last executing test programs: 1h12m44.33266083s ago: executing program 1 (id=337): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x16}], 0x1) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r4 = ioctl$KVM_GET_STATS_FD_cpu(r3, 0xaece) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x9296, 0xeeef0000, 0x4, r4, 0x2}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000000c0)={r4, 0xc8, 0x1, r4}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x1}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x7b1d00, 0x0) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x0, 0x8, 0x13, 0xffffffffffffffff, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x28) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r8, 0x4068aea3, &(0x7f0000000280)={0xdf, 0x0, 0x2000}) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000540)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_RESET_DIRTY_RINGS(r8, 0xaec7) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x8, 0xf, 0x0, 0x5, 0x6, 0x6, 0x6, 0x74, 0x86, 0xdd, 0x68, 0x0, 0x209, 0x0, 0x0, 0x3, 0x5, 0x5, '\x00', 0x1, 0x400000000002}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000140)={0x4, 0x0, [{0x1, 0x1, 0x0, 0x0, @adapter={0x8000000000000001, 0x2, 0x2, 0xa, 0x10}}, {0x9, 0x3, 0x1, 0x0, @sint={0xc30, 0x2}}, {0x0, 0x2, 0x0, 0x0, @msi={0x83, 0x0, 0x800, 0x6}}, {0x0, 0x0, 0x1, 0x0, @adapter={0x5, 0x20000000000005, 0x100, 0x7f, 0xb2d}}]}) write$eventfd(r10, &(0x7f00000001c0)=0x3, 0x50) openat$kvm(0xffffffffffffff9c, 0x0, 0x92001, 0x0) r11 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, &(0x7f0000000100)={0x7, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x2, &(0x7f0000000200)=0xa000000}) ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f0000000240)=@attr_arm64={0x0, 0x0, 0x5, &(0x7f0000000280)=0x40400000080a0000}) 1h12m36.677554353s ago: executing program 1 (id=339): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$arm64(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000bfe000/0x400000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f0000000240)=[@hvc={0x32, 0x40, {0x8600ff01, [0x7, 0x9, 0x8, 0xfffffffffffffff8, 0x100]}}], 0x40}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000bfe000/0x400000)=nil) (async) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000bfe000/0x400000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_ARM_VCPU_INIT(r5, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) ioctl$KVM_SET_ONE_REG(r5, 0x4010aeac, &(0x7f0000000040)=@arm64_bitmap={0x6030000000160002, &(0x7f0000000000)=0xd3}) r6 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x2}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x1, 0x80000, 0x10000, 0x20, 0x0, 0x2}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) r8 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) (async) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async) r10 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) (async) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil) (async) r12 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil) r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f00000000c0)={0x0, &(0x7f00000008c0)=[@hvc={0x32, 0x40, {0xc4000053, [0x9f, 0x7a000, 0x1000, 0x3, 0x6]}}, @eret={0xe6, 0x18, 0x2d}, @smc={0x1e, 0x40, {0xc4000005, [0x8000000000000000, 0xc, 0x40, 0x8, 0x3]}}, @msr={0x14, 0x20, {0x6030000000138054, 0x4}}, @msr={0x14, 0x20, {0x603000000013e663, 0x8001}}, @eret={0xe6, 0x18, 0x80000001}, @code={0xa, 0x9c, {"000028d5e0a89bd200c0b0f2010080d2220180d2c30180d2840180d2020000d4000028d560468fd200c0b8f2410080d2620180d2430180d2640180d2020000d4007008d5a0b983d20000b8f2610180d2220180d2030180d2440080d2020000d4008008d50000591e000008d5201e9dd20040b0f2a10180d2c20180d2430080d2a40080d2020000d4"}}], 0x18c}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r11, 0x1, 0x100) ioctl$KVM_RUN(r13, 0xae80, 0x0) r14 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil) r15 = syz_kvm_add_vcpu$arm64(r14, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@msr={0x14, 0x20, {0x603000000013e130, 0x98}}], 0x20}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r9, 0x1, 0x100) ioctl$KVM_CAP_PTP_KVM(r11, 0x4068aea3, &(0x7f0000000300)) ioctl$KVM_RUN(r15, 0xae80, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000040)=@attr_riscv64=@attr_imsic={0x0, 0x1, 0x40101, &(0x7f00000002c0)=0x3}) ioctl$KVM_ARM_SET_DEVICE_ADDR(r6, 0x4010aeab, &(0x7f0000000000)={0x8ff, 0x200000}) (async) ioctl$KVM_ARM_SET_DEVICE_ADDR(r6, 0x4010aeab, &(0x7f0000000000)={0x8ff, 0x200000}) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1h12m21.571322232s ago: executing program 0 (id=341): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000bfd000/0x400000)=nil) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x161681, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r4, r5, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x20}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r5, 0x4010aeab, &(0x7f0000000100)=@arm64_sve_vls={0x606000000015ffff, &(0x7f0000000140)=0x8000000000000000}) r6 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000b80)={0x0, &(0x7f0000000080)=[@mrs={0xbe, 0x18, {0x6030000000138032}}], 0x18}, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1h12m19.142356427s ago: executing program 1 (id=342): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r5, &(0x7f00000008c0)={0x0, 0x0}, 0x0, 0x0) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x3}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r4, 0xff7ffffffffffffd, 0x360) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000000000/0x400000)=nil) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000240)="37e68986ad644f5dc57bbc1ff382863b67f3eee57a32ec911d95f88f3dd8ea716e4a29cefbd440b2ecf83f57baf33b0c97182970a47ef45c954e42f2055384921830f6e273d2eb30", 0x0, 0x2a2019ac5ed2a1ef) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r8 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1000009, 0x16831, 0xffffffffffffffff, 0x0) r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000ab8000/0x400000)=nil) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) syz_kvm_add_vcpu$arm64(r10, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r9, 0xc008ae67, &(0x7f0000000040)={0x10001, 0x10001}) mmap$KVM_VCPU(&(0x7f0000000000/0xc00000)=nil, 0x930, 0xf, 0x32, 0xffffffffffffffff, 0x0) close(r1) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x1) ioctl$KVM_CREATE_GUEST_MEMFD(r12, 0xc040aed4, &(0x7f0000000580)={0x2, 0x1}) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) 1h12m13.003649627s ago: executing program 0 (id=343): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r1 = ioctl$KVM_GET_STATS_FD_cpu(r0, 0xaece) ioctl$KVM_KVMCLOCK_CTRL(r1, 0xaead) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000000)=0x401) r2 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000540)={0x0, &(0x7f0000000040)=[@memwrite={0x6e, 0x30, @vgic_gicr={0x80e0000, 0xd00, 0x4, 0x8}}, @its_send_cmd={0xaa, 0x28, {0xb, 0x1, 0x3, 0x4, 0x7, 0x3d, 0x4}}, @code={0xa, 0x6c, {"0000209b007008d5000028d5000008d50000000c400987d20060b0f2810180d2a20080d2c30180d2640080d2020000d40024202e007008d5000c201ee04997d200c0b8f2810080d2620180d2030080d2840180d2020000d4"}}, @code={0xa, 0x84, {"00609f0d008008d5000028d520be93d20020b8f2610080d2e20080d2830080d2040080d2020000d4405698d200c0b0f2410180d2420080d2630080d2040180d2020000d40820601e0020400d00b8210e80fb88d20080b0f2610180d2c20080d2a30180d2a40180d2020000d400d8217e"}}, @its_setup={0x82, 0x28, {0x1, 0x1, 0x3ba}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x101c8, 0x8, 0xf}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x81a0000, 0x8, 0x0, 0x8}}, @eret={0xe6, 0x18, 0xc8f6}, @memwrite={0x6e, 0x30, @generic={0x1, 0xe53, 0x1d6, 0x8}}, @its_setup={0x82, 0x28, {0x2, 0x0, 0x303}}, @smc={0x1e, 0x40, {0x80000001, [0x7, 0x1, 0x1, 0x4, 0x40]}}, @irq_setup={0x46, 0x18, {0x2, 0xd1}}, @its_setup={0x82, 0x28, {0x1, 0x3, 0x198}}, @its_setup={0x82, 0x28, {0x0, 0x4, 0x3b3}}, @svc={0x122, 0x40, {0x3f000000, [0x7, 0xffffffffffffffff, 0x0, 0x80000001, 0x7]}}, @mrs={0xbe, 0x18, {0x6030000000138080}}, @uexit={0x0, 0x18, 0x9c}, @smc={0x1e, 0x40, {0x1000, [0x10, 0x2, 0x4, 0xff]}}, @hvc={0x32, 0x40, {0x5, [0xffffffffffffffff, 0x7, 0x6, 0x6, 0xfffffffffffffffe]}}, @uexit={0x0, 0x18, 0x3}, @irq_setup={0x46, 0x18, {0x1, 0x2e9}}, @eret={0xe6, 0x18, 0xfffffffffffffffe}, @svc={0x122, 0x40, {0x8400000c, [0x7, 0x0, 0xf6d, 0x9, 0x7]}}, @msr={0x14, 0x20, {0x603000000013e6d9, 0xa}}, @irq_setup={0x46, 0x18, {0x4, 0x17b}}, @eret={0xe6, 0x18, 0x8}, @irq_setup={0x46, 0x18, {0x4, 0x1fc}}], 0x4c8}, &(0x7f0000000580)=[@featur2={0x1, 0x80}], 0x1) ioctl$KVM_DIRTY_TLB(r2, 0x4010aeaa, &(0x7f00000005c0)={0x0, 0x1}) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, r3, 0x6, 0x8010, r0, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000600)={0x6}) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000800)={0x0, &(0x7f0000000640)=[@mrs={0xbe, 0x18, {0x603000000013c091}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x0, 0x4, 0xb, 0x1, 0x8001}}, @svc={0x122, 0x40, {0xffff, [0xffffffffffffffa9, 