 0x28, {0x5, 0x1, 0x2, 0x3, 0x13, 0x7, 0x4}}, @its_setup={0x82, 0x28, {0x1, 0x4, 0x106}}, @code={0xa, 0x9c, {"007008d5007008d5200b95d200c0b0f2610180d2020080d2830180d2e40180d2020000d4600984d20060b8f2810080d2420080d2030080d2640080d2020000d4007008d5001e86d20080b0f2410080d2c20080d2830080d2840080d2020000d400c8a12e000000b20000df0da0339fd20060b8f2210180d2420180d2230080d2040080d2020000d4"}}, @code={0xa, 0x6c, {"000028d5005cc09a001d90d20040b0f2a10180d2820180d2e30180d2040080d2020000d40050202e005487d200e0b0f2610080d2420180d2a30180d2a40180d2020000d40000431e000008d50054200e007008d5007008d5"}}, @uexit={0x0, 0x18, 0x3127}, @its_setup={0x82, 0x28, {0x3, 0x4, 0x152}}, @its_setup={0x82, 0x28, {0x3, 0x0, 0xbd}}, @hvc={0x32, 0x40, {0x84000003, [0x3, 0x9, 0x4d, 0x9, 0x9]}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x4, 0x6}}, @memwrite={0x6e, 0x30, @generic={0xfec00000, 0x73d, 0x1, 0x8}}, @its_send_cmd={0xaa, 0x28, {0xb, 0x0, 0x3, 0xc, 0x4, 0x4, 0x4}}, @msr={0x14, 0x20, {0x603000000013c010, 0x7}}, @its_setup={0x82, 0x28, {0x2, 0x1, 0x1e2}}, @uexit={0x0, 0x18, 0x7}, @mrs={0xbe, 0x18, {0x603000000013e65a}}], 0x5e8}, &(0x7f0000000940)=[@featur2={0x1, 0x60}], 0x1) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x5000, 0x58000, 0x8, 0x45, 0x8, 0xc, 0x3, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x54000, 0x0, 0xff, 0x42, 0x5, 0x75, 0x6, 0xa, 0x4, 0x2, 0xff}, {0x0, 0x70000, 0x9, 0x5, 0x70, 0x7, 0x0, 0x9, 0x5, 0xa6, 0x5, 0x5}, {0x80a0000, 0x5000, 0x10, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xf000, 0x5000, 0xf, 0x3, 0x6, 0x7, 0xaf, 0x8, 0x9, 0x9, 0xf7, 0x97}, {0xeeefa000, 0xdddd0000, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x100000, 0xffe, 0xf, 0xd3, 0x4, 0x6, 0x7, 0x3, 0x2, 0x81, 0x40, 0x70}, {0x8000000, 0x4000, 0x4, 0x5, 0x9, 0x5, 0x9, 0x6, 0x2, 0xa, 0xb0, 0x81}, {0xeeee0000, 0x2e}, {0x8000000, 0x7}, 0x80000039, 0x0, 0x3000, 0x2024, 0x8, 0x0, 0xffff1000, [0xd, 0x4, 0x6, 0x8]}) write$eventfd(r12, &(0x7f00000001c0)=0x9, 0x5d) 1h28m17.345288813s ago: executing program 2 (id=378): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f0000000380)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x7ffc}}, @msr={0x14, 0x20, {0x603000000013dce0, 0x7ffe}}], 0x40}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x2a) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000b80)={0x0, 0x0}, &(0x7f0000000340)=[@featur2={0x1, 0x4}], 0x1) r8 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000b80)={0x0, 0x0}, &(0x7f0000000040)=[@featur1={0x1, 0x4}], 0x1) r9 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r12, 0x4010aeab, &(0x7f0000000180)=@arm64_sys={0x603000000013e08c, 0x0}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1h28m5.342067664s ago: executing program 1 (id=379): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x4) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@eret={0xe6, 0x18, 0xffffffffffff662b}, @mrs={0xbe, 0x18, {0x603000000013c00a}}], 0x30}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0xfffffffffffffffd, 0x20) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4, 0xffffffffffffffff, 0x1}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r4, 0x5452, 0x2000fdfd) 1h28m4.240905986s ago: executing program 2 (id=380): openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f0000000040)={0xdf, 0x0, 0x20000}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap$KVM_VCPU(0x0, 0x50000, 0x3, 0x11, r2, 0x0) openat$kvm(0x0, &(0x7f0000000280), 0x103080, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x3}) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r5, 0x800454d2, 0x40) r6 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=[@featur2={0x1, 0x2}], 0x1) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f00000000c0)=@arm64={0x6, 0x81, 0x2, '\x00', 0x20000000006}) ioctl$KVM_GET_MP_STATE(r6, 0x8004ae98, &(0x7f0000000000)) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1000009, 0x16831, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r8, 0x8040aeb6, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x0, 0x0}) ioctl$KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000100)=@attr_other={0x0, 0xa92, 0x3, &(0x7f00000002c0)=0x5}) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) 1h28m0.252686308s ago: executing program 1 (id=381): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x2}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x1, 0x80000, 0xfffd, 0x0, 0x0, 0x2}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$arm64(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000bfe000/0x400000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f0000000240)=[@hvc={0x32, 0x40, {0x8600ff01, [0x7, 0x9, 0x8, 0xfffffffffffffff8, 0x100]}}], 0x40}], 0x1, 0x0, 0x0, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000bfe000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x2}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x1, 0x80000, 0x10000, 0x20, 0x0, 0x2}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r5, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_ARM_PREFERRED_TARGET(r3, 0x8020aeaf, &(0x7f0000000000)) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1h27m54.83308791s ago: executing program 2 (id=382): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x5, 0x1, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000bc2000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000500)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r9, 0x4068aea3, &(0x7f00000001c0)={0xdf, 0x0, 0xd000}) mmap$KVM_VCPU(0x0, 0x50000, 0x3, 0x13012, r7, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x2) r14 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0) r16 = ioctl$KVM_CREATE_VCPU(r15, 0xae41, 0x0) r17 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r18 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r17, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r18, 0x280000b, 0x11, r16, 0x0) r19 = mmap$KVM_VCPU(&(0x7f0000000000/0x3000)=nil, r18, 0x2800003, 0x11, r13, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r19, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48) 1h27m48.640360398s ago: executing program 1 (id=383): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000c0c000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x400, 0x0) ioctl$KVM_CREATE_VM(r3, 0x80086601, 0x20000000) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, &(0x7f0000000100)={0x3765}) r4 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f0000000040)=[@hvc={0x32, 0x40, {0x8400000f, [0x101, 0x2, 0x7, 0x6, 0x6]}}], 0x40}, &(0x7f0000000080)=[@featur2={0x1, 0xa}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000340)=@attr_other={0x0, 0x401, 0x0, &(0x7f0000000000)=0x2}) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000bff000/0x400000)=nil) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x80240, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x34) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) mmap$KVM_VCPU(0x0, 0x50000, 0x3, 0x11, r9, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0) r10 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil) r13 = syz_kvm_add_vcpu$arm64(r12, 0x0, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r13, 0x4018aee1, &(0x7f00000001c0)=@attr_pmu_filter={0x0, 0x0, 0x2, 0x0}) r14 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r15 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r14, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r15, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f029a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x0, 0x1000001, 0x11, r14, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) r16 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20080, 0x0) ioctl$KVM_CREATE_VM(r16, 0xc0189436, 0x20003fff) ioctl$KVM_SET_REGS(r4, 0x4360ae82, &(0x7f00000001c0)={[0x77bbd5e2, 0xab7, 0x9, 0x3, 0xffffffffffffff25, 0xc, 0x5, 0xfff, 0x5, 0x4, 0x6, 0xef87, 0xb026ff3, 0xd4c1, 0x9, 0x100000001], 0x3000, 0x208000}) 1h27m42.902940315s ago: executing program 2 (id=384): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x2000003, 0x2013, r3, 0x0) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) munmap(&(0x7f0000000000/0x4000)=nil, 0x4000) r5 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000440)={0x0, &(0x7f0000000200)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x80}}, @irq_setup={0x46, 0x18, {0x3, 0x1fa}}, @memwrite={0x6e, 0x30, @generic={0xb000, 0x46d, 0x0, 0x1}}, @its_setup={0x82, 0x28, {0x1, 0x2, 0x220}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80a0000, 0x8, 0x8, 0x2}}, @code={0xa, 0x6c, {"c00780d20080b0f2610080d2220180d2630080d2840080d2020000d4000008d5008008d5c02181d20060b0f2410180d2220080d2230080d2240180d2020000d40000231e000028d5008008d5000000130000199e000028d5"}}, @irq_setup={0x46, 0x18, {0x3, 0x111}}, @smc={0x1e, 0x40, {0xc4000010, [0x4, 0x9, 0x7, 0x80e, 0x8]}}, @hvc={0x32, 0x40, {0x8000, [0x100000001, 0xfffffffffffffff8, 0xfd9, 0x9, 0x2]}}, @irq_setup={0x46, 0x18}, @mrs={0xbe, 0x18, {0x603000000013e6c8}}, @its_setup={0x82, 0x28, {0x3, 0x3, 0x1b1}}], 0x21c}, &(0x7f0000000480)=[@featur1={0x1, 0x10}], 0x1) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r5, 0x4018aee3, &(0x7f0000000500)=@attr_other={0x0, 0x4, 0xffff, &(0x7f00000004c0)=0x2}) mmap$KVM_VCPU(&(0x7f0000007000/0x2000)=nil, r4, 0x3000003, 0x2011, r3, 0x0) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) 1h27m2.382251226s ago: executing program 33 (id=383): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000c0c000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x400, 0x0) ioctl$KVM_CREATE_VM(r3, 0x80086601, 0x20000000) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, &(0x7f0000000100)={0x3765}) r4 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f0000000040)=[@hvc={0x32, 0x40, {0x8400000f, [0x101, 0x2, 0x7, 0x6, 0x6]}}], 0x40}, &(0x7f0000000080)=[@featur2={0x1, 0xa}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000340)=@attr_other={0x0, 0x401, 0x0, &(0x7f0000000000)=0x2}) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000bff000/0x400000)=nil) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x80240, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x34) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) mmap$KVM_VCPU(0x0, 0x50000, 0x3, 0x11, r9, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0) r10 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil) r13 = syz_kvm_add_vcpu$arm64(r12, 0x0, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r13, 0x4018aee1, &(0x7f00000001c0)=@attr_pmu_filter={0x0, 0x0, 0x2, 0x0}) r14 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r15 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r14, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r15, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f029a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x0, 0x1000001, 0x11, r14, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) r16 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20080, 0x0) ioctl$KVM_CREATE_VM(r16, 0xc0189436, 0x20003fff) ioctl$KVM_SET_REGS(r4, 0x4360ae82, &(0x7f00000001c0)={[0x77bbd5e2, 0xab7, 0x9, 0x3, 0xffffffffffffff25, 0xc, 0x5, 0xfff, 0x5, 0x4, 0x6, 0xef87, 0xb026ff3, 0xd4c1, 0x9, 0x100000001], 0x3000, 0x208000}) 1h26m55.692961252s ago: executing program 34 (id=384): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x2000003, 0x2013, r3, 0x0) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) munmap(&(0x7f0000000000/0x4000)=nil, 0x4000) r5 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000440)={0x0, &(0x7f0000000200)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x80}}, @irq_setup={0x46, 0x18, {0x3, 0x1fa}}, @memwrite={0x6e, 0x30, @generic={0xb000, 0x46d, 0x0, 0x1}}, @its_setup={0x82, 0x28, {0x1, 0x2, 0x220}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80a0000, 0x8, 0x8, 0x2}}, @code={0xa, 0x6c, {"c00780d20080b0f2610080d2220180d2630080d2840080d2020000d4000008d5008008d5c02181d20060b0f2410180d2220080d2230080d2240180d2020000d40000231e000028d5008008d5000000130000199e000028d5"}}, @irq_setup={0x46, 0x18, {0x3, 0x111}}, @smc={0x1e, 0x40, {0xc4000010, [0x4, 0x9, 0x7, 0x80e, 0x8]}}, @hvc={0x32, 0x40, {0x8000, [0x100000001, 0xfffffffffffffff8, 0xfd9, 0x9, 0x2]}}, @irq_setup={0x46, 0x18}, @mrs={0xbe, 0x18, {0x603000000013e6c8}}, @its_setup={0x82, 0x28, {0x3, 0x3, 0x1b1}}], 0x21c}, &(0x7f0000000480)=[@featur1={0x1, 0x10}], 0x1) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r5, 0x4018aee3, &(0x7f0000000500)=@attr_other={0x0, 0x4, 0xffff, &(0x7f00000004c0)=0x2}) mmap$KVM_VCPU(&(0x7f0000007000/0x2000)=nil, r4, 0x3000003, 0x2011, r3, 0x0) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) 33m50.75033759s ago: executing program 3 (id=835): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000c01000/0x4000)=nil, r1, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, r1, 0x3000004, 0x10010, r2, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x1}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x8, 0xf, 0x0, 0x5, 0x6, 0x6, 0x6, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x9, 0x0, 0x0, 0x3, 0x5, 0x8, '\x00', 0x1, 0x400000000002}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) r7 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) r10 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r9, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r10, 0x20, &(0x7f0000000300)="fb4149dd033b8986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67525673312b01040000000000002627e7000000000000000200", 0x0, 0xfffffffffffffe73) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x12, r9, 0x0) r11 = eventfd2(0xd, 0x80800) close(r11) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x0) write$eventfd(r11, &(0x7f0000000100)=0xfffffffffffffffe, 0x8) r12 = eventfd2(0x0, 0x0) close(r12) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mmap$KVM_VCPU(&(0x7f0000008000/0x3000)=nil, 0x930, 0x2000004, 0x2011, r2, 0x0) write$eventfd(r11, &(0x7f0000000180)=0xa19, 0x8) ioctl$KVM_CLEAR_DIRTY_LOG(r6, 0xc018aec0, &(0x7f0000000140)={0x0, 0x200, 0x180, &(0x7f0000000180)=[0x0, 0xec66, 0xff, 0x48, 0x98c1, 0x800000000000008, 0x0, 0x4, 0x10000, 0x466c, 0x9004, 0x9, 0x8, 0x9, 0x5, 0x49, 0x4, 0x5, 0x2, 0x1, 0x8, 0x0, 0xc1, 0x1, 0x2, 0xffffffffffffffff, 0x4, 0x7f, 0x96, 0xffffffff, 0x9, 0x1, 0x5, 0x7, 0x4, 0x3, 0x9, 0x10000008892, 0x72b7, 0x8000000006, 0x43, 0x0, 0x2000003, 0xa3de, 0x2cc0000000000000, 0x8, 0x1, 0x400, 0x6, 0xffffffffffffffb7, 0x5, 0x2, 0x1, 0x6, 0x4, 0xe6, 0x200000000000101, 0x7ff, 0x9, 0x2, 0x6, 0x6, 0x40000005, 0xfffffffeffffffff, 0x9, 0xd, 0x10001, 0xbbd9, 0xe, 0xfffffffffffffc00, 0x2, 0x7, 0x5e7, 0xcdc, 0xcd, 0x2, 0x3, 0x2, 0x2, 0xfff, 0x6, 0x2004, 0x7, 0xab6, 0x100, 0x4, 0x0, 0xffffffffffffff81, 0x9, 0x102, 0x6, 0xfffffffffffffffe, 0x80000008, 0x8061d, 0x0, 0x7, 0xf6, 0x4, 0x6, 0x204, 0x7, 0xe53e, 0x4, 0x8, 0x2293332f, 0x6, 0x5, 0x1e, 0xd, 0x2, 0x7f, 0xfffffffffffffffb, 0x80000001, 0x7, 0x200000000dfd4, 0xfff9, 0x10, 0xe61b, 0x133, 0x2, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffd25, 0xb68e, 0x0, 0x8, 0x1000003]}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000140)={0x4, 0x0, [{0x1, 0x4, 0x1, 0x0, @msi={0x5, 0x4ec6}}, {0x9, 0x3, 0x1, 0x0, @adapter={0xd4ff}}, {0x40000, 