last executing test programs: 1h28m57.389687944s ago: executing program 1 (id=22): openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x2000007, 0x30d2a4fbfbea96b8, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0xa, 0xffffffffffffffff}) write$eventfd(r3, &(0x7f00000000c0)=0x2, 0xffffff75) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_kvm_vgic_v3_setup(r7, 0x4, 0x220) r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r11, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r8, 0x4018aee3, &(0x7f0000000240)=@attr_other={0x0, 0x6, 0x0, 0x0}) r12 = ioctl$KVM_CREATE_VM(r5, 0x80111500, 0x20000000) write$eventfd(r12, &(0x7f0000000000), 0xfffffdef) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0x80111500, 0x20000004) write$eventfd(r14, &(0x7f0000000000)=0xe0, 0xfdf8) ioctl$KVM_ARM_VCPU_INIT(0xffffffffffffffff, 0x4020aeae, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) 1h28m52.1249018s ago: executing program 0 (id=23): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) (async) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, 0x0) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000380)=[@its_setup={0x82, 0x28, {0x3, 0x1, 0x39d}}], 0x28}, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8002, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) (async) syz_kvm_vgic_v3_setup(r1, 0xffffffffffbffffc, 0x120) (async) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) (async) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x5, 0x4, &(0x7f0000000000)=0x8080000}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x4f832, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000240)=@attr_arm64={0x0, 0x4, 0x2, 0x0}) (async) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x7) 1h28m42.709198745s ago: executing program 0 (id=24): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r3, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000300)={0x8001, 0x55e}}) r4 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r7, 0x4018aee1, &(0x7f0000000000)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0x20e4586c}) syz_kvm_vgic_v3_setup(r5, 0x2, 0x100) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000100)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x7fff}}], 0x20}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r9, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r10, 0xae03, 0x7e) r11 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x25) ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, &(0x7f00000001c0)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000180)}) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f00000000c0)={0x5, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f00000002c0)=@attr_other={0x0, 0x8, 0x108, &(0x7f0000000000)=0xc000000000000000}) ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x4, 0x2, 0x0}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 1h28m42.104646114s ago: executing program 1 (id=25): ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000000)=@arm64) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f0000000040)={0x41000}) r0 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000480)={0x0, &(0x7f0000000080)=[@its_send_cmd={0xaa, 0x28, {0xd, 0x0, 0x0, 0x4, 0xfffffff2, 0x5, 0x1}}, @msr={0x14, 0x20, {0x603000000013c662, 0x5}}, @irq_setup={0x46, 0x18, {0x1, 0x3b3}}, @irq_setup={0x46, 0x18, {0x0, 0x1b2}}, @uexit={0x0, 0x18, 0x100}, @eret={0xe6, 0x18, 0x6}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x4, 0x4, 0xc}}, @smc={0x1e, 0x40, {0x32000000, [0x0, 0xc6, 0xef7, 0x1, 0x1]}}, @svc={0x122, 0x40, {0x2000, [0x3, 0xe78d, 0x4, 0x0, 0x1]}}, @hvc={0x32, 0x40, {0xc5000020, [0x0, 0x3, 0x485, 0x2, 0x8]}}, @svc={0x122, 0x40, {0x84000004, [0x68a0, 0xfffffffffffffffa, 0x4, 0x6, 0x10001]}}, @hvc={0x32, 0x40, {0xffff, [0x100000001, 0x101, 0xfffffffffffeffff, 0x9, 0x4f]}}, @mrs={0xbe, 0x18, {0x603000000013c010}}, @irq_setup={0x46, 0x18, {0x0, 0x196}}, @svc={0x122, 0x40, {0x84000009, [0xc, 0x2, 0x494, 0x5, 0x5]}}, @svc={0x122, 0x40, {0x84000053, [0xffffffffffffffff, 0x0, 0x100000001, 0x2, 0x7]}}, @mrs={0xbe, 0x18, {0x6030000000138004}}, @eret={0xe6, 0x18, 0x7fffffffffffffff}, @uexit={0x0, 0x18, 0x9}, @smc={0x1e, 0x40, {0x10, [0x8, 0x0, 0x7, 0xffffffffffff03fa, 0x7fff]}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x0, 0x0, 0xc, 0xaa32, 0x4, 0x3}}, @its_setup={0x82, 0x28, {0x4, 0x1, 0x31c}}, @eret={0xe6, 0x18, 0x80000001}, @irq_setup={0x46, 0x18, {0x4, 0xe1}}, @memwrite={0x6e, 0x30, @generic={0x5000, 0xbfe, 0x8, 0x1}}], 0x400}, &(0x7f00000004c0)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r0, 0x4004ae8b, &(0x7f0000000500)={0x77, "f6d672d57cbc2e12c583297cc81e3e1083b7931f55b6dec5efe1f85052d6907e702b46cb1593764535251b0e433cf8d47b6da9cf23cb4d58bc26976bfef292883d0ef954c7f99e4ecbffd3fa714286b6239343e804d32a00c886917b4d6cdecfb662fc95a48d68fa61797a433b74b5f45f4e5cc2ce5e5b"}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x8) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000580)={0x100000, 0x4000, 0x1}) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f00000005c0)={0xcf, "b7d707c3d2a354fbbd8d372af98b862a712348be4598fd2ea865740b764c541c72a4c472a653fec178b2120199bbb4dff83d5a5acfc90596171f7ffe0a1528a6b3119280706737c0e12367ddabce245e4431914f8d1c5dfabd8c2b5cb61604fe1db8f1d4cddcdbe71d9a941ec1d3a1fd695f82b752ca05a6564994cc98c020c13257adcba241fe0b6b997757029e9842b5680695f39954ec400d50bee98581a0d46ec612f55b6b4333d34aba8b3ed6bf92ebb1f795722a4521ffb665e797617ab099af4c66ebabc09810ad76ec7dd4"}) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f00000006c0)={0x10, "af75c0c2add7d3fedc1350d97f4b998d"}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700), 0x40a40, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x3b) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000740)={0xb, 0xffffffffffffffff, 0x1}) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000780)=0xa) syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000d80)={0x0, &(0x7f00000007c0)=[@hvc={0x32, 0x40, {0x86000000, [0x7, 0x401, 0x8001, 0x5, 0x2]}}, @irq_setup={0x46, 0x18, {0x2, 0xfc}}, @uexit={0x0, 0x18, 0x3}, @its_setup={0x82, 0x28, {0x3, 0x4, 0x1fa}}, @hvc={0x32, 0x40, {0x0, [0xffffffffffffffa2, 0x5, 0x7, 0x7fffffff, 0x3]}}, @irq_setup={0x46, 0x18, {0x0, 0x3bb}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x88, 0x300000000000000, 0x1}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xfffc, 0x4, 0x4}}, @its_send_cmd={0xaa, 0x28, {0xe, 0x0, 0x2, 0x2, 0x6, 0x3, 0x1}}, @its_setup={0x82, 0x28, {0x2, 0x0, 0x11d}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x20020, 0x10001, 0xa}}, @eret={0xe6, 0x18, 0x1ff}, @irq_setup={0x46, 0x18, {0x0, 0x3d8}}, @uexit={0x0, 0x18, 0x8}, @svc={0x122, 0x40, {0x0, [0x4, 0x8000000000000000, 0x7, 0x5, 0x2]}}, @its_setup={0x82, 0x28, {0x2, 0x0, 0x94}}, @code={0xa, 0x84, {"007008d5008008d50004000e0008a03c005c207ea0f187d20000b8f2a10080d2a20080d2e30180d2640180d2020000d460af87d20000b0f2810180d2e20080d2030180d2640180d2020000d40048214e601e90d20000b0f2e10080d2e20080d2230180d2c40180d2020000d4007008d5"}}, @smc={0x1e, 0x40, {0x80007fff, [0x8, 0xfffffffffffffffb, 0x8, 0x5, 0x5]}}, @eret={0xe6, 0x18, 0x9}, @uexit={0x0, 0x18, 0x9}, @its_setup={0x82, 0x28, {0x4, 0x1, 0x39f}}, @msr={0x14, 0x20, {0x603000000013c201, 0x2}}, @eret={0xe6, 0x18, 0x3}, @its_send_cmd={0xaa, 0x28, {0xa, 0x0, 0x4, 0xa, 0x5, 0xfffffffc, 0x2}}, @mrs={0xbe, 0x18, {0x603000000013e180}}, @eret={0xe6, 0x18, 0x8}, @code={0xa, 0x9c, {"7f2003d5007008d5a03b86d20000b8f2010080d2a20080d2e30180d2840080d2020000d40010202e007008d5609486d20060b8f2010180d2a20080d2e30080d2240180d2020000d4000028d5602597d200e0b0f2e10080d2c20080d2430080d2440180d2020000d4e0658fd20060b0f2210080d2020180d2630180d2a40180d2020000d4000028d5"}}, @hvc={0x32, 0x40, {0x40000000, [0xffffffffffffffd5, 0x3dd, 0x82, 0x7, 0x6]}}, @svc={0x122, 0x40, {0x4000, [0x2, 0x100000001, 0x5, 0x2, 0x1]}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x1, 0x3, 0xa, 0x9, 0xfff, 0x1}}, @uexit={0x0, 0x18, 0xf2}], 0x588}, &(0x7f0000000dc0)=[@featur1={0x1, 0x2}], 0x1) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r0, 0x4018aee2, &(0x7f0000000e40)=@attr_other={0x0, 0xfffffffb, 0x9f6, &(0x7f0000000e00)=0x8001}) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f0000000e80)={0x5, 0xeeee8000}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(r2, 0x4010aeab, &(0x7f0000000ec0)={0x7, 0x54000}) ioctl$KVM_CAP_ARM_USER_IRQ(r1, 0x4068aea3, &(0x7f0000000f00)) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000f80)="d99f62524a0f874f1c9f5e74901bdcda809ae15beee698bfeb51c546aaff5a1697dc848989b549290975b23ec698e406fd69ff648af9e38c4b00740eaf4880eb9d0e0cd516ad067f", 0x0, 0x48) r6 = eventfd2(0x7, 0x801) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000001000)={r6, 0x8, 0x1}) ioctl$KVM_ARM_VCPU_FINALIZE(r0, 0x4004aec2, &(0x7f0000001040)=0x4) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f00000010c0)=@riscv64_sbi_sta={0x803000000a000001, &(0x7f0000001080)=0xabe3}) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000001100)={r6, 0x2, 0x2, r6}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_SREGS(r7, 0x8000ae83, &(0x7f0000001140)) r8 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x0, 0x8, 0x11, r5, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f0000001280)="b2f1b2b9f9a28eb15428e184e762a3bcecd06e60e0fa250cb95d81a5222ba66ae45f738222f2ba614970cea082b2d10ca09758a71e6fce5da91e1701445e79e641838f729ea685ff", 0x0, 0x48) 1h28m37.112006206s ago: executing program 1 (id=26): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0x80111500, 0x20000000) write$eventfd(r0, 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x1}) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0xc2881, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) r7 = openat$kvm(0x0, &(0x7f0000000140), 0x101282, 0x0) r8 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000080)={0x0, &(0x7f0000000200)=[@svc={0x122, 0x40, {0x800, [0xffffffeffffffff8, 0x8, 0x8000000005, 0x5, 0x400]}}], 0x40}, 0x0, 0x0) (async) r10 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r7, 0xae04) mmap$KVM_VCPU(&(0x7f0000c0b000/0x1000)=nil, r10, 0x3, 0x40b2811, r9, 0x0) (async) ioctl$KVM_SET_SREGS(r9, 0x4000ae84, &(0x7f00000002c0)={{0x8000000, 0x10000, 0xe, 0x7f, 0x2, 0xf7, 0x1, 0x0, 0x0, 0xf9, 0x2, 0xfd}, {0x8000000, 0x200000, 0x0, 0x3, 0x10, 0x81, 0xb, 0x2, 0x0, 0xc4, 0x5, 0x6}, {0x60000, 0xeeee0000, 0x10, 0x6, 0x6, 0x1, 0x7, 0x2, 0x3, 0xb2, 0x63, 0x5}, {0xd000, 0x4b000, 0xb, 0x0, 0x9, 0x2, 0x9, 0x1, 0x3, 0x1, 0x8, 0x8}, {0xe000, 0x2, 0x0, 0x5, 0xb4, 0x8, 0x6, 0x1, 0x6, 0x4, 0x9, 0x7}, {0x11000, 0x60000, 0x3, 0x0, 0x2, 0x5f, 0x64, 0xf, 0x0, 0xd, 0x7, 0xc}, {0x4000, 0x0, 0x3, 0x2, 0xac, 0xd, 0x2, 0x2, 0xb3, 0x1, 0x80, 0x4}, {0x70000, 0xe000, 0x3, 0x2, 0xa, 0x31, 0x8, 0x5e, 0x6, 0x7, 0x1d}, {0x3000, 0xe}, {0x1, 0x3}, 0x10, 0x0, 0x70000, 0x202, 0x7, 0x900, 0xb000, [0x7ff, 0x1, 0x0, 0x4]}) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r11 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x3, 0x1, 0x1}}], 0x28}, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x5, 0x4, &(0x7f0000000200)=0x100000001}) (async) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000000)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x8, 0xf, 0x0, 0x5, 0x6, 0x6, 0x6, 0x54, 0x86, 0xdd, 0x68, 0x0, 0x20b, 0x0, 0x0, 0x3, 0x5, 0x5, '\x00', 0x1, 0x3}) (async) write$eventfd(r12, &(0x7f00000001c0)=0x3, 0x50) 1h28m32.266846636s ago: executing program 0 (id=27): ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x24) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x13, r3, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f00003af000/0x400000)=nil) eventfd2(0x0, 0x0) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000080)={0x0, &(0x7f0000000000)=[@irq_setup={0x5, 0x18, {0x1, 0x20}}], 0x18}, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_IRQ_LINE_STATUS(r5, 0xc008ae67, &(0x7f00000000c0)={0x9, 0x2}) r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000040)={0x0, &(0x7f0000000980)=[@code={0xa, 0x6c, {"007008d540299ad200e0b8f2010080d2420180d2830080d2e40080d2020000d4007c001b00fc005f000010d500c0000f802492d20040b8f2210080d2820180d2830080d2440180d2020000d4000000eb00f8b02e00004093"}}, @hvc={0x32, 0x40, {0x84000053, [0x4, 0x4, 0x100000001, 0x40, 0xe0]}}, @uexit={0x0, 0x18, 0xfe}, @mrs={0xbe, 0x18, {0x603000000013e08f}}, @hvc={0x32, 0x40, {0xc4000007, [0x100000001, 0xc, 0x80000001, 0x6, 0x3]}}, @msr={0x14, 0x20, {0x603000000013df4c, 0x100000000}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x0, 0x0, 0xe, 0xbb, 0xfffffffd, 0x2}}, @code={0xa, 0x84, {"008008d5007008d5007008d5802f9bd20080b8f2210080d2620080d2430180d2640180d2020000d40000641e00008092000008d5000000cb209d80d200c0b0f2410180d2420080d2230080d2e40080d2020000d4c04188d20040b8f2810180d2c20080d2c30180d2c40180d2020000d4"}}, @msr={0x14, 0x20, {0x6030000000138016, 0xfffffffffffffff0}}, @mrs={0xbe, 0x18, {0x603000000013c2a9}}, @its_setup={0x82, 0x28, {0x0, 0x1, 0x115}}], 0x248}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r5, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000240)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) r12 = syz_kvm_add_vcpu$arm64(r6, &(0x7f00000008c0)={0x0, &(0x7f0000000280)=[@smc={0x1e, 0x40, {0xc4000053, [0xe69, 0x6, 0x0, 0x4]}}, @mrs={0xbe, 0x18, {0x603000000013df43}}, @smc={0x1e, 0x40, {0xc5000020, [0x0, 0x0, 0xfff, 0x700]}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xffe8, 0x9, 0x9}}, @mrs={0xbe, 0x18, {0x603000000013debc}}, @svc={0x122, 0x40, {0x84000010, [0x2, 0x9, 0x7, 0x5, 0x1]}}, @code={0xa, 0x6c, {"80f896d200c0b8f2610080d2020080d2030080d2240080d2020000d4007008d50060800d1f00002be0c683d20020b8f2e10080d2a20180d2430180d2a40180d2020000d40000005400f4a02e007008d5008008d50004007f"}}, @mrs={0xbe, 0x18, {0x603000000013de90}}, @svc={0x122, 0x40, {0x10, [0x5, 0x5, 0x3964ab32, 0x5, 0x9]}}, @its_send_cmd={0xaa, 0x28, {0x5, 0x1, 0x4, 0x2, 0x4, 0x9, 0x3}}, @msr={0x14, 0x20, {0x6030000000138077, 0x7}}, @eret={0xe6, 0x18, 0x3}, @its_setup={0x82, 0x28, {0x0, 0x2, 0x1fa}}, @uexit={0x0, 0x18, 0x3}, @uexit={0x0, 0x18, 0x2}, @eret={0xe6, 0x18}, @eret={0xe6, 0x18, 0x37}, @svc={0x122, 0x40, {0x1, [0x7, 0x6, 0x1, 0x6, 0x6]}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x0, 0x0, 0x0, 0x2, 0x7, 0x4}}, @code={0xa, 0xb4, {"a0bc98d20040b8f2410080d2020080d2830080d2240080d2020000d4007008d5404282d20000b0f2610080d2220180d2830080d2640080d2020000d4600792d20080b8f2610080d2220180d2830180d2840080d2020000d4000008d5008008d5401b99d200e0b0f2610180d2a20180d2a30180d2840180d2020000d4007008d5a00f81d20040b0f2e10180d2a20080d2230080d2640080d2020000d4007008d5"}}, @irq_setup={0x46, 0x18, {0x1, 0x1ae}}, @svc={0x122, 0x40, {0x8400000d, [0x9, 0x40, 0x1, 0x4]}}, @svc={0x122, 0x40, {0x800, [0x2, 0x9, 0x8, 0xf033, 0x3]}}, @eret={0xe6, 0x18, 0x1}, @its_setup={0x82, 0x28, {0x0, 0x0, 0x17d}}, @smc={0x1e, 0x40, {0x8, [0xfffffffffffffff9, 0x1, 0x0, 0xfffffffffffffffc, 0x7]}}, @memwrite={0x6e, 0x30, @generic={0xdddd1000, 0xb84, 0x3, 0xc}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80c0000, 0x300, 0xffffffffffffffff, 0xd}}, @svc={0x122, 0x40, {0xffff, [0x0, 0x1000000000000, 0x3, 0x5, 0x7fffffff]}}, @eret={0xe6, 0x18, 0xd73}, @msr={0x14, 0x20, {0x603000000013f510, 0x7c}}, @uexit={0x0, 0x18, 0xff}], 0x5f0}, &(0x7f0000000900)=[@featur2={0x1, 0x12}], 0x1) ioctl$KVM_S390_VCPU_FAULT(r12, 0x4008ae52, &(0x7f0000000940)=0x7678) ioctl$KVM_RUN(r10, 0xae80, 0x0) r13 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2040, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) munmap(&(0x7f0000011000/0xc00000)=nil, 0xc00000) ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f0000000000)=@attr_arm64={0x0, 0x4, 0x1, 0x0}) 1h28m30.160060944s ago: executing program 1 (id=28): r0 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f00000001c0)={0x0, &(0x7f0000000000)=[@code={0xa, 0x84, {"000008d5800c81d20020b0f2410180d2020180d2030180d2440180d2020000d400008072007008d5007008d540e493d20080b0f2c10180d2820080d2230080d2c40180d2020000d4000000fa0000000ee0f19ed200e0b0f2610180d2820180d2030080d2e40080d2020000d4000028d5"}}, @svc={0x122, 0x40, {0x40, [0xaec, 0x1310fe0e, 0x7fffffffffffffff, 0xcb22, 0xffffffffffffffc2]}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x0, 0x0, 0x10, 0x10001, 0xa, 0x1}}, @eret={0xe6, 0x18, 0x8000000000000001}, @code={0xa, 0x84, {"80b387d200a0b8f2010080d2e20180d2830080d2e40180d2020000d400a8a15e406387d20020b8f2810080d2c20080d2430180d2040180d2020000d4007008d540ca82d20000b0f2e10180d2c20080d2c30080d2440180d2020000d4007008d50074005f007008d5007008d500808008"}}, @mrs={0xbe, 0x18, {0x603000000013c608}}], 0x1a0}, &(0x7f0000000200)=[@featur2={0x1, 0x61}], 0x1) ioctl$KVM_SET_GUEST_DEBUG_arm64(r0, 0x4208ae9b, &(0x7f0000000240)={0x2, 0x0, {[0x9, 0x2, 0x3, 0xfffffffeffffffff, 0x40, 0x80000001, 0x5, 0xe9, 0xfffffffffffffff6, 0x5, 0x4, 0x5, 0x9b72, 0xa44, 0x8, 0x100000001], [0x3, 0x8, 0x2, 0x5, 0xe, 0x9, 0x6, 0x7ff, 0x3690d655, 0xed6, 0x61, 0x101, 0x8, 0x8, 0x38000, 0xb], [0x5, 0x80000000, 0xf0, 0x1, 0x6, 0x0, 0xb4c, 0x9, 0x7, 0xd32b, 0x1, 0x5, 0x8, 0x89b3, 0x61, 0x7], [0x4, 0xfffffffffffffffa, 0xe, 0xffff, 0x2, 0x6, 0x8001, 0x2, 0x49e, 0x4, 0x0, 0xa2, 0x8, 0x3, 0x7, 0x8000]}}) r1 = ioctl$KVM_GET_STATS_FD_cpu(r0, 0xaece) syz_kvm_vgic_v3_setup(r1, 0x0, 0x100) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000bff000/0x400000)=nil) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) r3 = mmap$KVM_VCPU(&(0x7f0000cf9000/0x3000)=nil, 0x0, 0x4, 0x2010, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000480)="9eab8f4ef7d3cc32e9ce759a2300b00854a550a93cf8584e26730281e51e326afd343b1074b3a40fa3e76c7eda6cfaab9e2189304507584185dc306f6322d18ae500e32256e3c930", 0x0, 0x48) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f0000000540)=@arm64_fw={0x6030000000140002, &(0x7f0000000500)=0x1}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x20000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x2f) r6 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000680)={0x0, &(0x7f00000005c0)=[@smc={0x1e, 0x40, {0x84000003, [0x6, 0x34f71703, 0x101, 0x2, 0x41e3]}}, @eret={0xe6, 0x18, 0x2}, @msr={0x14, 0x20, {0x603000000013801f, 0x3}}, @irq_setup={0x46, 0x18, {0x2, 0x22d}}], 0x90}, &(0x7f00000006c0)=[@featur1={0x1, 0x12}], 0x1) ioctl$KVM_RUN(r6, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000700), 0x402, 0x0) r7 = eventfd2(0x6, 0x80000) r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) mmap$KVM_VCPU(&(0x7f0000cb7000/0x1000)=nil, r8, 0x0, 0x2010, r6, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000740)={0x0, 0x100000, 0x0, r7, 0x9}) r9 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000940)={0x0, &(0x7f0000000780)=[@uexit={0x0, 0x18, 0x5}, @mrs={0xbe, 0x18, {0x603000000013deae}}, @mrs={0xbe, 0x18, {0x603000000013e666}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x1, 0x2, 0xa, 0x7, 0x2, 0x2}}, @mrs={0xbe, 0x18, {0x603000000013df59}}, @code={0xa, 0x6c, {"0068212e001e98d200a0b0f2210180d2820080d2830080d2640180d2020000d4007008d5000c202e603697d200c0b0f2810080d2020180d2230180d2a40180d2020000d40004000e008008d5007008d5000008d50054200e"}}, @eret={0xe6, 0x18, 0x800}, @hvc={0x32, 0x40, {0xc4000004, [0x8, 0x6, 0x3, 0x7fffffffffffffff, 0x1]}}, @hvc={0x32, 0x40, {0x84000050, [0x7, 0x5, 0x7, 0x5960, 0x4]}}, @uexit={0x0, 0x18, 0x4}, @irq_setup={0x46, 0x18, {0x0, 0x154}}], 0x1bc}, &(0x7f0000000980)=[@featur1={0x1, 0x424b4fb85fb5e0ce}], 0x1) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_DIRTY_TLB(r9, 0x4010aeaa, &(0x7f00000009c0)={0xfffffffffffffff7, 0x7}) ioctl$KVM_GET_VCPU_EVENTS(r9, 0x8040ae9f, &(0x7f0000000a00)=@arm64) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000a40)={0x5}) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000a80)=@arm64={0x9, 0x0, 0x8, '\x00', 0x98a}) ioctl$KVM_SET_GUEST_DEBUG_arm64(r0, 0x4208ae9b, &(0x7f0000000ac0)={0x30000, 0x0, {[0x40, 0x4, 0x1, 0x4, 0x6, 0x9, 0x1, 0xb8, 0x7f, 0x3, 0xfffffffffffffffc, 0x6, 0x78c, 0x40, 0x92e, 0xc4], [0x10000, 0x1ff, 0x8, 0x8a, 0x50e, 0x2, 0x7, 0x4000000080000000, 0x8, 0x6, 0x0, 0x0, 0x401, 0x1ff, 0x9, 0x3], [0x7ff, 0xed7c, 0x9f, 0x0, 0x2, 0x3, 0x5aaa, 0x0, 0x4, 0x7fffffffffffffff, 0x0, 0x2, 0x2, 0x8000000000000001, 0xe4ae, 0x9], [0xfffffffffffffffb, 0x5, 0x3, 0x8000000000000000, 0x2, 0xffffffffc1289247, 0xffffffff, 0x9, 0x4, 0x2, 0x1, 0x18e, 0x2, 0x7fffffffffffffff, 0x2, 0x5]}}) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f0000000d00)={0x1, [0x7]}) r10 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000001240)={0x0, &(0x7f0000000d40)=[@msr={0x14, 0x20, {0x603000000013804f, 0x1}}, @uexit={0x0, 0x18, 0x285}, @its_send_cmd={0xaa, 0x28, {0xc, 0x1, 0x9, 0xe, 0x5, 0x3}}, @code={0xa, 0x84, {"0000600d000008d5007008d5007008d5000008d580358ad200c0b0f2810180d2420080d2830180d2a40080d2020000d400128cd200c0b8f2210180d2c20180d2430080d2040180d2020000d400ca84d20040b8f2e10080d2a20080d2e30180d2840080d2020000d4000028d50010000e"}}, @hvc={0x32, 0x40, {0x20, [0x1, 0x4, 0x80000000, 0x5, 0x80000001]}}, @msr={0x14, 0x20, {0x603000000013c019, 0x80000000}}, @uexit={0x0, 0x18, 0xfffffffffffffffc}, @irq_setup={0x46, 0x18, {0x3, 0x2d8}}, @msr={0x14, 0x20, {0x603000000013f289, 0x526}}, @irq_setup={0x46, 0x18, {0x1, 0x3a}}, @mrs={0xbe, 0x18, {0x603000000013d000}}, @eret={0xe6, 0x18, 0x2}, @mrs={0xbe, 0x18, {0x6030000000138056}}, @mrs={0xbe, 0x18, {0x603000000013df47}}, @code={0xa, 0x84, {"00008052000c007c001ca02ec06e91d20000b0f2a10180d2620180d2c30080d2040180d2020000d400000013007f92d200a0b8f2610180d2820080d2a30180d2440080d2020000d4007008d5000008d5000008d5c06d82d20040b8f2010180d2020080d2e30180d2e40080d2020000d4"}}, @mrs={0xbe, 0x18, {0x603000000013da20}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x4, 0x5, 0x8}}, @hvc={0x32, 0x40, {0x1000000, [0xfffffffffffffffd, 0x678, 0x8001, 0x3, 0x2]}}, @code={0xa, 0x84, {"007008d540fc8ed200e0b0f2410080d2a20080d2e30180d2e40080d2020000d40040000e001c602ea08894d20020b0f2210180d2a20080d2030180d2040080d2020000d4003c4093007008d5000c202e00000013600e90d20000b8f2c10180d2220080d2830080d2c40180d2020000d4"}}, @irq_setup={0x46, 0x18, {0x4, 0x102}}, @svc={0x122, 0x40, {0x84000002, [0x7, 0xf, 0x1c0, 0xba, 0x80000001]}}, @irq_setup={0x46, 0x18, {0x3, 0x2c6}}, @eret={0xe6, 0x18, 0x9}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0xd00, 0x3, 0x3}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x8100000, 0x380, 0x3, 0x2}}, @msr={0x14, 0x20, {0x603000000013def7, 0x3}}, @hvc={0x32, 0x40, {0x31000000, [0x8, 0x98, 0x7, 0x10000, 0x4]}}, @eret={0xe6, 0x18, 0x100000001}], 0x4fc}, &(0x7f0000001280)=[@featur1={0x1, 0x84}], 0x1) ioctl$KVM_GET_STATS_FD_cpu(r10, 0xaece) 1h28m20.525935272s ago: executing program 1 (id=29): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x10000, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2002e) r2 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async) mmap$KVM_VCPU(&(0x7f0000f2b000/0x3000)=nil, 0x0, 0x3000002, 0x112, 0xffffffffffffffff, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x2a) syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) (async) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, 0x0) r5 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000b80)={0x0, &(0x7f00000000c0)=[@hvc={0x32, 0x40, {0x84000015, [0x7, 0x8000000000000000, 0xffffffffffffffff, 0xee24, 0xfffffffffffeffff]}}], 0x40}, &(0x7f0000000040)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_CAP_ARM_MTE(r1, 0x4068aea3, &(0x7f00000000c0)={0xf5}) 1h28m20.372337775s ago: executing program 0 (id=30): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x2}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x1, 0x80000, 0xfffd, 0x0, 0x0, 0x2}}], 0x50}, 