0x7, 0x6, 0x7]}}, @eret={0xe6, 0x18, 0x8}, @mrs={0xbe, 0x18}, @msr={0x14, 0x20, {0x603000000013df5a, 0x1}}, @its_send_cmd={0xaa, 0x28, {0xb, 0x0, 0x4, 0x7, 0x3, 0x1}}, @smc={0x1e, 0x40, {0x84000001, [0x2, 0x800, 0x8000000000000001, 0x6]}}, @uexit={0x0, 0x18, 0x200}, @its_setup={0x82, 0x28, {0x0, 0x3, 0x1aa}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80a0000, 0x100, 0x7, 0x2}}], 0x1a8}, &(0x7f0000000840)=[@featur1={0x1, 0x8d}], 0x1) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x10) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000880)={r1, 0x1ff, 0x5, r1}) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000008c0)={0xa, 0x8}) ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f0000000940)=@attr_riscv64=@attr_imsic={0x0, 0x1, 0x4, &(0x7f0000000900)=0x3}) mmap$KVM_VCPU(&(0x7f0000ebd000/0x4000)=nil, r3, 0x2, 0x11, r5, 0x0) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000980)=0x2) ioctl$KVM_SET_GUEST_DEBUG_arm64(r2, 0x4208ae9b, &(0x7f00000009c0)={0x10000, 0x0, {[0x0, 0x6, 0x6, 0x81, 0x1, 0x4, 0x5, 0x9aff, 0x2, 0x6d0, 0x7, 0x0, 0x1, 0x402cb485, 0x9, 0x6], [0x5, 0x9, 0x100000001, 0x3, 0x8000000000000001, 0x8, 0x3ff, 0x101, 0x6, 0x9f, 0x73b, 0x6, 0x6, 0x7, 0x7, 0xfffffffffffff001], [0x8, 0x3c, 0xf, 0x5, 0x135, 0x0, 0x4000000000000, 0x4, 0x3, 0x3, 0x7, 0xb, 0xffffffffffffffff, 0xc00000000000, 0x8, 0xc], [0x4, 0x8, 0x0, 0x5, 0x1901, 0x0, 0x3, 0x9a3, 0x4, 0x1, 0x8000000000000000, 0x1, 0xb, 0x5, 0xb0, 0x80000001]}}) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r0, 0x4018aee1, &(0x7f0000000c40)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000c00)={0x4, 0x8}}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x21) ioctl$KVM_SET_GUEST_DEBUG_arm64(r2, 0x4208ae9b, &(0x7f0000000c80)={0x10001, 0x0, {[0x6, 0x6d65, 0x14df, 0x57, 0x3f, 0x8, 0x1, 0x6000000000000000, 0x1, 0x4, 0x8, 0xac, 0x1ff, 0x9, 0x9b2e, 0x8], [0x2, 0x6, 0x6, 0x6, 0x4, 0x5, 0x2902, 0x1, 0xb, 0x0, 0x2, 0x1, 0x3ff, 0x4, 0x4, 0x80000001], [0xfe000000000000, 0x6, 0x5, 0x8001, 0x3, 0x80000001, 0xfffffffffffffffa, 0xa, 0x40, 0x0, 0x4, 0x9, 0x4, 0x59, 0xd2b7, 0x7], [0x8, 0x80, 0x2, 0x2, 0x5, 0x8001, 0x5b3, 0x1a, 0x2, 0x3, 0x1, 0x200, 0xfffffffffffffff8, 0x0, 0x1a47, 0x1]}}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0xb) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000ec0)={0x70000}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000f00)={0x0, 0x9}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000f40)={0x10004, 0x0, 0x26000, 0x1000, &(0x7f0000e67000/0x1000)=nil}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000f80), 0x600, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x19) ioctl$KVM_HAS_DEVICE_ATTR_vm(r8, 0x4018aee3, &(0x7f0000001000)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x2, 0xfffffffe, 0x2}}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001040), 0x400, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x36) 1h12m8.533830084s ago: executing program 0 (id=344): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r5, 0x4010aeab, &(0x7f0000000180)=@arm64_fw={0x6030000000140001, &(0x7f00000000c0)=0x9}) mmap$KVM_VCPU(&(0x7f0000dd4000/0x3000)=nil, 0x930, 0x1000002, 0x10010, r5, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000dd4000/0x3000)=nil, 0x930, 0x1000002, 0x10010, r5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r8 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0xd, 0x9, 0xb, 0x0, 0x5, 0x6, 0x6, 0x6, 0x48, 0x88, 0x64, 0x9, 0x0, 0x9, 0x40006, 0xe, 0x3, 0x7, 0x0, '\x00', 0x10, 0x6}) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r9, &(0x7f00000001c0)=0xffffff7f, 0xff25) r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r10, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r10, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r10, 0x0) munmap(&(0x7f0000db7000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0) 1h12m2.787617143s ago: executing program 1 (id=345): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000300)="fb4149dd033b8986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67525673312b01040000000000002627e7000000000000000200", 0x0, 0xfffffffffffffe73) (async) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x12, r2, 0x0) close(0xffffffffffffffff) (async) r4 = eventfd2(0x0, 0x0) (async) r5 = mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000000240)="37e68986ad644f5dc57bbc1ff382863b67f3eee57a32ec911d95f88f3dd8ea716e4a29cefbd440b2ecf83f57baf33b0c97182970a47ef45c954e42f2055384921830f6e273d2eb30", 0x0, 0x2a2019ac5ed2a1ef) syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000000100)="746abf250f7959c813e4adfb369b808022e69fe80cfadce4a1259e77bab54ac9749537b3d016bb7f745a6e22d2f9ff443f19467748a3fe02c239457600", 0x0, 0xfffffffffffffec5) close(r4) (async) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0xc0c82, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x2000001, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x1}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000000)={0x6, 0xffffffffffffffff, 0x1}) (async) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0xc1, 0xf, 0x0, 0x5, 0x6, 0x86, 0xfe, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x0, 0x93a, 0x20, 0x3, 0x4, 0x8, '\x00', 0x3, 0x8093}) r9 = eventfd2(0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0x801c581f, 0x20000000) write$eventfd(r9, &(0x7f00000001c0)=0x3, 0x7) (async) r10 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r6, 0xae04) r11 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f00000004c0)={0x0, &(0x7f0000000380)=[@smc={0x1e, 0x40, {0x84000007, [0x5d23, 0xb, 0x633, 0x4, 0x1]}}, @mrs={0xbe, 0x18, {0x603000000013df7e}}, @msr={0x14, 0x20, {0x603000000013c017, 0x7}}, @eret={0xe6, 0x18}, @smc={0x1e, 0x40, {0x2000000, [0x400, 0x0, 0x3, 0x5, 0xf6]}}, @its_setup={0x82, 0x28, {0x3, 0x3, 0x306}}, @memwrite={0x6e, 0x30, @generic={0xffff1000, 0x478, 0x1}}, @eret={0xe6, 0x18, 0x6}], 0x140}, &(0x7f0000000500)=[@featur1={0x1, 0x42}], 0x1) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, r10, 0x1, 0x2010, r11, 0x0) 1h12m0.626195453s ago: executing program 0 (id=346): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffc000/0x3000)=nil, r4, 0x1, 0x12, r3, 0x0) close(r0) (async, rerun: 64) r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) (rerun: 64) mmap$KVM_VCPU(&(0x7f0000ffd000/0x2000)=nil, r5, 0x1000001, 0x12, r3, 0x0) 1h11m54.300960953s ago: executing program 1 (id=347): munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0x80111500, 0x20000000) r0 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32) r1 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=[@mrs={0xbe, 0x18, {0x603000000013c4d3}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x1, 0x3, 0xa, 0x3, 0x8, 0x1}}, @hvc={0x32, 0x40, {0x84000004, [0x9, 0x5, 0x5, 0x5, 0xffff]}}], 0x80}, &(0x7f0000000200)=[@featur1={0x1, 0x3}], 0x1) r2 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r3 = mmap$KVM_VCPU(&(0x7f00009da000/0x1000)=nil, r2, 0x2, 0x13, r1, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000140), 0x101000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000000)={0xb, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000240)=@attr_arm64={0x0, 0x6, 0x1, &(0x7f0000000080)=0x7b2}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r8, 0x4020aeae, &(0x7f0000000100)={0x5, 0x18}) ioctl$KVM_GET_ONE_REG(r8, 0x4010aeab, &(0x7f00000000c0)=@arm64_core={0x6030000000100050, &(0x7f00000001c0)=0x1}) mmap$KVM_VCPU(&(0x7f0000cb1000/0x2000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) 1h11m53.072575541s ago: executing program 0 (id=348): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x25) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000001c0)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x4, 0x2, 0x0}) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x2000001, 0x5c1fd1b656473f1, 0xffffffffffffffff, 0x0) 1h11m46.550969053s ago: executing program 0 (id=349): openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) (async) r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000001c0)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000380)}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000000)=@arm64={0x0, 0x1, 0xf, '\x00', 0xfffffffffffff105}) (async) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000000)=@arm64={0x0, 0x1, 0xf, '\x00', 0xfffffffffffff105}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x5, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000002c0)=@attr_other={0x0, 0x8, 0x108, &(0x7f0000000000)=0xc000000000000000}) (async) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000002c0)=@attr_other={0x0, 0x8, 0x108, &(0x7f0000000000)=0xc000000000000000}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x4, 0x2, 0x0}) (async) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x4, 0x2, 0x0}) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r4, 0x0, 0x0, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x20200, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r8 = syz_kvm_vgic_v3_setup(r7, 0x3, 0x40) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f0000000000)=@attr_other={0x0, 