0x0, 0x0, 0x0, @msi}, {0x0, 0x0, 0x0, 0x0, @msi}]}) 33m30.256995763s ago: executing program 3 (id=838): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r4, &(0x7f00000001c0)=0x3, 0x10) r5 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@msr={0x14, 0x20, {0x603000000013e130, 0x98}}], 0x20}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) r10 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r9, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r10, 0x20, &(0x7f0000000300)="fb4149dd033b8986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67525673312b01040000000000002627e7000000000000000200", 0x0, 0xfffffffffffffe73) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x12, r9, 0x0) r11 = eventfd2(0x70, 0x0) close(r11) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x0) write$eventfd(r11, &(0x7f0000000100)=0xfffffffffffffffe, 0x8) r12 = eventfd2(0x0, 0x0) close(r12) r13 = eventfd2(0x0, 0x0) close(r13) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xc0c82, 0x0) mmap$KVM_VCPU(&(0x7f0000008000/0x3000)=nil, 0x930, 0x2000004, 0x2011, r13, 0x0) mmap$KVM_VCPU(&(0x7f0000008000/0x3000)=nil, 0x930, 0x2000004, 0x2011, r12, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x2000001, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x0) 33m24.599054429s ago: executing program 4 (id=839): r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async) r1 = openat$kvm(0x0, &(0x7f0000000040), 0xc8000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x8800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000a5a000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000b80)={0x0, &(0x7f0000000040)=[@smc={0x1e, 0x40, {0x84000012, [0x79c4, 0x100080001, 0x5, 0x101, 0x13]}}], 0x40}, &(0x7f00000000c0)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000140)=@arm64={0x1, 0x3, 0x23, '\x00', 0x1}) r6 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) (async) syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x4eed40, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x0, 0x8032, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0xf, 0x32, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x0, 0x3000001, 0x11, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000d2e000/0x3000)=nil, 0x0, 0x2, 0x8010, r5, 0x0) r8 = syz_kvm_add_vcpu$arm64(r0, &(0x7f0000000b80)={0x0, &(0x7f00000002c0)=[@hvc={0x32, 0x40, {0x8400000a, [0xfffffffffffff801, 0x0, 0x21, 0x10, 0x5]}}, @smc={0x1e, 0x40, {0x20, [0x2, 0x3, 0x8, 0x8, 0xfb]}}, @irq_setup={0x46, 0x18, {0x3, 0x2ec}}, @code={0xa, 0x84, {"000008d5000080ad000008d560e79ed20000b0f2010180d2220080d2c30080d2c40180d2020000d400000048a03f83d20020b0f2810180d2220180d2630180d2240080d2020000d40000611e007008d5005a84d200e0b0f2a10180d2220180d2c30180d2840180d2020000d4007008d5"}}], 0x11c}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1) (async) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000000)={0x76dc8650, 0x4}) (async) r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0x40086602, 0x20000000) r10 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000bfe000/0x400000)=nil) r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r13, 0x4010aeac, &(0x7f0000000040)=@arm64_core={0x6030000000100008, &(0x7f0000000000)=0x9}) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) 33m16.043313678s ago: executing program 3 (id=840): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, 0x0) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f00000000c0)={0x0, &(0x7f0000000380)=[@its_setup={0x82, 0x28, {0x3, 0x1, 0x39d}}], 0x28}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r2, 0xffffffffffbffffc, 0x120) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x4f832, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x4, 0x4, 0x0}) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f00000000c0)={0x0, &(0x7f00000008c0)=[@hvc={0x32, 0x40, {0xc4000053, [0x9f, 0x7a000, 0x1000, 0x3, 0x6]}}, @eret={0xe6, 0x18, 0x2d}, @smc={0x1e, 0x40, {0xc4000005, [0x8000000000000000, 0xc, 0x40, 0x8, 0x3]}}, @msr={0x14, 0x20, {0x6030000000138054, 0x4}}, @msr={0x14, 0x20, {0x603000000013e663, 0x8001}}, @eret={0xe6, 0x18, 0x80000001}, @code={0xa, 0x9c, {"000028d5e0a89bd200c0b0f2010080d2220180d2c30180d2840180d2020000d4000028d560468fd200c0b8f2410080d2620180d2430180d2640180d2020000d4007008d5a0b983d20000b8f2610180d2220180d2030180d2440080d2020000d4008008d50000591e000008d5201e9dd20040b0f2a10180d2c20180d2430080d2a40080d2020000d4"}}], 0x18c}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r6, 0x1, 0x100) ioctl$KVM_RUN(r8, 0xae80, 0x0) 33m14.803790864s ago: executing program 4 (id=841): mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x4, 0x12, 0xffffffffffffffff, 0x1000000) 33m8.000635467s ago: executing program 4 (id=842): r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = syz_kvm_vgic_v3_setup(r4, 0x3, 0x40) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x6, 0x382bc663, &(0x7f0000000200)=0xffffffff}) r6 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fb707cd24b7eebb20700000000000000000000000100", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000040), 0xa00f2, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0x40305839, 0x19) 33m3.051706171s ago: executing program 3 (id=843): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x26) r2 = openat$kvm(0x0, 0x0, 0x0, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ARM_VCPU_INIT(r4, 0x4020aeae, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r7, 0x4018aee1, &(0x7f0000000000)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0x20e4586c}) r8 = openat$kvm(0x0, 0x0, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil) syz_kvm_vgic_v3_setup(r9, 0x1, 0x20) syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) close(0x4) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) r11 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2) r13 = mmap$KVM_VCPU(&(0x7f0000e6f000/0x2000)=nil, 0x930, 0x2800002, 0x10, r4, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r13, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r12, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x4000, 0x0) r14 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r14, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=[@featur2={0x1, 0x2}], 0x1) 32m56.422459593s ago: executing program 4 (id=844): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) (async) munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) munmap(&(0x7f0000e51000/0x4000)=nil, 0x4000) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) munmap(&(0x7f000000f000/0x2000)=nil, 0x2000) (async) munmap(&(0x7f000000f000/0x2000)=nil, 0x2000) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b6565d2f1, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b6565d2f1, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000000, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) 32m50.52730209s ago: executing program 3 (id=845): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = mmap$KVM_VCPU(&(0x7f0000dd4000/0x3000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r3, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r3, 0x0) r5 = eventfd2(0x7, 0x0) close(r5) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) write$eventfd(r5, &(0x7f0000000180)=0x5, 0xfffffde3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0) 32m47.341343186s ago: executing program 4 (id=846): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000100)={0x7, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x2, &(0x7f0000000200)=0x400a000000}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000240)=@attr_arm64={0x0, 0x0, 0x5, &(0x7f0000000280)=0x40400000080a0000}) r6 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x20000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r10 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r9, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r10, 0x20, &(0x7f00000001c0)="fb0149dd833be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8faa767969d22627e700", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000f51000/0x1000)=nil, 0x0, 0x1000001, 0x11, r6, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a97f2, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) r15 = ioctl$KVM_GET_STATS_FD_vm(r14, 0xaece) close(r15) r16 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r16, 0xc0189436, 0x100000000000000) ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r15, 0x4068aea3, &(0x7f00000002c0)={0xef, 0x0, 0x4}) r17 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_ARM_VCPU_INIT(r17, 0x4020aeae, &(0x7f0000000080)={0x5}) 32m32.659823002s ago: executing program 4 (id=847): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$arm64(r1, 0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000140)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1fe, 0x1, 0x8000000, 0x2000, &(0x7f0000ee3000/0x2000)=nil}) r2 = openat$kvm(0x0, &(0x7f0000000140), 0x40002, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000180)={0x0, &(0x7f0000000080)=[@hvc={0x32, 0x40, {0x8600ff01, [0x7fffffff, 0x101, 0xfb4, 0x1]}}], 0x40}, 0x0, 0x2a) r6 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000000)={0x1, 0x6000, 0x9fff, 0xffffffffffffffff, 0x8}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f0000000100)={0xb000, 0x1, 0x8000, 0x0, 0xcca}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) (async) ioctl$KVM_CREATE_VM(r10, 0x800454df, 0x110e22fffb) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1, 0x16831, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 32m31.15165398s ago: executing program 3 (id=848): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34) r2 = syz_kvm_add_vcpu$arm64(0x0, 0x0, 0x0, 0x0) syz_kvm_add_vcpu$arm64(0x0, 0x0, 0x0, 0x0) r3 = syz_kvm_vgic_v3_setup(r1, 0x2, 0x100) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000180)={0x1010020, 0x1}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000380)={r3, 0x7f, 0x2}) 31m46.248304499s ago: executing program 35 (id=847): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$arm64(r1, 0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000140)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1fe, 0x1, 0x8000000, 0x2000, &(0x7f0000ee3000/0x2000)=nil}) r2 = openat$kvm(0x0, &(0x7f0000000140), 0x40002, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000180)={0x0, &(0x7f0000000080)=[@hvc={0x32, 0x40, {0x8600ff01, [0x7fffffff, 0x101, 0xfb4, 0x1]}}], 0x40}, 0x0, 0x2a) r6 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000000)={0x1, 0x6000, 0x9fff, 0xffffffffffffffff, 0x8}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f0000000100)={0xb000, 0x1, 0x8000, 0x0, 0xcca}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) (async) ioctl$KVM_CREATE_VM(r10, 0x800454df, 0x110e22fffb) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1, 0x16831, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 31m42.641289046s ago: executing program 36 (id=848): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34) r2 = syz_kvm_add_vcpu$arm64(0x0, 0x0, 0x0, 0x0) syz_kvm_add_vcpu$arm64(0x0, 0x0, 0x0, 0x0) r3 = syz_kvm_vgic_v3_setup(r1, 0x2, 0x100) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000180)={0x1010020, 0x1}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000380)={r3, 0x7f, 0x2}) 10m53.990365857s ago: executing program 6 (id=947): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x28081, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000180)=@attr_other={0x0, 0xffffffff, 0x80080, 0x0}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000769000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=[@featur2={0x1, 0x5}], 0x1) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000380)={0x0, &(0x7f0000000100)=[@smc={0x1e, 0x40, {0x84000004, [0x3, 0x3, 0x2, 0x3f8b, 0xf7b0]}}], 0x40}, &(0x7f00000000c0)=[@featur2={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r6, 0xae80, 0x0) 10m48.854150363s ago: executing program 5 (id=948): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r2 = syz_kvm_vgic_v3_setup(r1, 0xfffffffffffffffd, 0x100) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x4, 0x6, 0x0}) 10m39.801490066s ago: executing program 6 (id=949): munmap$KVM_VCPU(0x0, 0x10) (async) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x9000000) (async) r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3c) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000300)="fb4149dd033b8986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67525673312b01040000000000002627e7000000000000000200", 0x0, 0xfffffffffffffe73) (async) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x12, r2, 0x0) (async) r4 = eventfd2(0x70, 0x0) close(r4) (async) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) (async) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@arm64={0x2, 0x2, 0xa, '\x00', 0xd}) r5 = openat$kvm(0x0, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000000)={0x7}) (async) r7 = eventfd2(0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) (async) ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) (async) write$eventfd(r7, &(0x7f00000000c0)=0x3, 0x8) (async) write$eventfd(r4, &(0x7f0000000100)=0xfffffffffffffffe, 0x8) (async) r10 = eventfd2(0x0, 0x0) close(r10) eventfd2(0x0, 0x0) (async) close(r8) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xc0c82, 0x0) 10m35.703443006s ago: executing program 5 (id=950): r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x5, 0x1, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000500)={0x5, 0x1, 0x1000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x11, r0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000}) ioctl$KVM_SET_USER_MEMORY_REGION2(r4, 0x40a0ae49, &(0x7f0000000080)={0x0, 0x4, 0x100000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil, 0x1000010000000, r5}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r7, 0x4068aea3, &(0x7f0000000500)) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x9000000) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000) munmap(&(0x7f0000482000/0x2000)=nil, 0x2000) write$eventfd(0xffffffffffffffff, &(0x7f0000000000)=0x3, 0x8) munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000) munmap(&(0x7f0000e76000/0x12000)=nil, 0x12000) mmap$KVM_VCPU(&(0x7f0000f1a000/0x4000)=nil, 0x930, 0x0, 0x9032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000fed000/0x3000)=nil, 0x930, 0xa, 0x11, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) 10m28.185796802s ago: executing program 6 (id=951): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r2, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f00000000c0)={0x53cb, 0x1000, 0x2}}) ioctl$KVM_SET_DEVICE_ATTR_vm(r2, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x57fd, 0x2}}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) close(r4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40800, 0x0) mmap$KVM_VCPU(&(0x7f0000008000/0x3000)=nil, 0x930, 0x6000004, 0x2011, r4, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x42042, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000000)={0x1000, 0x11c000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000200)={0xc000, 0x11000, 0x1}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r6, 