0x0, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r6, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6ab0000000037c4b85400005a9610fbff67521ce16f8f1f44927a835673312b54ebb2aa76c869d22627a4702d8a00", 0x0, 0xffffffffffffff3e) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r6, 0x0) r8 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000000)=@arm64_sys={0x603000000013c102, &(0x7f0000000140)=0x1}) ioctl$KVM_KVMCLOCK_CTRL(r3, 0xaead) ioctl$KVM_CREATE_VM(r8, 0x401c5820, 0x20000007) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x6) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34) ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000000)={0x9, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1h28m14.594769937s ago: executing program 1 (id=31): munmap(&(0x7f0000011000/0xc00000)=nil, 0xc00000) r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x2}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x1, 0x1, 0x10002, 0xfffffff9, 0x0, 0x2}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) munmap(&(0x7f0000d8f000/0x4000)=nil, 0x4000) munmap(&(0x7f0000cee000/0x4000)=nil, 0x4000) mmap$KVM_VCPU(&(0x7f0000c58000/0x4000)=nil, 0x930, 0x200000a, 0x80031, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x3000000, 0x4d832, 0xffffffffffffffff, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r8, 0x0) r9 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r7, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffc000/0x3000)=nil, r9, 0x1, 0x11, r8, 0x0) r10 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r7, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, r10, 0x8, 0x13, r8, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x4000)=nil, r10, 0x0, 0x12, r8, 0x0) r11 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f00000002c0)={0x0, &(0x7f0000000000)=[@hvc={0x32, 0x40, {0xc400000e, [0xffffffffffffff01, 0x8, 0x100, 0x8, 0x2]}}, @msr={0x14, 0x20, {0x603000000013e6d9, 0xffff}}, @mrs={0xbe, 0x18, {0x6030000000138075}}, @hvc={0x32, 0x40, {0xc4000001, [0x8c, 0x9, 0x3, 0x6, 0x4]}}, @its_setup={0x82, 0x28, {0x0, 0x3, 0x16b}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x8100000, 0xffe8, 0x1, 0x6}}, @its_setup={0x82, 0x28, {0x0, 0x3, 0x375}}, @irq_setup={0x46, 0x18, {0x1, 0x248}}, @msr={0x14, 0x20, {0x603000000013f528, 0x1}}, @hvc={0x32, 0x40, {0x0, [0x1, 0x12, 0x2, 0x3, 0x10]}}, @irq_setup={0x46, 0x18, {0x4, 0x393}}, @smc={0x1e, 0x40, {0x1000, [0x7, 0x747e, 0x4, 0x2, 0x9]}}, @mrs={0xbe, 0x18, {0x603000000013de98}}, @msr={0x14, 0x20, {0x603000000013e6c1, 0x4}}, @code={0xa, 0x3c, {"000040b900a0a00d0028c01a0050005e0040204e0000000d0048216e0030000f000028d500800048"}}, @hvc={0x32, 0x40, {0x2000000, [0x6, 0x1d7, 0x4, 0x9, 0x72]}}], 0x2bc}, &(0x7f0000000300), 0x1) mmap$KVM_VCPU(&(0x7f0000bb4000/0x4000)=nil, r10, 0x0, 0x110, r11, 0x0) 1h27m34.061253569s ago: executing program 32 (id=30): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x2}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x1, 0x80000, 0xfffd, 0x0, 0x0, 0x2}}], 0x50}, 0x0, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r6, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6ab0000000037c4b85400005a9610fbff67521ce16f8f1f44927a835673312b54ebb2aa76c869d22627a4702d8a00", 0x0, 0xffffffffffffff3e) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r6, 0x0) r8 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000000)=@arm64_sys={0x603000000013c102, &(0x7f0000000140)=0x1}) ioctl$KVM_KVMCLOCK_CTRL(r3, 0xaead) ioctl$KVM_CREATE_VM(r8, 0x401c5820, 0x20000007) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x6) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34) ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000000)={0x9, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1h27m28.460901335s ago: executing program 33 (id=31): munmap(&(0x7f0000011000/0xc00000)=nil, 0xc00000) r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x2}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x1, 0x1, 0x10002, 0xfffffff9, 0x0, 0x2}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) munmap(&(0x7f0000d8f000/0x4000)=nil, 0x4000) munmap(&(0x7f0000cee000/0x4000)=nil, 0x4000) mmap$KVM_VCPU(&(0x7f0000c58000/0x4000)=nil, 0x930, 0x200000a, 0x80031, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x3000000, 0x4d832, 0xffffffffffffffff, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r8, 0x0) r9 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r7, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffc000/0x3000)=nil, r9, 0x1, 0x11, r8, 0x0) r10 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r7, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, r10, 0x8, 0x13, r8, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x4000)=nil, r10, 0x0, 0x12, r8, 0x0) r11 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f00000002c0)={0x0, &(0x7f0000000000)=[@hvc={0x32, 0x40, {0xc400000e, [0xffffffffffffff01, 0x8, 0x100, 0x8, 0x2]}}, @msr={0x14, 0x20, {0x603000000013e6d9, 0xffff}}, @mrs={0xbe, 0x18, {0x6030000000138075}}, @hvc={0x32, 0x40, {0xc4000001, [0x8c, 0x9, 0x3, 0x6, 0x4]}}, @its_setup={0x82, 0x28, {0x0, 0x3, 0x16b}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x8100000, 0xffe8, 0x1, 0x6}}, @its_setup={0x82, 0x28, {0x0, 0x3, 0x375}}, @irq_setup={0x46, 0x18, {0x1, 0x248}}, @msr={0x14, 0x20, {0x603000000013f528, 0x1}}, @hvc={0x32, 0x40, {0x0, [0x1, 0x12, 0x2, 0x3, 0x10]}}, @irq_setup={0x46, 0x18, {0x4, 0x393}}, @smc={0x1e, 0x40, {0x1000, [0x7, 0x747e, 0x4, 0x2, 0x9]}}, @mrs={0xbe, 0x18, {0x603000000013de98}}, @msr={0x14, 0x20, {0x603000000013e6c1, 0x4}}, @code={0xa, 0x3c, {"000040b900a0a00d0028c01a0050005e0040204e0000000d0048216e0030000f000028d500800048"}}, @hvc={0x32, 0x40, {0x2000000, [0x6, 0x1d7, 0x4, 0x9, 0x72]}}], 0x2bc}, &(0x7f0000000300), 0x1) mmap$KVM_VCPU(&(0x7f0000bb4000/0x4000)=nil, r10, 0x0, 0x110, r11, 0x0) 1h19m16.219312759s ago: executing program 3 (id=62): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f00000001c0)="fb0149dd833be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8faa767969d22627e700", 0x0, 0x48) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x2e) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r6, 0x4018aee2, &(0x7f0000000180)=@attr_other={0x0, 0x2, 0x7f, 0x0}) r7 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = openat$kvm(0x0, 0x0, 0x40000, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000000)={0x2, 0x80a0000, 0x0, r8, 0x4fd0f096b459bd7b}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x400, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000000000/0x400000)=nil, &(0x7f00000003c0)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r10 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r5, 0x4068aea3, &(0x7f00000000c0)={0xdf, 0x0, 0x8000}) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x1) syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil) r12 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x25) ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f00000001c0)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r14, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000380)}) ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r13, 0x4020ae46, &(0x7f00000000c0)={0x5, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) 1h18m52.831337681s ago: executing program 3 (id=64): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ARM_VCPU_INIT(r3, 0x4020aeae, &(0x7f0000000040)={0x5}) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x100000c, 0x6832, 0xffffffffffffffff, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000f0a000/0x3000)=nil, r4, 0x4, 0x10, r3, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x1}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x9, 0xf, 0x0, 0x5, 0x6, 0x6, 0x6, 0x47, 0x8a, 0xdd, 0xcc, 0x0, 0xce, 0x5, 0x4, 0x3, 0xf8, 0x8, '\x00', 0x1, 0x400000000002}) ioctl$KVM_INTERRUPT(r3, 0x4004ae86, &(0x7f0000000000)=0x1000) write$eventfd(r8, &(0x7f00000001c0)=0x3, 0x50) r9 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r9, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x2}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x1, 0x80000, 0xfffd, 0x0, 0x0, 0x2}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r5, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) 1h18m42.440548968s ago: executing program 2 (id=66): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x238701, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000000c0)={0x7, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, 0xffffffffffffffff) 1h18m37.488979219s ago: executing program 3 (id=67): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x4}}], 0x28}, 0x0, 0x0) r4 = syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x2b) ioctl$KVM_REGISTER_COALESCED_MMIO(r7, 0x4010ae67, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r7, 0x4010ae68, &(0x7f0000001480)={0xfffffffffffffdfd, 0x13000, 0xffffffff}) (async) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r7, 0x4010ae68, &(0x7f0000001480)={0xfffffffffffffdfd, 0x13000, 0xffffffff}) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x4, 0x3, 0x0}) (async) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x4, 0x3, 0x0}) 1h18m33.44699531s ago: executing program 2 (id=68): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) write$eventfd(0xffffffffffffffff, &(0x7f00000001c0)=0xfffffffffffffdff, 0x8) (async) r3 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f00000000c0)={0x0, &(0x7f0000000040)=[@smc={0x1e, 0x40, {0xc400000e, [0x99b, 0x100000001, 0x5, 0x101, 0x10]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x24}], 0x1) r5 = ioctl$KVM_GET_STATS_FD_cpu(r4, 0xaece) (async) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x0, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) (async, rerun: 32) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) (rerun: 32) r6 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 32) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) (rerun: 32) mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r9, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000000)=@x86={0xc0, 0xc, 0xf, 0x0, 0xc81, 0x8, 0x80, 0xf, 0x8, 0xb6, 0x81, 0x9, 0x0, 0x4, 0x8, 0x0, 0x8, 0xe9, 0x1, '\x00', 0x0, 0x800002}) mmap$KVM_VCPU(&(0x7f0000e04000/0x2000)=nil, 0x930, 0x1, 0x11, r9, 0x0) (async) r10 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r8, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, r10, 0x8, 0x13, r9, 0x0) (async, rerun: 32) mmap$KVM_VCPU(&(0x7f0000ffd000/0x2000)=nil, r10, 0x1000001, 0x12, r9, 0x0) (async, rerun: 32) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b6565d2f1, 0xffffffffffffffff, 0x0) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000080)={0xffffffffffffffff, 0x2, 0x0, r4}) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) (async) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x1, 0x8, 0xb, 0x0, 0x2, 0x6, 0x6, 0x9, 0x8, 0x8, 0x6, 0x2, 0x0, 0x6, 0x6, 0xe2, 0x1, 0x29, 0x0, '\x00', 0x10, 0x6}) r11 = openat$kvm(0x0, 0x0, 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, &(0x7f0000000000)={0x7}) (async, rerun: 64) eventfd2(0x0, 0x0) (rerun: 64) 1h18m25.290888181s ago: executing program 3 (id=69): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000b80)={0x0, &(0x7f0000000100)=[@smc={0x1e, 0x40, {0x8400000a, [0x84000003, 0xa, 0x0, 0x6, 0xf]}}], 0x40}, &(0x7f00000000c0)=[@featur1={0x1, 0x4}], 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_IRQ_LINE(r6, 0x4008ae61, 0xffffffffffffffff) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x2, 0x2, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r8, 0x4018aee1, &(0x7f0000000000)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0x2}) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee3, 0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) munmap$KVM_VCPU(0x0, 0x1000000000) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) r9 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000100)={0x0, &(0x7f0000000000)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x4, 0x1, 0x40000003, 0x10000, 0x3, 0x105, 0x2}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r10, 0x1, 0x100) r13 = ioctl$KVM_GET_STATS_FD_vm(r6, 0xaece) ioctl$KVM_SET_USER_MEMORY_REGION2(r10, 0x40a0ae49, &(0x7f0000000240)={0x1ff, 0x2, 0x5000, 0x1000, &(0x7f0000f54000/0x1000)=nil, 0x9, r13}) ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r14, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r12, 0xae80, 0x0) syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000b0b000/0x400000)=nil) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1h18m24.135582413s ago: executing program 2 (id=70): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) (async, rerun: 64) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 64) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x1, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x67, 0x1, 0xb, 0x0, 0x0, 0x7, 0x1, 0xf, 0xa3, 0x0, 0x6, 0xaa, 0x0, 0x3, 0x6, 0x8, 0x9f, 0x4, 0x9, '\x00', 0x1, 0x1}) (async, rerun: 64) write$eventfd(r2, &(0x7f00000001c0)=0x9, 0x5d) (async, rerun: 64) r3 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f00000003c0)={0x0, &(0x7f0000000200)=[@mrs={0xbe, 0x18, {0x603000000013def0}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x0, 0x1, 0x4, 0xbac, 0x4, 0x1}}, @hvc={0x32, 0x40, {0x3f000000, [0x1, 0x8, 0x9b40, 0x1, 0x4cc]}}, @smc={0x1e, 0x40, {0xc5000020, [0x0, 0x401, 0x4, 0x9, 0x6]}}, @msr={0x14, 0x20, {0x603000000013da29, 0xc}}, @irq_setup={0x46, 0x18, {0x4, 0x2fb}}, @code={0xa, 0x54, {"000008d50098205e007008d5000020ca000000980048201e00c0241e007008d5605a98d20060b0f2a10180d2420080d2430080d2c40080d2020000d4007008d5"}}, @eret={0xe6, 0x18, 0x913}, @hvc={0x32, 0x40, {0xc5000020, [0x2, 0x1, 0x5, 0x8, 0x1]}}], 0x1a4}, &(0x7f0000000400)=[@featur2={0x1, 0x41}], 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000440)={0x30000, 0x10000}) 1h18m15.052073404s ago: executing program 2 (id=71): r0 = mmap$KVM_VCPU(&(0x7f0000ffa000/0x4000)=nil, 0x930, 0x200000e, 0x16831, 0xffffffffffffffff, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0) r1 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000a00)={0x0, &(0x7f0000000b00)=[@smc={0x1e, 0x40, {0x8, [0x1880, 0x8, 0xc41c, 0x8001, 0x4]}}, @smc={0x1e, 0x40, {0x2, [0x1f, 0x0, 0x4, 0x4, 0x8]}}, @irq_setup={0x46, 0x18, {0x2, 0x400003cc}}, @svc={0x122, 0x40, {0x1000, [0x9, 0x5, 0x7, 0x100000000, 0xfffffffffffffffe]}}, @eret={0xe6, 0x18, 0x42}, @irq_setup={0x46, 0x18, {0x1, 0x343}}, @eret={0xe6, 0x18, 0xfffffffffffffff8}, @uexit={0x0, 0x18, 0x800}, @eret={0xe6, 0x18, 0x6}, @hvc={0x32, 0x40, {0x84000007, [0x7fffffff, 0x4, 0x0, 0xeb, 0x10]}}, @hvc={0x32, 0x40, {0x8400000f, [0xffff, 0x35, 0x2, 0x2, 0x6]}}, @mrs={0xbe, 0x18, {0x603000000013df48}}, @msr={0x14, 0x20, {0x603000000013c299, 0xa}}, @eret={0xe6, 0x18, 0x5119fa8c}, @smc={0x1e, 0x40, {0x8400000b, [0x5, 0x6, 0x5, 0x2, 0x3]}}, @smc={0x1e, 0x40, {0xf2000018, [0x74, 0x100000001, 0x0, 0x0, 0x3]}}, @mrs={0xbe, 0x18, {0x603000000013df7c}}, @its_send_cmd={0xaa, 0x28, {0x5, 0x1, 0x4, 0x0, 0xfffffff6, 0x8, 0x2}}, @irq_setup={0x46, 0x18, {0x3, 0x394}}, @msr={0x14, 0x20, {0x603000000013df48, 0x7f}}, @svc={0x122, 0x40, {0x84000050, [0x7f, 0x5, 0xefb, 0x3, 0x6]}}, @smc={0x1e, 0x40, {0x8400000c, [0x2, 0x7f5, 0xf2, 0x100000000000003, 0x2]}}, @eret={0xe6, 0x18, 0x4}, @its_setup={0x82, 0x28, {0x1, 0x4, 0x385}}, @code={0xa, 0x88, {"002294da75c4a475c4a4f2410180d2620080d2630180d2a40180d2020000d40050805f005c207e007008d580d69bd28010b8f2300180be2c2c0180d2c30080d2e40080d2020000d4007008d5607682d20020b0f2810080d2220080d2e30180d2c40080d2020000d4000008d5007008d50038000e"}}, @eret={0xe6, 0x18, 0x4}, @its_send_cmd={0xaa, 0x28, {0x1, 0x0, 0x1, 0x7, 0x7, 0x5, 0x2}}, @svc={0x122, 0x40, {0x80000002, [0x36, 0x1, 0x2, 0x2, 0x656]}}, @memwrite={0x6e, 0x30, @generic={0x4000, 0xe67, 0x8, 0x9}}, @code={0xa, 0x9c, {"60f097d20000b0f2610080d2420080d2c30080d2e40180d2020000d460f48ad200e0b0f2210180d2020180d2a30180d2c40180d2020000d480ba9fd200a0b0f2410080d2a20180d2e30180d2240080d2020000d4403298d20020b0f2a10080d2220180d2030080d2040080d2020000d40080c00d007008d5008008d5007008d50000589e0014007f"}}, @svc={0x122, 0x40, {0x84000004, [0x9, 0x1, 0x8001, 0x8, 0x4]}}], 0x5ec}, &(0x7f0000000a40)=[@featur1={0x1, 0x2}], 0x1) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f0000000ac0)=@riscv64_v={0x8030000009000009, &(0x7f0000000a80)=0x8}) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000080)="fb0249ddf53be3ac2cfda29ea6abf4e7454e37c4b85400005a29611a81e60b0c13ff4bfefbed7aff5673312b54ebb2aa76c869d2262778690000004c29a138a8cf09ff00", 0x0, 0x48) syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000300)={0x0, &(0x7f00000001c0)=[@uexit={0x0, 0x18, 0x100}, @uexit={0x0, 0x18, 0x3}, @mrs={0xbe, 0x18, {0x603000000013df41}}, @uexit={0x0, 0x18, 0x968c}, @irq_setup={0x46, 0x18, {0x0, 0x32e}}, @code={0xa, 0x6c, {"000028d5007008d50000003420949fd200c0b0f2810180d2220080d2030180d2840080d2020000d4000028d5000008d5403497d200e0b8f2e10180d2820080d2230180d2c40180d2020000d4000008d5000008d5008008d5"}}, @eret={0xe6, 0x18, 0x4}], 0xfc}, &(0x7f0000000340)=[@featur1={0x1, 0x2}], 0x1) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) r3 = eventfd2(0x0, 0x0) write$eventfd(r3, &(0x7f0000000000)=0x5, 0x8) (async) write$eventfd(r3, &(0x7f0000000000)=0x5, 0x8) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2f) (async) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2f) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x1a, r5, 0x0) openat$kvm(0x0, &(0x7f0000000240), 0x670e94d6748c0364, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) close(r3) (async) close(r3) ioctl$KVM_ARM_VCPU_INIT(r8, 0x4020aeae, &(0x7f0000000340)={0x2}) (async) ioctl$KVM_ARM_VCPU_INIT(r8, 0x4020aeae, &(0x7f0000000340)={0x2}) ioctl$KVM_SET_ONE_REG(r8, 0x4010aeac, &(0x7f00000001c0)=@arm64_core={0x603000000010004e, &(0x7f0000000200)=0x6f48}) close(r3) (async) close(r3) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) write$eventfd(r3, &(0x7f0000000180)=0x5, 0xfffffde3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0) r9 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) 1h18m11.152406996s ago: executing program 3 (id=72): openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r0, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x12, r0, 0x0) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000002000/0x400000)=nil) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x101300, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f00000001c0)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x8, 0x100, &(0x7f0000000080)=0x8000000000000000}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000280)=@attr_arm64={0x0, 0x4, 0x2, 0x0}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000300)=@attr_other={0x0, 0x4, 0x1, 0x0}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_add_vcpu$arm64(0x0, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_HALT_POLL(r6, 0x4068aea3, 0x0) ioctl$KVM_CAP_HALT_POLL(r6, 0x4068aea3, &(0x7f00000000c0)={0xe1, 0x0, 0x3}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) r10 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r9, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r10, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x12, r9, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0) syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000140)={0x0, &(0x7f0000000000)=[@irq_setup={0x46, 0x18, {0x2, 0x2c0}}], 0x18}, 0x0, 0x0) 1h18m4.027072689s ago: executing program 2 (id=73): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x3}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4000ae84, &(0x7f0000000200)={{0x0, 0x1000, 0x1, 0x3a, 0x0, 0x9, 0xba, 0xc, 0x2, 0x6, 0x0, 0x9}, {0xeeef0000, 0x0, 0xd, 0x1, 0xfc, 0x1, 0x5, 0xc, 0x7, 0x4, 0x6, 0x6}, {0x0, 0xeeee8000, 0x8, 0x9, 0x6, 0x7, 0x3, 0xdb, 0x8, 0x1, 0x1}, {0x2, 0xe000, 0x0, 0x55, 0x7f, 0x80, 0x4, 0x4, 0xa, 0x1, 0x8, 0x9}, {0x6000, 0x0, 0x0, 0x38, 0x0, 0x6, 0x8, 0x1, 0x81, 0x93, 0x7f, 0x8}, {0xdddd1000, 0x41000, 0xd, 0x5, 0x9, 0x5, 0x2, 0x8, 0x81, 0xf, 0x5, 0xfe}, {0xffff1000, 0xb000, 0x14, 0x1, 0x1, 0x7b, 0xfd, 0x9, 0x6a, 0xe, 0x8, 0xd1}, {0xeeef0000, 0x7000, 0x4, 0x3, 0x0, 0x0, 0x7, 0xfa, 0x10, 0x2, 0x2, 0x1}, {0x40000, 0x2}, {0x8000000, 0xc71}, 0x20000002, 0x0, 0x1000, 0x8, 0x8, 0x8000, 0x7000, [0x3, 0x8000000000000000, 0x89, 0x1]}) write$eventfd(0xffffffffffffffff, 0x0, 0x0) syz_kvm_add_vcpu$arm64(0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, &(0x7f0000000080)=@attr_arm64={0x0, 0x0, 0x2, 0x0}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000200)={0x3, "e0b52f"}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x8, 0xf, 0x0, 0x5, 0x6, 0x86, 0x6, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x8, '\x00', 0x1, 0x7}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x25) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r6, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, 0x0}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_GET_ONE_REG(r8, 0x4010aeab, &(0x7f0000000240)=@arm64_core={0x603000000010003c, &(0x7f0000000080)=0x5}) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r10, &(0x7f00000001c0), 0xe80) 1h17m51.4154339s ago: executing program 3 (id=74): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x4) ioctl$KVM_GET_DEVICE_ATTR_vm(r0, 0x4018aee2, &(0x7f0000000040)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0xfff, 0x3, 0x2}}) ioctl$KVM_PPC_ALLOCATE_HTAB(r0, 0xc004aea7, &(0x7f0000000080)=0x401) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x202, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x24) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x1, 0x4, 0x58cbf902d97ad27c, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x32) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x26) ioctl$KVM_GET_API_VERSION(r4, 0xae00, 0x0) r6 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r7 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000740)={0x0, &(0x7f00000001c0)=[@mrs={0xbe, 0x18, {0x603000000013c660}}, @uexit={0x0, 0x18, 0x6fd1}, @irq_setup={0x46, 0x18, {0x0, 0x309}}, @hvc={0x32, 0x40, {0xc400000c, [0x200, 0x0, 0x7, 0x1, 0x7]}}, @irq_setup={0x46, 0x18, {0x0, 0x3}}, @hvc={0x32, 0x40, {0x80, [0x5, 0x1, 0x81, 0x2, 0x4]}}, @smc={0x1e, 0x40, {0x80008000, [0x400, 0x0, 0x3, 0x5, 0xa14a]}}, @smc={0x1e, 0x40, {0x2000000, [0x6, 0xfffffffffffffff4, 0x8000000000000000, 0x3, 0x100]}}, @uexit={0x0, 0x18, 0x8000000000000001}, @svc={0x122, 0x40, {0x32000000, [0x77fa, 0x5, 0x8, 0x8, 0x9]}}, @msr={0x14, 0x20, {0x603000000013e720, 0x5e}}, @its_setup={0x82, 0x28, {0x2, 0x1, 0x21}}, @smc={0x1e, 0x40, {0x2000, [0x10000000000000, 0x5, 0x1, 0x7, 0x400]}}, @msr={0x14, 0x20, {0x603000000013e712, 0x8}}, @smc={0x1e, 0x40, {0x8, [0x2, 0x5, 0x82, 0x8000000000000001, 0x3ff]}}, @svc={0x122, 0x40, {0x80007fff, [0x200, 0x6, 0x200, 0x3, 0xc049]}}, @irq_setup={0x46, 0x18, {0x0, 0x70}}, @svc={0x122, 0x40, {0x80000001, [0x1, 0x6, 0x9, 0x2, 0xc00000]}}, @eret={0xe6, 0x18, 0xbb}, @hvc={0x32, 0x40, {0x84000001, [0x2, 0x7fffffffffffffff, 0x2, 0xfffffffffffffff7]}}, @uexit={0x0, 0x18, 0x78bf2b60}, @its_send_cmd={0xaa, 0x28, {0xe, 0x0, 0x4, 0xd, 0x7, 0x5}}, @code={0xa, 0x84, {"000028d5007008d500f882d20020b0f2c10180d2820180d2630180d2840080d2020000d400409f0d1f00206b40d291d200e0b0f2610180d2620080d2830080d2440080d2020000d4000028d5007008d520ab9cd20000b0f2810080d2e20080d2630180d2640080d2020000d40000251e"}}, @msr={0x14, 0x20, {0x603000000013deb6}}, @irq_setup={0x46, 0x18, {0x4, 0x3a9}}, @its_send_cmd={0xaa, 0x28, {0x12, 0x1, 0x2, 0x5, 0x5, 0x1, 0x3}}, @mrs={0xbe, 0x18, {0x603000000013df61}}, @code={0xa, 0x9c, {"40039dd200c0b8f2c10080d2c20180d2c30180d2840080d2020000d4008008d5007008d500f4000f40519fd20080b8f2010180d2820080d2830080d2840180d2020000d4c08386d20060b8f2c10180d2220180d2430080d2440080d2020000d4602397d200e0b0f2210080d2a20180d2830080d2040180d2020000d4000040bc000008d5000008d5"}}], 