0x6, 0x382be664, &(0x7f00000000c0)=0x3ffe}) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r5, 0x4018aee1, 0x0) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async) r9 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) syz_kvm_setup_cpu$arm64(r10, r5, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000480)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$arm64(r10, r5, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000480)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r10, 0x1, 0x100) (async) r13 = syz_kvm_vgic_v3_setup(r10, 0x1, 0x100) ioctl$KVM_RUN(r12, 0xae80, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x5, 0x0, &(0x7f0000000000)=0x8}) 1h11m43.456229019s ago: executing program 1 (id=350): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x29) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r0, 0x4068aea3, &(0x7f0000000000)={0xdf, 0x0, 0x10000}) ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f0000000080)={0x8, 0x6}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x37) ioctl$KVM_CAP_ARM_INJECT_SERROR_ESR(r1, 0x4068aea3, &(0x7f00000000c0)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x533) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x33) r4 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000440)={0x0, &(0x7f0000000180)=[@hvc={0x32, 0x40, {0xc4000053, [0x1, 0x2, 0x4, 0x7, 0x7]}}, @mrs={0xbe, 0x18, {0x603000000013c028}}, @smc={0x1e, 0x40, {0x6000000, [0x81, 0x5, 0x5, 0x7fffffffffffffff, 0xe]}}, @hvc={0x32, 0x40, {0x1000000, [0x2, 0x3, 0x9, 0x9, 0x6]}}, @mrs={0xbe, 0x18, {0x603000000013c600}}, @eret={0xe6, 0x18, 0x5}, @msr={0x14, 0x20, {0x603000000013df05, 0x1000}}, @svc={0x122, 0x40, {0x44007fff, [0x2, 0x2, 0x4, 0x9, 0x100]}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x0, 0x1, 0x9, 0x84, 0x2a67, 0x2}}, @smc={0x1e, 0x40, {0x4000000, [0x8, 0xa, 0xd7, 0x1, 0x5]}}, @code={0xa, 0x9c, {"0040c00c80139ad200e0b8f2010180d2820080d2a30180d2e40080d2020000d4c0cb96d20040b8f2410180d2a20180d2e30180d2e40180d2020000d40070800c007008d5007008d520899dd200e0b0f2810080d2420180d2c30180d2840180d2020000d4007008d5e08f97d20000b8f2a10080d2c20080d2230180d2640180d2020000d4000008d5"}}, @uexit={0x0, 0x18, 0x7}], 0x284}, &(0x7f0000000480)=[@featur2={0x1, 0x8b}], 0x1) syz_kvm_setup_cpu$arm64(r0, r4, &(0x7f0000bff000/0x400000)=nil, &(0x7f0000000a00)=[{0x0, &(0x7f00000004c0)=[@mrs={0xbe, 0x18, {0x603000000013da16}}, @svc={0x122, 0x40, {0x2000000, [0x0, 0xc000000000000000, 0x9, 0x8000000000000000, 0x9]}}, @hvc={0x32, 0x40, {0x400c007, [0x4, 0x7fffffffffffffff, 0x8001, 0xd, 0x5]}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x100, 0x5, 0x1}}, @irq_setup={0x46, 0x18, {0x0, 0x78}}, @code={0xa, 0x9c, {"20f08dd200c0b0f2010080d2820180d2230180d2240180d2020000d4004f9bd200e0b0f2210080d2620180d2030080d2e40080d2020000d4000008d50004002f000040b920f092d200c0b0f2610080d2c20080d2a30080d2a40080d2020000d400e0600d000028d50000291ee0cb82d20020b8f2610180d2c20080d2c30180d2440180d2020000d4"}}, @its_setup={0x82, 0x28, {0x4, 0x1, 0x384}}, @hvc={0x32, 0x40, {0x8400000f, [0x3, 0x506, 0x5, 0x4, 0x9]}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x8100000, 0x0, 0x6, 0x8}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x400, 0xfffffffffffffeff, 0x4}}, @uexit={0x0, 0x18, 0x5}, @mrs={0xbe, 0x18, {0x6030000000130203}}, @smc={0x1e, 0x40, {0x5000, [0x8, 0x0, 0x6, 0x1000, 0x2]}}, @eret={0xe6, 0x18, 0xffffffffffff6e16}, @code={0xa, 0x9c, {"008008d5800a9ad200e0b0f2a10180d2220080d2030180d2240180d2020000d40038212e007008d500ae80d20060b0f2610180d2a20080d2c30080d2840080d2020000d4e0ba8bd20060b8f2410180d2a20080d2230080d2240080d2020000d4007008d5007008d5007008d5e07f9cd200e0b0f2610180d2e20180d2c30080d2840180d2020000d4"}}, @its_setup={0x82, 0x28, {0x4, 0x4, 0x30c}}, @its_setup={0x82, 0x28, {0x3, 0x1, 0x1da}}, @uexit={0x0, 0x18, 0x9}, @hvc={0x32, 0x40, {0x8400000c, [0x1, 0xd332, 0x2f1, 0xa8, 0x6]}}, @msr={0x14, 0x20, {0x603000000013c4cf, 0xa}}, @msr={0x14, 0x20, {0x6030000000138017, 0x3}}, @code={0xa, 0x84, {"000008d580f08ad20020b8f2a10180d2a20080d2030180d2840180d2020000d420979dd20020b0f2e10180d2a20080d2230180d2c40080d2020000d400fc209b00a4000d00d8a02e0070202ec0db84d200e0b0f2210080d2820080d2a30180d2440080d2020000d4000000d100f8302e"}}, @msr={0x14, 0x20, {0x42cfe9295a501990, 0xffffffffffffff01}}, @its_setup={0x82, 0x28, {0x3, 0x2, 0x20e}}, @irq_setup={0x46, 0x18, {0x4, 0x1e9}}], 0x534}], 0x1, 0x0, &(0x7f0000000a40)=[@featur1={0x1, 0x26}], 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000a80)={0x6, 0x2}) r5 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000d00)={0x0, &(0x7f0000000ac0)=[@uexit={0x0, 0x18, 0x5}, @hvc={0x32, 0x40, {0x84000003, [0x4, 0x81, 0xffffffff, 0x9, 0x1]}}, @its_setup={0x82, 0x28, {0x4, 0x4, 0x31e}}, @smc={0x1e, 0x40, {0x84000011, [0x9, 0x5, 0x3, 0x2, 0x3]}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xfff8, 0xe}}, @svc={0x122, 0x40, {0x0, [0x9, 0x7, 0x56, 0x7, 0x7fffffff]}}, @memwrite={0x6e, 0x30, @generic={0xdddd1000, 0xd47, 0x7, 0x8}}, @mrs={0xbe, 0x18, {0x603000000013df05}}, @smc={0x1e, 0x40, {0x84000008, [0xfffffffffffffffe, 0x3, 0x4, 0x9, 0x8]}}, @eret={0xe6, 0x18, 0x100000001}, @svc={0x122, 0x40, {0xc4000003, [0x0, 0x8, 0x0, 0x7fffffffffffffff, 0x8000000000000001]}}, @mrs={0xbe, 0x18, {0x603000000013f289}}], 0x228}, &(0x7f0000000d40)=[@featur2={0x1, 0x23}], 0x1) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000d80)={0x4, 0xffffffffffffffff, 0x1}) r7 = eventfd2(0x75, 0x80800) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000dc0)={0x0, 0xa8002, 0x0, r7, 0x9}) ioctl$KVM_ARM_VCPU_INIT(0xffffffffffffffff, 0x4020aeae, &(0x7f0000000e00)) ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f0000000e80)=@riscv64_f={0x0, &(0x7f0000000e40)=0x8}) r8 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x31) ioctl$KVM_GET_DIRTY_LOG(r8, 0x4010ae42, &(0x7f0000000ec0)={0x1, 0x0, &(0x7f0000fc4000/0x4000)=nil}) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000f00)={0x7, 0x1}) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000f40)={0xffffffff, 0x54000, 0x8, 0x1, 0x80000000}) ioctl$KVM_CAP_PTP_KVM(r3, 0x4068aea3, &(0x7f0000000f80)) ioctl$KVM_ARM_SET_COUNTER_OFFSET(r3, 0x4010aeb5, &(0x7f0000001000)={0x6, 0x1}) r9 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) mmap$KVM_VCPU(&(0x7f0000f61000/0x1000)=nil, r9, 0x8, 0x8010, r6, 0x0) ioctl$KVM_ARM_SET_COUNTER_OFFSET(0xffffffffffffffff, 0x4010aeb5, &(0x7f0000001040)={0x9, 0x100}) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000001080)={0x6, 0xffffffffffffffff, 0x1}) ioctl$KVM_ARM_VCPU_INIT(r6, 0x4020aeae, &(0x7f00000010c0)={0x4, 0xc8}) 1h11m0.148756316s ago: executing program 32 (id=349): openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) (async) r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000001c0)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000380)}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000000)=@arm64={0x0, 0x1, 0xf, '\x00', 0xfffffffffffff105}) (async) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000000)=@arm64={0x0, 0x1, 0xf, '\x00', 0xfffffffffffff105}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x5, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000002c0)=@attr_other={0x0, 0x8, 0x108, &(0x7f0000000000)=0xc000000000000000}) (async) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000002c0)=@attr_other={0x0, 0x8, 0x108, &(0x7f0000000000)=0xc000000000000000}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x4, 0x2, 0x0}) (async) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x4, 0x2, 0x0}) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r4, 0x0, 0x0, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x20200, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r8 = syz_kvm_vgic_v3_setup(r7, 0x3, 0x40) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f0000000000)=@attr_other={0x0, 0x6, 0x382be664, &(0x7f00000000c0)=0x3ffe}) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r5, 0x4018aee1, 0x0) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async) r9 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) syz_kvm_setup_cpu$arm64(r10, r5, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000480)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$arm64(r10, r5, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000480)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r10, 0x1, 0x100) (async) r13 = syz_kvm_vgic_v3_setup(r10, 0x1, 0x100) ioctl$KVM_RUN(r12, 0xae80, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x5, 0x0, &(0x7f0000000000)=0x8}) 1h10m55.335785635s ago: executing program 33 (id=350): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x29) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r0, 0x4068aea3, &(0x7f0000000000)={0xdf, 0x0, 0x10000}) ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f0000000080)={0x8, 0x6}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x37) ioctl$KVM_CAP_ARM_INJECT_SERROR_ESR(r1, 0x4068aea3, &(0x7f00000000c0)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x533) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x33) r4 