0x4010ae68, &(0x7f0000000040)={0x17000, 0x206000, 0x1}) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r8 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r7, 0x0) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29) mmap$KVM_VCPU(&(0x7f0000c44000/0xd000)=nil, 0x930, 0x0, 0xce36b03e1c480b38, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r7, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r10 = eventfd2(0x0, 0x0) close(r10) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x3000002, 0x13, r10, 0x0) 10m19.25497073s ago: executing program 5 (id=952): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x8, 0xff, 0x0, 0x5, 0x6, 0x86, 0x6, 0x4b, 0x86, 0xdd, 0x68, 0x0, 0xc0000000, 0x11, 0x0, 0x3, 0x5, 0x8, '\x00', 0x1, 0x8000093}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) r3 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f00000000c0)={0xdf, 0x0, 0x2000}) syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x10002, 0x2, 0x1, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) write$eventfd(r2, &(0x7f00000001c0)=0xffffff7f, 0xff25) 10m13.890058104s ago: executing program 6 (id=953): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r2, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_ARM_VCPU_INIT(r6, 0x4020aeae, &(0x7f0000000080)={0x5, 0x1}) ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, &(0x7f00000001c0)=@arm64_sys={0x603000000013d801, &(0x7f00000000c0)=0x8000}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000300)="fb4149dd033b8986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67525673312b01040000000000002627e7000000000000000200", 0x0, 0xfffffffffffffe73) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x12, r2, 0x0) r7 = eventfd2(0x70, 0x0) close(r7) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x0) write$eventfd(r7, &(0x7f0000000100)=0xfffffffffffffffe, 0x8) r8 = eventfd2(0x0, 0x0) close(r8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xc0c82, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, 0x930, 0x200000e, 0x8010, r8, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r0, 0x4018aee1, &(0x7f0000000080)=@attr_irq_timer={0x0, 0x1, 0x0, &(0x7f0000000000)=0x13}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 10m6.010607065s ago: executing program 5 (id=954): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x34) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000000)={0x22dd, 0x2000, 0x0, 0xffffffffffffffff, 0xa}) (async, rerun: 32) r1 = syz_kvm_vgic_v3_setup(r0, 0x3, 0x220) (rerun: 32) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000080)=@attr_riscv64=@attr_imsic={0x0, 0x1, 0x8, &(0x7f0000000040)=0x3c0}) (async, rerun: 64) syz_kvm_setup_cpu$arm64(r0, r1, &(0x7f0000bfd000/0x400000)=nil, &(0x7f00000006c0)=[{0x0, &(0x7f00000000c0)=[@mrs={0xbe, 0x18, {0x603000000013e664}}, @eret={0xe6, 0x18, 0x6e4}, @mrs={0xbe, 0x18, {0x603000000013da16}}, @memwrite={0x6e, 0x30, @generic={0x58000, 0xefe, 0x5, 0xa}}, @irq_setup={0x46, 0x18, {0x2, 0x4}}, @hvc={0x32, 0x40, {0x84000050, [0x402, 0x0, 0x0, 0x2, 0x5]}}, @code={0xa, 0x84, {"007008d5000028d5000840f8e0fc86d200c0b0f2610080d2620180d2a30080d2240180d2020000d4a0b28cd20020b8f2010080d2420080d2e30180d2040180d2020000d4c0c68fd20020b0f2e10080d2420080d2e30180d2840180d2020000d4007008d5001c004e000c407c5f3003d5"}}, @eret={0xe6, 0x18, 0x1}, @its_setup={0x82, 0x28, {0x1, 0x2, 0x210}}, @uexit={0x0, 0x18, 0x8}, @hvc={0x32, 0x40, {0x100, [0x1, 0x3ff, 0x2, 0x71, 0x6]}}, @its_setup={0x82, 0x28, {0x3, 0x3, 0xf4}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x100, 0x4, 0x9}}, @its_setup={0x82, 0x28, {0x3, 0x1, 0x3f9}}, @code={0xa, 0x84, {"008008d5007008d5c0d288d20020b0f2210080d2e20180d2a30080d2a40080d2020000d4008008d5008008d5000008d500c785d20060b0f2610080d2e20080d2a30080d2840180d2020000d4006e93d200e0b8f2010180d2e20080d2a30180d2c40180d2020000d4000000b9007008d5"}}, @its_setup={0x82, 0x28, {0x3, 0x2, 0x1a6}}, @msr={0x14, 0x20, {0x603000000013e100, 0x2}}, @mrs={0xbe, 0x18, {0x603000000013deb5}}, @msr={0x14, 0x20, {0x603000000013e10a, 0xafdc}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x0, 0x1, 0xf, 0x0, 0x2, 0x2}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x8100000, 0x4, 0x9, 0x5}}, @irq_setup={0x46, 0x18, {0x1, 0xe4}}, @eret={0xe6, 0x18, 0xfe}, @eret={0xe6, 0x18, 0x5}, @smc={0x1e, 0x40, {0x84000008, [0x80, 0xfffffffffffffffd, 0x8, 0x8, 0x24]}}, @smc={0x1e, 0x40, {0x20, [0x200, 0x6ce, 0x4, 0x8]}}, @code={0xa, 0x84, {"007008d5007008d5e0be90d20060b8f2e10080d2020080d2e30180d2840180d2020000d4c0e68ad200e0b0f2010180d2820080d2830080d2840080d2020000d40038200ea01f89d200a0b0f2e10080d2020180d2c30180d2840180d2020000d40064007f000028d50080e00d007008d5"}}, @smc={0x1e, 0x40, {0x84000051, [0x7, 0x0, 0x200, 0x7f]}}, @msr={0x14, 0x20, {0xa3eb295faa268cc}}, @smc={0x1e, 0x40, {0xc5000020, [0x7, 0x8, 0x80000000, 0x4800000000, 0x4]}}, @hvc={0x32, 0x40, {0x800, [0x9, 0x5, 0x72, 0xfffffffffffffff9, 0xa]}}], 0x5f4}], 0x1, 0x0, &(0x7f0000000700)=[@featur2={0x1, 0x2}], 0x1) (rerun: 64) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000780)=@attr_arm64={0x0, 0x5, 0x2, &(0x7f0000000740)=0x500000}) (async) ioctl$KVM_CAP_HALT_POLL(r0, 0x4068aea3, &(0x7f00000007c0)={0xb6, 0x0, 0x7}) (async) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x15) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f0000000840)={0xb61e, 0x7fffffff}) ioctl$KVM_PPC_ALLOCATE_HTAB(r2, 0xc004aea7, &(0x7f0000000880)=0x9) ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f0000000900)=@attr_riscv64=@attr_config={0x0, 0x1, 0x0, &(0x7f00000008c0)=0x2}) (async) r3 = ioctl$KVM_GET_STATS_FD_vm(r0, 0xaece) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000980)=@riscv64_v={0x803000000900001e, &(0x7f0000000940)=0x9}) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION2(r0, 0x40a0ae49, &(0x7f00000009c0)={0x10003, 0x4, 0x4000, 0x1000, &(0x7f0000f9b000/0x1000)=nil, 0x2400000000000, r3}) (rerun: 32) ioctl$KVM_CAP_ARM_SYSTEM_SUSPEND(r0, 0x4068aea3, &(0x7f0000000a80)) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x25) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x32) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f0000000b00)={0x7, 0x0, [{0x6, 0x1, 0x0, 0x0, @irqchip={0x1, 0xf253}}, {0x4, 0x2, 0x1, 0x0, @adapter={0x2, 0x5, 0x7, 0xffffffff, 0x2}}, {0x4, 0x5, 0x0, 0x0, @sint={0x9, 0x7fffffff}}, {0x5, 0x4, 0x1, 0x0, @irqchip={0x7, 0x5}}, {0x1, 0x3, 0x1, 0x0, @sint={0x2, 0x1}}, {0x100, 0x2, 0x1, 0x0, @msi={0x2, 0x1, 0x7, 0x9}}, {0x6, 0x1, 0x1, 0x0, @sint={0x6, 0x6eb}}]}) ioctl$KVM_CAP_ARM_USER_IRQ(r0, 0x4068aea3, &(0x7f0000000c80)) r7 = ioctl$KVM_GET_STATS_FD_vm(r3, 0xaece) r8 = ioctl$KVM_GET_STATS_FD_vm(r4, 0xaece) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000d00)={r3, 0x1, 0x1, r8}) ioctl$KVM_SET_DEVICE_ATTR_vm(r6, 0x4018aee1, &(0x7f0000000d80)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000d40)={0x4, 0xf7a, 0x2}}) (async) r9 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000001140)={0x0, &(0x7f0000000dc0)=[@uexit={0x0, 0x18, 0x3}, @uexit={0x0, 0x18, 0xa91e}, @svc={0x122, 0x40, {0x32000000, [0x8, 0x5, 0x4, 0x10001, 0x70]}}, @smc={0x1e, 0x40, {0x4000000, [0x4, 0x400, 0x5, 0x2, 0x81]}}, @irq_setup={0x46, 0x18, {0x2, 0x165}}, @msr={0x14, 0x20, {0x603000000013e081, 0x2}}, @its_send_cmd={0xaa, 0x28, {0xb, 0x1, 0x0, 0x2, 0x8, 0x3, 0x2}}, @svc={0x122, 0x40, {0x2008108, [0x6, 0x800, 0xfffffffffffffff0, 0x6, 0x73]}}, @msr={0x14, 0x20, {0x603000000013e30a, 0x643}}, @its_setup={0x82, 0x28, {0x0, 0x2, 0x131}}, @eret={0xe6, 0x18, 0x6}, @svc={0x122, 0x40, {0xffff, [0x5a6b, 0xe2, 0x5, 0xf, 0x4]}}, @hvc={0x32, 0x40, {0x30000000, [0x401, 0x1, 0x6, 0x8, 0xfffffffffffffffd]}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x0, 0x2, 0x4, 0x1, 0x12000000}}, @hvc={0x32, 0x40, {0x30000006, [0x7, 0x0, 0x6, 0x4, 0xfffffffffffff800]}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x18, 0xfffffffffffffe00, 0x1}}, @smc={0x1e, 0x40, {0x80, [0x5, 0x4, 0x7ff, 0x6, 0x74800]}}, @smc={0x1e, 0x40, {0x80007fff, [0xc, 0x2, 0x3, 0x78d5, 0x7]}}, @uexit={0x0, 0x18, 0x7}], 0x360}, &(0x7f0000001180)=[@featur1={0x1, 0x10}], 0x1) ioctl$KVM_GET_STATS_FD_cpu(r10, 0xaece) (async) syz_kvm_add_vcpu$arm64(r5, &(0x7f0000001800)={0x0, &(0x7f00000011c0)=[@memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x10040, 0xfffffffffffffffa, 0x4}}, @smc={0x1e, 0x40, {0x8, [0x8, 0xf, 0xfffffffffffff801, 0x3, 0xaf3]}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x0, 0x1, 0xa, 0x115, 0x5, 0x1}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x0, 0x4, 0xd, 0x8, 0x8001, 0x1}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x1, 0x2, 0x7, 0x8, 0x9, 0x2}}, @mrs={0xbe, 0x18, {0x603000000013dce4}}, @hvc={0x32, 0x40, {0x30000000, [0x7, 0x0, 0x97a2, 0x2, 0x4]}}, @smc={0x1e, 0x40, {0xc4000011, [0xfff, 0x1, 0x10, 0x5, 0x3ff]}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x80, 0xffffffffffffff62, 0xa}}, @its_setup={0x82, 0x28, {0x4, 0x2, 0x198}}, @irq_setup={0x46, 0x18, {0x4, 0x3e}}, @uexit={0x0, 0x18, 0xfffffffffffffffd}, @smc={0x1e, 0x40, {0x80, [0x8, 0x4, 0x3, 0x7, 0x9]}}, @smc={0x1e, 0x40, {0x80000002, [0x5, 0xfffffffffffffff8, 0x800, 0xb532, 0x100000000]}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x1, 0x1, 0x10, 0x0, 0x2994, 0x1}}, @its_send_cmd={0xaa, 0x28, {0xa, 0x1, 0x1, 0x8, 0x3f80, 0x8, 0x1}}, @uexit={0x0, 0x18, 0x9}, @msr={0x14, 0x20, {0x603000000013e534, 0x51f}}, @msr={0x14, 0x20, {0x6030000000138084, 0x8001}}, @eret={0xe6, 0x18, 0x5}, @svc={0x122, 0x40, {0x80008000, [0x7, 0x7fff, 0x0, 0xc, 0x4]}}, @svc={0x122, 0x40, {0x84000050, [0x5476, 0x2, 0x6, 0x7, 0x3]}}, @code={0xa, 0xcc, {"004cc09a40cd9bd200a0b0f2e10080d2620080d2e30080d2a40180d2020000d400b8215e802e94d200e0b0f2010180d2c20180d2430080d2640080d2020000d4c04a8dd20020b0f2e10180d2c20080d2030080d2e40180d2020000d4a01390d200a0b0f2010080d2020180d2430180d2c40180d2020000d4000008d5c0cc8ed20060b0f2010180d2c20180d2630180d2440080d2020000d4604881d20020b0f2c10180d2e20180d2030180d2c40080d2020000d4000008d5"}}, @hvc={0x32, 0x40, {0xc400000e, [0x0, 0x0, 0x4, 0x2, 0x1]}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x4, 0x100000001}}, @code={0xa, 0x84, {"80c883d20060b0f2e10180d2c20180d2830180d2e40080d2020000d40068e038007008d5000c40380000231e007008d50080202ec0f08cd20060b8f2c10180d2a20080d2a30180d2240080d2020000d4000c000e003982d20000b8f2210180d2220080d2830080d2a40080d2020000d4"}}, @eret={0xe6, 0x18, 0xe}, @irq_setup={0x46, 0x18, {0x1, 0x6f}}, @svc={0x122, 0x40, {0x84000004, [0x5, 0x46f, 0x3, 0x1, 0x9]}}, @uexit={0x0, 0x18, 0x5}], 0x610}, &(0x7f0000001840)=[@featur2={0x1, 0x46}], 0x1) (async) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r8, 0x4010ae74, &(0x7f0000001880)={0x9, 0x0, 0x6}) ioctl$KVM_CREATE_VM(r7, 0xae01, 0xd) 9m57.581458092s ago: executing program 6 (id=955): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xd7, 0x80000001}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x36) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r6 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x1800002, 0x11, r5, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000280)="d6011813013c360000000000f4ff8000802346cbd98762c7795582ba3948ecff090001000000000000000000040000000100", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r5, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x40305828, &(0x7f0000000040)=@attr_other={0x0, 0x8be, 0x4, &(0x7f0000000000)=0x1}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xd7, 0x80000001}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x36) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) (async) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x1800002, 0x11, r5, 0x0) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000280)="d6011813013c360000000000f4ff8000802346cbd98762c7795582ba3948ecff090001000000000000000000040000000100", 0x0, 0x48) (async) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r5, 0x0) (async) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x40305828, &(0x7f0000000040)=@attr_other={0x0, 0x8be, 0x4, &(0x7f0000000000)=0x1}) (async) 9m51.954367058s ago: executing program 5 (id=956): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r4, 0x400454ca, 0x110c23001c) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0xfbf, 0x10, &(0x7f0000000000)=0x8}) r5 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x6030000000138084, 0x8000}}], 0x20}, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 9m40.264133403s ago: executing program 6 (id=957): r0 = openat$kvm(0x0, &(0x7f0000000240), 0x80b42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013c65d, 0x8000000000000000}}], 0x20}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x2, 0x2c0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000000)={0x2, 0x80a0000, 0x0, r5, 0x4fd0f096b459bd7b}) r6 = openat$kvm(0x0, &(0x7f0000000080), 0x80000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x31) ioctl$KVM_CREATE_GUEST_MEMFD(r8, 0xc040aed4, &(0x7f0000000040)={0x5, 0x7fffffffffffffff}) r9 = eventfd2(0x40, 0x1) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000000)={0xa7c, 0xffff1000, 0x0, r9}) r10 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil) r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}, 0x0, 0x0) r12 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000340)={0x0, 0x8000000, 0x4, r12, 0x1}) syz_kvm_vgic_v3_setup(r7, 0x2000000000001, 0x60) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) 9m34.211412661s ago: executing program 5 (id=958): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x30) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0xdddd1000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000240)={0x0, &(0x7f0000000100)=[@irq_setup={0x46, 0x18, {0x4, 0x370}}, @its_send_cmd={0xaa, 0x28, {0x1}}], 0x40}, 0x0, 0x0) r6 = syz_kvm_vgic_v3_setup(r3, 0xfffffffffffffffd, 0x60) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0xc, 0xffffffffffffffff}) ioctl$KVM_GET_DEVICE_ATTR(r6, 0x4018aee2, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000bfe000/0x400000)=nil) r11 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r12, 0x4018aee1, &(0x7f00000000c0)=@attr_other={0x0, 0xecad, 0x84, &(0x7f0000000280)=0x6}) syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_DEVICE_ATTR_vm(r12, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x9e, 0x7fffffff, 0x2}}) r13 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r13, 0x4010aeac, &(0x7f0000000000)=@arm64_extra={0x603000000013c026, &(0x7f0000000140)}) r14 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0) r16 = syz_kvm_setup_syzos_vm$arm64(r15, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r16, &(0x7f0000000140)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r15, 0x4068aea3, &(0x7f0000000040)={0xdf, 0x0, 0x8000}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000000)={0x5, 0x0, &(0x7f0000ffb000/0x3000)=nil}) 8m53.148390227s ago: executing program 37 (id=957): r0 = openat$kvm(0x0, &(0x7f0000000240), 0x80b42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013c65d, 0x8000000000000000}}], 0x20}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x2, 0x2c0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000000)={0x2, 0x80a0000, 0x0, r5, 0x4fd0f096b459bd7b}) r6 = openat$kvm(0x0, &(0x7f0000000080), 