0x568}, &(0x7f0000000780)=[@featur1={0x1, 0x21}], 0x1) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r6, 0x4018aee2, &(0x7f0000000800)=@attr_set_pmu={0x0, 0x0, 0x3, &(0x7f00000007c0)=0x37}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x19) r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ARM_VCPU_FINALIZE(r8, 0x4004aec2, &(0x7f0000000840)=0x3) ioctl$KVM_CAP_ARM_SYSTEM_SUSPEND(r6, 0x4068aea3, &(0x7f0000000880)) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000940)=@attr_other={0x0, 0x3, 0x200, &(0x7f0000000900)=0x4}) ioctl$KVM_GET_ONE_REG(r9, 0x4010aeab, &(0x7f00000009c0)=@other={0x5, &(0x7f0000000980)=0x4f}) r10 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x27) ioctl$KVM_ARM_SET_COUNTER_OFFSET(r10, 0x4010aeb5, &(0x7f0000000a00)={0x100000000, 0x9153}) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f0000000a40)={0xb, 0x2}) ioctl$KVM_GET_MP_STATE(r8, 0x8004ae98, &(0x7f0000000a80)) close(r5) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r6, 0x4018aee1, &(0x7f0000000b00)=@attr_other={0x0, 0x5, 0x3, &(0x7f0000000ac0)=0x6}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2a) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r9, 0xae80, 0x0) 1h17m49.42977956s ago: executing program 2 (id=75): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000975000/0x400000)=nil) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x42042, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000000)={0x1000, 0x11c000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0xc000, 0x11000, 0x1}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000040)={0x17000, 0x31d000, 0x21}) syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000280)=[@irq_setup={0x46, 0x18, {0x4, 0xf3}}, @memwrite={0x6e, 0x30, @generic={0x50000, 0x421, 0x7, 0x1}}, @uexit={0x0, 0x18, 0x5d9d}, @its_send_cmd={0xaa, 0x28, {0xe, 0x1, 0x2, 0x0, 0x400, 0xb4, 0x1}}], 0x88}, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x0, 0x3000007, 0x4f832, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x9000000) mmap$KVM_VCPU(&(0x7f0000763000/0x2000)=nil, 0x930, 0x0, 0x8010, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r4, 0xc018aec0, &(0x7f0000000140)={0x10004, 0x0, 0x1c0, 0x0}) r5 = openat$kvm(0x0, &(0x7f0000000140), 0x680a42, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x400000) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000040)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r8, 0x4010aeab, &(0x7f0000000000)=@arm64_core={0x603000000010000c, &(0x7f0000000080)=0x80000000}) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000100)={0x10001, 0x0, &(0x7f0000f4f000/0x5000)=nil}) munmap(&(0x7f0000482000/0x2000)=nil, 0x2000) munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000) mmap$KVM_VCPU(&(0x7f0000ff2000/0x1000)=nil, 0x0, 0x3000004, 0x10, 0xffffffffffffffff, 0x0) 1h17m7.138810362s ago: executing program 34 (id=74): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x4) ioctl$KVM_GET_DEVICE_ATTR_vm(r0, 0x4018aee2, &(0x7f0000000040)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0xfff, 0x3, 0x2}}) ioctl$KVM_PPC_ALLOCATE_HTAB(r0, 0xc004aea7, &(0x7f0000000080)=0x401) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x202, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x24) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x1, 0x4, 0x58cbf902d97ad27c, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x32) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x26) ioctl$KVM_GET_API_VERSION(r4, 0xae00, 0x0) r6 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r7 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000740)={0x0, &(0x7f00000001c0)=[@mrs={0xbe, 0x18, {0x603000000013c660}}, @uexit={0x0, 0x18, 0x6fd1}, @irq_setup={0x46, 0x18, {0x0, 0x309}}, @hvc={0x32, 0x40, {0xc400000c, [0x200, 0x0, 0x7, 0x1, 0x7]}}, @irq_setup={0x46, 0x18, {0x0, 0x3}}, @hvc={0x32, 0x40, {0x80, [0x5, 0x1, 0x81, 0x2, 0x4]}}, @smc={0x1e, 0x40, {0x80008000, [0x400, 0x0, 0x3, 0x5, 0xa14a]}}, @smc={0x1e, 0x40, {0x2000000, [0x6, 0xfffffffffffffff4, 0x8000000000000000, 0x3, 0x100]}}, @uexit={0x0, 0x18, 0x8000000000000001}, @svc={0x122, 0x40, {0x32000000, [0x77fa, 0x5, 0x8, 0x8, 0x9]}}, @msr={0x14, 0x20, {0x603000000013e720, 0x5e}}, @its_setup={0x82, 0x28, {0x2, 0x1, 0x21}}, @smc={0x1e, 0x40, {0x2000, [0x10000000000000, 0x5, 0x1, 0x7, 0x400]}}, @msr={0x14, 0x20, {0x603000000013e712, 0x8}}, @smc={0x1e, 0x40, {0x8, [0x2, 0x5, 0x82, 0x8000000000000001, 0x3ff]}}, @svc={0x122, 0x40, {0x80007fff, [0x200, 0x6, 0x200, 0x3, 0xc049]}}, @irq_setup={0x46, 0x18, {0x0, 0x70}}, @svc={0x122, 0x40, {0x80000001, [0x1, 0x6, 0x9, 0x2, 0xc00000]}}, @eret={0xe6, 0x18, 0xbb}, @hvc={0x32, 0x40, {0x84000001, [0x2, 0x7fffffffffffffff, 0x2, 0xfffffffffffffff7]}}, @uexit={0x0, 0x18, 0x78bf2b60}, @its_send_cmd={0xaa, 0x28, {0xe, 0x0, 0x4, 0xd, 0x7, 0x5}}, @code={0xa, 0x84, {"000028d5007008d500f882d20020b0f2c10180d2820180d2630180d2840080d2020000d400409f0d1f00206b40d291d200e0b0f2610180d2620080d2830080d2440080d2020000d4000028d5007008d520ab9cd20000b0f2810080d2e20080d2630180d2640080d2020000d40000251e"}}, @msr={0x14, 0x20, {0x603000000013deb6}}, @irq_setup={0x46, 0x18, {0x4, 0x3a9}}, @its_send_cmd={0xaa, 0x28, {0x12, 0x1, 0x2, 0x5, 0x5, 0x1, 0x3}}, @mrs={0xbe, 0x18, {0x603000000013df61}}, @code={0xa, 0x9c, {"40039dd200c0b8f2c10080d2c20180d2c30180d2840080d2020000d4008008d5007008d500f4000f40519fd20080b8f2010180d2820080d2830080d2840180d2020000d4c08386d20060b8f2c10180d2220180d2430080d2440080d2020000d4602397d200e0b0f2210080d2a20180d2830080d2040180d2020000d4000040bc000008d5000008d5"}}], 0x568}, &(0x7f0000000780)=[@featur1={0x1, 0x21}], 0x1) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r6, 0x4018aee2, &(0x7f0000000800)=@attr_set_pmu={0x0, 0x0, 0x3, &(0x7f00000007c0)=0x37}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x19) r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ARM_VCPU_FINALIZE(r8, 0x4004aec2, &(0x7f0000000840)=0x3) ioctl$KVM_CAP_ARM_SYSTEM_SUSPEND(r6, 0x4068aea3, &(0x7f0000000880)) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000940)=@attr_other={0x0, 0x3, 0x200, &(0x7f0000000900)=0x4}) ioctl$KVM_GET_ONE_REG(r9, 0x4010aeab, &(0x7f00000009c0)=@other={0x5, &(0x7f0000000980)=0x4f}) r10 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x27) ioctl$KVM_ARM_SET_COUNTER_OFFSET(r10, 0x4010aeb5, &(0x7f0000000a00)={0x100000000, 0x9153}) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f0000000a40)={0xb, 0x2}) ioctl$KVM_GET_MP_STATE(r8, 0x8004ae98, &(0x7f0000000a80)) close(r5) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r6, 0x4018aee1, &(0x7f0000000b00)=@attr_other={0x0, 0x5, 0x3, &(0x7f0000000ac0)=0x6}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2a) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r9, 0xae80, 0x0) 1h17m1.521555974s ago: executing program 35 (id=75): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000975000/0x400000)=nil) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x42042, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000000)={0x1000, 0x11c000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0xc000, 0x11000, 0x1}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000040)={0x17000, 0x31d000, 0x21}) syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000280)=[@irq_setup={0x46, 0x18, {0x4, 0xf3}}, @memwrite={0x6e, 0x30, @generic={0x50000, 0x421, 0x7, 0x1}}, @uexit={0x0, 0x18, 0x5d9d}, @its_send_cmd={0xaa, 0x28, {0xe, 0x1, 0x2, 0x0, 0x400, 0xb4, 0x1}}], 0x88}, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x0, 0x3000007, 0x4f832, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x9000000) mmap$KVM_VCPU(&(0x7f0000763000/0x2000)=nil, 0x930, 0x0, 0x8010, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r4, 0xc018aec0, &(0x7f0000000140)={0x10004, 0x0, 0x1c0, 0x0}) r5 = openat$kvm(0x0, &(0x7f0000000140), 0x680a42, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x400000) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000040)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r8, 0x4010aeab, &(0x7f0000000000)=@arm64_core={0x603000000010000c, &(0x7f0000000080)=0x80000000}) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000100)={0x10001, 0x0, &(0x7f0000f4f000/0x5000)=nil}) munmap(&(0x7f0000482000/0x2000)=nil, 0x2000) munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000) mmap$KVM_VCPU(&(0x7f0000ff2000/0x1000)=nil, 0x0, 0x3000004, 0x10, 0xffffffffffffffff, 0x0) 44m1.949675461s ago: executing program 4 (id=306): syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r0 = openat$kvm(0x0, &(0x7f0000000000), 0x200080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r4, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x2}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x1, 0x80000, 0xfffd, 0x0, 0x0, 0x2}}], 0x50}, 0x0, 0x0) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000100)={0x0, &(0x7f0000000bc0)=[@eret={0xe6, 0x18, 0x6}, @irq_setup={0x46, 0x18, {0x4, 0x33b}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x0, 0x2, 0xb, 0x3, 0x4, 0x1}}, @its_send_cmd={0xaa, 0x28, {0xe, 0x1, 0x3, 0x5, 0x2, 0xfffffff9, 0x1}}, @hvc={0x32, 0x40, {0xc1002108, [0x5, 0x0, 0x8, 0x9f4, 0x7]}}, @msr={0x14, 0x20, {0x477, 0x100}}, @eret={0xe6, 0x18, 0x80000000}, @smc={0x1e, 0x40, {0xc400000e, [0x45d4, 0x4, 0x6, 0x5, 0xfffffffffffffffa]}}, @irq_setup={0x46, 0x18, {0x3, 0xe5}}, @code={0xa, 0x9c, {"000008d5008008d5007008d50044207ea0e68bd20000b0f2c10080d2820080d2030180d2640080d2020000d40820601e60a998d200c0b0f2210080d2020180d2830080d2440180d2020000d4e05a8cd20020b8f2410180d2620080d2230080d2a40180d2020000d4000008d560589bd20060b8f2010080d2020080d2e30080d2e40080d2020000d4"}}, @smc={0x1e, 0x40, {0x84000005, [0x1, 0x2, 0x1, 0x3, 0x40]}}, @its_setup={0x82, 0x28, {0x1, 0x3, 0x204}}, @hvc={0x32, 0x40, {0x1000, [0x7, 0x7, 0xff, 0x7ff, 0x101]}}, @irq_setup={0x46, 0x18, {0x2, 0x373}}, @smc={0x1e, 0x40, {0x40, [0x6, 0x1ff, 0x7, 0x5, 0x4]}}, @hvc={0x32, 0x40, {0x84000050, [0x8001, 0x33, 0x3, 0xfffffffffffffffc, 0x7]}}, @msr={0x14, 0x20, {0x603000000013801c, 0x7}}, @eret={0xe6, 0x18, 0x705323ca}, @svc={0x122, 0x40, {0xc4000001, [0xffffffffffffffff, 0x6, 0x3, 0x9, 0x7fffffff]}}, @eret={0xe6, 0x18, 0x5}, @svc={0x122, 0x40, {0x80000001, [0x1, 0x8, 0x7, 0x2, 0x8]}}, @svc={0x122, 0x40, {0x1000000, [0xba2, 0x40000000000005, 0x7, 0x1ff, 0x1]}}, @hvc={0x32, 0x40, {0x8, [0x4, 0x0, 0x80, 0x1, 0x100]}}, @eret={0xe6, 0x18, 0xef15}], 0x494}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x40) (async) r8 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async) r11 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) r12 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r10, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffc000/0x3000)=nil, r12, 0x1, 0x11, r11, 0x0) (async) r13 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r10, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, r13, 0x8, 0x13, r11, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ffd000/0x2000)=nil, r13, 0x1000001, 0x12, r11, 0x0) (async) r14 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) (async) syz_kvm_add_vcpu$arm64(r14, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) (async) r15 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) r16 = ioctl$KVM_CREATE_VM(r15, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r16, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0xeeef0000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) 43m58.143429781s ago: executing program 5 (id=307): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x8200, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0x5421, 0x6) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, 0xfffffffffffffffe, 0x0, 0xfffffffffffffee9) r1 = mmap$KVM_VCPU(&(0x7f0000c74000/0x4000)=nil, 0x0, 0x8, 0x4000010, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_MMIO(r1, 0x20, &(0x7f0000000000)="8c9cfeb0bb9210b8592b1472bc27a3069fe523282ca5f9cb", 0x0, 0x18) r2 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x2a) close(0xffffffffffffffff) syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000b80)={0x0, &(0x7f0000000400)=[@its_send_cmd={0xaa, 0x28, {0x5, 0x1, 0x1, 0xc, 0xffffffff, 0x1, 0x2}}, @its_setup={0x82, 0x28, {0x2, 0x4, 0x250}}, @uexit={0x0, 0x18, 0x9}, @svc={0x122, 0x40, {0x0, [0x3, 0x4, 0xfffffffffffffffb, 0x5, 0xffffffffffffbc13]}}], 0xa8}, &(0x7f0000000040)=[@featur1={0x1, 0x1}], 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r7 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x3}) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x9b, 0xf, 0x0, 0x5, 0x8, 0x82, 0x46, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x100001, 0xffc0000, 0x0, 0x3, 0xa, 0x8, '\x00', 0x1, 0x93}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4000ae84, &(0x7f0000000200)={{0x0, 0x1000, 0x1, 0x3a, 0x0, 0x9, 0xba, 0xc, 0x2, 0x6, 0x0, 0x9}, {0xeeef0000, 0x0, 0xd, 0x1, 0x5, 0x1, 0x5, 0xc, 0x7, 0x4, 0x6, 0x6}, {0x0, 0xeeee8000, 0x8, 0x9, 0x6, 0x7, 0x3, 0xdb, 0x8, 0x1, 0x1}, {0x2, 0xe000, 0x0, 0x55, 0x7f, 0x80, 0x4, 0x4, 0xa, 0x1, 0x8, 0x9}, {0x6000, 0x0, 0x0, 0x38, 0x0, 0x6, 0x8, 0x1, 0x81, 0x93, 0x7f, 0x8}, {0xdddd1000, 0x41000, 0xd, 0x5, 0x9, 0x5, 0x2, 0x8, 0x81, 0xf, 0x5, 0xfe}, {0xffff1000, 0xb000, 0x14, 0x1, 0x1, 0x7b, 0xfd, 0x9, 0x6a, 0xe, 0x8, 0xd1}, {0xeeef0000, 0x7000, 0x4, 0x3, 0x0, 0x0, 0x7, 0xfa, 0x10, 0x2, 0x2, 0x1}, {0x40000, 0x2}, {0x8000000, 0xc71}, 0x20000002, 0x0, 0x1000, 0x8, 0x8, 0x8000, 0x7000, [0x3, 0x8000000000000000, 0x89, 0x1]}) write$eventfd(r12, &(0x7f00000001c0)=0x3, 0xfdef) r13 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r9, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r13, 0x20, &(0x7f0000000080)="fb0149dd033be3abf408020000001b0000005a9610fbff67521ce16f8f1f449a7ab2aa76c829d2262f00000000000000000200df38000000000000000020001e91114900", 0x0, 0xfda9) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r9, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x100, 0x0) 43m50.643525487s ago: executing program 4 (id=308): r0 = openat$kvm(0x0, &(0x7f0000000280), 0x103080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = syz_kvm_vgic_v3_setup(r1, 0x5, 0x40) r3 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x4) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x4) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_ARM_VCPU_INIT(r5, 0x4020aeae, &(0x7f0000000080)={0x5, 0x1}) ioctl$KVM_SET_ONE_REG(r5, 0x4010aeac, &(0x7f0000000140)=@arm64_core={0x603000000010004a, &(0x7f0000000100)=0x1}) ioctl$KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, &(0x7f0000000100)=@attr_other={0x0, 0x5, 0x8, &(0x7f0000000140)=0x200a8a}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) (async) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000140)={0x7}) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000280)={0x13e, 0xeeee0000, 0x2, 0xffffffffffffffff, 0xa}) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f00000000c0)={0x8000000008000800, 0x0, 0x0, 0xffffffffffffffff, 0x2}) (async) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f00000000c0)={0x8000000008000800, 0x0, 0x0, 0xffffffffffffffff, 0x2}) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000000)={0x1, 0x0, 0x0, 0xffffffffffffffff, 0xe}) (async) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000000)={0x1, 0x0, 0x0, 0xffffffffffffffff, 0xe}) 43m39.904798048s ago: executing program 5 (id=309): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x27) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xf, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0) ioctl$KVM_ARM_SET_COUNTER_OFFSET(r4, 0x4010aeb5, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f0000000040)=@attr_other={0x0, 0x8, 0x10, 0x0}) 43m34.857251591s ago: executing program 4 (id=310): r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae03, 0xaa) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae03, 0xbb) syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000bff000/0x400000)=nil) ioctl$KVM_GET_STATS_FD_vm(r6, 0xaece) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000100)={0x7, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000180)=@attr_other={0x0, 0x9, 0x2, &(0x7f0000000300)=0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r8 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r9, 0x4018aee1, &(0x7f0000000000)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0x20e4586c}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x1) r12 = syz_kvm_vgic_v3_setup(r11, 0x1, 0x100) ioctl$KVM_GET_DEVICE_ATTR(r12, 0x4018aee2, &(0x7f0000000200)=@attr_arm64={0x0, 0x1, 0x304, &(0x7f00000001c0)=0x7}) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4040aea0, &(0x7f0000000280)=@x86={0x1, 0x8, 0xac, 0x0, 0x9, 0x8, 0x1, 0xd3, 0x41, 0x9, 0x2, 0x40, 0x0, 0x2, 0x9, 0x1, 0x8, 0x6, 0x9, '\x00', 0xa7, 0xa}) r13 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, r13, 0x1, 0x16831, 0xffffffffffffffff, 0x0) 43m27.247220231s ago: executing program 5 (id=311): write$eventfd(0xffffffffffffffff, 0x0, 0x13) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x28) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000080)="fb01db06033ce3c60100a29ea6ab8031d1dfd92f0000dc0320002c005a9610fbff67521c966f8f1f4408357070c2c7aadaebb20700000000040000000000000100", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) r4 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0xa00f2, 0x408) ioctl$KVM_CHECK_EXTENSION(r4, 0x541b, 0xfffffffffffffff8) munmap(&(0x7f0000011000/0xc00000)=nil, 0xc00000) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x810, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x0, 0x0, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x0, 0x3000003, 0x28031, 0xffffffffffffffff, 0x9000000) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x200000d, 0x80010, 0xffffffffffffffff, 0x0) r5 = eventfd2(0x1, 0x0) write$eventfd(r5, &(0x7f0000000000)=0xffffffffffffffff, 0x8) munmap(&(0x7f0000bbb000/0x1000)=nil, 0x1000) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x4000000, 0x61cae8b4cd8f6679, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4360ae82, 0x0) mmap$KVM_VCPU(&(0x7f0000fed000/0x3000)=nil, 0x930, 0x3000005, 0x8010, r2, 0x0) munmap(&(0x7f0000bab000/0x3000)=nil, 0x3000) r6 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000523000/0x400000)=nil) syz_kvm_add_vcpu$arm64(0x0, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000bc0)=[@featur1={0x1, 0x4}], 0x1) 43m15.461123675s ago: executing program 4 (id=312): munmap$KVM_VCPU(0x0, 0x1000000000) r0 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x0, 0x8, 0x2010, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_MMIO(r0, 0x20, &(0x7f0000000000)="0948057348a31a9f2f0fed79f89d8915dd332f26b811c64b", 0x0, 0x18) r1 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f00000001c0)={0x0, &(0x7f0000000240)=[@irq_setup={0x46, 0x18, {0x3, 0x1ac}}, @code={0xa, 0x9c, {"0000c0a8000c40fc000008d5009784d200c0b8f2810180d2c0728ad20080b0f2a10080d2a20180d2e30180d2e40080d2020000d4630080d2040080d2020000d400d8215e0000403c000028d520fa98d20000b0f2810080d2420080d2230180d2c40080d2020000d4607894d20080b0f2410080d2a20080d2430080d2840080d2020000d4000008d5"}}, @mrs={0xbe, 0x18, {0x603000000013df53}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x88, 0x2, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x0, 0x3, 0x5, 0x3, 0x9, 0x1}}, @svc={0x122, 0x40, {0x84000052, [0x4, 0x4, 0x3, 0x5, 0x9]}}, @eret={0xe6, 0x18, 0x8000}, @its_send_cmd={0xaa, 0x28, {0x1, 0x1, 0x4, 0x8, 0x6, 0x7, 0x4}}, @mrs={0xbe, 0x18, {0x603000000013df10}}], 0x1bc}, &(0x7f0000000200)=[@featur1={0x1, 0x44}], 0x1) mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, 0x930, 0x300000f, 0x24132, r1, 0x0) 43m12.462245382s ago: executing program 5 (id=313): r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r0, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x9}}, @msr={0x14, 0x20, {0x603000000013dce8, 0x7}}], 0xffffffdd}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) ioctl$KVM_HAS_DEVICE_ATTR_vm(r2, 0x4018aee3, &(0x7f0000000040)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x844d, 0x8, 0x2}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async) openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) (async) syz_kvm_add_vcpu$arm64(r0, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x9}}, @msr={0x14, 0x20, {0x603000000013dce8, 0x7}}], 0xffffffdd}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) (async) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) (async) ioctl$KVM_HAS_DEVICE_ATTR_vm(r2, 0x4018aee3, &(0x7f0000000040)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x844d, 0x8, 0x2}}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) 43m7.067332327s ago: executing program 4 (id=314): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000100)={0x0, &(0x7f0000000240)=[@its_setup={0x82, 0x28, {0x3, 0x0, 0x16f}}, @its_send_cmd={0xaa, 0x28, {0xe, 0x0, 0x2, 0x8, 0x8, 0x100}}], 0x50}, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r6, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, &(0x7f00000002c0)=@arm64_sys={0x603000000013df61, &(0x7f00000001c0)}) ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, &(0x7f00000000c0)=@arm64_sys={0x603000000013dce0, &(0x7f0000000000)=0x43ff}) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r6, 0x4018aee1, &(0x7f00000000c0)=@attr_pmu_init) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_vgic_v3_setup(r1, 0x2, 0x40) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 43m3.183985056s ago: executing program 5 (id=315): r0 = openat$kvm(0x0, &(0x7f0000000040), 0xe0000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000000)={0x0, &(0x7f00000002c0)=[@smc={0x1e, 0x40, {0x84000013, [0x5, 0x0, 0x6, 0x7f, 0x3]}}, @irq_setup={0x46, 0x18, {0x3, 0x203}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x0, 0x3, 0x0, 0x536, 0x9, 0x2}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x88, 0x3, 0x1}}, @hvc={0x32, 0x40, {0x84000052, [0xfffffffffffffff8, 0x6, 0x0, 0x7f, 0x10000]}}, @svc={0x122, 0x40, {0x4, [0x0, 0x6, 0xa7, 0x3, 0x6e36]}}, @hvc={0x32, 0x40, {0xc4000010, [0x8001, 0x9, 0xffffffff00000000, 0xfff, 0x9]}}, @hvc={0x32, 0x40, {0xc4000003, [0xe0d6, 0x0, 0x84b, 0xfffffffffffffff9, 0xffffffff]}}, @smc={0x1e, 0x40, {0x84000000, [0x3, 0x0, 0x7fffffffffffffff, 0x347, 0x4]}}, @svc={0x122, 0x40, {0x84000006, [0x3, 0x55, 0x5, 0x5, 0x1ff]}}, @uexit={0x0, 0x18, 0x6}, @svc={0x122, 0x40, {0x84000014, [0x7, 0x100000000, 0x255, 0x5, 0x1]}}, @svc={0x122, 0x40, {0x400000e, [0x5, 0x3, 0x0, 0x2, 0x10001]}}], 0x2c8}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1) (async) r4 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r4, 0x0, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r5, 0x4018aee1, &(0x7f0000000040)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000280)={0x14, 0xff}}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 42m54.999199765s ago: executing program 4 (id=316): r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1a) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000001c0)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x8, 0x100, &(0x7f0000000080)=0x8000000000000000}) r3 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000b80)={0x0, &(0x7f0000000100)=[@smc={0x1e, 0x40, {0x8400000a, [0x84000015, 0x7, 0xaca, 0x2, 0x10]}}], 0x40}, &(0x7f00000000c0)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000280)=@attr_arm64={0x0, 0x4, 0x2, 0x0}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x6, 0x2, &(0x7f0000000200)=0xffffffffffffff35}) r7 = openat$kvm(0x0, &(0x7f0000000380), 