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000440)={0x0, &(0x7f0000000180)=[@hvc={0x32, 0x40, {0xc4000053, [0x1, 0x2, 0x4, 0x7, 0x7]}}, @mrs={0xbe, 0x18, {0x603000000013c028}}, @smc={0x1e, 0x40, {0x6000000, [0x81, 0x5, 0x5, 0x7fffffffffffffff, 0xe]}}, @hvc={0x32, 0x40, {0x1000000, [0x2, 0x3, 0x9, 0x9, 0x6]}}, @mrs={0xbe, 0x18, {0x603000000013c600}}, @eret={0xe6, 0x18, 0x5}, @msr={0x14, 0x20, {0x603000000013df05, 0x1000}}, @svc={0x122, 0x40, {0x44007fff, [0x2, 0x2, 0x4, 0x9, 0x100]}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x0, 0x1, 0x9, 0x84, 0x2a67, 0x2}}, @smc={0x1e, 0x40, {0x4000000, [0x8, 0xa, 0xd7, 0x1, 0x5]}}, @code={0xa, 0x9c, {"0040c00c80139ad200e0b8f2010180d2820080d2a30180d2e40080d2020000d4c0cb96d20040b8f2410180d2a20180d2e30180d2e40180d2020000d40070800c007008d5007008d520899dd200e0b0f2810080d2420180d2c30180d2840180d2020000d4007008d5e08f97d20000b8f2a10080d2c20080d2230180d2640180d2020000d4000008d5"}}, @uexit={0x0, 0x18, 0x7}], 0x284}, &(0x7f0000000480)=[@featur2={0x1, 0x8b}], 0x1) syz_kvm_setup_cpu$arm64(r0, r4, &(0x7f0000bff000/0x400000)=nil, &(0x7f0000000a00)=[{0x0, &(0x7f00000004c0)=[@mrs={0xbe, 0x18, {0x603000000013da16}}, @svc={0x122, 0x40, {0x2000000, [0x0, 0xc000000000000000, 0x9, 0x8000000000000000, 0x9]}}, @hvc={0x32, 0x40, {0x400c007, [0x4, 0x7fffffffffffffff, 0x8001, 0xd, 0x5]}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x100, 0x5, 0x1}}, @irq_setup={0x46, 0x18, {0x0, 0x78}}, @code={0xa, 0x9c, {"20f08dd200c0b0f2010080d2820180d2230180d2240180d2020000d4004f9bd200e0b0f2210080d2620180d2030080d2e40080d2020000d4000008d50004002f000040b920f092d200c0b0f2610080d2c20080d2a30080d2a40080d2020000d400e0600d000028d50000291ee0cb82d20020b8f2610180d2c20080d2c30180d2440180d2020000d4"}}, @its_setup={0x82, 0x28, {0x4, 0x1, 0x384}}, @hvc={0x32, 0x40, {0x8400000f, [0x3, 0x506, 0x5, 0x4, 0x9]}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x8100000, 0x0, 0x6, 0x8}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x400, 0xfffffffffffffeff, 0x4}}, @uexit={0x0, 0x18, 0x5}, @mrs={0xbe, 0x18, {0x6030000000130203}}, @smc={0x1e, 0x40, {0x5000, [0x8, 0x0, 0x6, 0x1000, 0x2]}}, @eret={0xe6, 0x18, 0xffffffffffff6e16}, @code={0xa, 0x9c, {"008008d5800a9ad200e0b0f2a10180d2220080d2030180d2240180d2020000d40038212e007008d500ae80d20060b0f2610180d2a20080d2c30080d2840080d2020000d4e0ba8bd20060b8f2410180d2a20080d2230080d2240080d2020000d4007008d5007008d5007008d5e07f9cd200e0b0f2610180d2e20180d2c30080d2840180d2020000d4"}}, @its_setup={0x82, 0x28, {0x4, 0x4, 0x30c}}, @its_setup={0x82, 0x28, {0x3, 0x1, 0x1da}}, @uexit={0x0, 0x18, 0x9}, @hvc={0x32, 0x40, {0x8400000c, [0x1, 0xd332, 0x2f1, 0xa8, 0x6]}}, @msr={0x14, 0x20, {0x603000000013c4cf, 0xa}}, @msr={0x14, 0x20, {0x6030000000138017, 0x3}}, @code={0xa, 0x84, {"000008d580f08ad20020b8f2a10180d2a20080d2030180d2840180d2020000d420979dd20020b0f2e10180d2a20080d2230180d2c40080d2020000d400fc209b00a4000d00d8a02e0070202ec0db84d200e0b0f2210080d2820080d2a30180d2440080d2020000d4000000d100f8302e"}}, @msr={0x14, 0x20, {0x42cfe9295a501990, 0xffffffffffffff01}}, @its_setup={0x82, 0x28, {0x3, 0x2, 0x20e}}, @irq_setup={0x46, 0x18, {0x4, 0x1e9}}], 0x534}], 0x1, 0x0, &(0x7f0000000a40)=[@featur1={0x1, 0x26}], 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000a80)={0x6, 0x2}) r5 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000d00)={0x0, &(0x7f0000000ac0)=[@uexit={0x0, 0x18, 0x5}, @hvc={0x32, 0x40, {0x84000003, [0x4, 0x81, 0xffffffff, 0x9, 0x1]}}, @its_setup={0x82, 0x28, {0x4, 0x4, 0x31e}}, @smc={0x1e, 0x40, {0x84000011, [0x9, 0x5, 0x3, 0x2, 0x3]}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xfff8, 0xe}}, @svc={0x122, 0x40, {0x0, [0x9, 0x7, 0x56, 0x7, 0x7fffffff]}}, @memwrite={0x6e, 0x30, @generic={0xdddd1000, 0xd47, 0x7, 0x8}}, @mrs={0xbe, 0x18, {0x603000000013df05}}, @smc={0x1e, 0x40, {0x84000008, [0xfffffffffffffffe, 0x3, 0x4, 0x9, 0x8]}}, @eret={0xe6, 0x18, 0x100000001}, @svc={0x122, 0x40, {0xc4000003, [0x0, 0x8, 0x0, 0x7fffffffffffffff, 0x8000000000000001]}}, @mrs={0xbe, 0x18, {0x603000000013f289}}], 0x228}, &(0x7f0000000d40)=[@featur2={0x1, 0x23}], 0x1) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000d80)={0x4, 0xffffffffffffffff, 0x1}) r7 = eventfd2(0x75, 0x80800) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000dc0)={0x0, 0xa8002, 0x0, r7, 0x9}) ioctl$KVM_ARM_VCPU_INIT(0xffffffffffffffff, 0x4020aeae, &(0x7f0000000e00)) ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f0000000e80)=@riscv64_f={0x0, &(0x7f0000000e40)=0x8}) r8 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x31) ioctl$KVM_GET_DIRTY_LOG(r8, 0x4010ae42, &(0x7f0000000ec0)={0x1, 0x0, &(0x7f0000fc4000/0x4000)=nil}) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000f00)={0x7, 0x1}) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000f40)={0xffffffff, 0x54000, 0x8, 0x1, 0x80000000}) ioctl$KVM_CAP_PTP_KVM(r3, 0x4068aea3, &(0x7f0000000f80)) ioctl$KVM_ARM_SET_COUNTER_OFFSET(r3, 0x4010aeb5, &(0x7f0000001000)={0x6, 0x1}) r9 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) mmap$KVM_VCPU(&(0x7f0000f61000/0x1000)=nil, r9, 0x8, 0x8010, r6, 0x0) ioctl$KVM_ARM_SET_COUNTER_OFFSET(0xffffffffffffffff, 0x4010aeb5, &(0x7f0000001040)={0x9, 0x100}) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000001080)={0x6, 0xffffffffffffffff, 0x1}) ioctl$KVM_ARM_VCPU_INIT(r6, 0x4020aeae, &(0x7f00000010c0)={0x4, 0xc8}) 56m15.86635393s ago: executing program 3 (id=456): mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x0, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x1fe, 0x3, 0xffff6000, 0x1000, &(0x7f0000b24000/0x1000)=nil}) mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0xb, 0x28031, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r5, 0x0) mmap$KVM_VCPU(&(0x7f0000e04000/0x2000)=nil, 0x930, 0x1, 0x11, r5, 0x0) r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, r6, 0x8, 0x13, r5, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x2000)=nil, r6, 0x1000001, 0x12, r5, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b6565d2f1, 0xffffffffffffffff, 0x0) 56m6.437695751s ago: executing program 3 (id=458): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000240)={0x10004, 0x0, &(0x7f0000b18000/0x3000)=nil}) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x2e) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r3, r4, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000100)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f0000000140)=@arm64_core={0x6030000000100042, &(0x7f0000000000)=0x11}) 55m54.414519413s ago: executing program 3 (id=460): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3a) r2 = openat$kvm(0x0, 0x0, 0x40000, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000ffa000/0x3000)=nil}) (async) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x2, 0x80a0000, 0x0, r1, 0x4fd0f096b459bd7b}) 55m47.97605346s ago: executing program 3 (id=462): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xc0045878, 0x20000000) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x181b03, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r4, 0x400454dc, 0x110c23000a) r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000b80)={0x0, &(0x7f0000000100)=[@smc={0x1e, 0x40, {0xc5000020, [0x0, 0x72, 0x7f, 0x9, 0x9]}}], 0x40}, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_CREATE_VM(r0, 0x40087602, 0x20000000) 55m37.6025462s ago: executing program 3 (id=464): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f00000000c0)=@arm64_core={0x6030000000100034, &(0x7f0000000000)=0x80}) r3 = openat$kvm(0x0, &(0x7f0000000000), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, r5, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) mmap$KVM_VCPU(&(0x7f0000e31000/0x2000)=nil, r7, 0x1, 0x2012, r6, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x2000001, 0x810, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) (async) ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) (async) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f00000000c0)=@arm64_core={0x6030000000100034, &(0x7f0000000000)=0x80}) (async) openat$kvm(0x0, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) (async) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, r5, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) (async) mmap$KVM_VCPU(&(0x7f0000e31000/0x2000)=nil, r7, 0x1, 0x2012, r6, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x2000001, 0x810, 0xffffffffffffffff, 0x0) (async) 55m25.611729913s ago: executing program 3 (id=466): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, r2, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x25) ioctl$KVM_CAP_ARM_MTE(r3, 0x4068aea3, &(0x7f00000000c0)={0xf5}) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r6, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f00000001c0)="fb0149dd833be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8faa767969d22627e700", 0x0, 0x48) munmap$KVM_VCPU(r7, 0x6) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x32) ioctl$KVM_ARM_SET_COUNTER_OFFSET(r8, 0x4010aeb5, &(0x7f0000000000)={0x8, 0x1}) 54m39.177569993s ago: executing program 34 (id=466): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, r2, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x25) ioctl$KVM_CAP_ARM_MTE(r3, 0x4068aea3, &(0x7f00000000c0)={0xf5}) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r6, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f00000001c0)="fb0149dd833be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8faa767969d22627e700", 0x0, 0x48) munmap$KVM_VCPU(r7, 0x6) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x32) ioctl$KVM_ARM_SET_COUNTER_OFFSET(r8, 0x4010aeb5, &(0x7f0000000000)={0x8, 0x1}) 45m8.409312501s ago: executing program 2 (id=532): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000ce9000/0x2000)=nil, r3, 0x2000001, 0xa54fdb4b193a961d, r2, 0x0) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x9000000) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x0, 0x23ac5f9b426e84b2, 0xffffffffffffffff, 0x0) ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f00000002c0)={0x5}) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x6) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x80000000000) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xeeee0000, 0x1000, &(0x7f0000fd1000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r7, 0x0) syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x1ff, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000000)=@arm64_sys={0x603000000013c038, &(0x7f0000000080)=0x1}) 45m1.519348116s ago: executing program 4 (id=533): r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_GET_DEVICE_ATTR(r3, 0x4018aee2, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x1, 0x0}) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_vgic_v3_setup(r5, 0x1, 0x100) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r8, 0x4020aeae, &(0x7f0000000100)={0x5, 0x18}) ioctl$KVM_GET_ONE_REG(r8, 0x4010aeab, &(0x7f0000000140)=@arm64_sve={0x603000000013df1a, 0x0}) ioctl$KVM_IRQ_LINE(r5, 0x4008ae61, &(0x7f0000000100)={0x1001ffd, 0x1}) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r10 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x2e) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_ONE_REG(r12, 0x4010aeac, &(0x7f0000000140)=@arm64_core={0x60300000001000d7, 0x0}) r13 = syz_kvm_vgic_v3_setup(r9, 0x1, 0x80) ioctl$KVM_GET_DEVICE_ATTR(r13, 0x4018aee2, &(0x7f0000000080)=@attr_arm64={0x0, 0x0, 0x5, &(0x7f0000000000)=0x80}) 44m59.293173408s ago: executing program 2 (id=534): r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r4, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) r5 = syz_kvm_vgic_v3_setup(r3, 0x1, 0x100) ioctl$KVM_GET_DEVICE_ATTR(r5, 0x4018aee2, &(0x7f0000000080)=@attr_riscv64=@attr_imsic={0x0, 0x1, 0x204, 0xfffffffffffffffe}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000001c0)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r6, 0x4018aee3, &(0x7f00000002c0)=@attr_other={0x0, 0x4, 0x8, 0x0}) openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) (async) syz_kvm_add_vcpu$arm64(r4, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) (async) syz_kvm_vgic_v3_setup(r3, 0x1, 0x100) (async) ioctl$KVM_GET_DEVICE_ATTR(r5, 0x4018aee2, &(0x7f0000000080)=@attr_riscv64=@attr_imsic={0x0, 0x1, 0x204, 0xfffffffffffffffe}) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000001c0)={0x8}) (async) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, 0x0) (async) ioctl$KVM_HAS_DEVICE_ATTR(r6, 0x4018aee3, &(0x7f00000002c0)=@attr_other={0x0, 0x4, 0x8, 0x0}) (async) 44m43.456123532s ago: executing program 2 (id=535): r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) mmap$KVM_VCPU(&(0x7f0000000000/0xc00000)=nil, 0x930, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0) r3 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r2, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000280), 0x103080, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) r6 = syz_kvm_vgic_v3_setup(r5, 0x1, 0x40) r7 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0x80111500, 0x20000000) syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0x80111500, 0x20000000) ioctl$KVM_CREATE_VM(r11, 0x541b, 0x10000000000000) ioctl$KVM_CHECK_EXTENSION_VM(r9, 0xae03, 0x2) ioctl$KVM_GET_DEVICE_ATTR(r6, 0x4018aee2, &(0x7f0000000100)=@attr_riscv64=@attr_aplic={0x0, 0x1, @valid=0x1ddc, &(0x7f0000000000)=0x4}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0xffffffffffffffa7) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x10, 0xffffffffffffffff, 0x0) r12 = eventfd2(0xd, 0x1) close(r12) openat$kvm(0xffffff9c, &(0x7f0000000040), 0xa00f2, 0x0) write$eventfd(r12, 0x0, 0x500) 44m42.398642595s ago: executing program 4 (id=536): munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x4f832, 0xffffffffffffffff, 0x1000000) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ARM_SET_COUNTER_OFFSET(r1, 0x8040aeb6, 0xfffffffffffffffe) munmap(&(0x7f0000ec4000/0x1000)=nil, 0x1000) 44m32.571653912s ago: executing program 4 (id=537): openat$kvm(0x0, &(0x7f0000000200), 0x349002, 0x0) (async) r0 = openat$kvm(0x0, &(0x7f0000000200), 0x349002, 0x0) r1 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0x400454da, 0x2f) syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r1, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000000000)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0x8001}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x2c) syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) (async) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) r8 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_vgic_v3_setup(r9, 0x0, 0x240) (async) syz_kvm_vgic_v3_setup(r9, 0x0, 0x240) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x0, 0x280000b, 0x11, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x0, 0x280000b, 0x11, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x27) syz_kvm_vgic_v3_setup(r11, 0xf, 0x40) (async) r12 = syz_kvm_vgic_v3_setup(r11, 0xf, 0x40) ioctl$KVM_HAS_DEVICE_ATTR(r12, 0x4018aee3, &(0x7f0000000280)=@attr_other={0x0, 0x4, 0x6, 0x0}) (async) ioctl$KVM_HAS_DEVICE_ATTR(r12, 0x4018aee3, &(0x7f0000000280)=@attr_other={0x0, 0x4, 0x6, 0x0}) r13 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r13, 0x4010aeac, &(0x7f0000000100)=@arm64_fw={0x6030000000140005, &(0x7f0000000000)=0xfffffffffffffffd}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3) (async) r14 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r14, 0x4020aeae, &(0x7f0000000000)={0x5, 0x18}) (async) ioctl$KVM_ARM_VCPU_INIT(r14, 0x4020aeae, &(0x7f0000000000)={0x5, 0x18}) ioctl$KVM_ARM_VCPU_FINALIZE(r14, 0x4004aec2, &(0x7f00000001c0)=0x4) (async) ioctl$KVM_ARM_VCPU_FINALIZE(r14, 0x4004aec2, &(0x7f00000001c0)=0x4) ioctl$KVM_SET_ONE_REG(r14, 0x4010aeac, &(0x7f00000000c0)=@arm64_sve_vls={0x606000000015ffff, 0x0}) 44m31.482673379s ago: executing program 2 (id=538): r0 = openat$kvm(0x0, &(0x7f0000000040), 0xc0083, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x0, 0x12, r0, 0x0) munmap$KVM_VCPU(0x0, 0x1000000000) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ARM_VCPU_INIT(r3, 0x4020aeae, &(0x7f0000000040)={0x5}) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r4 = openat$kvm(0x0, &(0x7f00000002c0), 0x74002, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CAP_HALT_POLL(r8, 0x4068aea3, &(0x7f0000000000)={0xdf, 0x0, 0x10000}) ioctl$KVM_CAP_HALT_POLL(r8, 0x4068aea3, &(0x7f00000000c0)={0xe1, 0x0, 0x3}) ioctl$KVM_GET_DIRTY_LOG(r8, 0x4010ae42, &(0x7f0000000140)={0x10001, 0x0, &(0x7f0000ffc000/0x1000)=nil}) r9 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r6, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r9, 0x20, &(0x7f0000000080)="fb0149dd033be3abf408020000001b0000005a9610fbff67521ce16f8f1f449a7ab2aa76c829d2262f00000000000000000200df38000000000000000020001e91114900", 0x0, 0xfda9) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x0, 0x0, 0x12, r6, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1800, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x2a) r11 = openat$kvm(0xffffffffffffff9c, 0x0, 0x8900, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x24) r12 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000000)={0x48, 0xdddd1000}) ioctl$KVM_CREATE_VM(r12, 0x401c5820, 0x20000000) 44m19.069502001s ago: executing program 4 (id=539): r0 = openat$kvm(0x0, &(0x7f0000000340), 0xe0e80, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r3, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) r4 = syz_kvm_vgic_v3_setup(r2, 0x1, 0x100) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000000)=@attr_other={0x0, 0x5, 0xb0, &(0x7f00000003c0)=0x5}) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r5, r6, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f00000000c0)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}], 0x1, 0x0, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r9, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) ioctl$KVM_SET_ONE_REG(r9, 0x4010aeac, &(0x7f0000000040)=@arm64_sys={0x603000000013c000, &(0x7f0000000000)=0xc00fac31}) ioctl$KVM_SET_MP_STATE(r9, 0x4004ae99, &(0x7f0000000000)=0x3) syz_kvm_vgic_v3_setup(r5, 0x1, 0x100) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_IRQ_LINE(r5, 