0x80000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x31) ioctl$KVM_CREATE_GUEST_MEMFD(r8, 0xc040aed4, &(0x7f0000000040)={0x5, 0x7fffffffffffffff}) r9 = eventfd2(0x40, 0x1) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000000)={0xa7c, 0xffff1000, 0x0, r9}) r10 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil) r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}, 0x0, 0x0) r12 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000340)={0x0, 0x8000000, 0x4, r12, 0x1}) syz_kvm_vgic_v3_setup(r7, 0x2000000000001, 0x60) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) 8m43.184380442s ago: executing program 38 (id=958): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x30) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0xdddd1000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000240)={0x0, &(0x7f0000000100)=[@irq_setup={0x46, 0x18, {0x4, 0x370}}, @its_send_cmd={0xaa, 0x28, {0x1}}], 0x40}, 0x0, 0x0) r6 = syz_kvm_vgic_v3_setup(r3, 0xfffffffffffffffd, 0x60) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0xc, 0xffffffffffffffff}) ioctl$KVM_GET_DEVICE_ATTR(r6, 0x4018aee2, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000bfe000/0x400000)=nil) r11 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r12, 0x4018aee1, &(0x7f00000000c0)=@attr_other={0x0, 0xecad, 0x84, &(0x7f0000000280)=0x6}) syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_DEVICE_ATTR_vm(r12, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x9e, 0x7fffffff, 0x2}}) r13 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r13, 0x4010aeac, &(0x7f0000000000)=@arm64_extra={0x603000000013c026, &(0x7f0000000140)}) r14 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0) r16 = syz_kvm_setup_syzos_vm$arm64(r15, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r16, &(0x7f0000000140)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r15, 0x4068aea3, &(0x7f0000000040)={0xdf, 0x0, 0x8000}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000000)={0x5, 0x0, &(0x7f0000ffb000/0x3000)=nil}) 1m18.68260251s ago: executing program 7 (id=959): munmap$KVM_VCPU(0x0, 0x1000000000) r0 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r1 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_ARM_VCPU_INIT(r3, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000380)=@arm64_sys={0x603000000013c016, &(0x7f0000000000)=0x5}) r4 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000500)={0x0, &(0x7f0000000000)=[@smc={0x1e, 0x40, {0x400, [0xa000000000, 0x8000, 0x0, 0x2, 0x5]}}, @mrs={0xbe, 0x18}, @its_setup={0x82, 0x28, {0x4, 0x0, 0x134}}, @msr={0x14, 0x20, {0x603000000013e099, 0x69}}, @its_send_cmd={0xaa, 0x28, {0x0, 0x0, 0x4, 0x7, 0x5, 0x1, 0x1}}, @its_setup={0x82, 0x28, {0x3, 0x0, 0x382}}, @code={0xa, 0xcc, {"0000701e00d0204e005c207ee00590d20000b8f2a10080d2420080d2e30180d2a40080d2020000d4e0fa92d200c0b0f2610080d2a20180d2430180d2e40080d2020000d4209c96d200e0b0f2c10180d2820180d2430080d2e40180d2020000d4201c82d20020b0f2010080d2220180d2630080d2c40180d2020000d440c785d20080b0f2810180d2220180d2a30080d2840080d2020000d4000008d5e05782d20080b0f2010180d2420080d2c30080d2e40080d2020000d4"}}, @memwrite={0x6e, 0x30, @generic={0x200000, 0xc5e, 0x2, 0x1}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0xc, 0xcf, 0xf}}, @its_send_cmd={0xaa, 0x28, {0x6, 0x0, 0x0, 0x3, 0xb4, 0x10001, 0x4}}, @mrs={0xbe, 0x18, {0x6030000000138035}}, @irq_setup={0x46, 0x18, {0x3, 0x2b3}}, @mrs={0xbe, 0x18, {0x603000000013e669}}, @svc={0x122, 0x40, {0x1, [0xfe5, 0x9, 0x1200, 0x1, 0x9]}}, @msr={0x14, 0x20, {0x603000000013dea5, 0x3}}, @eret={0xe6, 0x18, 0x1}, @msr={0x14, 0x20, {0x603000000013c708, 0x4}}, @irq_setup={0x46, 0x18, {0x3, 0x2e6}}, @uexit={0x0, 0x18, 0xe}, @svc={0x122, 0x40, {0xc4000053, [0x7, 0x8441, 0x3, 0x2, 0x7]}}, @irq_setup={0x46, 0x18, {0x4, 0x1f9}}, @mrs={0xbe, 0x18, {0x603000000013f602}}, @irq_setup={0x46, 0x18, {0x2, 0x25b}}, @mrs={0xbe, 0x18, {0x603000000013c661}}, @uexit={0x0, 0x18, 0x8}, @msr={0x14, 0x20, {0x603000000013801f, 0x1}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0xc00, 0x101, 0x1}}, @msr={0x14, 0x20, {0x43cf, 0xffff}}, @its_setup={0x82, 0x28, {0x1, 0x1, 0x15}}, @mrs={0xbe, 0x18, {0x6030000000138034}}, @uexit={0x0, 0x18, 0x5}], 0x4d4}, &(0x7f0000000540)=[@featur1={0x1, 0x2}], 0x1) mmap$KVM_VCPU(&(0x7f0000c5b000/0x2000)=nil, r0, 0x2000005, 0x2010, r4, 0x0) munmap(&(0x7f0000e1a000/0x2000)=nil, 0x2000) 1m10.735000566s ago: executing program 8 (id=960): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r4, 0x54e3, 0x110c230008) (async) r5 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f00000000c0)={0x0, &(0x7f0000000280)=[@irq_setup={0x46, 0x18, {0x4, 0xf3}}, @svc={0x122, 0x40, {0x2, [0xffffffffffffffbb, 0x4, 0x1, 0x7, 0x600000000]}}], 0x58}, 0x0, 0x0) (async) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) (async, rerun: 32) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (rerun: 32) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x21) r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r9, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x2, 0x4, 0x1}}, @its_setup={0x82, 0x28, {0x3, 0x1, 0x3ee}}], 0x50}, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async, rerun: 32) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000240)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1m0.38023706s ago: executing program 7 (id=961): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r5, 0x4020aeae, &(0x7f0000000100)={0x5, 0x18}) ioctl$KVM_SET_ONE_REG(r5, 0x4010aeac, &(0x7f00000000c0)=@arm64_sve_vls={0x606000000015ffff, &(0x7f0000000000)=0x1}) syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f00000000c0)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}], 0x1, 0x0, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000b80)={0x0, 0x0}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1) syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1) r12 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000b80)={0x0, &(0x7f0000000080)=[@hvc={0x32, 0x40, {0x84000003, [0x7ab, 0x0, 0x4, 0x9, 0x4d]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r12, 0xae80, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000100)={0x1000020, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 51.661218136s ago: executing program 8 (id=962): mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x300000e, 0x16831, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0xc8fef39f6ad664bf, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000240), 0x200000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3d) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000bfe000/0x400000)=nil) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f00000001c0)="f21bc75509bf71c9d70236fc044842dae3ffffffffffffff4c24501958da2e2c18b875c2357c6ed600", 0x0, 0x48) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r6, &(0x7f00000001c0)=0xffffff7f, 0xff25) r7 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000140)={0x0, &(0x7f0000000000)=[@smc={0x1e, 0x40, {0x84000052, [0x0, 0x1, 0x2, 0x9, 0x6]}}, @smc={0x1e, 0x40, {0x86000001, [0xffffffffffffff37, 0x6, 0x2, 0x5, 0x5]}}], 0x80}, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) r11 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r8, 0xae04) mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, r11, 0x1000002, 0x13, r10, 0x0) mmap$KVM_VCPU(&(0x7f0000ca6000/0x1000)=nil, r11, 0x2000007, 0x4010, r7, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r12 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000c00000/0x400000)=nil) r15 = syz_kvm_add_vcpu$arm64(r14, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@smc={0x1e, 0x0, {0x84000053, [0x4, 0x6, 0xffffffffffffffff, 0x400, 0xfffffffffffff801]}}], 0xfffffee6}, 0x0, 0x0) ioctl$KVM_RUN(r15, 0xae80, 0x0) ioctl$KVM_RUN(r15, 0xae80, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r7, 0x4018aee1, &(0x7f0000000000)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0xbaf}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0xf) ioctl$KVM_ARM_PREFERRED_TARGET(r7, 0x8020aeaf, &(0x7f0000000180)) 13.0517144s ago: executing program 39 (id=961): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r5, 0x4020aeae, &(0x7f0000000100)={0x5, 0x18}) ioctl$KVM_SET_ONE_REG(r5, 0x4010aeac, &(0x7f00000000c0)=@arm64_sve_vls={0x606000000015ffff, &(0x7f0000000000)=0x1}) syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f00000000c0)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}], 0x1, 0x0, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000b80)={0x0, 0x0}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1) syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1) r12 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000b80)={0x0, &(0x7f0000000080)=[@hvc={0x32, 0x40, {0x84000003, [0x7ab, 0x0, 0x4, 0x9, 0x4d]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r12, 0xae80, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000100)={0x1000020, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 40 (id=962): mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x300000e, 0x16831, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0xc8fef39f6ad664bf, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000240), 0x200000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3d) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000bfe000/0x400000)=nil) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f00000001c0)="f21bc75509bf71c9d70236fc044842dae3ffffffffffffff4c24501958da2e2c18b875c2357c6ed600", 0x0, 0x48) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r6, &(0x7f00000001c0)=0xffffff7f, 0xff25) r7 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000140)={0x0, &(0x7f0000000000)=[@smc={0x1e, 0x40, {0x84000052, [0x0, 0x1, 0x2, 0x9, 0x6]}}, @smc={0x1e, 0x40, {0x86000001, [0xffffffffffffff37, 0x6, 0x2, 0x5, 0x5]}}], 0x80}, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) r11 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r8, 0xae04) mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, r11, 0x1000002, 0x13, r10, 0x0) mmap$KVM_VCPU(&(0x7f0000ca6000/0x1000)=nil, r11, 0x2000007, 0x4010, r7, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r12 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000c00000/0x400000)=nil) r15 = syz_kvm_add_vcpu$arm64(r14, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@smc={0x1e, 0x0, {0x84000053, [0x4, 0x6, 0xffffffffffffffff, 0x400, 0xfffffffffffff801]}}], 0xfffffee6}, 0x0, 0x0) ioctl$KVM_RUN(r15, 0xae80, 0x0) ioctl$KVM_RUN(r15, 0xae80, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r7, 0x4018aee1, &(0x7f0000000000)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0xbaf}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0xf) ioctl$KVM_ARM_PREFERRED_TARGET(r7, 0x8020aeaf, &(0x7f0000000180)) kernel console output (not intermixed with test programs): [ 366.806518][ T24] audit: type=1400 audit(365.990:77): avc: denied { write } for pid=3269 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 370.409429][ T24] audit: type=1400 audit(369.610:78): avc: denied { write } for pid=3273 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 372.760169][ T3210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.464408][ T24] audit: type=1400 audit(379.660:79): avc: denied { write } for pid=3280 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 384.798214][ T24] audit: type=1400 audit(383.990:80): avc: denied { write } for pid=3283 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 401.647858][ T24] audit: type=1400 audit(400.830:81): avc: denied { write } for pid=3290 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 405.271343][ T24] audit: type=1400 audit(404.470:82): avc: denied { write } for pid=3293 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 414.966941][ T24] audit: type=1400 audit(414.160:83): avc: denied { write } for pid=3298 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 418.667714][ T24] audit: type=1400 audit(417.860:84): avc: denied { write } for pid=3301 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 421.053888][ T3210] eql: remember to turn off Van-Jacobson compression on your slave devices [ 427.690808][ T24] audit: type=1400 audit(426.890:85): avc: denied { write } for pid=3305 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 431.264742][ T24] audit: type=1400 audit(430.460:86): avc: denied { write } for pid=3308 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 439.856439][ T24] audit: type=1400 audit(439.050:87): avc: denied { write } for pid=3312 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 443.447968][ T24] audit: type=1400 audit(442.640:88): avc: denied { write } for pid=3315 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 455.696497][ T24] audit: type=1400 audit(454.880:89): avc: denied { write } for pid=3320 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 459.737628][ T24] audit: type=1400 audit(458.930:90): avc: denied { write } for pid=3323 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 464.508986][ T24] audit: type=1400 audit(463.710:91): avc: denied { write } for pid=3325 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 467.938142][ T24] audit: type=1400 audit(467.110:92): avc: denied { write } for pid=3328 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 476.577725][ T24] audit: type=1400 audit(475.770:93): avc: denied { write } for pid=3332 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 480.230869][ T24] audit: type=1400 audit(479.430:94): avc: denied { write } for pid=3335 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 496.466492][ T24] audit: type=1400 audit(495.630:95): avc: denied { write } for pid=3343 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 499.943120][ T24] audit: type=1400 audit(499.140:96): avc: denied { write } for pid=3346 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 520.142229][ T24] audit: type=1400 audit(519.340:97): avc: denied { write } for pid=3355 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 523.668533][ T24] audit: type=1400 audit(522.820:98): avc: denied { write } for pid=3358 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 531.280679][ T24] audit: type=1400 audit(530.480:99): avc: denied { write } for pid=3361 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 534.821486][ T24] audit: type=1400 audit(534.020:100): avc: denied { write } for pid=3364 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 542.271854][ T24] audit: type=1400 audit(541.470:101): avc: denied { write } for pid=3367 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 545.936541][ T24] audit: type=1400 audit(545.130:102): avc: denied { write } for pid=3370 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:4349' (ED25519) to the list of known hosts. [ 575.508590][ T24] audit: type=1400 audit(574.690:103): avc: denied { name_bind } for pid=3374 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 576.749233][ T24] audit: type=1400 audit(575.950:104): avc: denied { execute } for pid=3375 comm="sh" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 576.777770][ T24] audit: type=1400 audit(575.960:105): avc: denied { execute_no_trans } for pid=3375 