0x222002, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x800000000004001) r9 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r8, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r9, 0x20, &(0x7f0000000300)="fb4149dd033b8986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67525673312b01040000000000002627e7000000000000000200", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x12, r8, 0x0) r10 = eventfd2(0x0, 0x0) close(r10) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x0) write$eventfd(r10, &(0x7f0000000100)=0xfffffffffffffffe, 0x8) r11 = eventfd2(0x0, 0x0) close(r11) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mmap$KVM_VCPU(&(0x7f0000008000/0x3000)=nil, 0x930, 0x2000004, 0x2011, r11, 0x0) write$eventfd(r10, &(0x7f0000000180)=0xa19, 0x8) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r12, 0xae01, 0x33) 42m54.624362048s ago: executing program 5 (id=317): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x88201, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x25) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r4, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) r5 = syz_kvm_vgic_v3_setup(r3, 0x1, 0x180) ioctl$KVM_GET_DEVICE_ATTR(r5, 0x4018aee2, &(0x7f0000000080)=@attr_riscv64=@attr_imsic={0x0, 0x1, 0x204, 0xfffffffffffffffe}) r6 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f00000000c0)={0x0, &(0x7f0000000280)=[@mrs={0xbe, 0x18, {0x4081}}, @smc={0x1e, 0x0, {0x84000053, [0xffffffffffff7fff, 0x101, 0x200, 0xca3c, 0x7]}}], 0x30}, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 42m8.84095132s ago: executing program 36 (id=316): r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1a) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000001c0)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x8, 0x100, &(0x7f0000000080)=0x8000000000000000}) r3 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000b80)={0x0, &(0x7f0000000100)=[@smc={0x1e, 0x40, {0x8400000a, [0x84000015, 0x7, 0xaca, 0x2, 0x10]}}], 0x40}, &(0x7f00000000c0)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000280)=@attr_arm64={0x0, 0x4, 0x2, 0x0}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x6, 0x2, &(0x7f0000000200)=0xffffffffffffff35}) r7 = openat$kvm(0x0, &(0x7f0000000380), 0x222002, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x800000000004001) r9 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r8, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r9, 0x20, &(0x7f0000000300)="fb4149dd033b8986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67525673312b01040000000000002627e7000000000000000200", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x12, r8, 0x0) r10 = eventfd2(0x0, 0x0) close(r10) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x0) write$eventfd(r10, &(0x7f0000000100)=0xfffffffffffffffe, 0x8) r11 = eventfd2(0x0, 0x0) close(r11) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mmap$KVM_VCPU(&(0x7f0000008000/0x3000)=nil, 0x930, 0x2000004, 0x2011, r11, 0x0) write$eventfd(r10, &(0x7f0000000180)=0xa19, 0x8) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r12, 0xae01, 0x33) 42m4.898621178s ago: executing program 37 (id=317): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x88201, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x25) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r4, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) r5 = syz_kvm_vgic_v3_setup(r3, 0x1, 0x180) ioctl$KVM_GET_DEVICE_ATTR(r5, 0x4018aee2, &(0x7f0000000080)=@attr_riscv64=@attr_imsic={0x0, 0x1, 0x204, 0xfffffffffffffffe}) r6 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f00000000c0)={0x0, &(0x7f0000000280)=[@mrs={0xbe, 0x18, {0x4081}}, @smc={0x1e, 0x0, {0x84000053, [0xffffffffffff7fff, 0x101, 0x200, 0xca3c, 0x7]}}], 0x30}, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 32m40.591156997s ago: executing program 7 (id=337): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x3, 0x3, 0x10000000004}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000005}}], 0x50}, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0x80111500, 0x20000000) write$eventfd(r5, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f00000001c0)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4}) ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x8, 0x800000110, &(0x7f0000000080)=0x8000000000000000}) ioctl$KVM_GET_API_VERSION(r7, 0x2, 0x1000000000000) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) 32m21.382651907s ago: executing program 7 (id=339): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000027000/0x13000)=nil, 0x930, 0x3, 0x4102932, 0xffffffffffffffff, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x22200, 0x0) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, r4, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000002000/0x400000)=nil) r5 = eventfd2(0xffff10c0, 0x801) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_GUEST_DEBUG_arm64(r6, 0x4208ae9b, &(0x7f00000002c0)={0x20002, 0x0, {[0x3, 0x7, 0x6, 0x8cfc, 0x100000001, 0x3, 0x8, 0xe, 0x30000000000, 0x9, 0x8f5f, 0x8, 0x5, 0x80, 0xc65, 0x3], [0x0, 0x4, 0xffffffffffffff5e, 0x10001, 0x5cd, 0x8001, 0x6, 0x7ff, 0x8, 0x11, 0x8, 0x9, 0xe6, 0x4, 0x0, 0x9de], [0xfff, 0x6, 0x2, 0x6, 0x1ff, 0x7, 0x80000001, 0x800, 0x3, 0xa89f, 0x7, 0x8, 0x9, 0x80000001, 0x9, 0xd], [0x400, 0x8, 0x8, 0x10, 0x3, 0x7, 0x6, 0x3, 0x80000000, 0xfffffffffffffffb, 0xf8ba, 0x0, 0x100000001, 0xde8, 0x23, 0x66a]}}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0xf0b, 0x8080000, 0x8, r5}) r7 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000280)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x1}}], 0x28}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) r8 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000000)={0x80, 0xfffffffffffffff0}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000500)={0x2, 0x6, 0x9000, 0x1000, &(0x7f0000ffd000/0x1000)=nil, 0x0, r8}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 32m2.74355327s ago: executing program 7 (id=341): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000080)={0x5, 0x1}) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f00000001c0)=@arm64_sys={0x603000000013d801, &(0x7f00000000c0)=0x7fff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x161642, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000b80)={0x0, &(0x7f0000000080)=[@hvc={0x32, 0x40, {0x84000009, [0x9, 0x8, 0x8000, 0x603c8354, 0x200]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_IRQ_LINE(r5, 0x4008ae61, 0x0) syz_kvm_vgic_v3_setup(r5, 0x2, 0x80) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) r10 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r9, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r10, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14d94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8ff90b5f3cedd7420b2b04000000000000002627e7", 0x0, 0x48) r11 = openat$kvm(0x0, &(0x7f0000000000), 0x20001, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x2) r14 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x0, 0x3800002, 0x4010, r13, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r14, 0x20, &(0x7f0000000300)="fb4149dd033b8986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67525673312b01040000000000002627e7000000000000000200", 0x0, 0x48) r15 = eventfd2(0x0, 0x0) close(r15) r16 = eventfd2(0x4, 0x0) close(r16) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x109272, 0x1f01) write$eventfd(r16, &(0x7f0000000180)=0x80000000000006, 0x8) 31m41.26824085s ago: executing program 7 (id=342): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) (async, rerun: 64) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (rerun: 64) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0xd, 0x9, 0xb, 0x0, 0x5, 0x3, 0x6, 0x6, 0x48, 0x88, 0x64, 0x9, 0x0, 0x9, 0x40006, 0xe, 0x3, 0x7, 0x0, '\x00', 0x10, 0x6}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0x40086602, 0x110ca32000) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r4, &(0x7f00000001c0)=0xffffff7f, 0xff25) 31m14.896540129s ago: executing program 7 (id=345): r0 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r1 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000140)={0x0, &(0x7f0000000000)=[@smc={0x1e, 0x40, {0x800, [0x7, 0x9, 0x52eb, 0x0, 0x7ff]}}, @svc={0x122, 0x40, {0x80000001, [0x7, 0xffffffffffffff0c, 0x2, 0x7fffffffffffffff, 0x101]}}, @uexit={0x0, 0x18, 0x6}], 0x98}, &(0x7f0000000180)=[@featur1={0x1, 0x40}], 0x1) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x0, 0x3c2a1c3178cda732, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r3, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x16, 0x4, 0x1}}) ioctl$KVM_RESET_DIRTY_RINGS(r3, 0xaec7) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r3, r4, &(0x7f0000b74000/0x400000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f0000000240)=[@smc={0x1e, 0x40, {0xc5000020, [0x6, 0x5f9, 0x3, 0x401, 0x1000]}}], 0x40}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, r0, 0x1000002, 0xeb832, r1, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x1a) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x22) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x6) syz_kvm_setup_cpu$arm64(r7, r8, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x30}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r8, 0x4010aeac, &(0x7f00000002c0)=@arm64_sys={0x603000000013dcf0, &(0x7f0000000000)=0x2}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80080, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r10, 0x4068aea3, &(0x7f0000000240)={0xa8, 0x0, 0x7}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b4149dc085486580143226c0ead9a1620ba24f023314cc401000100743ad4913923baff4e5f73ea2fc43ac1abfc00", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x100000c, 0x4d832, 0xffffffffffffffff, 0x0) 30m53.112364707s ago: executing program 7 (id=347): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x30) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000a21000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@irq_setup={0x46, 0x18, {0x1, 0x210}}], 0x18}, 0x0, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000aba000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000300)={0x0, &(0x7f0000000140)=[@its_setup={0x82, 0x28, {0x1, 0x3, 0x121}}], 0x28}, 0x0, 0x0) r8 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000000)={0x0, &(0x7f0000000780)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x8000000000000f6}}], 0x28}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r5, 0xff7ffffffffffffd, 0x360) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r8, 0x4018aee1, &(0x7f0000000240)=@attr_other={0x0, 0x767d15da, 0x4e9, &(0x7f0000000040)=0x5244}) r10 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000500)={0x5, 0x1, 0x1000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r5, 0x4010ae74, &(0x7f00000000c0)={0x4, 0x5}) r11 = eventfd2(0x8, 0x80801) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000140)={0x4000}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x6, 0x8000000, 0x0, r11}) r12 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r14, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013809c, 0x8000}}, @msr={0x14, 0x20, {0x603000000013c081, 0x8000}}], 0x40}, 0x0, 0x0) syz_kvm_add_vcpu$arm64(r14, &(0x7f0000000400)={0x0, &(0x7f0000000180)=[@uexit={0x0, 0x18, 0x9}, @svc={0x122, 0x40, {0x84000007, [0x8, 0x0, 0x4, 0x7fffffffffffffff, 0x7fffffffffffffff]}}, @hvc={0x32, 0x40, {0x2000, [0x3, 0xb08a, 0x8, 0x7ff]}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x0, 0x0, 0x6, 0x800, 0x6, 0x1}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x1, 0x2, 0x2, 0x4, 0x8}}, @code={0xa, 0xb4, {"803198d20080b8f2410080d2420080d2e30080d2c40180d2020000d4005c205e000028d500748bd20060b8f2410180d2c20180d2c30180d2a40080d2020000d4000080390080c00c00000098a0439bd200c0b8f2610180d2220080d2030180d2c40180d2020000d440a490d20060b8f2a10080d2a20180d2230180d2040080d2020000d4e04383d20080b8f2210080d2220180d2230180d2040080d2020000d4"}}, @mrs={0xbe, 0x18, {0x603000000013e510}}, @code={0xa, 0x84, {"0020004f007008d5605892d20040b8f2010080d2420180d2630080d2040080d2020000d40030200e0040a00d007008d520ce80d200c0b0f2c10080d2a20180d2630180d2640180d2020000d400004079202d8ed20020b8f2c10080d2e20180d2e30180d2040080d2020000d4007008d5"}}, @irq_setup={0x46, 0x18, {0x2, 0x27c}}], 0x250}, &(0x7f0000000440)=[@featur1={0x1, 0xe0}], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) 30m4.54964808s ago: executing program 38 (id=347): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x30) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000a21000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@irq_setup={0x46, 0x18, {0x1, 0x210}}], 0x18}, 0x0, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000aba000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000300)={0x0, &(0x7f0000000140)=[@its_setup={0x82, 0x28, {0x1, 0x3, 0x121}}], 0x28}, 0x0, 0x0) r8 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000000)={0x0, &(0x7f0000000780)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x8000000000000f6}}], 0x28}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r5, 0xff7ffffffffffffd, 0x360) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r8, 0x4018aee1, &(0x7f0000000240)=@attr_other={0x0, 0x767d15da, 0x4e9, &(0x7f0000000040)=0x5244}) r10 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000500)={0x5, 0x1, 0x1000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r5, 0x4010ae74, &(0x7f00000000c0)={0x4, 0x5}) r11 = eventfd2(0x8, 0x80801) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000140)={0x4000}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x6, 0x8000000, 0x0, r11}) r12 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r14, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013809c, 0x8000}}, @msr={0x14, 0x20, {0x603000000013c081, 0x8000}}], 0x40}, 0x0, 0x0) syz_kvm_add_vcpu$arm64(r14, &(0x7f0000000400)={0x0, &(0x7f0000000180)=[@uexit={0x0, 0x18, 0x9}, @svc={0x122, 0x40, {0x84000007, [0x8, 0x0, 0x4, 0x7fffffffffffffff, 0x7fffffffffffffff]}}, @hvc={0x32, 0x40, {0x2000, [0x3, 0xb08a, 0x8, 0x7ff]}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x0, 0x0, 0x6, 0x800, 0x6, 0x1}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x1, 0x2, 0x2, 0x4, 0x8}}, @code={0xa, 0xb4, {"803198d20080b8f2410080d2420080d2e30080d2c40180d2020000d4005c205e000028d500748bd20060b8f2410180d2c20180d2c30180d2a40080d2020000d4000080390080c00c00000098a0439bd200c0b8f2610180d2220080d2030180d2c40180d2020000d440a490d20060b8f2a10080d2a20180d2230180d2040080d2020000d4e04383d20080b8f2210080d2220180d2230180d2040080d2020000d4"}}, @mrs={0xbe, 0x18, {0x603000000013e510}}, @code={0xa, 0x84, {"0020004f007008d5605892d20040b8f2010080d2420180d2630080d2040080d2020000d40030200e0040a00d007008d520ce80d200c0b0f2c10080d2a20180d2630180d2640180d2020000d400004079202d8ed20020b8f2c10080d2e20180d2e30180d2040080d2020000d4007008d5"}}, @irq_setup={0x46, 0x18, {0x2, 0x27c}}], 0x250}, &(0x7f0000000440)=[@featur1={0x1, 0xe0}], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12m5.673629904s ago: executing program 6 (id=441): r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0xc2881, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000080)={0x0, &(0x7f0000000200)=[@svc={0x122, 0x40, {0x800, [0xffffffeffffffff8, 0x8, 0x8000000005, 0x5, 0x400]}}], 0x40}, 0x0, 0x0) r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04) mmap$KVM_VCPU(&(0x7f0000c0b000/0x1000)=nil, r8, 0x3, 0x40b2811, r7, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_add_vcpu$arm64(r0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x3, 0x1, 0x1}}], 0x28}, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0xc2881, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) (async) syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) (async) syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000080)={0x0, &(0x7f0000000200)=[@svc={0x122, 0x40, {0x800, [0xffffffeffffffff8, 0x8, 0x8000000005, 0x5, 0x400]}}], 0x40}, 0x0, 0x0) (async) ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04) (async) mmap$KVM_VCPU(&(0x7f0000c0b000/0x1000)=nil, r8, 0x3, 0x40b2811, r7, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) (async) syz_kvm_add_vcpu$arm64(r0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x3, 0x1, 0x1}}], 0x28}, 0x0, 0x0) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async) 11m49.786876524s ago: executing program 6 (id=443): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2e) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000580)={0x0, &(0x7f0000000340)=[@msr={0x14, 0x20, {0x603000000013c01e, 0x4}}, @hvc={0x32, 0x40, {0x20, [0x5, 0x0, 0x7, 0x3, 0x8]}}, @hvc={0x32, 0x40, {0x84000001, [0x5, 0x8, 0x6, 0xffffffff, 0x100000000]}}, @svc={0x122, 0x40, {0x84000012, [0x5, 0xf, 0xffff, 0x9, 0x4]}}, @svc={0x122, 0x40, {0x86000001, [0x101, 0x3, 0x6, 0xdc15, 0x8]}}, @smc={0x1e, 0x40, {0x4, [0x9, 0x7ff, 0xfffffffffffffff8, 0x2, 0x1]}}, @mrs={0xbe, 0x18, {0x6030000000138056}}, @svc={0x122, 0x40, {0x40, [0xff, 0x9, 0x100000001, 0x7, 0xa0e]}}, @hvc={0x32, 0x40, {0xc4000012, [0x2, 0x100000000, 0x7, 0x1]}}, @its_setup={0x82, 0x28, {0x2, 0x2, 0x365}}], 0x220}, &(0x7f00000005c0)=[@featur2], 0x1) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r2, 0x4018aee2, &(0x7f0000000180)=@attr_other={0x0, 0x9, 0xfffffffffffffffe, &(0x7f0000000000)=0xfe}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x3}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_ARM_VCPU_INIT(r8, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) ioctl$KVM_GET_ONE_REG(r8, 0x4010aeab, &(0x7f0000000080)=@arm64_sys={0x603000000013df54, &(0x7f0000000240)=0x3}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x9b, 0xf, 0x0, 0x5, 0x8, 0x82, 0x46, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x100001, 0xffc0000, 0x0, 0x3, 0xa, 0x8, '\x00', 0x1, 0x93}) r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r10, r11, &(0x7f0000b74000/0x400000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x40}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$arm64(r10, r11, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000880)=[{0x0, 0x0}], 0x1, 0x0, &(0x7f00000008c0)=[@featur2={0x1, 0x1a}], 0x1) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4000ae84, &(0x7f0000000200)={{0x0, 0x1000, 0x3, 0x3a, 0x0, 0x9, 0xba, 0xc, 0x2, 0x6, 0x0, 0x9}, {0xeeef0000, 0x0, 0xd, 0x1, 0xfc, 0x1, 0x1, 0xc, 0x7, 0x4, 0x7, 0x6}, {0x0, 0xeeee8000, 0x8, 0x9, 0x6, 0x7, 0x3, 0xdb, 0x8, 0x1, 0x1}, {0xffff1000, 0xe000, 0x0, 0x55, 0x7f, 0x80, 0x4, 0x4, 0xa, 0x1, 0x8, 0x9}, {0x6000, 0xffffffff, 0x0, 0x38, 0x0, 0x6, 0x8, 0x1, 0x81, 0x93, 0x7f, 0x8}, {0x6000, 0x80a0000, 0x9, 0x5, 0x7, 0x5, 0x2, 0x8, 0x81, 0xf, 0x5, 0xfe}, {0xffff1000, 0x4000, 0x14, 0x1, 0x1, 0x7b, 0xfd, 0x9, 0x6a, 0xe, 0x8, 0xd1}, {0xeeef0000, 0x7000, 0x4, 0x3, 0x0, 0x0, 0x0, 0xfa, 0x3, 0x2, 0x2, 0x1}, {0x40000, 0x2}, {0x8000000, 0xc71}, 0x20000002, 0x0, 0x1000, 0x210028, 0x8, 0x8000, 0x7000, [0x3, 0x8000000000000000, 0x89, 0x1]}) write$eventfd(r5, &(0x7f00000001c0)=0x3, 0xfdef) 11m37.599911283s ago: executing program 8 (id=444): r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013809c, 0x8000}}, @msr={0x14, 0x20, {0x603000000013c081, 0x8000}}], 0x40}, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_ARM_VCPU_INIT(r6, 0x4020aeae, &(0x7f0000000340)={0x5}) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_ARM_SET_COUNTER_OFFSET(r5, 0x4010aeb5, &(0x7f0000000140)={0x1}) 11m22.232495516s ago: executing program 6 (id=445): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f00000000c0)={0x7}) (async) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f00000000c0)={0x7, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x0, 0x3, &(0x7f0000000000)=0x400000000}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x0, 0x5, &(0x7f0000000100)=0x8010000000000001}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) eventfd2(0x0, 0x0) (async) r6 = eventfd2(0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0xe) ioctl$KVM_CREATE_VM(r6, 0x80111500, 0x20000000) ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f00000000c0)=@arm64_core={0x6030000000100014, &(0x7f0000000000)=0x40000280}) (async) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f00000000c0)=@arm64_core={0x6030000000100014, &(0x7f0000000000)=0x40000280}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000040)={0x4, 0x1000}) 11m20.926970599s ago: executing program 8 (id=446): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x0, 0x8032, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x8}) (async) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000001c0)=@attr_riscv64=@attr_aplic={0x0, 0x1, @any, &(0x7f0000000200)=0x1bb}) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_CAP_HALT_POLL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0xdf, 0x0, 0x2}) (async) mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x19) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x10001, 0x0, 0xc000, 0x1000, &(0x7f0000ec1000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x4000000000816) r6 = eventfd2(0x8, 0x80800) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f00000000c0)={0x8000000000000000, 0x0, 0x1, r6, 0x2}) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000000)={0x208000, 0x3000, 0x1, r6, 0x3}) (async) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x1}) (async) ioctl$KVM_GET_DEVICE_ATTR_vm(r4, 0x4018aee2, &(0x7f0000000100)=@attr_other={0x0, 0x4, 0xfffffffffffffff9, &(0x7f00000000c0)=0x10}) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async) syz_kvm_setup_cpu$arm64(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil, &(0x7f0000000280)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) (async) ioctl$KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, &(0x7f00000000c0)=@attr_arm64={0x0, 0x3, 0x5}) (async) r8 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) (async) r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r10, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) 11m6.786938119s ago: executing program 6 (id=447): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xeeee0000, 0x1000, &(0x7f0000fd1000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1ff, 0x0, 0x6000, 0x1000, &(0x7f0000ec2000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f0000000000)={0x802}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r4, 0x0) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x3, 0x27, 0x6, 0x0, 0x4, 0x9, 0xff, 0x7, 0xc7, 0x43, 0x5, 0x7, 0x0, 0x5, 0x2e, 0xd7, 0x10, 0xaa, 0x7, '\x00', 0x2, 0x100000000000000}) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_vgic_v3_setup(r10, 0x1, 0x100) r12 = eventfd2(0x4, 0x80801) ioctl$KVM_IRQFD(r10, 0x4020ae76, &(0x7f0000000000)={r12, 0x6, 0x2, r11}) write$eventfd(r12, &(0x7f00000001c0)=0xffffff7f, 0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x1ff, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 11m3.462324653s ago: executing program 8 (id=448): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x2}}, @msr={0x14, 0x20, {0x603000000013dce5, 0x8000}}], 0x40}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) (async) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x2}}, @msr={0x14, 0x20, {0x603000000013dce5, 0x8000}}], 0x40}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async) r4 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000180)={0x0, &(0x7f0000000380)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x7ffc}}, @msr={0x14, 0x20, {0x603000000013dce0, 0x10001}}], 0x40}, &(0x7f0000000000)=[@featur1={0x1, 0x8}], 0x1) (async) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000180)={0x0, &(0x7f0000000380)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x7ffc}}, @msr={0x14, 