0x4008ae61, &(0x7f0000000100)={0x1000020, 0x1}) syz_kvm_setup_cpu$arm64(0xffffffffffffffff, r6, &(0x7f00009ea000/0x400000)=nil, &(0x7f0000000140)=[{0x0, &(0x7f00000001c0)=[@eret={0xe6, 0x18, 0x9}, @code={0xa, 0x6c, {"e0fe8dd20080b8f2410080d2c20080d2030180d2040180d2020000d40008285e0000600d000000b50000601f1020601ec05d87d20040b8f2a10080d2a20180d2030080d2c40180d2020000d4000000b2000028d50060000e"}}, @msr={0x14, 0x20, {0x6030000000139c18, 0x401}}, @mrs={0xbe, 0x18, {0x6030000000139f71}}, @irq_setup={0x46, 0x18, {0x0, 0xe}}, @its_setup={0x82, 0x28, {0x3, 0x0, 0x277}}, @its_setup={0x82, 0x28, {0x2, 0x1, 0x8e}}, @its_setup={0x82, 0x28, {0x0, 0x0, 0x362}}], 0x14c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 44m15.002669964s ago: executing program 2 (id=540): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ARM_SET_COUNTER_OFFSET(r1, 0x4010aeb5, &(0x7f0000000280)={0x101, 0x8000}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x300, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x28) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r3, 0x4068aea3, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000e31000/0x2000)=nil, 0x930, 0xa, 0x11, r4, 0x40000) ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f0000000100)=@arm64_core={0x603000000010003a, &(0x7f00000000c0)=0xfffffffffffff800}) r5 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000aba000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000300)={0x0, &(0x7f0000000140)=[@its_setup={0x82, 0x28, {0x1, 0x3, 0x121}}], 0x28}, 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x3}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x5, 0xe, 0x0, 0x5, 0x8, 0x82, 0x46, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x100001, 0xff80000, 0x0, 0x4, 0x2a, 0x7, '\x00', 0x1, 0x2000000080000093}) syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000880)={0x0, &(0x7f0000000200)=[@its_send_cmd={0xaa, 0x28, {0x4, 0x1, 0x4, 0x4, 0x8, 0xb, 0x200000}}], 0x28}, 0x0, 0x0) write$eventfd(r8, &(0x7f00000001c0)=0x3, 0xfdef) syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000000)={0x0, &(0x7f0000000780)=[@its_setup={0x82, 0x28, {0x1, 0x0, 0x8000000000004f6}}], 0x28}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0xff7ffffffffffffd, 0x360) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r10, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x3, 0x26000, 0x2000, &(0x7f0000ffc000/0x2000)=nil, 0x7}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x5}) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x1) ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x8, 0xf, 0x0, 0x5, 0x6, 0x6, 0x6, 0x74, 0x86, 0xdd, 0x68, 0x0, 0x209, 0x0, 0x0, 0x3, 0x5, 0x5, '\x00', 0x1, 0x400000000002}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000140)={0x4, 0x0, [{0x1, 0x1, 0x0, 0x0, @adapter={0x8000000000000001, 0xffffffffffffff66, 0x2, 0xa, 0x10}}, {0x5, 0x3, 0x1, 0x0, @msi={0x7, 0x6, 0x7fffffff, 0x5}}, {0x0, 0x0, 0x1, 0x0, @msi={0x80, 0x0, 0x0, 0xa0}}, {0x0, 0x0, 0x1, 0x0, @adapter={0x5e9, 0x5, 0x401, 0x7f, 0xb2d}}]}) 44m1.861614076s ago: executing program 4 (id=541): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000100)={0x7, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x2, &(0x7f0000000200)=0x400a000000}) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000240)=@attr_arm64={0x0, 0x0, 0x5, &(0x7f0000000280)=0x40400000080a0000}) r7 = syz_kvm_add_vcpu$arm64(r3, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xc, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x20000000) ioctl$KVM_SET_DEVICE_ATTR_vm(r8, 0x8030aeb4, 0x0) 44m0.259617997s ago: executing program 2 (id=542): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r4, 0x1, 0x100) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r6, 0x4018aee1, &(0x7f0000000040)=@attr_irq_timer={0x0, 0x1, 0x0, &(0x7f0000000000)=0x1e}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=[@irq_setup={0x46, 0x18, {0x1, 0x3c9}}], 0x18}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0xfffffffffffffffd, 0x60) r8 = eventfd2(0x9, 0x1) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x2, 0x8001002, 0x1, r8}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 43m50.030510229s ago: executing program 4 (id=543): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) (async) openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async) r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) (async) syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r1, &(0x7f0000000b80)={0x0, &(0x7f00000002c0)=[@hvc={0x32, 0x40, {0x84000003, [0xa00000000, 0x4, 0x4, 0x9, 0x4d]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_kvm_add_vcpu$arm64(r0, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x8c, 0x9}}], 0x30}, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f00000001c0)=@attr_riscv64=@attr_config={0x0, 0x1, 0x0, &(0x7f0000000200)=0xc93}) (async) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f00000001c0)=@attr_riscv64=@attr_config={0x0, 0x1, 0x0, &(0x7f0000000200)=0xc93}) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x800, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x2d) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f00000001c0)={0x8, 0xffffffffffffffff}) r10 = openat$kvm(0x0, &(0x7f0000000140), 0x40002, 0x0) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r11, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000040)={0x5, 0x7ff, 0x2}}) syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil) (async) r12 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil) r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000300)={0x0, &(0x7f0000000080)=[@hvc={0x32, 0x40, {0xffff, [0x7fffffff, 0x101, 0xfb4, 0x1, 0x8]}}], 0x40}, 0x0, 0x0) ioctl$KVM_RUN(r13, 0xae80, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000380)}) (async) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000380)}) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f00000000c0)={0x5, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f00000002c0)=@attr_other={0x0, 0x8, 0x108, &(0x7f0000000000)=0xc000000000000000}) (async) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f00000002c0)=@attr_other={0x0, 0x8, 0x108, &(0x7f0000000000)=0xc000000000000000}) syz_kvm_setup_cpu$arm64(r8, 0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000180)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$arm64(r8, 0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000180)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f0000000240)=@attr_arm64={0x0, 0x6, 0x2, 0x0}) ioctl$KVM_SET_GUEST_DEBUG_arm64(r13, 0x4208ae9b, &(0x7f0000000800)={0x20000, 0x0, {[0x0, 0x1, 0x6, 0x100000000, 0x1, 0xfffffffffffffff9, 0x1, 0x7, 0x8, 0x0, 0x2, 0x9, 0x8001, 0x32, 0x8], [0xd8a, 0x2, 0x4, 0x83, 0x9, 0x9, 0x7, 0x6, 0xffff, 0x8, 0x4, 0x1, 0x2e8f, 0x4, 0x3, 0xfffe00000], [0x401, 0xffffffffffffff46, 0x2, 0x5, 0x2, 0x1ff, 0x3, 0x0, 0x8, 0x6, 0xe, 0x1, 0x7, 0x0, 0x8, 0x9], [0x7fffffffffffffff, 0x3, 0x8, 0x1, 0x6, 0x100, 0xb, 0x2, 0x9d8, 0x8, 0x401, 0x0, 0x8c04, 0x100, 0xb, 0x8]}}) 43m13.399121352s ago: executing program 35 (id=542): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r4, 0x1, 0x100) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r6, 0x4018aee1, &(0x7f0000000040)=@attr_irq_timer={0x0, 0x1, 0x0, &(0x7f0000000000)=0x1e}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=[@irq_setup={0x46, 0x18, {0x1, 0x3c9}}], 0x18}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0xfffffffffffffffd, 0x60) r8 = eventfd2(0x9, 0x1) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x2, 0x8001002, 0x1, r8}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 43m3.279114529s ago: executing program 36 (id=543): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) (async) openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async) r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) (async) syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r1, &(0x7f0000000b80)={0x0, &(0x7f00000002c0)=[@hvc={0x32, 0x40, {0x84000003, [0xa00000000, 0x4, 0x4, 0x9, 0x4d]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_kvm_add_vcpu$arm64(r0, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x8c, 0x9}}], 0x30}, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f00000001c0)=@attr_riscv64=@attr_config={0x0, 0x1, 0x0, &(0x7f0000000200)=0xc93}) (async) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f00000001c0)=@attr_riscv64=@attr_config={0x0, 0x1, 0x0, &(0x7f0000000200)=0xc93}) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x800, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x2d) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f00000001c0)={0x8, 0xffffffffffffffff}) r10 = openat$kvm(0x0, &(0x7f0000000140), 0x40002, 0x0) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r11, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000040)={0x5, 0x7ff, 0x2}}) syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil) (async) r12 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil) r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000300)={0x0, &(0x7f0000000080)=[@hvc={0x32, 