comm="sh" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 599.590185][ T24] audit: type=1400 audit(598.790:106): avc: denied { mounton } for pid=3375 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 599.631751][ T24] audit: type=1400 audit(598.820:107): avc: denied { mount } for pid=3375 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 599.709716][ T3375] cgroup: Unknown subsys name 'net' [ 599.762664][ T24] audit: type=1400 audit(598.960:108): avc: denied { unmount } for pid=3375 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 600.141089][ T3375] cgroup: Unknown subsys name 'cpuset' [ 600.251695][ T3375] cgroup: Unknown subsys name 'rlimit' [ 601.028977][ T24] audit: type=1400 audit(600.230:109): avc: denied { setattr } for pid=3375 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 601.054822][ T24] audit: type=1400 audit(600.240:110): avc: denied { mounton } for pid=3375 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 601.067515][ T24] audit: type=1400 audit(600.260:111): avc: denied { mount } for pid=3375 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 602.043096][ T3378] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 602.062402][ T24] audit: type=1400 audit(601.260:112): avc: denied { relabelto } for pid=3378 comm="mkswap" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 602.088795][ T24] audit: type=1400 audit(601.280:113): avc: denied { write } for pid=3378 comm="mkswap" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 602.262509][ T24] audit: type=1400 audit(601.460:114): avc: denied { read } for pid=3375 comm="syz-executor" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 602.282338][ T24] audit: type=1400 audit(601.470:115): avc: denied { open } for pid=3375 comm="syz-executor" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 602.324167][ T3375] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 658.471320][ T24] audit: type=1400 audit(657.670:116): avc: denied { execmem } for pid=3379 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 661.970908][ T24] audit: type=1400 audit(661.170:117): avc: denied { read } for pid=3381 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 662.009183][ T24] audit: type=1400 audit(661.190:118): avc: denied { open } for pid=3381 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 662.069283][ T24] audit: type=1400 audit(661.250:119): avc: denied { mounton } for pid=3382 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 662.251761][ T24] audit: type=1400 audit(661.450:120): avc: denied { module_request } for pid=3381 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 662.263527][ T24] audit: type=1400 audit(661.460:121): avc: denied { module_request } for pid=3382 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 663.193732][ T24] audit: type=1400 audit(662.390:122): avc: denied { sys_module } for pid=3381 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 683.722956][ T3381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 683.966555][ T3381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 684.023033][ T3382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 684.272132][ T3382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 697.463205][ T3381] hsr_slave_0: entered promiscuous mode [ 697.513005][ T3381] hsr_slave_1: entered promiscuous mode [ 699.248809][ T3382] hsr_slave_0: entered promiscuous mode [ 699.294613][ T3382] hsr_slave_1: entered promiscuous mode [ 699.332839][ T3382] debugfs: 'hsr0' already exists in 'hsr' [ 699.356912][ T3382] Cannot create hsr debugfs directory [ 704.870643][ T24] audit: type=1400 audit(704.070:123): avc: denied { create } for pid=3381 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 704.920118][ T24] audit: type=1400 audit(704.120:124): avc: denied { write } for pid=3381 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 704.950415][ T24] audit: type=1400 audit(704.130:125): avc: denied { read } for pid=3381 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 705.107696][ T3381] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 705.399760][ T3381] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 705.484111][ T3381] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 705.747980][ T3381] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 705.821863][ T3381] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 705.992896][ T3381] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 706.154112][ T3381] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 706.214097][ T3381] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 707.587788][ T3382] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 707.701195][ T3382] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 707.762251][ T3382] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 707.869550][ T3382] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 707.991622][ T3382] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 708.117933][ T3382] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 708.197438][ T3382] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 708.372739][ T3382] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 718.720413][ T3381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 720.921675][ T3382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 768.957164][ T3381] veth0_vlan: entered promiscuous mode [ 769.324418][ T3381] veth1_vlan: entered promiscuous mode [ 771.467258][ T3381] veth0_macvtap: entered promiscuous mode [ 771.587882][ T3382] veth0_vlan: entered promiscuous mode [ 771.941575][ T3381] veth1_macvtap: entered promiscuous mode [ 772.371185][ T3382] veth1_vlan: entered promiscuous mode [ 774.112345][ T21] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.163786][ T21] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.169834][ T21] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.213376][ T21] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.914110][ T3382] veth0_macvtap: entered promiscuous mode [ 775.510332][ T3382] veth1_macvtap: entered promiscuous mode [ 776.854838][ T24] audit: type=1400 audit(776.050:126): avc: denied { mount } for pid=3381 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 777.148082][ T24] audit: type=1400 audit(776.340:127): avc: denied { mounton } for pid=3381 comm="syz-executor" path="/syzkaller.KM30y6/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 777.288151][ T24] audit: type=1400 audit(776.480:128): avc: denied { mount } for pid=3381 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 777.669355][ T24] audit: type=1400 audit(776.780:129): avc: denied { mounton } for pid=3381 comm="syz-executor" path="/syzkaller.KM30y6/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 777.744644][ T24] audit: type=1400 audit(776.940:130): avc: denied { mounton } for pid=3381 comm="syz-executor" path="/syzkaller.KM30y6/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 777.899340][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.929078][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.941852][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.942818][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.486418][ T24] audit: type=1400 audit(777.660:131): avc: denied { unmount } for pid=3381 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 778.606640][ T24] audit: type=1400 audit(777.800:132): avc: denied { mounton } for pid=3381 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1544 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 778.737937][ T24] audit: type=1400 audit(777.930:133): avc: denied { mount } for pid=3381 comm="syz-executor" name="/" dev="gadgetfs" ino=3744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 778.953832][ T24] audit: type=1400 audit(778.150:134): avc: denied { mount } for pid=3381 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 779.127836][ T24] audit: type=1400 audit(778.270:135): avc: denied { mounton } for pid=3381 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 780.513231][ T3381] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 789.481784][ T24] kauditd_printk_skb: 4 callbacks suppressed [ 789.491749][ T24] audit: type=1400 audit(788.680:140): avc: denied { read } for pid=3533 comm="syz.1.2" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 789.514032][ T24] audit: type=1400 audit(788.710:141): avc: denied { open } for pid=3533 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 789.606990][ T24] audit: type=1400 audit(788.800:142): avc: denied { ioctl } for pid=3533 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 793.657334][ T24] audit: type=1400 audit(792.840:143): avc: denied { execute } for pid=3535 comm="syz.0.1" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=3857 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 801.257552][ T24] audit: type=1400 audit(800.450:144): avc: denied { write } for pid=3544 comm="syz.0.4" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 810.332096][ T24] audit: type=1400 audit(809.520:145): avc: denied { append } for pid=3548 comm="syz.1.5" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 866.247450][ T24] audit: type=1400 audit(865.410:146): avc: denied { write } for pid=3584 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 873.742114][ T24] audit: type=1400 audit(872.920:147): avc: denied { write } for pid=3592 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 905.821196][ T24] audit: type=1400 audit(904.990:148): avc: denied { create } for pid=3614 comm="syz.1.27" anonclass=[kvm-gmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 907.709830][ T3615] kvm [3615]: Failed to find VMA for hva 0x20ddf000 [ 908.431209][ T3615] kvm [3615]: Failed to find VMA for hva 0x20c01000 [ 931.029975][ T3631] kvm [3631]: Failed to find VMA for hva 0x2053c000 [ 941.049304][ T3637] FAULT_INJECTION: forcing a failure. [ 941.049304][ T3637] name failslab, interval 1, probability 0, space 0, times 1 [ 941.061479][ T3637] CPU: 0 UID: 0 PID: 3637 Comm: syz.1.35 Not tainted syzkaller #0 PREEMPT [ 941.062164][ T3637] Hardware name: linux,dummy-virt (DT) [ 941.062652][ T3637] Call trace: [ 941.063085][ T3637] show_stack+0x2c/0x3c (C) [ 941.065192][ T3637] __dump_stack+0x30/0x40 [ 941.065637][ T3637] dump_stack_lvl+0xd8/0x12c [ 941.065990][ T3637] dump_stack+0x1c/0x28 [ 941.066312][ T3637] should_fail_ex+0x56c/0x6d8 [ 941.066636][ T3637] should_failslab+0xb8/0xec [ 941.066942][ T3637] __kmalloc_noprof+0xf0/0x5e8 [ 941.067247][ T3637] tomoyo_realpath_from_path+0xdc/0x640 [ 941.067569][ T3637] tomoyo_path_number_perm+0x158/0x358 [ 941.067829][ T3637] tomoyo_file_ioctl+0x2c/0x3c [ 941.068125][ T3637] security_file_ioctl+0xe0/0x2cc [ 941.068441][ T3637] __arm64_sys_ioctl+0xd0/0x244 [ 941.068760][ T3637] invoke_syscall+0x94/0x1ec [ 941.069112][ T3637] el0_svc_common+0x120/0x2f4 [ 941.069444][ T3637] do_el0_svc+0x58/0x74 [ 941.069775][ T3637] el0_svc+0x64/0x240 [ 941.070113][ T3637] el0t_64_sync_handler+0x84/0x12c [ 941.070432][ T3637] el0t_64_sync+0x198/0x19c [ 941.209968][ T3637] ERROR: Out of memory at tomoyo_realpath_from_path. [ 946.444763][ T24] audit: type=1400 audit(945.640:149): avc: denied { map } for pid=3639 comm="syz.0.36" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=5778 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 946.507283][ T24] audit: type=1400 audit(945.680:150): avc: denied { read } for pid=3639 comm="syz.0.36" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=5778 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 999.344074][ T24] audit: type=1400 audit(998.540:151): avc: denied { mmap_zero } for pid=3671 comm="syz.0.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 1170.437765][ T3787] kvm [3787]: Failed to find VMA for hva 0x20d8d000 [ 1177.224215][ T24] audit: type=1400 audit(1176.420:152): avc: denied { ioctl } for pid=3791 comm="syz.0.87" path="net:[4026532628]" dev="nsfs" ino=4026532628 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1193.289409][ T3794] kvm [3794]: Failed to find VMA for hva 0x20d8d000 [ 1227.158340][ T24] audit: type=1400 audit(1226.350:153): avc: denied { ioctl } for pid=3809 comm="syz.1.92" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=9200 ioctlcmd=0xae49 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1350.624292][ T24] audit: type=1400 audit(1349.820:154): avc: denied { write } for pid=3882 comm="syz.0.115" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=10721 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1439.898860][ T24] audit: type=1400 audit(1439.050:155): avc: denied { execute } for pid=3922 comm="syz-executor" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 1439.906857][ T24] audit: type=1400 audit(1439.090:156): avc: denied { execute_no_trans } for pid=3922 comm="syz-executor" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 1455.060888][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1456.912466][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1458.751766][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1460.445118][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1461.974171][ T24] audit: type=1400 audit(1461.170:157): avc: denied { write } for pid=3935 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1470.152858][ T24] audit: type=1400 audit(1469.350:158): avc: denied { write } for pid=3947 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1478.592404][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1478.973947][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1479.290769][ T12] bond0 (unregistering): Released all slaves [ 1481.519355][ T12] hsr_slave_0: left promiscuous mode [ 1481.668898][ T12] hsr_slave_1: left promiscuous mode [ 1482.322930][ T12] veth1_macvtap: left promiscuous mode [ 1482.334739][ T12] veth0_macvtap: left promiscuous mode [ 1482.354340][ T12] veth1_vlan: left promiscuous mode [ 1482.389154][ T12] veth0_vlan: left promiscuous mode [ 1516.930213][ T24] audit: type=1400 audit(1516.130:159): avc: denied { write } for pid=3967 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1522.153137][ T24] audit: type=1400 audit(1521.350:160): avc: denied { write } for pid=3974 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1526.242191][ T3210] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1538.171213][ T24] audit: type=1400 audit(1537.330:161): avc: denied { write } for pid=3997 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1540.539070][ T3930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1540.763979][ T3930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1545.208310][ T24] audit: type=1400 audit(1544.400:162): avc: denied { write } for pid=4004 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1549.868480][ T3210] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1564.200488][ T24] audit: type=1400 audit(1563.400:163): avc: denied { write } for pid=4021 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1568.912159][ T3930] hsr_slave_0: entered promiscuous mode [ 1569.021204][ T3930] hsr_slave_1: entered promiscuous mode [ 1569.094310][ T3930] debugfs: 'hsr0' already exists in 'hsr' [ 1569.148246][ T3930] Cannot create hsr debugfs directory [ 1570.198096][ T24] audit: type=1400 audit(1569.380:164): avc: denied { write } for pid=4031 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1574.352656][ T3210] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1583.169919][ T3930] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1583.577611][ T3930] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1583.677984][ T3930] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1583.958886][ T3930] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1583.995033][ T3930] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1584.217460][ T3930] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1584.254359][ T3930] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1584.481218][ T3930] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1588.109331][ T24] audit: type=1400 audit(1587.300:165): avc: denied { write } for pid=4044 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1594.956463][ T24] audit: type=1400 audit(1594.150:166): avc: denied { write } for pid=4057 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1600.528990][ T3210] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1609.895087][ T3930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1640.587989][ T24] audit: type=1400 audit(1639.730:167): avc: denied { write } for pid=4093 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1647.480386][ T24] audit: type=1400 audit(1646.650:168): avc: denied { write } for pid=4104 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1659.119757][ T24] audit: type=1400 audit(1658.300:169): avc: denied { map } for pid=4111 comm="syz.1.149" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1659.146453][ T24] audit: type=1400 audit(1658.330:170): avc: denied { execute } for pid=4111 comm="syz.1.149" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1663.760179][ T24] audit: type=1400 audit(1662.850:171): avc: denied { write } for pid=4119 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1672.758001][ T24] audit: type=1400 audit(1671.940:172): avc: denied { write } for pid=4130 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1686.119411][ T24] audit: type=1400 audit(1685.300:173): avc: denied { write } for pid=4140 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1692.959631][ T24] audit: type=1400 audit(1692.160:174): avc: denied { write } for pid=4148 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1704.121025][ T24] audit: type=1400 audit(1703.320:175): avc: denied { write } for pid=4157 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1704.596136][ T3930] veth0_vlan: entered promiscuous mode [ 1705.440084][ T3930] veth1_vlan: entered promiscuous mode [ 1708.271634][ T3930] veth0_macvtap: entered promiscuous mode [ 1708.651825][ T3930] veth1_macvtap: entered promiscuous mode [ 1711.528619][ T21] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1711.549667][ T41] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1711.789371][ T41] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1711.809029][ T41] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1712.923423][ T24] audit: type=1400 audit(1712.120:176): avc: denied { write } for pid=4168 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1729.179767][ T24] audit: type=1400 audit(1728.300:177): avc: denied { write } for pid=4178 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1739.079684][ T24] audit: type=1400 audit(1738.280:178): avc: denied { write } for pid=4189 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1880.772860][ T24] audit: type=1400 audit(1879.970:179): avc: denied { setattr } for pid=4274 comm="syz.1.187" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1947.657812][ T24] audit: type=1400 audit(1946.850:180): avc: denied { write } for pid=4319 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1955.780816][ T24] audit: type=1400 audit(1954.950:181): avc: denied { write } for pid=4329 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2083.811464][ T24] audit: type=1400 audit(2083.000:182): avc: denied { execute } for pid=4407 comm="syz.1.230" path=2F3132372F10FBFF67525673312B0104 dev="tmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2367.436774][ T24] audit: type=1400 audit(2366.520:183): avc: denied { write } for pid=4596 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2375.466447][ T24] audit: type=1400 audit(2374.630:184): avc: denied { write } for pid=4609 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2422.524413][ T4637] kvm [4637]: Failed to find VMA for hva 0x20d8d000 [ 2511.202426][ T4686] kvm [4686]: Failed to find VMA for hva 0x20dd1000 [ 2631.608226][ T4765] kvm [4765]: Failed to find VMA for hva 0x20c01000 [ 2671.084795][ T24] audit: type=1400 audit(2670.260:185): avc: denied { write } for pid=4788 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2678.897805][ T24] audit: type=1400 audit(2678.060:186): avc: denied { write } for pid=4796 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2805.028910][ T4874] kvm [4874]: Failed to find VMA for hva 0x20000000 [ 2944.601790][ T4900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2944.820534][ T4900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2953.209318][ T4907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2953.429942][ T4907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2967.948084][ T4900] hsr_slave_0: entered promiscuous mode [ 2968.027897][ T4900] hsr_slave_1: entered promiscuous mode [ 2968.077560][ T4900] debugfs: 'hsr0' already exists in 'hsr' [ 2968.087521][ T4900] Cannot create hsr debugfs directory [ 2976.750866][ T4907] hsr_slave_0: entered promiscuous mode [ 2976.783682][ T4907] hsr_slave_1: entered promiscuous mode [ 2976.819090][ T4907] debugfs: 'hsr0' already exists in 'hsr' [ 2976.848514][ T4907] Cannot create hsr debugfs directory [ 2984.753837][ T4900] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2985.219213][ T4900] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2986.687446][ T4900] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2986.939492][ T4900] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2987.681364][ T4900] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2988.050367][ T4900] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2988.793821][ T4900] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2989.114815][ T4900] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2999.572275][ T4907] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 3000.089071][ T4907] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 3000.242256][ T4907] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 3000.688913][ T4907] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3000.849841][ T4907] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 3001.252007][ T4907] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 3001.428806][ T4907] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 3001.885067][ T4907] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 3007.004467][ T4977] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3008.941851][ T4977] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3010.830591][ T4977] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3012.287682][ T4977] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3026.881366][ T4977] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3027.108371][ T4977] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3027.182914][ T4977] bond0 (unregistering): Released all slaves [ 3028.207381][ T4977] hsr_slave_0: left promiscuous mode [ 3028.248185][ T4977] hsr_slave_1: left promiscuous mode [ 3028.616970][ T4977] veth1_macvtap: left promiscuous mode [ 3028.620244][ T4977] veth0_macvtap: left promiscuous mode [ 3028.639348][ T4977] veth1_vlan: left promiscuous mode [ 3028.649918][ T4977] veth0_vlan: left promiscuous mode [ 3051.304776][ T4977] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3053.034638][ T4977] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3054.729433][ T4977] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3055.939069][ T4977] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3059.611676][ T4900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3060.413764][ T4907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3062.360142][ T24] audit: type=1400 audit(3061.510:187): avc: denied { write } for pid=5002 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3072.278435][ T24] audit: type=1400 audit(3071.390:188): avc: denied { write } for pid=5013 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3076.221073][ T4977] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3076.568040][ T4977] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3076.779396][ T4977] bond0 (unregistering): Released all slaves [ 3077.788181][ T3210] 8021q: adding VLAN 0 to HW filter on device eth5 [ 3078.390868][ T4977] hsr_slave_0: left promiscuous mode [ 3078.601176][ T4977] hsr_slave_1: left promiscuous mode [ 3079.059617][ T4977] veth1_macvtap: left promiscuous mode [ 3079.078121][ T4977] veth0_macvtap: left promiscuous mode [ 3079.080080][ T4977] veth1_vlan: left promiscuous mode [ 3079.107230][ T4977] veth0_vlan: left promiscuous mode [ 3107.466289][ T24] audit: type=1400 audit(3106.650:189): avc: denied { write } for pid=5025 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3115.556493][ T24] audit: type=1400 audit(3114.730:190): avc: denied { write } for pid=5032 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3120.872287][ T3210] 8021q: adding VLAN 0 to HW filter on device eth6 [ 3134.027595][ T24] audit: type=1400 audit(3133.210:191): avc: denied { write } for pid=5047 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3140.048918][ T24] audit: type=1400 audit(3139.200:192): avc: denied { write } for pid=5057 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3144.072055][ T3210] 8021q: adding VLAN 0 to HW filter on device eth7 [ 3156.390768][ T24] audit: type=1400 audit(3155.590:193): avc: denied { write } for pid=5072 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3162.321016][ T24] audit: type=1400 audit(3161.510:194): avc: denied { write } for pid=5082 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3167.530981][ T3210] 8021q: adding VLAN 0 to HW filter on device eth8 [ 3170.140111][ T4900] veth0_vlan: entered promiscuous mode [ 3170.941880][ T4900] veth1_vlan: entered promiscuous mode [ 3174.392824][ T4900] veth0_macvtap: entered promiscuous mode [ 3174.871404][ T4900] veth1_macvtap: entered promiscuous mode [ 3178.031710][ T4982] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3178.037258][ T4982] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3178.069895][ T4982] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3178.084694][ T4982] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3186.276652][ T24] audit: type=1400 audit(3185.440:195): avc: denied { write } for pid=5094 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3192.584691][ T4907] veth0_vlan: entered promiscuous mode [ 3193.510343][ T4907] veth1_vlan: entered promiscuous mode [ 3196.482527][ T24] audit: type=1400 audit(3195.520:196): avc: denied { write } for pid=5102 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3196.762957][ T4907] veth0_macvtap: entered promiscuous mode [ 3197.349248][ T4907] veth1_macvtap: entered promiscuous mode [ 3200.641593][ T4762] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3200.646905][ T4762] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3200.704753][ T21] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3200.853004][ T4982] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3203.251794][ T3210] 8021q: adding VLAN 0 to HW filter on device eth9 [ 3211.690014][ T5110] debugfs: 'vgic-its-state@8080000' already exists in '5110-5' [ 3222.319572][ T24] audit: type=1400 audit(3221.490:197): avc: denied { write } for pid=5117 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3233.527327][ T24] audit: type=1400 audit(3232.680:198): avc: denied { write } for pid=5126 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3241.101025][ T3210] 8021q: adding VLAN 0 to HW filter on device eth10 [ 3264.246903][ T24] audit: type=1400 audit(3263.410:199): avc: denied { write } for pid=5144 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3273.957064][ T24] audit: type=1400 audit(3273.150:200): avc: denied { write } for pid=5153 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3280.383483][ T3210] 8021q: adding VLAN 0 to HW filter on device eth11 [ 3289.881928][ T24] audit: type=1400 audit(3289.080:201): avc: denied { write } for pid=5161 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3301.827311][ T24] audit: type=1400 audit(3301.000:202): avc: denied { write } for pid=5170 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3330.489764][ T24] audit: type=1400 audit(3329.630:203): avc: denied { write } for pid=5188 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3340.309929][ T24] audit: type=1400 audit(3339.510:204): avc: denied { write } for pid=5198 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3347.033268][ T3210] 8021q: adding VLAN 0 to HW filter on device eth12 [ 3405.098442][ T24] audit: type=1400 audit(3404.280:205): avc: denied { write } for pid=5239 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3416.948725][ T24] audit: type=1400 audit(3416.030:206): avc: denied { write } for pid=5250 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3435.844142][ T24] audit: type=1400 audit(3435.010:207): avc: denied { write } for pid=5256 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3445.357149][ T24] audit: type=1400 audit(3444.550:208): avc: denied { write } for pid=5264 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3484.897093][ T24] audit: type=1400 audit(3484.070:209): avc: denied { write } for pid=5289 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3496.634361][ T24] audit: type=1400 audit(3495.750:210): avc: denied { write } for pid=5301 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3513.303387][ T24] audit: type=1400 audit(3512.500:211): avc: denied { write } for pid=5307 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3523.119201][ T24] audit: type=1400 audit(3522.300:212): avc: denied { write } for pid=5316 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3545.316337][ T24] audit: type=1400 audit(3544.380:213): avc: denied { write } for pid=5330 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3556.724615][ T24] audit: type=1400 audit(3555.900:214): avc: denied { write } for pid=5345 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3577.884439][ T5362] kvm [5362]: Failed to find VMA for hva 0x20c01000 [ 3589.783856][ T24] audit: type=1400 audit(3588.980:215): avc: denied { write } for pid=5367 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3601.284676][ T24] audit: type=1400 audit(3600.460:216): avc: denied { write } for pid=5376 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3620.667806][ T24] audit: type=1400 audit(3619.860:217): avc: denied { write } for pid=5386 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3630.640986][ T24] audit: type=1400 audit(3629.800:218): avc: denied { write } for pid=5399 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3655.113264][ T24] audit: type=1400 audit(3654.310:219): avc: denied { write } for pid=5414 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3666.236405][ T24] audit: type=1400 audit(3665.430:220): avc: denied { write } for pid=5422 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3732.329732][ T24] audit: type=1400 audit(3731.450:221): avc: denied { write } for pid=5455 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3743.076594][ T24] audit: type=1400 audit(3742.270:222): avc: denied { write } for pid=5464 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4108.819787][ T5677] kvm [5677]: Failed to find VMA for hva 0x20c01000 [ 4141.828022][ T24] audit: type=1400 audit(4141.010:223): avc: denied { write } for pid=5693 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4153.017657][ T24] audit: type=1400 audit(4152.210:224): avc: denied { write } for pid=5702 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4449.871670][ T24] audit: type=1400 audit(4449.000:225): avc: denied { write } for pid=5871 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4460.796687][ T24] audit: type=1400 audit(4459.960:226): avc: denied { write } for pid=5880 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5034.311984][ T24] audit: type=1400 audit(5033.500:227): avc: denied { write } for pid=6182 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5045.902742][ T24] audit: type=1400 audit(5045.100:228): avc: denied { write } for pid=6191 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5474.930269][ T24] audit: type=1400 audit(5474.120:229): avc: denied { write } for pid=6409 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5485.998778][ T24] audit: type=1400 audit(5485.160:230): avc: denied { write } for pid=6419 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5989.030611][ T24] audit: type=1400 audit(5988.190:231): avc: denied { write } for pid=6675 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5999.992963][ T24] audit: type=1400 audit(5999.100:232): avc: denied { write } for pid=6688 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6283.811387][ T6776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 6284.578485][ T6776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 6286.310433][ T6778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 6287.213934][ T6778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 6318.090437][ T6776] hsr_slave_0: entered promiscuous mode [ 6318.153473][ T6776] hsr_slave_1: entered promiscuous mode [ 6321.161606][ T6778] hsr_slave_0: entered promiscuous mode [ 6321.258779][ T6778] hsr_slave_1: entered promiscuous mode [ 6321.337319][ T6778] debugfs: 'hsr0' already exists in 'hsr' [ 6321.340488][ T6778] Cannot create hsr debugfs directory [ 6338.798713][ T6776] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 6339.421144][ T6776] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 6339.688225][ T6776] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 6340.113603][ T6776] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 6340.378548][ T6776] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 6340.883490][ T6776] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 6341.893336][ T6776] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 6342.090778][ T6776] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 6347.077877][ T6778] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 6347.540694][ T6778] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 6347.584029][ T6778] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 6347.983894][ T6778] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 6348.202966][ T6778] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 6348.574478][ T6778] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 6348.758869][ T6778] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 6349.011604][ T6778] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 6371.171847][ T6301] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6374.330125][ T6301] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6376.292383][ T6301] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6377.958889][ T6301] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6397.274199][ T6301] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 6397.432967][ T6301] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 6397.563408][ T6301] bond0 (unregistering): Released all slaves [ 6399.251929][ T6301] hsr_slave_0: left promiscuous mode [ 6399.432081][ T6301] hsr_slave_1: left promiscuous mode [ 6399.902674][ T6301] veth1_macvtap: left promiscuous mode [ 6399.959517][ T6301] veth0_macvtap: left promiscuous mode [ 6399.962508][ T6301] veth1_vlan: left promiscuous mode [ 6399.977408][ T6301] veth0_vlan: left promiscuous mode [ 6421.950364][ T6776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 6429.031694][ T6301] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6431.239702][ T6301] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6432.312183][ T6778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 6433.322923][ T6301] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6435.752232][ T6301] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6446.459798][ T24] audit: type=1400 audit(6445.630:233): avc: denied { write } for pid=6882 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6454.689245][ T24] audit: type=1400 audit(6453.870:234): avc: denied { write } for pid=6893 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6457.847800][ T6301] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 6458.118240][ T6301] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 6458.249675][ T6301] bond0 (unregistering): Released all slaves [ 6459.454818][ T3210] 8021q: adding VLAN 0 to HW filter on device eth13 [ 6460.141770][ T6301] hsr_slave_0: left promiscuous mode [ 6460.370537][ T6301] hsr_slave_1: left promiscuous mode [ 6461.402961][ T6301] veth1_macvtap: left promiscuous mode [ 6461.462112][ T6301] veth0_macvtap: left promiscuous mode [ 6461.478694][ T6301] veth1_vlan: left promiscuous mode [ 6461.528781][ T6301] veth0_vlan: left promiscuous mode [ 6494.252500][ T24] audit: type=1400 audit(6493.450:235): avc: denied { write } for pid=6900 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6504.257542][ T24] audit: type=1400 audit(6503.400:236): avc: denied { write } for pid=6908 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6522.938486][ T24] audit: type=1400 audit(6522.130:237): avc: denied { write } for pid=6922 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6529.782208][ T24] audit: type=1400 audit(6528.980:238): avc: denied { write } for pid=6932 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6534.533909][ T3210] 8021q: adding VLAN 0 to HW filter on device eth14 [ 6553.840096][ T24] audit: type=1400 audit(6553.030:239): avc: denied { write } for pid=6949 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6562.738578][ T24] audit: type=1400 audit(6561.820:240): avc: denied { write } for pid=6959 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6568.023181][ T3210] 8021q: adding VLAN 0 to HW filter on device eth15 [ 6582.980636][ T6776] veth0_vlan: entered promiscuous mode [ 6583.420410][ T24] audit: type=1400 audit(6582.620:241): avc: denied { write } for pid=6974 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6583.941084][ T6776] veth1_vlan: entered promiscuous mode [ 6586.939784][ T6776] veth0_macvtap: entered promiscuous mode [ 6587.333362][ T6776] veth1_macvtap: entered promiscuous mode [ 6590.790151][ T5426] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 6590.813447][ T3943] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 6590.819140][ T3943] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 6590.820067][ T3943] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 6592.404214][ T24] audit: type=1400 audit(6591.570:242): avc: denied { write } for pid=6981 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6593.258888][ T6778] veth0_vlan: entered promiscuous mode [ 6595.389714][ T6778] veth1_vlan: entered promiscuous mode [ 6598.304041][ T3210] 8021q: adding VLAN 0 to HW filter on device eth16 [ 6600.132040][ T6778] veth0_macvtap: entered promiscuous mode [ 6600.573107][ T6778] veth1_macvtap: entered promiscuous mode [ 6605.203834][ T41] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 6605.249550][ T41] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 6605.257306][ T41] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 6605.258169][ T41] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 6626.592447][ T24] audit: type=1400 audit(6625.770:243): avc: denied { write } for pid=6991 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6637.666698][ T24] audit: type=1400 audit(6636.860:244): avc: denied { write } for pid=7002 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6644.012963][ T3210] 8021q: adding VLAN 0 to HW filter on device eth17 [ 6663.880219][ T24] audit: type=1400 audit(6663.010:245): avc: denied { write } for pid=7007 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6675.997658][ T24] audit: type=1400 audit(6675.160:246): avc: denied { write } for pid=7022 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6684.143785][ T3210] 8021q: adding VLAN 0 to HW filter on device eth18 [ 6716.598869][ T24] audit: type=1400 audit(6715.690:247): avc: denied { write } for pid=7040 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6730.018929][ T24] audit: type=1400 audit(6729.170:248): avc: denied { write } for pid=7050 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6738.693328][ T3210] 8021q: adding VLAN 0 to HW filter on device eth19 [ 6768.927300][ T24] audit: type=1400 audit(6768.100:249): avc: denied { write } for pid=7066 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6782.479633][ T24] audit: type=1400 audit(6781.640:250): avc: denied { write } for pid=7079 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6792.254181][ T3210] 8021q: adding VLAN 0 to HW filter on device eth20 [ 6829.096738][ T24] audit: type=1400 audit(6828.250:251): avc: denied { write } for pid=7101 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6841.540458][ T24] audit: type=1400 audit(6840.600:252): avc: denied { write } for pid=7111 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6885.326766][ T24] audit: type=1400 audit(6884.440:253): avc: denied { write } for pid=7133 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6896.587409][ T24] audit: type=1400 audit(6895.770:254): avc: denied { write } for pid=7144 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6934.137479][ T24] audit: type=1400 audit(6933.310:255): avc: denied { write } for pid=7159 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6946.860375][ T24] audit: type=1400 audit(6946.030:256): avc: denied { write } for pid=7170 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6975.228788][ T24] audit: type=1400 audit(6974.420:257): avc: denied { write } for pid=7184 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6989.517374][ T24] audit: type=1400 audit(6988.570:258): avc: denied { write } for pid=7196 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7009.446498][ T24] audit: type=1400 audit(7008.610:259): avc: denied { write } for pid=7204 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7020.200232][ T24] audit: type=1400 audit(7019.390:260): avc: denied { write } for pid=7210 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7067.231455][ T24] audit: type=1400 audit(7066.390:261): avc: denied { write } for pid=7235 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7077.469042][ T24] audit: type=1400 audit(7076.540:262): avc: denied { write } for pid=7241 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7123.910904][ T24] audit: type=1400 audit(7123.110:263): avc: denied { write } for pid=7265 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7135.301207][ T24] audit: type=1400 audit(7134.440:264): avc: denied { write } for pid=7273 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7164.609321][ T24] audit: type=1400 audit(7163.790:265): avc: denied { write } for pid=7285 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7177.963067][ T24] audit: type=1400 audit(7177.030:266): avc: denied { write } for pid=7293 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7202.969120][ T24] audit: type=1400 audit(7202.020:267): avc: denied { write } for pid=7305 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7215.270382][ T24] audit: type=1400 audit(7214.450:268): avc: denied { write } for pid=7319 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7507.033134][ T24] audit: type=1400 audit(7506.100:269): avc: denied { write } for pid=7451 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7520.147519][ T24] audit: type=1400 audit(7519.290:270): avc: denied { write } for pid=7462 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7602.851350][ T6831] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 7604.270727][ T6831] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 7605.763716][ T6831] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 7607.222485][ T6831] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 7627.258119][ T6831] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 7627.957630][ T6831] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 7628.338159][ T6831] bond0 (unregistering): Released all slaves [ 7630.468873][ T6831] hsr_slave_0: left promiscuous mode [ 7630.587862][ T6831] hsr_slave_1: left promiscuous mode [ 7631.186737][ T6831] veth1_macvtap: left promiscuous mode [ 7631.187953][ T6831] veth0_macvtap: left promiscuous mode [ 7631.208428][ T6831] veth1_vlan: left promiscuous mode [ 7631.269284][ T6831] veth0_vlan: left promiscuous mode [ 7661.844288][ T7486] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 7663.109827][ T7486] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 7664.423044][ T7486] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 7666.039773][ T7486] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 7671.413652][ T24] audit: type=1400 audit(7670.610:271): avc: denied { write } for pid=7506 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7680.050856][ T24] audit: type=1400 audit(7679.160:272): avc: denied { write } for pid=7515 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7689.184008][ T7486] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 7689.541698][ T7486] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 7689.700815][ T7486] bond0 (unregistering): Released all slaves [ 7691.130131][ T3210] 8021q: adding VLAN 0 to HW filter on device eth21 [ 7691.610697][ T7486] hsr_slave_0: left promiscuous mode [ 7691.821423][ T7486] hsr_slave_1: left promiscuous mode [ 7692.503139][ T7486] veth1_macvtap: left promiscuous mode [ 7692.536741][ T7486] veth0_macvtap: left promiscuous mode [ 7692.568602][ T7486] veth1_vlan: left promiscuous mode [ 7692.581843][ T7486] veth0_vlan: left promiscuous mode [ 7726.591875][ T24] audit: type=1400 audit(7725.780:273): avc: denied { write } for pid=7528 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7733.036392][ T24] audit: type=1400 audit(7732.220:274): avc: denied { write } for pid=7540 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7737.591416][ T3210] 8021q: adding VLAN 0 to HW filter on device eth22 [ 7738.721359][ T7481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 7738.980017][ T7481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 7744.602026][ T7484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 7744.980985][ T7484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 7758.679349][ T24] audit: type=1400 audit(7757.850:275): avc: denied { write } for pid=7555 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7766.669844][ T24] audit: type=1400 audit(7765.860:276): avc: denied { write } for pid=7564 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7771.523082][ T3210] 8021q: adding VLAN 0 to HW filter on device eth23 [ 7773.266953][ T7481] hsr_slave_0: entered promiscuous mode [ 7773.334007][ T7481] hsr_slave_1: entered promiscuous mode [ 7778.144555][ T7484] hsr_slave_0: entered promiscuous mode [ 7778.303763][ T7484] hsr_slave_1: entered promiscuous mode [ 7778.361017][ T7484] debugfs: 'hsr0' already exists in 'hsr' [ 7778.407295][ T7484] Cannot create hsr debugfs directory [ 7787.546593][ T24] audit: type=1400 audit(7786.710:277): avc: denied { write } for pid=7575 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7793.791046][ T24] audit: type=1400 audit(7792.920:278): avc: denied { write } for pid=7579 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7796.038059][ T7481] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 7796.617808][ T7481] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 7796.832321][ T7481] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 7797.481617][ T7481] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 7797.714816][ T7481] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 7798.221206][ T7481] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 7799.160828][ T7481] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 7799.527845][ T7481] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 7799.683488][ T3210] 8021q: adding VLAN 0 to HW filter on device eth24 [ 7804.775067][ T7484] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 7805.193384][ T7484] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 7805.382431][ T7484] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 7805.970781][ T7484] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 7806.168152][ T7484] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 7806.726949][ T7484] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 7806.869672][ T7484] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 7807.327641][ T7484] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 7825.956950][ T24] audit: type=1400 audit(7825.110:279): avc: denied { write } for pid=7604 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7836.309197][ T24] audit: type=1400 audit(7835.450:280): avc: denied { write } for pid=7614 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7838.469668][ T7481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 7842.318474][ T3210] 8021q: adding VLAN 0 to HW filter on device eth25 [ 7844.222548][ T7484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 7855.341186][ T24] audit: type=1400 audit(7854.510:281): avc: denied { write } for pid=7620 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7865.917796][ T24] audit: type=1400 audit(7864.990:282): avc: denied { write } for pid=7631 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7900.119477][ T24] audit: type=1400 audit(7899.300:283): avc: denied { write } for pid=7643 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7909.171495][ T24] audit: type=1400 audit(7908.370:284): avc: denied { write } for pid=7653 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7915.431608][ T3210] 8021q: adding VLAN 0 to HW filter on device eth26 [ 7949.091933][ T24] audit: type=1400 audit(7948.260:285): avc: denied { write } for pid=7675 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7959.849208][ T24] audit: type=1400 audit(7959.010:286): avc: denied { write } for pid=7686 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7966.111952][ T3210] 8021q: adding VLAN 0 to HW filter on device eth28 [ 7992.698181][ T24] audit: type=1400 audit(7991.880:287): avc: denied { write } for pid=7703 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7996.290058][ T7481] veth0_vlan: entered promiscuous mode [ 7997.689665][ T7481] veth1_vlan: entered promiscuous mode [ 8002.374475][ T7481] veth0_macvtap: entered promiscuous mode [ 8004.158876][ T7481] veth1_macvtap: entered promiscuous mode [ 8005.597123][ T24] audit: type=1400 audit(8004.760:288): avc: denied { write } for pid=7712 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 8006.290379][ T7484] veth0_vlan: entered promiscuous mode [ 8009.022385][ T7484] veth1_vlan: entered promiscuous mode [ 8011.756946][ T7619] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 8011.780227][ T3435] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 8011.803749][ T3943] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 8011.851901][ T7603] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 8013.744695][ T3210] 8021q: adding VLAN 0 to HW filter on device eth27 [ 8017.254765][ T7484] veth0_macvtap: entered promiscuous mode [ 8019.078334][ T7484] veth1_macvtap: entered promiscuous mode [ 8024.696538][ T7486] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 8024.758601][ T4934] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 8024.764472][ T4934] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 8024.780891][ T4934] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 8055.409355][ T24] audit: type=1400 audit(8054.590:289): avc: denied { write } for pid=7724 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 8071.626997][ T24] audit: type=1400 audit(8070.700:290): avc: denied { write } for pid=7739 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 8118.852830][ T24] audit: type=1400 audit(8118.030:291): avc: denied { write } for pid=7750 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 8132.791057][ T24] audit: type=1400 audit(8131.980:292): avc: denied { write } for pid=7757 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 8173.016942][ T24] audit: type=1400 audit(8172.070:293): avc: denied { write } for pid=7776 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 8185.949039][ T24] audit: type=1400 audit(8185.010:294): avc: denied { write } for pid=7782 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 8230.847623][ T24] audit: type=1400 audit(8230.030:295): avc: denied { write } for pid=7802 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 8244.141191][ T7753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 8244.656819][ T24] audit: type=1400 audit(8243.800:296): avc: denied { write } for pid=7813 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 8244.733681][ T7753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 8262.873999][ T7759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 8263.612927][ T7759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 8276.944897][ T24] audit: type=1400 audit(8276.130:297): avc: denied { write } for pid=7825 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 8290.098739][ T24] audit: type=1400 audit(8289.290:298): avc: denied { write } for pid=7835 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 8301.300941][ T7753] hsr_slave_0: entered promiscuous mode [ 8301.567579][ T7753] hsr_slave_1: entered promiscuous mode [ 8301.690980][ T7753] debugfs: 'hsr0' already exists in 'hsr' [ 8301.719870][ T7753] Cannot create hsr debugfs directory [ 8321.984986][ T24] audit: type=1400 audit(8321.180:299): avc: denied { write } for pid=7844 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 8328.054973][ T7759] hsr_slave_0: entered promiscuous mode [ 8328.271286][ T7759] hsr_slave_1: entered promiscuous mode [ 8328.407214][ T7759] debugfs: 'hsr0' already exists in 'hsr' [ 8328.419954][ T7759] Cannot create hsr debugfs directory [ 8333.377037][ T24] audit: type=1400 audit(8332.550:300): avc: denied { write } for pid=7848 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 8346.037865][ T7753] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 8346.710989][ T7753] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 8349.303110][ T7753] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 8349.760416][ T7753] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 8351.177381][ T7753] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 8351.888838][ T7753] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 8355.529303][ T7753] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 8356.167811][ T7753] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 8379.389464][ T24] audit: type=1400 audit(8378.560:301): avc: denied { write } for pid=7862 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 8392.574837][ T7759] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 8393.271117][ T7759] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 8393.484568][ T7759] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 8394.064950][ T7759] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 8394.358383][ T7759] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 8394.912920][ T7759] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 8395.187787][ T7759] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 8395.714704][ T7759] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 8395.889074][ T24] audit: type=1400 audit(8394.930:302): avc: denied { write } for pid=7872 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 8420.169091][ T7753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 8440.202261][ T24] audit: type=1400 audit(8439.400:303): avc: denied { write } for pid=7892 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 8448.994794][ T7759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 8456.667996][ T24] audit: type=1400 audit(8455.840:304): avc: denied { write } for pid=7901 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 8486.237380][ T24] audit: type=1400 audit(8485.410:305): avc: denied { write } for pid=7909 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 8502.937111][ T24] audit: type=1400 audit(8502.110:306): avc: denied { write } for pid=7918 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 8504.321269][ T26] INFO: task syz.8.962:7736 blocked for more than 430 seconds. [ 8504.322084][ T26] Not tainted syzkaller #0 [ 8504.322799][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 8504.323296][ T26] task:syz.8.962 state:D stack:0 pid:7736 tgid:7736 ppid:7484 task_flags:0x400040 flags:0x00000011 [ 8504.458139][ T26] Call trace: [ 8504.458661][ T26] __switch_to+0x5e0/0xb70 (T) [ 8504.459333][ T26] __schedule+0x1e0c/0x38cc [ 8504.459861][ T26] schedule+0x1b4/0x274 [ 8504.460331][ T26] schedule_timeout+0x68/0x1e4 [ 8504.460882][ T26] wait_for_completion+0x1b8/0x414 [ 8504.461366][ T26] __synchronize_srcu+0x1c8/0x208 [ 8504.461880][ T26] synchronize_srcu+0x668/0x8dc [ 8504.462328][ T26] mmu_notifier_unregister+0x33c/0x444 [ 8504.462850][ T26] kvm_put_kvm+0x69c/0xbbc [ 8504.463392][ T26] kvm_vm_release+0x58/0x78 [ 8504.463873][ T26] __fput+0x4ac/0x978 [ 8504.464303][ T26] ____fput+0x20/0x30 [ 8504.464754][ T26] task_work_run+0x1b8/0x250 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 8504.634822][ T26] exit_to_user_mode_loop+0x110/0x188 [ 8504.680151][ T26] el0_svc+0x18c/0x240 [ 8504.680887][ T26] el0t_64_sync_handler+0x84/0x12c [ 8504.681426][ T26] el0t_64_sync+0x198/0x19c [ 8504.768194][ T26] [ 8504.768194][ T26] Showing all locks held in the system: [ 8504.791820][ T26] 1 lock held by khungtaskd/26: [ 8504.836409][ T26] #0: ffff800087e93598 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x4c/0x188 [ 8504.839501][ T26] 2 locks held by getty/3241: [ 8504.839920][ T26] #0: e7f000001236a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 8504.841699][ T26] #1: d3ff80008cbdb2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x314/0x11f8 [ 8504.843468][ T26] 2 locks held by syz-executor/3375: [ 8504.843830][ T26] 3 locks held by kworker/u4:5/3435: [ 8504.844131][ T26] 3 locks held by kworker/u4:2/3943: [ 8504.844465][ T26] 3 locks held by kworker/u4:9/5767: [ 8504.844796][ T26] 3 locks held by kworker/u4:8/6301: [ 8504.845091][ T26] 3 locks held by kworker/u4:10/6831: [ 8505.054382][ T26] #0: fff0000074ce14e0 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x364/0x38cc [ 8505.078567][ T26] #1: ffff80008c84f048 (&____s->seqcount#2){----}-{0:0}, at: ktime_get_real_ts64+0x80/0x364 [ 8505.080770][ T26] #2: fff0000074ccdc18 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x5cc/0xe90 [ 8505.082414][ T26] 2 locks held by kworker/u4:1/7401: [ 8505.082826][ T26] 2 locks held by kworker/u4:7/7603: [ 8505.083165][ T26] #0: fcf000000d034140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x958/0x154c [ 8505.084900][ T26] #1: ffff80008ea57ce8 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x978/0x154c [ 8505.240542][ T26] 3 locks held by kworker/u4:14/7619: [ 8505.240920][ T26] 2 locks held by syz.7.961/7731: [ 8505.241273][ T26] 2 locks held by kworker/u4:13/7868: [ 8505.241599][ T26] #0: fcf000000d034140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x958/0x154c [ 8505.243336][ T26] #1: ffff80008f5b7ce8 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x978/0x154c [ 8505.244997][ T26] 3 locks held by kworker/u4:15/7907: [ 8505.354643][ T26] #0: fff0000074ce14e0 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x364/0x38cc [ 8505.448836][ T26] #1: fff0000074ccc240 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x6c/0x6e8 [ 8505.450483][ T26] #2: fff0000074ccdc18 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x5cc/0xe90 [ 8505.452205][ T26] 2 locks held by dhcpcd-run-hook/7909: [ 8505.452554][ T26] 4 locks held by modprobe/7919: [ 8505.452862][ T26] 1 lock held by modprobe/7920: [ 8505.453369][ T26] [ 8505.453664][ T26] ============================================= [ 8505.453664][ T26] [ 8505.454654][ T26] Kernel panic - not syncing: hung_task: blocked tasks [ 8505.465114][ T26] CPU: 0 UID: 0 PID: 26 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT [ 8505.466575][ T26] Hardware name: linux,dummy-virt (DT) [ 8505.467546][ T26] Call trace: [ 8505.468254][ T26] show_stack+0x2c/0x3c (C) [ 8505.469327][ T26] __dump_stack+0x30/0x40 [ 8505.470366][ T26] dump_stack_lvl+0x30/0x12c [ 8505.471483][ T26] dump_stack+0x1c/0x28 [ 8505.472469][ T26] vpanic+0x4cc/0x844 [ 8505.473220][ T26] vpanic+0x0/0x844 [ 8505.474092][ T26] hung_task_panic+0x0/0x2c [ 8505.475073][ T26] kthread+0x4cc/0x514 [ 8505.476033][ T26] ret_from_fork+0x10/0x20 [ 8505.477899][ T26] Kernel Offset: disabled [ 8505.478714][ T26] CPU features: 0x00000000,00d1802f,df1847a1,057ffe1f [ 8505.479977][ T26] Memory Limit: none [ 8505.482226][ T26] Rebooting in 86400 seconds..