0x20, {0x603000000013dce0, 0x10001}}], 0x40}, &(0x7f0000000000)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r5, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10m51.600110648s ago: executing program 8 (id=449): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f00000008c0)=[@hvc={0x32, 0x40, {0xc4000053, [0x9f, 0x7a000, 0x1000, 0x3, 0x6]}}, @eret={0xe6, 0x18, 0x2d}, @smc={0x1e, 0x40, {0xc4000005, [0x8000000000000000, 0xc, 0x40, 0x8, 0x7]}}, @msr={0x14, 0x20, {0x6030000000138054, 0x4}}, @msr={0x14, 0x20, {0x603000000013e663, 0x8001}}, @eret={0xe6, 0x18, 0x80000001}, @code={0xa, 0x9c, {"000028d5e0a89bd200c0b0f2010080d2220180d2c30180d2840180d2020000d4000028d560468fd200c0b8f2410080d2620180d2430180d2640180d2020000d4007008d5a0b983d20000b8f2610180d2220180d2030180d2440080d2020000d4008008d50000591e000008d5201e9dd20040b0f2a10180d2c20180d2430080d2a40080d2020000d4"}}], 0x18c}, 0x0, 0x5c) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10m47.858627394s ago: executing program 6 (id=450): r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000001c0)={0x8}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f00000001c0)="f21bc75509bf71c9d70236fc044842da63ff2f677e80ab404d37b2e3f137a13bc2b875c2357c6e1100000000000000000000000000000000000000000000000000ff00", 0x0, 0x48) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0x5000, 0x12000, 0x81}) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r4, &(0x7f00000001c0)=0x8100000001, 0x51a8) syz_kvm_setup_cpu$arm64(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000e8a000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x0, 0x40) close(0x4) r5 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x4000000000000000) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce8, 0x8000}}], 0x20}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r8, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_irq={0x0, 0x0, 0x0, 0x0}) r9 = openat$kvm(0x0, &(0x7f0000000040), 0xc0083, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x0, 0x12, r9, 0x0) close(0x5) 10m39.830869472s ago: executing program 8 (id=451): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1c) r2 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000180)={0x5000}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r6, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000140)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r6, 0x4010ae42, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000e96000/0x1000)=nil}) r7 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x3, 0x1, 0x1}}], 0x28}, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80080, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r9, 0x4068aea3, &(0x7f0000000240)={0xa8, 0x0, 0x7}) r10 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000bc2000/0x400000)=nil) r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=[@featur2={0x1, 0x2}], 0x1) ioctl$KVM_SET_GUEST_DEBUG_arm64(r11, 0x4208ae9b, &(0x7f00000001c0)={0x30001, 0x0, {[0x2, 0xd6, 0x504, 0xf2f, 0x2, 0x6, 0x100000001, 0xa4, 0xfb, 0x4b3, 0x0, 0x8, 0x0, 0x8, 0xc], [0x6, 0x3, 0xea, 0x3ff, 0x4, 0x3, 0x4, 0x4, 0x5b, 0x2, 0x6, 0x6f2, 0x3, 0x8, 0xfffffffffffffff7], [0x0, 0x0, 0x6, 0xc2ef, 0x1, 0x5, 0x9, 0x7fff, 0x7, 0x80000000, 0x6, 0xfffffffffffffffb, 0x6, 0x4, 0x4, 0x1], [0x2, 0x89c8, 0xed, 0x0, 0x7, 0xb, 0x7, 0x7, 0x3, 0x2, 0x1, 0x400, 0x5ac, 0x49e4, 0x0, 0x9]}}) ioctl$KVM_RUN(r11, 0xae80, 0x0) 10m31.418119718s ago: executing program 6 (id=452): r0 = openat$kvm(0x0, &(0x7f0000000100), 0x412002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x9) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$kvm(0x0, &(0x7f0000000280), 0x141440, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffa000/0x4000)=nil, r6, 0x1, 0x12, r5, 0x0) r7 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, r7, 0x8, 0x13, r5, 0x0) mmap$KVM_VCPU(&(0x7f0000f8a000/0x2000)=nil, r6, 0x3000000, 0x10010, r5, 0x0) r8 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000002c0)={0x0, &(0x7f00000001c0)}, &(0x7f0000000040)=[@featur2={0x1, 0x10}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r8, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x31) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x28) r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=[@featur2={0x1, 0x2}], 0x1) ioctl$KVM_RUN(r12, 0xae80, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x7f) r13 = openat$kvm(0x0, &(0x7f00000001c0), 0x20e573516eed7743, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) r15 = syz_kvm_setup_syzos_vm$arm64(r14, &(0x7f0000c00000/0x400000)=nil) r16 = syz_kvm_add_vcpu$arm64(r15, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) r17 = syz_kvm_vgic_v3_setup(r14, 0x1, 0x240) ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r17, 0x4018aee1, &(0x7f0000000140)=@attr_other={0x0, 0xffffffff, 0xc2c, &(0x7f0000000180)=0x8}) ioctl$KVM_SET_VCPU_EVENTS(r16, 0x4040aea0, &(0x7f0000000000)=@x86={0x1, 0xc4, 0x1, 0x0, 0x51, 0x8, 0x4, 0x90, 0x10, 0x80, 0x6, 0x1, 0x0, 0xc, 0x6, 0x15, 0x0, 0x4, 0x80, '\x00', 0x55, 0x800000000001}) 10m14.780687506s ago: executing program 8 (id=453): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$kvm(0x0, 0x0, 0x80402, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x8080000, 0x104000, 0x1}) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000080)={0x0, &(0x7f0000000140)=[@memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x7fe, 0x4, 0x1}}, @its_setup={0x82, 0x28, {0x0, 0x1, 0x1f8}}], 0x58}, 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000200)={0x3, "e0b52f"}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x8, 0xf, 0x0, 0x5, 0x6, 0x86, 0x6, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x8, '\x00', 0x1, 0x7}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r7, &(0x7f00000001c0)=0x3, 0x50) syz_kvm_vgic_v3_setup(r2, 0x2, 0x100) ioctl$KVM_RUN(r4, 0xae80, 0x0) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil) r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f00000002c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x2}}, @irq_setup={0x46, 0x18, {0x2, 0x2aa}}], 0x40}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r8, 0x1, 0x100) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r8, 0x4068aea3, &(0x7f0000000240)) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x23) ioctl$KVM_IRQFD(r8, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0xfffffc1c, 0x5}) eventfd2(0x3, 0x0) eventfd2(0x2, 0x1) ioctl$KVM_RUN(r10, 0xae80, 0x0) eventfd2(0x691, 0x800) 9m44.31857989s ago: executing program 39 (id=452): r0 = openat$kvm(0x0, &(0x7f0000000100), 0x412002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x9) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$kvm(0x0, &(0x7f0000000280), 0x141440, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffa000/0x4000)=nil, r6, 0x1, 0x12, r5, 0x0) r7 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, r7, 0x8, 0x13, r5, 0x0) mmap$KVM_VCPU(&(0x7f0000f8a000/0x2000)=nil, r6, 0x3000000, 0x10010, r5, 0x0) r8 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000002c0)={0x0, &(0x7f00000001c0)}, &(0x7f0000000040)=[@featur2={0x1, 0x10}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r8, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x31) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x28) r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=[@featur2={0x1, 0x2}], 0x1) ioctl$KVM_RUN(r12, 0xae80, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x7f) r13 = openat$kvm(0x0, &(0x7f00000001c0), 0x20e573516eed7743, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) r15 = syz_kvm_setup_syzos_vm$arm64(r14, &(0x7f0000c00000/0x400000)=nil) r16 = syz_kvm_add_vcpu$arm64(r15, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) r17 = syz_kvm_vgic_v3_setup(r14, 0x1, 0x240) ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r17, 0x4018aee1, &(0x7f0000000140)=@attr_other={0x0, 0xffffffff, 0xc2c, &(0x7f0000000180)=0x8}) ioctl$KVM_SET_VCPU_EVENTS(r16, 0x4040aea0, &(0x7f0000000000)=@x86={0x1, 0xc4, 0x1, 0x0, 0x51, 0x8, 0x4, 0x90, 0x10, 0x80, 0x6, 0x1, 0x0, 0xc, 0x6, 0x15, 0x0, 0x4, 0x80, '\x00', 0x55, 0x800000000001}) 9m26.168898063s ago: executing program 40 (id=453): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$kvm(0x0, 0x0, 0x80402, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x8080000, 0x104000, 0x1}) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000080)={0x0, &(0x7f0000000140)=[@memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x7fe, 0x4, 0x1}}, @its_setup={0x82, 0x28, {0x0, 0x1, 0x1f8}}], 0x58}, 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000200)={0x3, "e0b52f"}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x8, 0xf, 0x0, 0x5, 0x6, 0x86, 0x6, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x8, '\x00', 0x1, 0x7}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r7, &(0x7f00000001c0)=0x3, 0x50) syz_kvm_vgic_v3_setup(r2, 0x2, 0x100) ioctl$KVM_RUN(r4, 0xae80, 0x0) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil) r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f00000002c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x2}}, @irq_setup={0x46, 0x18, {0x2, 0x2aa}}], 0x40}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r8, 0x1, 0x100) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r8, 0x4068aea3, &(0x7f0000000240)) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x23) ioctl$KVM_IRQFD(r8, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0xfffffc1c, 0x5}) eventfd2(0x3, 0x0) eventfd2(0x2, 0x1) ioctl$KVM_RUN(r10, 0xae80, 0x0) eventfd2(0x691, 0x800) 1m29.813216819s ago: executing program 0 (id=455): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8}) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) (async) r4 = eventfd2(0xffff10c0, 0x801) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000100)={0xf0b, 0x8080000, 0x8, r4}) (async, rerun: 32) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, 0xdddd0000, 0x1, r4, 0x3}) (async, rerun: 32) r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x3}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) (async) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x9b, 0xf, 0x0, 0x5, 0x8, 0x82, 0x46, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x100001, 0xffc0000, 0x0, 0x3, 0xa, 0x8, '\x00', 0x1, 0x93}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4000ae84, &(0x7f0000000200)={{0x0, 0x1000, 0x1, 0x3a, 0x0, 0x9, 0xba, 0xc, 0x2, 0x6, 0x0, 0x9}, {0xeeef0000, 0x0, 0xd, 0x1, 0xfc, 0x1, 0x5, 0xc, 0x7, 0x4, 0x6, 0x6}, {0x0, 0xeeee8000, 0x8, 0x9, 0x6, 0x7, 0x3, 0xdb, 0x8, 0x1, 0x1}, {0x2, 0xe000, 0x0, 0x55, 0x7f, 0x80, 0x4, 0x4, 0xa, 0x1, 0x8, 0x9}, {0x6000, 0x0, 0x0, 0x38, 0x0, 0x6, 0x8, 0x1, 0x81, 0x93, 0x7f, 0x8}, {0xdddd1000, 0x41000, 0xd, 0x5, 0x9, 0x5, 0x2, 0x8, 0x81, 0xf, 0x5, 0xfe}, {0xffff1000, 0xb000, 0xc9a0128bf9334c30, 0x1, 0xff, 0x7b, 0xfd, 0x9, 0x6a, 0x0, 0x8, 0xd1}, {0xeeef0000, 0x7000, 0x9, 0x3, 0x0, 0x0, 0x7, 0xfa, 0x10, 0x2, 0x2, 0x1}, {0x40000, 0x2}, {0x8000000, 0xc71}, 0x20000002, 0x0, 0x1000, 0x8, 0x8, 0x8000, 0x7000, [0x3, 0x8000000000000000, 0x89, 0x1]}) write$eventfd(r8, &(0x7f00000001c0)=0x3, 0xfdef) (async) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x0, 0x1, 0x2013, 0xffffffffffffffff, 0x200001fe0000) r9 = eventfd2(0x1, 0x1) (async) r10 = openat$kvm(0x0, &(0x7f0000000080), 0x40000, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) syz_kvm_vgic_v3_setup(r11, 0x1, 0x100) (async, rerun: 32) ioctl$KVM_IRQFD(r11, 0x4020ae76, &(0x7f0000000100)={r9, 0x3, 0x2, r9}) (rerun: 32) ioctl$KVM_SET_GSI_ROUTING(r11, 0x4008ae6a, &(0x7f00000000c0)={0x1, 0x0, [{0x3, 0x2, 0x1, 0x0, @sint={0x9d, 0x800}}]}) (async) ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f0000000040)={0x8}) write$eventfd(r9, &(0x7f0000000000)=0x1000007, 0x8) (async, rerun: 32) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async, rerun: 32) openat$kvm(0x0, 0x0, 0x0, 0x0) 1m13.170383469s ago: executing program 9 (id=454): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x101800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000700)={0x7}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000080)=@attr_riscv64=@attr_config={0x0, 0x1, 0x0, &(0x7f0000000380)=0xfffffffffffffffe}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x5}) r4 = eventfd2(0x0, 0x0) write$eventfd(r4, 0xffffffffffffffff, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000000), 0x3090c3, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CAP_HALT_POLL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240)={0xdf, 0x0, 0x7}) ioctl$KVM_CAP_HALT_POLL(r7, 0x4068aea3, &(0x7f00000000c0)={0xe1, 0x0, 0x3}) ioctl$KVM_GET_DIRTY_LOG(r7, 0x4010ae42, &(0x7f0000000140)={0x10001, 0x0, &(0x7f0000ffc000/0x1000)=nil}) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_ARM_VCPU_FINALIZE(r3, 0x4004aec2, &(0x7f0000000200)=0x5) r8 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f0000000300)="fb4149dd033b8986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67525673312b01040000000000002627e7000000000000000200", 0x0, 0xfffffffffffffe73) syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f0000000440)="f27d4f42810037531943148cd593df681bc9588848ba8666f3d381313833ab616987ad1bd41ef53350c0a368dc82e2786c955b7ce0d8616177ee30c31b969df2b05b23329caa032a", 0x0, 0x48) r9 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r10 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, r9, 0x3000004, 0x80010, r10, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000140)={0x1ff, 0x2, 0xeeee8000, 0x1000, &(0x7f0000001000/0x1000)=nil}) close(r1) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x800000000000000) ioctl$KVM_SET_ONE_REG(r10, 0x4010aeac, &(0x7f0000000180)=@arm64_bitmap={0x6030000000160000, &(0x7f00000000c0)=0xbe0d}) 1m9.780495567s ago: executing program 0 (id=456): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x37) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000040)={0xa8, 0x0, 0x2}) r2 = ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r2, 0x4018aee1, &(0x7f0000000100)=@attr_irq_timer={0x0, 0x1, 0x1, &(0x7f00000000c0)=0x1e}) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000140)={0x8, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x6, 0x5, &(0x7f0000000180)=0x7ff}) write$eventfd(r2, &(0x7f0000000200)=0x800, 0x8) write$eventfd(r2, &(0x7f0000000240)=0x6, 0x8) ioctl$KVM_CAP_HALT_POLL(r2, 0x4068aea3, &(0x7f0000000280)={0xb6, 0x0, 0x606}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x8204, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000380)=@attr_other={0x0, 0xfffffffe, 0x1, &(0x7f0000000340)=0x3}) r4 = ioctl$KVM_GET_STATS_FD_cpu(r2, 0xaece) r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, r5, 0x1, 0x110, r4, 0x0) r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) mmap$KVM_VCPU(&(0x7f0000fff000/0x1000)=nil, r6, 0x0, 0x6978cf668b4c75ba, r4, 0x0) ioctl$KVM_GET_ONE_REG(r4, 0x4010aeab, &(0x7f0000000400)=@arm64_fw={0x6030000000140000, &(0x7f00000003c0)=0x400}) r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1c) ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f0000000440)={r4, 0x4, 0x3, r2}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x20440, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x34) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x58000, 0x0) r10 = eventfd2(0x55eeaa4e, 0x80000) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000500)={0x3, 0xeeee8000, 0x8, r10}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000540)={0x5, 0x0, [{0x8000, 0x5, 0x0, 0x0, @sint={0x1, 0x3c}}, {0x4, 0x1, 0x0, 0x0, @msi={0x9a7, 0x458, 0x1, 0x55a}}, {0x9, 0x4, 0x1, 0x0, @msi={0x6, 0x1ff, 0xfffffff8, 0x81}}, {0x800, 0x5, 0x1, 0x0, @sint={0xfffffffd, 0x2}}, {0x4, 0x5, 0x1, 0x0, @irqchip={0x6, 0x40}}]}) ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0x7fffffffffffffff) close(r9) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, r6, 0x2000009, 0x10010, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000640)={0x10200, 0x1, 0x3000, 0x1000, &(0x7f0000ffe000/0x1000)=nil, 0xf, r2}) 50.250321693s ago: executing program 9 (id=457): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) r1 = eventfd2(0x4001, 0x1) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x40000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000bc5000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r7, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x0, 0x6, 0x0}) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r8, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, r9, 0x3, 0x23ac5f9b426ec4b1, 0xffffffffffffffff, 0x0) syz_kvm_vgic_v3_setup(r3, 0x1, 0x100) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000100)={r1, 0x3, 0x2, r1}) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f00000000c0)) ioctl$KVM_GET_STATS_FD_vm(r3, 0xaece) write$eventfd(r1, &(0x7f0000000000)=0x1000007, 0x8) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) r11 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x2b) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x5) r14 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r11, 0xae04) r15 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, r14, 0x2, 0x12, r13, 0x0) mmap$KVM_VCPU(&(0x7f0000010000/0x4000)=nil, r14, 0x100000a, 0x12, r13, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r15, 0x20, &(0x7f00000001c0)="fb016b03002e5ee42ec6a29ea6ab8000000004ef0000c20cecf80a97ab78000000040000000000000000409700000000ffffffff00000000a0eb00df00", 0x0, 0xffffffffffffff69) mmap$KVM_VCPU(&(0x7f0000010000/0x1000)=nil, 0x930, 0x100000f, 0x9032, 0xffffffffffffffff, 0x0) r16 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000ae9000/0x400000)=nil) r17 = syz_kvm_add_vcpu$arm64(r16, &(0x7f0000000b80)={0x0, 0x0}, &(0x7f0000000bc0), 0x1) ioctl$KVM_SET_ONE_REG(r17, 0x4010aeac, &(0x7f0000000140)=@arm64_fw={0x6030000000140000, &(0x7f0000000200)=0x1}) 21.018776652s ago: executing program 41 (id=456): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x37) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000040)={0xa8, 0x0, 0x2}) r2 = ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r2, 0x4018aee1, &(0x7f0000000100)=@attr_irq_timer={0x0, 0x1, 0x1, &(0x7f00000000c0)=0x1e}) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000140)={0x8, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x6, 0x5, &(0x7f0000000180)=0x7ff}) write$eventfd(r2, &(0x7f0000000200)=0x800, 0x8) write$eventfd(r2, &(0x7f0000000240)=0x6, 0x8) ioctl$KVM_CAP_HALT_POLL(r2, 0x4068aea3, &(0x7f0000000280)={0xb6, 0x0, 0x606}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x8204, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000380)=@attr_other={0x0, 0xfffffffe, 0x1, &(0x7f0000000340)=0x3}) r4 = ioctl$KVM_GET_STATS_FD_cpu(r2, 0xaece) r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, r5, 0x1, 0x110, r4, 0x0) r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) mmap$KVM_VCPU(&(0x7f0000fff000/0x1000)=nil, r6, 0x0, 0x6978cf668b4c75ba, r4, 0x0) ioctl$KVM_GET_ONE_REG(r4, 0x4010aeab, &(0x7f0000000400)=@arm64_fw={0x6030000000140000, &(0x7f00000003c0)=0x400}) r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1c) ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f0000000440)={r4, 0x4, 0x3, r2}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x20440, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x34) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x58000, 0x0) r10 = eventfd2(0x55eeaa4e, 0x80000) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000500)={0x3, 0xeeee8000, 0x8, r10}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000540)={0x5, 0x0, [{0x8000, 0x5, 0x0, 0x0, @sint={0x1, 0x3c}}, {0x4, 0x1, 0x0, 0x0, @msi={0x9a7, 0x458, 0x1, 0x55a}}, {0x9, 0x4, 0x1, 0x0, @msi={0x6, 0x1ff, 0xfffffff8, 0x81}}, {0x800, 0x5, 0x1, 0x0, @sint={0xfffffffd, 0x2}}, {0x4, 0x5, 0x1, 0x0, @irqchip={0x6, 0x40}}]}) ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0x7fffffffffffffff) close(r9) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, r6, 0x2000009, 0x10010, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000640)={0x10200, 0x1, 0x3000, 0x1000, &(0x7f0000ffe000/0x1000)=nil, 0xf, r2}) 0s ago: executing program 42 (id=457): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) r1 = eventfd2(0x4001, 0x1) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x40000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000bc5000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r7, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x0, 0x6, 0x0}) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r8, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, r9, 0x3, 0x23ac5f9b426ec4b1, 0xffffffffffffffff, 0x0) syz_kvm_vgic_v3_setup(r3, 0x1, 0x100) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000100)={r1, 0x3, 0x2, r1}) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f00000000c0)) ioctl$KVM_GET_STATS_FD_vm(r3, 0xaece) write$eventfd(r1, &(0x7f0000000000)=0x1000007, 0x8) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) r11 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x2b) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x5) r14 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r11, 0xae04) r15 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, r14, 0x2, 0x12, r13, 0x0) mmap$KVM_VCPU(&(0x7f0000010000/0x4000)=nil, r14, 0x100000a, 0x12, r13, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r15, 0x20, &(0x7f00000001c0)="fb016b03002e5ee42ec6a29ea6ab8000000004ef0000c20cecf80a97ab78000000040000000000000000409700000000ffffffff00000000a0eb00df00", 0x0, 0xffffffffffffff69) mmap$KVM_VCPU(&(0x7f0000010000/0x1000)=nil, 0x930, 0x100000f, 0x9032, 0xffffffffffffffff, 0x0) r16 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000ae9000/0x400000)=nil) r17 = syz_kvm_add_vcpu$arm64(r16, &(0x7f0000000b80)={0x0, 0x0}, &(0x7f0000000bc0), 0x1) ioctl$KVM_SET_ONE_REG(r17, 0x4010aeac, &(0x7f0000000140)=@arm64_fw={0x6030000000140000, &(0x7f0000000200)=0x1}) kernel console output (not intermixed with test programs): [ 354.175379][ T24] audit: type=1400 audit(353.360:74): avc: denied { read } for pid=3210 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 360.500179][ T24] audit: type=1400 audit(359.690:75): avc: denied { write } for pid=3265 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 365.458011][ T24] audit: type=1400 audit(364.650:76): avc: denied { write } for pid=3268 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 367.999843][ T3210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.255865][ T24] audit: type=1400 audit(373.440:77): avc: denied { write } for pid=3273 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 377.786621][ T24] audit: type=1400 audit(376.950:78): avc: denied { write } for pid=3276 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 390.616059][ T24] audit: type=1400 audit(389.760:79): avc: denied { write } for pid=3281 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 395.364741][ T24] audit: type=1400 audit(394.540:80): avc: denied { write } for pid=3284 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 406.545283][ T24] audit: type=1400 audit(405.720:81): avc: denied { write } for pid=3290 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 410.027212][ T24] audit: type=1400 audit(409.190:82): avc: denied { write } for pid=3293 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 412.327085][ T3210] eql: remember to turn off Van-Jacobson compression on your slave devices [ 419.245332][ T24] audit: type=1400 audit(418.400:83): avc: denied { write } for pid=3298 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 422.815948][ T24] audit: type=1400 