0x40, {0xffff, [0x7fffffff, 0x101, 0xfb4, 0x1, 0x8]}}], 0x40}, 0x0, 0x0) ioctl$KVM_RUN(r13, 0xae80, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000380)}) (async) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000380)}) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f00000000c0)={0x5, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f00000002c0)=@attr_other={0x0, 0x8, 0x108, &(0x7f0000000000)=0xc000000000000000}) (async) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f00000002c0)=@attr_other={0x0, 0x8, 0x108, &(0x7f0000000000)=0xc000000000000000}) syz_kvm_setup_cpu$arm64(r8, 0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000180)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$arm64(r8, 0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000180)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f0000000240)=@attr_arm64={0x0, 0x6, 0x2, 0x0}) ioctl$KVM_SET_GUEST_DEBUG_arm64(r13, 0x4208ae9b, &(0x7f0000000800)={0x20000, 0x0, {[0x0, 0x1, 0x6, 0x100000000, 0x1, 0xfffffffffffffff9, 0x1, 0x7, 0x8, 0x0, 0x2, 0x9, 0x8001, 0x32, 0x8], [0xd8a, 0x2, 0x4, 0x83, 0x9, 0x9, 0x7, 0x6, 0xffff, 0x8, 0x4, 0x1, 0x2e8f, 0x4, 0x3, 0xfffe00000], [0x401, 0xffffffffffffff46, 0x2, 0x5, 0x2, 0x1ff, 0x3, 0x0, 0x8, 0x6, 0xe, 0x1, 0x7, 0x0, 0x8, 0x9], [0x7fffffffffffffff, 0x3, 0x8, 0x1, 0x6, 0x100, 0xb, 0x2, 0x9d8, 0x8, 0x401, 0x0, 0x8c04, 0x100, 0xb, 0x8]}}) 12m2.049111659s ago: executing program 5 (id=726): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x80001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x5, 0x1, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$arm64(r3, 0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil, &(0x7f0000000840)=[{0x0, 0x0, 0x248}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000500)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901101, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x2b) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000aec000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000040)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r7, 0x4010aeab, &(0x7f0000000100)=@arm64_sve={0x60800000001503ad, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x100000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 12m0.839068167s ago: executing program 6 (id=727): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x9000000) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) munmap(&(0x7f0000482000/0x2000)=nil, 0x2000) munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r3, 0x0) mmap$KVM_VCPU(&(0x7f0000e04000/0x2000)=nil, 0x930, 0x1, 0x11, r3, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x0, 0x8, 0x13, r3, 0x0) mmap$KVM_VCPU(&(0x7f0000011000/0x3000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x0, 0x8032, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mmap$KVM_VCPU(0x0, 0x50000, 0x3, 0x11, r5, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r8, 0x800454d7, 0x800000000000000d) munmap$KVM_VCPU(0x0, 0xffffffffe) 11m48.136160474s ago: executing program 5 (id=728): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xd7, 0x80000001}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000140)=@attr_arm64={0x0, 0x4, 0x1, &(0x7f0000000100)=0x5}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3f) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x1800002, 0x11, r7, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) r13 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r12, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r13, 0x20, &(0x7f0000000240)="fb0149dd833be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8faa767969d22627e700", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x4000010, r12, 0x0) r14 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a1332, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000000)=@arm64_core={0x6030000000100028, 0x0}) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CREATE_VM(r14, 0x401c5820, 0x20000007) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x100000c, 0x16831, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) 11m46.456690107s ago: executing program 6 (id=729): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000140), 0x40002, 0x0) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r2, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000040)={0x5, 0x7ff, 0x2}}) ioctl$KVM_ARM_VCPU_INIT(0xffffffffffffffff, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x3}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x9b, 0xf, 0x0, 0x5, 0xd, 0x82, 0x46, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x900001, 0x0, 0x0, 0x5, 0xa, 0x4, '\x00', 0x1, 0x205}) write$eventfd(r5, &(0x7f00000001c0)=0x3, 0xfdef) r6 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000180)={0x0, &(0x7f0000000080)=[@hvc={0x32, 0x40, {0x8600ff01, [0x7fffffff, 0x101, 0xfb4, 0x1, 0x8]}}], 0x40}, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = eventfd2(0xfffffffa, 0x80001) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000140)={0x80, 0x4, 0x0, r9}) ioctl$KVM_REGISTER_COALESCED_MMIO(r8, 0x4010ae67, &(0x7f0000000080)={0x7001, 0x37d03030d7a92616}) ioctl$KVM_REGISTER_COALESCED_MMIO(r8, 0x4010ae67, &(0x7f0000000180)={0x5000}) 11m31.491802155s ago: executing program 5 (id=730): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3) (async, rerun: 32) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (rerun: 32) mmap$KVM_VCPU(&(0x7f0000fab000/0x2000)=nil, 0x0, 0x2000007, 0x4000010, r5, 0x0) (async) r6 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000100)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r9, 0x4010aeab, &(0x7f0000000200)=@arm64_core={0x6030000000100046, &(0x7f0000000000)=0xffffffffffff41d7}) ioctl$KVM_ARM_VCPU_INIT(r4, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) (async) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x302, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = eventfd2(0x8, 0x80800) ioctl$KVM_IOEVENTFD(r11, 0x4040ae79, &(0x7f00000000c0)={0x8000000000000000, 0xeeef0000, 0x0, r12}) ioctl$KVM_IOEVENTFD(r11, 0x4040ae79, &(0x7f0000000000)={0x6, 0x0, 0x0, r12, 0x4}) (async) syz_kvm_vgic_v3_setup(r3, 0x5, 0x1e0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r4, 0x4018aee1, &(0x7f0000000100)=@attr_pmu_init) (async, rerun: 32) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000000c0)={0x7, 0xffffffffffffffff}) (rerun: 32) ioctl$KVM_HAS_DEVICE_ATTR(r13, 0x4018aee3, 0xffffffffffffffff) 11m30.56605964s ago: executing program 6 (id=731): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x4}}], 0x28}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000240)={0x44000000, 0x65330985}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x3}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x5, 0xe, 0x0, 0x5, 0x8, 0x82, 0x46, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x100001, 0xff80000, 0x0, 0x4, 0x2a, 0x7, '\x00', 0x1, 0x2000000080000093}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000880)={0x0, &(0x7f0000000200)=[@its_send_cmd={0xaa, 0x28, {0x4, 0x1, 0x4, 0x4, 0x8, 0xb, 0x200000}}], 0x28}, 0x0, 0x0) write$eventfd(r7, &(0x7f00000001c0)=0x3, 0xfdef) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x2, 0x4f832, 0xffffffffffffffff, 0x1000000) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x8, 0x88, &(0x7f0000000000)=0x10}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x7) 11m17.926144049s ago: executing program 5 (id=732): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x101ff, 0x2, 0xfec00000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r4 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, r3, 0x1000002, 0x13, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r2, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x454303, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) r6 = openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_GUEST_MEMFD(r7, 0xc040aed4, &(0x7f00000001c0)={0x200001fe4000, 0x1}) mmap$KVM_VCPU(&(0x7f0000ffc000/0x1000)=nil, 0x930, 0x2000002, 0x2013, r8, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40800, 0x0) ioctl$KVM_CREATE_VM(r9, 0x40049409, 0x6) 11m14.57793432s ago: executing program 6 (id=733): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) (async) r3 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r4, r5, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000140)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r5, 0x4010aeac, &(0x7f0000000180)=@arm64_extra={0x603000000013c037, &(0x7f00000000c0)=0x3}) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_vgic_v3_setup(r6, 0x1, 0x100) ioctl$KVM_IRQ_LINE(r6, 0x4008ae61, &(0x7f0000000100)={0x1001ffd, 0x1}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r8, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r8, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x380, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0xff, 0x8, 0x98bd, 0x80000000000000c, 0x0, 0x4, 0x10000, 0x7, 0x9004, 0x9, 0x8, 0x9, 0x5, 0x8, 0x7f, 0x5, 0x2, 0x1, 0x8, 0x7, 0xc1, 0x1, 0x2, 0x2, 0x6, 0x9, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x4, 0x7, 