audit(422.000:84): avc: denied { write } for pid=3301 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 435.235222][ T24] audit: type=1400 audit(434.400:85): avc: denied { write } for pid=3307 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 438.722156][ T24] audit: type=1400 audit(437.910:86): avc: denied { write } for pid=3310 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 443.607224][ T24] audit: type=1400 audit(442.800:87): avc: denied { write } for pid=3312 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 448.018753][ T24] audit: type=1400 audit(447.210:88): avc: denied { write } for pid=3315 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 455.105409][ T24] audit: type=1400 audit(454.280:89): avc: denied { write } for pid=3318 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 459.344738][ T24] audit: type=1400 audit(458.520:90): avc: denied { write } for pid=3321 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 467.885975][ T24] audit: type=1400 audit(467.030:91): avc: denied { write } for pid=3325 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 471.335155][ T24] audit: type=1400 audit(470.520:92): avc: denied { write } for pid=3328 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 479.874747][ T24] audit: type=1400 audit(479.030:93): avc: denied { write } for pid=3332 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 483.305360][ T24] audit: type=1400 audit(482.490:94): avc: denied { write } for pid=3335 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 498.535220][ T24] audit: type=1400 audit(497.710:95): avc: denied { write } for pid=3343 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 502.075835][ T24] audit: type=1400 audit(501.260:96): avc: denied { write } for pid=3346 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 515.894760][ T24] audit: type=1400 audit(515.040:97): avc: denied { write } for pid=3352 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 520.255251][ T24] audit: type=1400 audit(519.430:98): avc: denied { write } for pid=3355 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 530.017483][ T24] audit: type=1400 audit(529.210:99): avc: denied { write } for pid=3359 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 533.471943][ T24] audit: type=1400 audit(532.660:100): avc: denied { write } for pid=3362 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:59638' (ED25519) to the list of known hosts. [ 556.831515][ T24] audit: type=1400 audit(556.020:101): avc: denied { name_bind } for pid=3367 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 557.598754][ T24] audit: type=1400 audit(556.790:102): avc: denied { execute } for pid=3368 comm="sh" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 557.619031][ T24] audit: type=1400 audit(556.810:103): avc: denied { execute_no_trans } for pid=3368 comm="sh" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 586.119442][ T24] audit: type=1400 audit(585.310:104): avc: denied { mounton } for pid=3368 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 586.155122][ T24] audit: type=1400 audit(585.340:105): avc: denied { mount } for pid=3368 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 586.234663][ T3368] cgroup: Unknown subsys name 'net' [ 586.283246][ T24] audit: type=1400 audit(585.470:106): avc: denied { unmount } for pid=3368 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 586.648004][ T3368] cgroup: Unknown subsys name 'cpuset' [ 586.743185][ T3368] cgroup: Unknown subsys name 'rlimit' [ 587.526718][ T24] audit: type=1400 audit(586.710:107): avc: denied { setattr } for pid=3368 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 587.548970][ T24] audit: type=1400 audit(586.740:108): avc: denied { mounton } for pid=3368 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 587.566984][ T24] audit: type=1400 audit(586.750:109): avc: denied { mount } for pid=3368 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 588.502161][ T3371] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 588.521084][ T24] audit: type=1400 audit(587.710:110): avc: denied { relabelto } for pid=3371 comm="mkswap" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 588.548531][ T24] audit: type=1400 audit(587.740:111): avc: denied { write } for pid=3371 comm="mkswap" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 588.718184][ T24] audit: type=1400 audit(587.900:112): avc: denied { read } for pid=3368 comm="syz-executor" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 588.742359][ T24] audit: type=1400 audit(587.930:113): avc: denied { open } for pid=3368 comm="syz-executor" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 588.788617][ T3368] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 643.178518][ T24] audit: type=1400 audit(642.370:114): avc: denied { execmem } for pid=3372 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 646.560991][ T24] audit: type=1400 audit(645.740:115): avc: denied { read } for pid=3374 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 646.586129][ T24] audit: type=1400 audit(645.770:116): avc: denied { open } for pid=3374 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 646.657332][ T24] audit: type=1400 audit(645.830:117): avc: denied { mounton } for pid=3375 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 646.852500][ T24] audit: type=1400 audit(646.040:118): avc: denied { module_request } for pid=3375 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 646.872468][ T24] audit: type=1400 audit(646.060:119): avc: denied { module_request } for pid=3374 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 647.811175][ T24] audit: type=1400 audit(647.000:120): avc: denied { sys_module } for pid=3375 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 667.979039][ T3374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 668.211388][ T3374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 668.888881][ T3375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 669.011254][ T3375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 679.270231][ T3374] hsr_slave_0: entered promiscuous mode [ 679.310787][ T3374] hsr_slave_1: entered promiscuous mode [ 680.280921][ T3375] hsr_slave_0: entered promiscuous mode [ 680.319186][ T3375] hsr_slave_1: entered promiscuous mode [ 680.345541][ T3375] debugfs: 'hsr0' already exists in 'hsr' [ 680.355280][ T3375] Cannot create hsr debugfs directory [ 685.417414][ T24] audit: type=1400 audit(684.600:121): avc: denied { create } for pid=3374 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 685.435995][ T24] audit: type=1400 audit(684.620:122): avc: denied { write } for pid=3374 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 685.520294][ T24] audit: type=1400 audit(684.710:123): avc: denied { read } for pid=3374 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 685.658998][ T3374] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 685.852932][ T3374] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 685.912548][ T3374] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 686.219902][ T3374] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 686.283179][ T3374] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 686.520338][ T3374] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 686.666362][ T3374] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 686.738591][ T3374] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 688.070316][ T3375] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 688.206756][ T3375] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 688.263341][ T3375] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 688.395722][ T3375] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 688.432494][ T3375] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 688.558158][ T3375] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 688.611002][ T3375] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 688.729414][ T3375] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 703.717480][ T3374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 705.809228][ T3375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 747.871404][ T3374] veth0_vlan: entered promiscuous mode [ 748.287112][ T3374] veth1_vlan: entered promiscuous mode [ 749.984442][ T3374] veth0_macvtap: entered promiscuous mode [ 750.389034][ T3374] veth1_macvtap: entered promiscuous mode [ 750.690642][ T3375] veth0_vlan: entered promiscuous mode [ 751.329485][ T3375] veth1_vlan: entered promiscuous mode [ 753.267719][ T3435] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.310137][ T3435] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.359471][ T3435] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.435877][ T3435] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.376212][ T3375] veth0_macvtap: entered promiscuous mode [ 757.428361][ T3375] veth1_macvtap: entered promiscuous mode [ 757.682019][ T24] audit: type=1400 audit(756.870:124): avc: denied { mount } for pid=3374 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 758.155949][ T24] audit: type=1400 audit(757.330:125): avc: denied { mounton } for pid=3374 comm="syz-executor" path="/syzkaller.w68zB7/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 758.489126][ T24] audit: type=1400 audit(757.680:126): avc: denied { write } for pid=3523 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 758.589520][ T24] audit: type=1400 audit(757.780:127): avc: denied { mount } for pid=3374 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 759.071094][ T24] audit: type=1400 audit(758.260:128): avc: denied { mounton } for pid=3374 comm="syz-executor" path="/syzkaller.w68zB7/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 759.335102][ T24] audit: type=1400 audit(758.520:129): avc: denied { mounton } for pid=3374 comm="syz-executor" path="/syzkaller.w68zB7/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3711 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 760.565866][ T24] audit: type=1400 audit(759.610:130): avc: denied { unmount } for pid=3374 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 761.015504][ T24] audit: type=1400 audit(760.120:131): avc: denied { mounton } for pid=3374 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1544 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 761.135220][ T24] audit: type=1400 audit(760.300:132): avc: denied { mount } for pid=3374 comm="syz-executor" name="/" dev="gadgetfs" ino=3722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 761.387789][ T3511] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.465828][ T3511] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.467050][ T3511] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.479281][ T3511] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.824685][ T24] audit: type=1400 audit(761.000:133): avc: denied { mount } for pid=3374 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 764.609640][ T3374] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 765.506569][ T24] kauditd_printk_skb: 2 callbacks suppressed [ 765.515577][ T24] audit: type=1400 audit(764.670:136): avc: denied { write } for pid=3527 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 766.416233][ T24] audit: type=1400 audit(765.550:137): avc: denied { read write } for pid=3374 comm="syz-executor" name="loop1" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 766.417522][ T24] audit: type=1400 audit(765.600:138): avc: denied { open } for pid=3374 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 766.462887][ T24] audit: type=1400 audit(765.600:139): avc: denied { ioctl } for pid=3374 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=637 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 776.865969][ T24] audit: type=1400 audit(776.050:140): avc: denied { read write } for pid=3531 comm="syz.1.2" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 776.931238][ T24] audit: type=1400 audit(776.120:141): avc: denied { open } for pid=3531 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 777.022038][ T24] audit: type=1400 audit(776.210:142): avc: denied { ioctl } for pid=3531 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 798.307967][ T24] audit: type=1400 audit(797.490:143): avc: denied { create } for pid=3544 comm="syz.0.5" anonclass=[kvm-gmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 798.611086][ T24] audit: type=1400 audit(797.800:144): avc: denied { append } for pid=3544 comm="syz.0.5" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 799.206956][ T24] audit: type=1400 audit(798.360:145): avc: denied { map } for pid=3544 comm="syz.0.5" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=4164 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 799.228006][ T24] audit: type=1400 audit(798.390:146): avc: denied { read } for pid=3544 comm="syz.0.5" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=4164 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 811.696987][ T3556] kvm [3556]: Failed to find VMA for hva 0x20bff000 [ 832.937935][ T24] audit: type=1400 audit(832.110:147): avc: denied { execute } for pid=3569 comm="syz.0.13" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=4526 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 834.629948][ T24] audit: type=1400 audit(833.820:148): avc: denied { execute } for pid=3570 comm="syz.1.14" path=2F362F10FBFF67525673312B0104 dev="tmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 840.406784][ T24] audit: type=1400 audit(839.580:149): avc: denied { execute } for pid=3574 comm="syz.0.15" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=4607 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 853.549795][ T3585] kvm [3585]: Failed to find VMA for hva 0x21016000 [ 853.609621][ T3586] kvm [3586]: Failed to find VMA for hva 0x21016000 [ 853.648940][ T3586] kvm [3586]: Failed to find VMA for hva 0x21016000 [ 853.672858][ T3585] kvm [3585]: Failed to find VMA for hva 0x21016000 [ 1015.290646][ T3632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1015.558330][ T3632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1023.397181][ T3638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1023.647604][ T3638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1026.785361][ T24] audit: type=1400 audit(1025.970:150): avc: denied { write } for pid=3680 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1033.556015][ T24] audit: type=1400 audit(1032.660:151): avc: denied { write } for pid=3689 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1040.109724][ T3632] hsr_slave_0: entered promiscuous mode [ 1040.208603][ T3632] hsr_slave_1: entered promiscuous mode [ 1040.250439][ T3632] debugfs: 'hsr0' already exists in 'hsr' [ 1040.285835][ T3632] Cannot create hsr debugfs directory [ 1048.517973][ T3638] hsr_slave_0: entered promiscuous mode [ 1048.553129][ T3638] hsr_slave_1: entered promiscuous mode [ 1048.596943][ T3638] debugfs: 'hsr0' already exists in 'hsr' [ 1048.600100][ T3638] Cannot create hsr debugfs directory [ 1056.647289][ T3632] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1057.160181][ T3632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1057.982633][ T3632] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1058.247119][ T3632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1058.866930][ T3632] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1059.187448][ T3632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1059.771061][ T3632] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1060.089476][ T3632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1066.922832][ T30] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.932301][ T30] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1071.201201][ T30] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1072.768120][ T30] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1075.546727][ T3638] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1075.861478][ T3638] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1076.306872][ T3638] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1076.566716][ T3638] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1077.072581][ T3638] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1077.337181][ T3638] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1078.040978][ T3638] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1078.291596][ T3638] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1085.321525][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1085.438877][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1085.487003][ T30] bond0 (unregistering): Released all slaves [ 1086.666184][ T30] hsr_slave_0: left promiscuous mode [ 1086.701410][ T30] hsr_slave_1: left promiscuous mode [ 1087.062594][ T30] veth1_macvtap: left promiscuous mode [ 1087.072834][ T30] veth0_macvtap: left promiscuous mode [ 1087.097022][ T30] veth1_vlan: left promiscuous mode [ 1087.107147][ T30] veth0_vlan: left promiscuous mode [ 1106.199288][ T30] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1107.590488][ T30] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1108.797505][ T30] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1109.579922][ T3632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1110.156609][ T30] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1116.887295][ T24] audit: type=1400 audit(1116.060:152): avc: denied { write } for pid=3735 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1125.184759][ T24] audit: type=1400 audit(1124.370:153): avc: denied { write } for pid=3747 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1129.441912][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1129.648390][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1129.778819][ T30] bond0 (unregistering): Released all slaves [ 1130.467783][ T3210] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1131.139764][ T30] hsr_slave_0: left promiscuous mode [ 1131.594868][ T30] hsr_slave_1: left promiscuous mode [ 1132.280778][ T30] veth1_macvtap: left promiscuous mode [ 1132.316548][ T30] veth0_macvtap: left promiscuous mode [ 1132.327596][ T30] veth1_vlan: left promiscuous mode [ 1132.336732][ T30] veth0_vlan: left promiscuous mode [ 1150.321607][ T3638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1158.566029][ T24] audit: type=1400 audit(1157.750:154): avc: denied { write } for pid=3759 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1163.805780][ T24] audit: type=1400 audit(1162.940:155): avc: denied { write } for pid=3768 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1168.517357][ T3210] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1180.505048][ T24] audit: type=1400 audit(1179.610:156): avc: denied { write } for pid=3782 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1187.419759][ T24] audit: type=1400 audit(1186.600:157): avc: denied { write } for pid=3791 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1191.991355][ T3210] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1203.111087][ T24] audit: type=1400 audit(1202.300:158): avc: denied { write } for pid=3807 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1208.455991][ T24] audit: type=1400 audit(1207.640:159): avc: denied { write } for pid=3817 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1211.406650][ T3632] veth0_vlan: entered promiscuous mode [ 1212.057220][ T3632] veth1_vlan: entered promiscuous mode [ 1213.301161][ T3210] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1214.616065][ T3632] veth0_macvtap: entered promiscuous mode [ 1215.047294][ T3632] veth1_macvtap: entered promiscuous mode [ 1217.685702][ T3460] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1217.703164][ T21] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1217.761542][ T3435] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1217.804795][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.275898][ T24] audit: type=1400 audit(1226.450:160): avc: denied { write } for pid=3828 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1228.412335][ T3638] veth0_vlan: entered promiscuous mode [ 1229.198402][ T3638] veth1_vlan: entered promiscuous mode [ 1232.021587][ T3638] veth0_macvtap: entered promiscuous mode [ 1232.727728][ T3638] veth1_macvtap: entered promiscuous mode [ 1236.050372][ T3460] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1236.058316][ T3460] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1236.154696][ T3460] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1236.225743][ T3460] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1236.491469][ T24] audit: type=1400 audit(1235.650:161): avc: denied { write } for pid=3837 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1242.129294][ T24] audit: type=1400 audit(1241.310:162): avc: denied { write } for pid=3839 comm="syz.2.34" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=6923 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1243.149745][ T3210] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1263.059379][ T24] audit: type=1400 audit(1262.250:163): avc: denied { write } for pid=3849 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1271.518755][ T24] audit: type=1400 audit(1270.700:164): avc: denied { write } for pid=3856 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1277.131176][ T3210] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1293.563173][ T24] audit: type=1400 audit(1292.720:165): avc: denied { write } for pid=3868 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1303.904865][ T24] audit: type=1400 audit(1303.030:166): avc: denied { write } for pid=3877 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1310.959740][ T3210] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1335.685887][ T24] audit: type=1400 audit(1334.870:167): avc: denied { write } for pid=3897 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1344.326757][ T24] audit: type=1400 audit(1343.440:168): avc: denied { write } for pid=3907 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1350.301246][ T3210] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1385.889729][ T24] audit: type=1400 audit(1385.080:169): avc: denied { write } for pid=3934 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1392.290385][ T24] audit: type=1400 audit(1391.460:170): avc: denied { write } for pid=3938 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1429.838098][ T24] audit: type=1400 audit(1429.000:171): avc: denied { write } for pid=3964 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1439.768454][ T24] audit: type=1400 audit(1438.950:172): avc: denied { write } for pid=3975 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1453.606117][ T24] audit: type=1400 audit(1452.790:173): avc: denied { write } for pid=3979 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1462.237809][ T24] audit: type=1400 audit(1461.410:174): avc: denied { write } for pid=3991 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1483.696346][ T24] audit: type=1400 audit(1482.880:175): avc: denied { write } for pid=4003 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1493.447457][ T24] audit: type=1400 audit(1492.620:176): avc: denied { write } for pid=4013 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1507.692595][ T24] audit: type=1400 audit(1506.870:177): avc: denied { write } for pid=4018 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1516.118330][ T24] audit: type=1400 audit(1515.290:178): avc: denied { write } for pid=4029 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1519.591056][ T4031] kvm [4031]: Failed to find VMA for hva 0x20c01000 [ 1539.328512][ T24] audit: type=1400 audit(1538.520:179): avc: denied { write } for pid=4048 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1550.278410][ T24] audit: type=1400 audit(1549.460:180): avc: denied { write } for pid=4055 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1570.535260][ T24] audit: type=1400 audit(1569.720:181): avc: denied { write } for pid=4065 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1574.577056][ T24] audit: type=1400 audit(1573.760:182): avc: denied { write } for pid=4068 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1586.465722][ T24] audit: type=1400 audit(1585.630:183): avc: denied { write } for pid=4073 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1592.505382][ T24] audit: type=1400 audit(1591.690:184): avc: denied { write } for pid=4077 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1613.056657][ T24] audit: type=1400 audit(1612.220:185): avc: denied { write } for pid=4083 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1622.938111][ T3435] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1623.157076][ T24] audit: type=1400 audit(1622.330:186): avc: denied { write } for pid=4094 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1624.476727][ T3435] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1625.728664][ T3435] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1627.136981][ T3435] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1640.618241][ T3435] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1640.762836][ T3435] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1640.877300][ T3435] bond0 (unregistering): Released all slaves [ 1641.796706][ T3435] hsr_slave_0: left promiscuous mode [ 1641.858359][ T3435] hsr_slave_1: left promiscuous mode [ 1642.109848][ T3435] veth1_macvtap: left promiscuous mode [ 1642.116091][ T3435] veth0_macvtap: left promiscuous mode [ 1642.140697][ T3435] veth1_vlan: left promiscuous mode [ 1642.152028][ T3435] veth0_vlan: left promiscuous mode [ 1663.139509][ T3435] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1665.639410][ T3435] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1667.188812][ T3435] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1668.472781][ T24] audit: type=1400 audit(1667.660:187): avc: denied { write } for pid=4115 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1668.903183][ T3435] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1675.615948][ T24] audit: type=1400 audit(1674.800:188): avc: denied { write } for pid=4120 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1683.252639][ T3435] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1683.350943][ T3435] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1683.397085][ T3435] bond0 (unregistering): Released all slaves [ 1684.440521][ T3210] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1684.810858][ T3435] hsr_slave_0: left promiscuous mode [ 1684.951458][ T3435] hsr_slave_1: left promiscuous mode [ 1685.397969][ T3435] veth1_macvtap: left promiscuous mode [ 1685.419271][ T3435] veth0_macvtap: left promiscuous mode [ 1685.429929][ T3435] veth1_vlan: left promiscuous mode [ 1685.456316][ T3435] veth0_vlan: left promiscuous mode [ 1703.096137][ T24] audit: type=1400 audit(1702.280:189): avc: denied { write } for pid=4134 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1706.881170][ T24] audit: type=1400 audit(1706.070:190): avc: denied { write } for pid=4144 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1717.582108][ T4088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1717.851171][ T4088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1719.888492][ T24] audit: type=1400 audit(1719.080:191): avc: denied { write } for pid=4158 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1720.909868][ T4084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1721.192950][ T4084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1726.296842][ T24] audit: type=1400 audit(1725.480:192): avc: denied { write } for pid=4165 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1731.620529][ T3210] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1743.153014][ T4088] hsr_slave_0: entered promiscuous mode [ 1743.232373][ T4088] hsr_slave_1: entered promiscuous mode [ 1743.409420][ T24] audit: type=1400 audit(1742.600:193): avc: denied { write } for pid=4181 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1746.078197][ T4084] hsr_slave_0: entered promiscuous mode [ 1746.177924][ T4084] hsr_slave_1: entered promiscuous mode [ 1746.226817][ T4084] debugfs: 'hsr0' already exists in 'hsr' [ 1746.231342][ T4084] Cannot create hsr debugfs directory [ 1747.395701][ T24] audit: type=1400 audit(1746.540:194): avc: denied { write } for pid=4186 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1750.367270][ T3210] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1757.732094][ T4088] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1758.161425][ T4088] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1758.290834][ T4088] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1758.769699][ T4088] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1758.822350][ T4088] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1759.102044][ T4088] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1759.359522][ T4088] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1759.759763][ T4088] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1761.609082][ T24] audit: type=1400 audit(1760.800:195): avc: denied { write } for pid=4192 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1763.580768][ T4084] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1763.920737][ T4084] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1764.061363][ T4084] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1764.388748][ T4084] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1764.532865][ T4084] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1764.977811][ T4084] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1765.022436][ T4084] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1765.399460][ T4084] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1768.996089][ T24] audit: type=1400 audit(1768.160:196): avc: denied { write } for pid=4207 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1773.641816][ T3210] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1784.870121][ T4088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1789.035384][ T24] audit: type=1400 audit(1788.200:197): avc: denied { write } for pid=4226 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1791.646913][ T4084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1798.055164][ T24] audit: type=1400 audit(1797.230:198): avc: denied { write } for pid=4233 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1803.740378][ T3210] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1821.567617][ T24] audit: type=1400 audit(1820.750:199): avc: denied { write } for pid=4246 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1828.286458][ T24] audit: type=1400 audit(1827.460:200): avc: denied { write } for pid=4255 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1832.990190][ T3210] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1849.156000][ T24] audit: type=1400 audit(1848.250:201): avc: denied { write } for pid=4271 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1857.965838][ T24] audit: type=1400 audit(1857.080:202): avc: denied { write } for pid=4281 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1863.860373][ T3210] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1878.367492][ T24] audit: type=1400 audit(1877.550:203): avc: denied { write } for pid=4297 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1885.851185][ T24] audit: type=1400 audit(1885.010:204): avc: denied { write } for pid=4307 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1890.760074][ T3210] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1900.461587][ T4088] veth0_vlan: entered promiscuous mode [ 1901.518698][ T4088] veth1_vlan: entered promiscuous mode [ 1905.186817][ T4088] veth0_macvtap: entered promiscuous mode [ 1906.251980][ T4088] veth1_macvtap: entered promiscuous mode [ 1908.587052][ T4084] veth0_vlan: entered promiscuous mode [ 1910.379152][ T4084] veth1_vlan: entered promiscuous mode [ 1912.828554][ T4091] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1912.841097][ T4091] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1912.888607][ T4091] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1912.909347][ T4091] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1917.872146][ T4084] veth0_macvtap: entered promiscuous mode [ 1918.970966][ T4084] veth1_macvtap: entered promiscuous mode [ 1923.839412][ T21] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1923.870693][ T3435] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1923.950842][ T3435] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1924.075865][ T3435] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1945.391390][ T24] audit: type=1400 audit(1944.580:205): avc: denied { write } for pid=4339 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1955.759335][ T24] audit: type=1400 audit(1954.940:206): avc: denied { write } for pid=4347 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1987.415009][ T24] audit: type=1400 audit(1986.590:207): avc: denied { write } for pid=4358 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1998.821997][ T24] audit: type=1400 audit(1998.010:208): avc: denied { write } for pid=4373 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2023.202151][ T24] audit: type=1400 audit(2022.370:209): avc: denied { write } for pid=4389 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2034.996949][ T24] audit: type=1400 audit(2034.150:210): avc: denied { write } for pid=4399 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2055.885994][ T24] audit: type=1400 audit(2055.050:211): avc: denied { write } for pid=4408 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2062.691625][ T24] audit: type=1400 audit(2061.880:212): avc: denied { write } for pid=4412 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2091.520094][ T24] audit: type=1400 audit(2090.700:213): avc: denied { write } for pid=4425 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2103.945077][ T24] audit: type=1400 audit(2103.130:214): avc: denied { write } for pid=4433 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2128.842720][ T24] audit: type=1400 audit(2127.970:215): avc: denied { write } for pid=4448 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2137.411316][ T24] audit: type=1400 audit(2136.590:216): avc: denied { write } for pid=4456 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2156.255191][ T24] audit: type=1400 audit(2155.430:217): avc: denied { write } for pid=4464 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2168.591635][ T24] audit: type=1400 audit(2167.730:218): avc: denied { write } for pid=4474 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2203.667580][ T24] audit: type=1400 audit(2202.760:219): avc: denied { write } for pid=4494 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2216.306823][ T24] audit: type=1400 audit(2215.490:220): avc: denied { write } for pid=4503 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2242.621943][ T24] audit: type=1400 audit(2241.810:221): avc: denied { write } for pid=4517 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2253.322903][ T24] audit: type=1400 audit(2252.510:222): avc: denied { write } for pid=4530 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2378.266701][ T24] audit: type=1400 audit(2377.410:223): avc: denied { ioctl } for pid=4599 comm="syz.4.132" path="net:[4026531833]" dev="nsfs" ino=4026531833 ioctlcmd=0xb708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2510.307950][ T24] audit: type=1400 audit(2509.480:224): avc: denied { map } for pid=4661 comm="syz.4.151" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2510.356237][ T24] audit: type=1400 audit(2509.540:225): avc: denied { execute } for pid=4661 comm="syz.4.151" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2649.039311][ T24] audit: type=1400 audit(2648.210:226): avc: denied { write } for pid=4732 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2660.166145][ T24] audit: type=1400 audit(2659.340:227): avc: denied { write } for pid=4743 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2971.306743][ T4902] kvm [4902]: Failed to find VMA for hva 0x20dca000 [ 3072.837728][ T24] audit: type=1400 audit(3072.030:228): avc: denied { write } for pid=4944 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3084.258150][ T24] audit: type=1400 audit(3083.440:229): avc: denied { write } for pid=4955 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3258.355245][ T24] audit: type=1400 audit(3257.470:230): avc: denied { setattr } for pid=5049 comm="syz.5.260" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 3403.626536][ T24] audit: type=1400 audit(3402.780:231): avc: denied { write } for pid=5121 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3415.369569][ T24] audit: type=1400 audit(3414.430:232): avc: denied { write } for pid=5130 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3745.470937][ T4534] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3747.151836][ T4534] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3748.567949][ T4534] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3749.667507][ T4534] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3759.436797][ T24] audit: type=1400 audit(3758.610:233): avc: denied { write } for pid=5291 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3767.137506][ T24] audit: type=1400 audit(3766.300:234): avc: denied { write } for pid=5300 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3770.475639][ T4534] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3770.946086][ T4534] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3771.307908][ T4534] bond0 (unregistering): Released all slaves [ 3775.020752][ T4534] hsr_slave_0: left promiscuous mode [ 3775.520400][ T4534] hsr_slave_1: left promiscuous mode [ 3776.306270][ T4534] veth1_macvtap: left promiscuous mode [ 3776.321803][ T4534] veth0_macvtap: left promiscuous mode [ 3776.339521][ T4534] veth1_vlan: left promiscuous mode [ 3776.360526][ T4534] veth0_vlan: left promiscuous mode [ 3803.318293][ T4534] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3804.947532][ T4534] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3806.407711][ T4534] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3807.691571][ T4534] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3816.659546][ T24] audit: type=1400 audit(3815.830:235): avc: denied { write } for pid=5319 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3823.087098][ T24] audit: type=1400 audit(3822.260:236): avc: denied { write } for pid=5329 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3825.086568][ T4534] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3825.277553][ T4534] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3825.437019][ T4534] bond0 (unregistering): Released all slaves [ 3829.449458][ T4534] hsr_slave_0: left promiscuous mode [ 3829.575350][ T4534] hsr_slave_1: left promiscuous mode [ 3830.066784][ T4534] veth1_macvtap: left promiscuous mode [ 3830.077686][ T4534] veth0_macvtap: left promiscuous mode [ 3830.088306][ T4534] veth1_vlan: left promiscuous mode [ 3830.127344][ T4534] veth0_vlan: left promiscuous mode [ 3847.360301][ T3210] 8021q: adding VLAN 0 to HW filter on device eth17 [ 3848.821284][ T5263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3849.208959][ T5266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3849.368643][ T5263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3850.322199][ T5266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3863.664731][ T24] audit: type=1400 audit(3862.840:237): avc: denied { write } for pid=5342 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3869.585466][ T24] audit: type=1400 audit(3868.760:238): avc: denied { write } for pid=5351 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3873.267607][ T5263] hsr_slave_0: entered promiscuous mode [ 3873.327386][ T5263] hsr_slave_1: entered promiscuous mode [ 3873.419131][ T3210] 8021q: adding VLAN 0 to HW filter on device eth18 [ 3875.177523][ T5266] hsr_slave_0: entered promiscuous mode [ 3875.255296][ T5266] hsr_slave_1: entered promiscuous mode [ 3875.297445][ T5266] debugfs: 'hsr0' already exists in 'hsr' [ 3875.300596][ T5266] Cannot create hsr debugfs directory [ 3885.827372][ T24] audit: type=1400 audit(3885.020:239): avc: denied { write } for pid=5360 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3890.401184][ T5263] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 3891.087223][ T5263] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 3891.316993][ T5263] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 3891.667728][ T24] audit: type=1400 audit(3890.860:240): avc: denied { write } for pid=5364 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3891.889884][ T5263] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3892.050835][ T5263] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 3892.456366][ T5263] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 3892.523037][ T5263] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 3893.270586][ T5263] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 3898.600705][ T3210] 8021q: adding VLAN 0 to HW filter on device eth19 [ 3899.821987][ T5266] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 3900.112288][ T5266] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 3900.322496][ T5266] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 3900.662301][ T5266] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3900.846010][ T5266] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 3901.377071][ T5266] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 3901.529537][ T5266] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 3901.937011][ T5266] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 3920.412901][ T24] audit: type=1400 audit(3919.600:241): avc: denied { write } for pid=5390 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3927.532536][ T5263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3928.759256][ T24] audit: type=1400 audit(3927.940:242): avc: denied { write } for pid=5398 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3933.656901][ T5266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3935.508659][ T3210] 8021q: adding VLAN 0 to HW filter on device eth20 [ 3955.351839][ T24] audit: type=1400 audit(3954.540:243): avc: denied { write } for pid=5412 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3967.136393][ T24] audit: type=1400 audit(3966.200:244): avc: denied { write } for pid=5420 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3973.659811][ T3210] 8021q: adding VLAN 0 to HW filter on device eth21 [ 3992.579052][ T24] audit: type=1400 audit(3991.770:245): avc: denied { write } for pid=5435 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4001.011842][ T24] audit: type=1400 audit(4000.130:246): avc: denied { write } for pid=5446 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4006.521732][ T3210] 8021q: adding VLAN 0 to HW filter on device eth22 [ 4018.437534][ T24] audit: type=1400 audit(4017.610:247): avc: denied { write } for pid=5454 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4028.426776][ T24] audit: type=1400 audit(4027.570:248): avc: denied { write } for pid=5465 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4053.955793][ T24] audit: type=1400 audit(4053.140:249): avc: denied { write } for pid=5479 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4062.283051][ T24] audit: type=1400 audit(4061.470:250): avc: denied { write } for pid=5490 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4065.129490][ T5263] veth0_vlan: entered promiscuous mode [ 4066.037450][ T5263] veth1_vlan: entered promiscuous mode [ 4068.671437][ T3210] 8021q: adding VLAN 0 to HW filter on device eth23 [ 4070.337101][ T5266] veth0_vlan: entered promiscuous mode [ 4070.980067][ T5263] veth0_macvtap: entered promiscuous mode [ 4072.331087][ T5263] veth1_macvtap: entered promiscuous mode [ 4073.557275][ T5266] veth1_vlan: entered promiscuous mode [ 4078.318292][ T4329] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 4078.388880][ T3460] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 4078.441212][ T3460] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 4078.468125][ T5274] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 4081.106391][ T5266] veth0_macvtap: entered promiscuous mode [ 4082.419774][ T5266] veth1_macvtap: entered promiscuous mode [ 4088.865675][ T4329] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 4088.873360][ T4329] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 4089.076127][ T3460] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 4089.078880][ T3460] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 4092.176099][ T24] audit: type=1400 audit(4091.230:251): avc: denied { write } for pid=5497 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4105.997250][ T24] audit: type=1400 audit(4105.170:252): avc: denied { write } for pid=5505 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4114.900404][ T3210] 8021q: adding VLAN 0 to HW filter on device eth24 [ 4187.960632][ T24] audit: type=1400 audit(4187.090:253): avc: denied { write } for pid=5554 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4201.826538][ T24] audit: type=1400 audit(4200.960:254): avc: denied { write } for pid=5565 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4227.569815][ T24] audit: type=1400 audit(4226.760:255): avc: denied { write } for pid=5576 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4240.366905][ T24] audit: type=1400 audit(4239.530:256): avc: denied { write } for pid=5586 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4279.545813][ T24] audit: type=1400 audit(4278.720:257): avc: denied { write } for pid=5605 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4293.325307][ T24] audit: type=1400 audit(4292.500:258): avc: denied { write } for pid=5614 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4320.114590][ T24] audit: type=1400 audit(4319.280:259): avc: denied { write } for pid=5626 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4334.082803][ T24] audit: type=1400 audit(4333.270:260): avc: denied { write } for pid=5638 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4365.167789][ T24] audit: type=1400 audit(4364.330:261): avc: denied { write } for pid=5651 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4378.147734][ T24] audit: type=1400 audit(4377.230:262): avc: denied { write } for pid=5662 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4407.006594][ T24] audit: type=1400 audit(4406.170:263): avc: denied { write } for pid=5672 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4420.705797][ T24] audit: type=1400 audit(4419.850:264): avc: denied { write } for pid=5678 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4436.926559][ T5665] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4440.170849][ T5665] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4442.982395][ T5665] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4446.409577][ T5665] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4478.486520][ T5665] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 4479.030836][ T5665] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 4479.277778][ T5665] bond0 (unregistering): Released all slaves [ 4481.654311][ T5665] hsr_slave_0: left promiscuous mode [ 4481.728440][ T5665] hsr_slave_1: left promiscuous mode [ 4482.562964][ T5665] veth1_macvtap: left promiscuous mode [ 4482.654868][ T5665] veth0_macvtap: left promiscuous mode [ 4482.681586][ T5665] veth1_vlan: left promiscuous mode [ 4482.710250][ T5665] veth0_vlan: left promiscuous mode [ 4558.370736][ T24] audit: type=1400 audit(4557.560:265): avc: denied { write } for pid=5740 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4569.514794][ T24] audit: type=1400 audit(4568.670:266): avc: denied { write } for pid=5752 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4578.087225][ T3210] 8021q: adding VLAN 0 to HW filter on device eth25 [ 4591.265282][ T24] audit: type=1400 audit(4590.440:267): avc: denied { write } for pid=5762 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4601.516087][ T24] audit: type=1400 audit(4600.680:268): avc: denied { write } for pid=5777 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4601.842716][ T5685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4602.407229][ T5685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4643.925686][ T24] audit: type=1400 audit(4643.090:269): avc: denied { write } for pid=5801 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4650.139994][ T5685] hsr_slave_0: entered promiscuous mode [ 4650.321033][ T5685] hsr_slave_1: entered promiscuous mode [ 4650.476130][ T5685] debugfs: 'hsr0' already exists in 'hsr' [ 4650.558131][ T5685] Cannot create hsr debugfs directory [ 4654.316261][ T24] audit: type=1400 audit(4653.500:270): avc: denied { write } for pid=5811 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4661.010685][ T3210] 8021q: adding VLAN 0 to HW filter on device eth26 [ 4673.923229][ T5685] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 4674.529607][ T5685] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 4674.796991][ T5685] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 4675.313258][ T5685] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 4675.589433][ T5685] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 4676.097167][ T5685] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 4676.305448][ T5685] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 4676.708083][ T5685] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 4693.987467][ T24] audit: type=1400 audit(4693.070:271): avc: denied { write } for pid=5833 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4707.316189][ T24] audit: type=1400 audit(4706.470:272): avc: denied { write } for pid=5846 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4716.448775][ T3210] 8021q: adding VLAN 0 to HW filter on device eth27 [ 4719.761514][ T5685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4728.832677][ T24] audit: type=1400 audit(4728.020:273): avc: denied { write } for pid=5853 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4740.565185][ T24] audit: type=1400 audit(4739.720:274): avc: denied { write } for pid=5861 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4766.596133][ T24] audit: type=1400 audit(4765.680:275): avc: denied { write } for pid=5871 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4778.881505][ T24] audit: type=1400 audit(4778.040:276): avc: denied { write } for pid=5881 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4808.145338][ T24] audit: type=1400 audit(4807.270:277): avc: denied { write } for pid=5895 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4822.202262][ T24] audit: type=1400 audit(4821.390:278): avc: denied { write } for pid=5907 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4847.394790][ T24] audit: type=1400 audit(4846.580:279): avc: denied { map } for pid=5921 comm="syz.6.376" path="pipe:[24569]" dev="pipefs" ino=24569 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 4857.497782][ T24] audit: type=1400 audit(4856.520:280): avc: denied { write } for pid=5925 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4870.166720][ T24] audit: type=1400 audit(4869.340:281): avc: denied { write } for pid=5938 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4880.428192][ T3210] 8021q: adding VLAN 0 to HW filter on device eth28 [ 4910.601198][ T5685] veth0_vlan: entered promiscuous mode [ 4912.260707][ T5685] veth1_vlan: entered promiscuous mode [ 4917.659147][ T5685] veth0_macvtap: entered promiscuous mode [ 4918.982009][ T5685] veth1_macvtap: entered promiscuous mode [ 4924.236363][ T5274] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 4924.275752][ T5274] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 4924.368088][ T5274] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 4924.382294][ T5274] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 4952.897468][ T24] audit: type=1400 audit(4952.010:282): avc: denied { write } for pid=5970 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4967.046372][ T24] audit: type=1400 audit(4966.200:283): avc: denied { write } for pid=5980 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4994.702496][ T24] audit: type=1400 audit(4993.860:284): avc: denied { write } for pid=5992 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5009.896963][ T24] audit: type=1400 audit(5008.970:285): avc: denied { write } for pid=6004 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5059.218718][ T24] audit: type=1400 audit(5058.290:286): avc: denied { write } for pid=6022 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5074.367342][ T24] audit: type=1400 audit(5073.550:287): avc: denied { write } for pid=6035 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5104.045555][ T24] audit: type=1400 audit(5103.220:288): avc: denied { write } for pid=6047 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5118.716286][ T24] audit: type=1400 audit(5117.900:289): avc: denied { write } for pid=6058 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5148.486991][ T24] audit: type=1400 audit(5147.560:290): avc: denied { write } for pid=6072 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5162.622002][ T24] audit: type=1400 audit(5161.800:291): avc: denied { write } for pid=6088 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5594.852202][ T24] audit: type=1400 audit(5594.030:292): avc: denied { write } for pid=6270 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5609.756220][ T24] audit: type=1400 audit(5608.940:293): avc: denied { write } for pid=6280 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5666.556897][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5669.169286][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5672.840908][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5674.628737][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5695.941304][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 5696.983079][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 5697.435827][ T12] bond0 (unregistering): Released all slaves [ 5699.837125][ T12] hsr_slave_0: left promiscuous mode [ 5700.005425][ T12] hsr_slave_1: left promiscuous mode [ 5700.525454][ T12] veth1_macvtap: left promiscuous mode [ 5700.526689][ T12] veth0_macvtap: left promiscuous mode [ 5700.528704][ T12] veth1_vlan: left promiscuous mode [ 5700.530050][ T12] veth0_vlan: left promiscuous mode [ 5735.960331][ T12] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5738.038975][ T12] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5739.508434][ T12] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5741.011204][ T12] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5749.816860][ T24] audit: type=1400 audit(5749.000:294): avc: denied { write } for pid=6314 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5760.402471][ T24] audit: type=1400 audit(5759.590:295): avc: denied { write } for pid=6323 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5769.419308][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 5769.636686][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 5769.788855][ T12] bond0 (unregistering): Released all slaves [ 5771.366695][ T12] hsr_slave_0: left promiscuous mode [ 5771.401694][ T12] hsr_slave_1: left promiscuous mode [ 5771.794872][ T12] veth1_macvtap: left promiscuous mode [ 5771.798137][ T12] veth0_macvtap: left promiscuous mode [ 5771.837182][ T12] veth1_vlan: left promiscuous mode [ 5771.851336][ T12] veth0_vlan: left promiscuous mode [ 5792.732092][ T3210] 8021q: adding VLAN 0 to HW filter on device eth29 [ 5813.457192][ T24] audit: type=1400 audit(5812.630:296): avc: denied { write } for pid=6338 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5822.247499][ T24] audit: type=1400 audit(5821.420:297): avc: denied { write } for pid=6349 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5825.748237][ T6287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 5826.203169][ T6287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 5828.966502][ T3210] 8021q: adding VLAN 0 to HW filter on device eth30 [ 5836.893077][ T6296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 5837.417760][ T6296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 5849.189873][ T24] audit: type=1400 audit(5848.380:298): avc: denied { write } for pid=6362 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5857.295924][ T24] audit: type=1400 audit(5856.460:299): avc: denied { write } for pid=6372 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5862.840563][ T3210] 8021q: adding VLAN 0 to HW filter on device eth31 [ 5863.595963][ T6287] hsr_slave_0: entered promiscuous mode [ 5863.669188][ T6287] hsr_slave_1: entered promiscuous mode [ 5875.089072][ T6296] hsr_slave_0: entered promiscuous mode [ 5875.169578][ T6296] hsr_slave_1: entered promiscuous mode [ 5875.302551][ T6296] debugfs: 'hsr0' already exists in 'hsr' [ 5875.320509][ T6296] Cannot create hsr debugfs directory [ 5882.455262][ T24] audit: type=1400 audit(5881.600:300): avc: denied { write } for pid=6382 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5891.747709][ T24] audit: type=1400 audit(5890.890:301): avc: denied { write } for pid=6387 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5897.395052][ T6287] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 5897.829901][ T6287] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 5898.666411][ T3210] 8021q: adding VLAN 0 to HW filter on device eth32 [ 5898.747427][ T6287] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 5899.059933][ T6287] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 5899.730484][ T6287] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 5900.091457][ T6287] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 5900.311431][ T6287] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 5900.558927][ T6287] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 5918.271559][ T6296] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 5919.041061][ T6296] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 5919.200975][ T6296] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 5919.816209][ T6296] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 5919.892188][ T6296] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 5920.292222][ T6296] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 5920.421480][ T6296] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 5920.919013][ T6296] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 5932.039185][ T24] audit: type=1400 audit(5931.230:302): avc: denied { write } for pid=6412 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5938.425697][ T6287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 5943.978400][ T24] audit: type=1400 audit(5943.150:303): avc: denied { write } for pid=6421 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5952.316799][ T3210] 8021q: adding VLAN 0 to HW filter on device eth33 [ 5957.920541][ T6296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 5983.948557][ T24] audit: type=1400 audit(5983.120:304): avc: denied { write } for pid=6436 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5995.392420][ T24] audit: type=1400 audit(5994.580:305): avc: denied { write } for pid=6446 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6003.771214][ T3210] 8021q: adding VLAN 0 to HW filter on device eth34 [ 6030.356629][ T24] audit: type=1400 audit(6029.510:306): avc: denied { write } for pid=6460 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6040.535470][ T24] audit: type=1400 audit(6039.710:307): avc: denied { write } for pid=6472 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6047.419643][ T3210] 8021q: adding VLAN 0 to HW filter on device eth35 [ 6063.946371][ T24] audit: type=1400 audit(6063.020:308): avc: denied { write } for pid=6481 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6076.301056][ T24] audit: type=1400 audit(6075.480:309): avc: denied { write } for pid=6494 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6098.774396][ T6296] veth0_vlan: entered promiscuous mode [ 6100.249092][ T6296] veth1_vlan: entered promiscuous mode [ 6104.339800][ T6296] veth0_macvtap: entered promiscuous mode [ 6105.111785][ T6296] veth1_macvtap: entered promiscuous mode [ 6109.696846][ T24] audit: type=1400 audit(6108.850:310): avc: denied { write } for pid=6508 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6110.402211][ T6287] veth0_vlan: entered promiscuous mode [ 6110.956111][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 6110.989805][ T4701] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 6111.023255][ T5873] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 6111.076959][ T5873] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 6113.188637][ T6287] veth1_vlan: entered promiscuous mode [ 6120.971280][ T6287] veth0_macvtap: entered promiscuous mode [ 6122.125292][ T24] audit: type=1400 audit(6121.300:311): avc: denied { write } for pid=6515 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6122.346682][ T6287] veth1_macvtap: entered promiscuous mode [ 6127.679910][ T6293] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 6127.780407][ T4701] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 6127.840723][ T5274] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 6127.845270][ T5274] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 6133.190362][ T3210] 8021q: adding VLAN 0 to HW filter on device eth36 [ 6159.367368][ T24] audit: type=1400 audit(6158.530:312): avc: denied { write } for pid=6525 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6173.996644][ T24] audit: type=1400 audit(6173.180:313): avc: denied { write } for pid=6535 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6196.977662][ T24] audit: type=1400 audit(6196.060:314): avc: denied { write } for pid=6540 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6209.065221][ T24] audit: type=1400 audit(6208.120:315): avc: denied { write } for pid=6544 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6231.415283][ T24] audit: type=1400 audit(6230.550:316): avc: denied { write } for pid=6549 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6244.564868][ T24] audit: type=1400 audit(6243.740:317): avc: denied { write } for pid=6558 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6286.429269][ T24] audit: type=1400 audit(6285.500:318): avc: denied { write } for pid=6572 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6298.854542][ T24] audit: type=1400 audit(6298.020:319): avc: denied { write } for pid=6579 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6322.384786][ T24] audit: type=1400 audit(6321.530:320): avc: denied { write } for pid=6586 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6336.328192][ T24] audit: type=1400 audit(6335.480:321): avc: denied { write } for pid=6598 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6345.821153][ T6546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 6346.370360][ T6546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 6358.846843][ T24] audit: type=1400 audit(6357.980:322): avc: denied { write } for pid=6605 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6367.373229][ T6555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 6368.076569][ T6555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 6373.206392][ T24] audit: type=1400 audit(6372.380:323): avc: denied { write } for pid=6615 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6406.193068][ T6546] hsr_slave_0: entered promiscuous mode [ 6406.379208][ T6546] hsr_slave_1: entered promiscuous mode [ 6406.567354][ T6546] debugfs: 'hsr0' already exists in 'hsr' [ 6406.597246][ T6546] Cannot create hsr debugfs directory [ 6407.007315][ T24] audit: type=1400 audit(6406.140:324): avc: denied { write } for pid=6626 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6420.356330][ T24] audit: type=1400 audit(6419.450:325): avc: denied { write } for pid=6634 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6432.711254][ T6555] hsr_slave_0: entered promiscuous mode [ 6432.901007][ T6555] hsr_slave_1: entered promiscuous mode [ 6432.981983][ T6555] debugfs: 'hsr0' already exists in 'hsr' [ 6433.096966][ T6555] Cannot create hsr debugfs directory [ 6451.386192][ T24] audit: type=1400 audit(6450.530:326): avc: denied { write } for pid=6637 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6465.149573][ T24] audit: type=1400 audit(6464.330:327): avc: denied { write } for pid=6645 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6477.796313][ T6546] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 6478.447038][ T6546] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 6478.572412][ T6546] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 6479.261487][ T6546] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 6479.343114][ T6546] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 6479.887700][ T6546] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 6483.335790][ T6546] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 6484.193277][ T6546] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 6487.945855][ T24] audit: type=1400 audit(6487.110:328): avc: denied { write } for pid=6648 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6502.986385][ T24] audit: type=1400 audit(6502.120:329): avc: denied { write } for pid=6659 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6508.011611][ T6555] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 6508.778951][ T6555] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 6508.948863][ T6555] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 6509.497006][ T6555] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 6509.683244][ T6555] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 6510.252703][ T6555] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 6510.352799][ T6555] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 6510.873113][ T6555] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 6529.214629][ T24] audit: type=1400 audit(6528.400:330): avc: denied { write } for pid=6671 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6543.000452][ T6546] 8021q: adding VLAN 0 to HW filter on device bond0 [ 6543.665341][ T24] audit: type=1400 audit(6542.790:331): avc: denied { write } for pid=6681 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6559.842865][ T6555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 6627.228396][ T26] INFO: task syz.9.457:6536 blocked for more than 430 seconds. [ 6627.285544][ T26] Not tainted syzkaller #0 [ 6627.305609][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 6627.306268][ T26] task:syz.9.457 state:D stack:0 pid:6536 tgid:6536 ppid:6287 task_flags:0x400040 flags:0x00000011 [ 6627.309309][ T26] Call trace: [ 6627.309852][ T26] __switch_to+0x5e0/0xb70 (T) [ 6627.311992][ T26] __schedule+0x1e0c/0x38cc [ 6627.312542][ T26] schedule+0x1b4/0x274 [ 6627.313031][ T26] schedule_timeout+0x68/0x1e4 [ 6627.490988][ T26] wait_for_completion+0x1b8/0x414 [ 6627.491658][ T26] __synchronize_srcu+0x1c8/0x208 [ 6627.492183][ T26] synchronize_srcu+0x668/0x8dc [ 6627.492643][ T26] mmu_notifier_unregister+0x33c/0x444 [ 6627.493164][ T26] kvm_put_kvm+0x69c/0xbbc SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 6627.585640][ T26] kvm_vm_release+0x58/0x78 [ 6627.586300][ T26] __fput+0x4ac/0x978 [ 6627.586741][ T26] ____fput+0x20/0x30 [ 6627.587200][ T26] task_work_run+0x1b8/0x250 [ 6627.587704][ T26] exit_to_user_mode_loop+0x110/0x188 [ 6627.588255][ T26] el0_svc+0x18c/0x240 [ 6627.588745][ T26] el0t_64_sync_handler+0x84/0x12c [ 6627.589276][ T26] el0t_64_sync+0x198/0x19c [ 6627.591018][ T26] [ 6627.591018][ T26] Showing all locks held in the system: [ 6627.591517][ T26] 1 lock held by khungtaskd/26: [ 6627.591933][ T26] #0: ffff800087e93598 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x4c/0x188 [ 6627.806316][ T26] 3 locks held by kworker/u4:2/30: [ 6627.815281][ T26] 1 lock held by syslogd/3169: [ 6627.815765][ T26] 2 locks held by getty/3239: [ 6627.816144][ T26] #0: d6f00000124aa0a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 6627.818012][ T26] #1: 20ff80008cbdb2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x314/0x11f8 [ 6627.819692][ T26] 2 locks held by syz-executor/3368: [ 6627.820080][ T26] 2 locks held by kworker/u4:10/5274: [ 6627.820382][ T26] #0: 42f000000d034140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x958/0x154c [ 6627.822059][ T26] #1: ffff80008f927ce8 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x978/0x154c [ 6627.998588][ T26] 2 locks held by kworker/u4:12/5415: [ 6628.007291][ T26] 2 locks held by kworker/u4:8/5665: [ 6628.007744][ T26] #0: 42f000000d034140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x958/0x154c [ 6628.009607][ T26] #1: ffff80008f6b7ce8 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x978/0x154c [ 6628.011271][ T26] 3 locks held by kworker/u4:13/5691: [ 6628.011589][ T26] 3 locks held by kworker/u4:11/5873: [ 6628.011921][ T26] 2 locks held by kworker/u4:3/6122: [ 6628.012223][ T26] #0: 42f000000d034140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x958/0x154c [ 6628.146116][ T26] #1: ffff80008fb87ce8 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x978/0x154c [ 6628.148361][ T26] 2 locks held by syz.0.456/6529: [ 6628.148737][ T26] 1 lock held by modprobe/6714: [ 6628.149087][ T26] 2 locks held by modprobe/6715: [ 6628.149611][ T26] [ 6628.149910][ T26] ============================================= [ 6628.149910][ T26] [ 6628.150874][ T26] Kernel panic - not syncing: hung_task: blocked tasks [ 6628.159212][ T26] CPU: 0 UID: 0 PID: 26 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT [ 6628.160682][ T26] Hardware name: linux,dummy-virt (DT) [ 6628.161640][ T26] Call trace: [ 6628.162460][ T26] show_stack+0x2c/0x3c (C) [ 6628.163496][ T26] __dump_stack+0x30/0x40 [ 6628.164490][ T26] dump_stack_lvl+0x30/0x12c [ 6628.165508][ T26] dump_stack+0x1c/0x28 [ 6628.166417][ T26] vpanic+0x4cc/0x844 [ 6628.167259][ T26] vpanic+0x0/0x844 [ 6628.168095][ T26] hung_task_panic+0x0/0x2c [ 6628.168984][ T26] kthread+0x4cc/0x514 [ 6628.169894][ T26] ret_from_fork+0x10/0x20 [ 6628.171695][ T26] Kernel Offset: disabled [ 6628.172455][ T26] CPU features: 0x00000000,00d1802f,df1847a1,057ffe1f [ 6628.173652][ T26] Memory Limit: none [ 6628.175911][ T26] Rebooting in 86400 seconds..