0x4, 0x3, 0xcd, 0x888f, 0x1, 0x6, 0x46, 0x1, 0x3, 0xa3e0, 0x20000000006, 0x8, 0x7, 0x400, 0x3, 0xffffffffffffffb7, 0xfffffffffffffffa, 0x80000000, 0xe, 0x6, 0x4, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0x9, 0xd, 0x4, 0xbbd9, 0x80000000, 0xfffffffffffffbfd, 0x2, 0x7, 0x2, 0xcdc, 0x4000000007, 0xfffffffffffffffe, 0x3, 0x2, 0x2, 0xfff, 0x6, 0x4, 0x1, 0xab6, 0x0, 0x4, 0x0, 0x7, 0x9, 0xff, 0x6, 0x28000000, 0x5, 0x8061d, 0x0, 0x7, 0xf6, 0x0, 0x6, 0xfffffffffffffffb, 0x8, 0xe53e, 0x4, 0x8, 0x2293332f, 0x5, 0x5, 0x1e, 0xd, 0x2, 0x4, 0xfffffffffffffffb, 0x80000001, 0x7, 0xdfd7, 0xfff9, 0x10, 0x5, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0xcc, 0x8, 0x1000003]}) ioctl$KVM_CAP_ARM_SYSTEM_SUSPEND(r8, 0x4068aea3, &(0x7f0000000040)) (async) ioctl$KVM_CAP_ARM_SYSTEM_SUSPEND(r8, 0x4068aea3, &(0x7f0000000040)) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0x40c8, 0x1}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) r9 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f00000001c0)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4}) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x8, 0x100, &(0x7f0000000080)=0x8000000000000000}) ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f0000000280)=@attr_arm64={0x0, 0x4, 0x2, 0x0}) (async) ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f0000000280)=@attr_arm64={0x0, 0x4, 0x2, 0x0}) ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f0000000140)=@attr_other={0x0, 0x0, 0xa, &(0x7f0000000180)=0xffffffffffffffff}) (async) ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f0000000140)=@attr_other={0x0, 0x0, 0xa, &(0x7f0000000180)=0xffffffffffffffff}) syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000bff000/0x400000)=nil) (async) syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000bff000/0x400000)=nil) close(0x4) close(0x5) (async) close(0x5) 11m4.518135621s ago: executing program 5 (id=734): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x10001, 0x4, 0x2, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r3, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0xa7000, &(0x7f0000ffc000/0x2000)=nil, 0x4000, r4}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x1, 0x8, 0xb, 0x0, 0x2, 0x6, 0x6, 0x9, 0x8, 0x8, 0x6, 0x2, 0x0, 0x6, 0x6, 0xe2, 0x1, 0x29, 0x0, '\x00', 0x10, 0x6}) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CAP_ARM_USER_IRQ(r3, 0x4068aea3, &(0x7f00000000c0)) write$eventfd(r7, &(0x7f00000001c0), 0xf001) close(0x5) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x1d) 11m1.085863623s ago: executing program 6 (id=735): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f00000001c0)="f21bc75509bf71ba470236fc044800fff7ffffffd249f297e87fd600000000000000002000e4ff000000f500", 0x0, 0x48) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x5) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000000)={0x2, 0x0, [{0x0, 0x2, 0x1, 0x0, @irqchip={0x8, 0x8}}, {0x3, 0x2, 0x0, 0x0, @irqchip={0x2, 0x2}}]}) munmap(&(0x7f0000481000/0x1000)=nil, 0x1000) munmap(&(0x7f0000136000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x9000000) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) munmap(&(0x7f0000482000/0x2000)=nil, 0x2000) write$eventfd(r2, &(0x7f00000001c0)=0xffffff7f, 0xff25) 10m51.37075926s ago: executing program 5 (id=736): r0 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x25) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101400, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x34) r5 = syz_kvm_add_vcpu$arm64(r3, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffd9a}, 0x0, 0xfd11) syz_kvm_vgic_v3_setup(r2, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, 0x0}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000000)={0x3}) ioctl$KVM_GET_ONE_REG(r5, 0x4010aeab, &(0x7f0000000240)=@arm64_core={0x603000000010003c, &(0x7f0000000080)=0x5}) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_ARM_VCPU_INIT(r8, 0x4020aeae, &(0x7f0000000040)={0x5}) ioctl$KVM_SET_ONE_REG(r8, 0x4010aeac, &(0x7f00000001c0)=@arm64_ccsidr={0x6020000000110000, &(0x7f0000000180)=0x2}) 10m49.038476961s ago: executing program 6 (id=737): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}, 0x0, 0x0) r4 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000100)={0x0, &(0x7f0000000000)=[@its_setup={0x82, 0x28, {0x1, 0x3, 0x3f4}}], 0x28}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x2, 0x100) (async, rerun: 64) ioctl$KVM_RUN(r3, 0xae80, 0x0) (rerun: 64) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async, rerun: 64) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000180)={0x1010020, 0x1}) (async, rerun: 64) r5 = eventfd2(0x1, 0x801) r6 = eventfd2(0xff, 0x80000) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={r5, 0x3, 0x2, r6}) (async, rerun: 32) ioctl$KVM_RUN(r4, 0xae80, 0x0) (rerun: 32) 10m5.139605027s ago: executing program 37 (id=736): r0 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x25) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101400, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x34) r5 = syz_kvm_add_vcpu$arm64(r3, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffd9a}, 0x0, 0xfd11) syz_kvm_vgic_v3_setup(r2, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, 0x0}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000000)={0x3}) ioctl$KVM_GET_ONE_REG(r5, 0x4010aeab, &(0x7f0000000240)=@arm64_core={0x603000000010003c, &(0x7f0000000080)=0x5}) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_ARM_VCPU_INIT(r8, 0x4020aeae, &(0x7f0000000040)={0x5}) ioctl$KVM_SET_ONE_REG(r8, 0x4010aeac, &(0x7f00000001c0)=@arm64_ccsidr={0x6020000000110000, &(0x7f0000000180)=0x2}) 10m1.01994735s ago: executing program 38 (id=737): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}, 0x0, 0x0) r4 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000100)={0x0, &(0x7f0000000000)=[@its_setup={0x82, 0x28, {0x1, 0x3, 0x3f4}}], 0x28}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x2, 0x100) (async, rerun: 64) ioctl$KVM_RUN(r3, 0xae80, 0x0) (rerun: 64) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async, rerun: 64) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000180)={0x1010020, 0x1}) (async, rerun: 64) r5 = eventfd2(0x1, 0x801) r6 = eventfd2(0xff, 0x80000) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={r5, 0x3, 0x2, r6}) (async, rerun: 32) ioctl$KVM_RUN(r4, 0xae80, 0x0) (rerun: 32) 1m38.168198207s ago: executing program 8 (id=739): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x5401, 0x0) munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) munmap(&(0x7f0000e51000/0x4000)=nil, 0x4000) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) munmap(&(0x7f000000f000/0x2000)=nil, 0x2000) munmap(&(0x7f0000490000/0x1000)=nil, 0x1000) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) 1m36.963184348s ago: executing program 7 (id=738): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) close(r2) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20100, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x1ff, 0xdddc1000, 0x0, r2, 0x4}) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x2e) syz_kvm_setup_cpu$arm64(r4, 0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000140)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r6, 0x40a0ae49, &(0x7f0000000240)={0x1ff, 0x5, 0x2, 0x1000, &(0x7f0000ffd000/0x1000)=nil, 0x9}) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f00000000c0)=@arm64_core={0x6030000000100042, &(0x7f0000000200)=0x100000000}) 1m23.998812228s ago: executing program 8 (id=740): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x100000003b) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f00003af000/0x400000)=nil) r3 = openat$kvm(0x0, &(0x7f0000000280), 0x103080, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r5 = syz_kvm_vgic_v3_setup(r4, 0x1, 0x40) ioctl$KVM_GET_DEVICE_ATTR(r5, 0x4018aee2, &(0x7f0000000100)=@attr_other={0x0, 0x1, 0x420, &(0x7f0000000140)=0x200a88}) r6 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000180)=[@its_setup={0x82, 0x28, {0x5, 0x3, 0x1}}], 0x28}, 0x0, 0x0) r7 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x5) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r9, 0x4018aee2, &(0x7f0000000100)=@attr_irq_timer={0x0, 0x1, 0x1, &(0x7f0000000280)=0x18}) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) mmap$KVM_VCPU(0x0, 0x50000, 0x3, 0x11, r12, 0x0) r13 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_GET_DEVICE_ATTR(r15, 0x4018aee2, &(0x7f00000001c0)=@attr_other={0x0, 0x0, 0x4, 0x0}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000240)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, &(0x7f0000000100)=@arm64_sve_vls={0x606000000015ffff, &(0x7f0000000040)=0x81}) ioctl$KVM_SET_DEVICE_ATTR(r16, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) r17 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r18 = ioctl$KVM_CREATE_VM(r17, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r18, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CREATE_DEVICE(r18, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r19, 0x4018aee3, &(0x7f0000000900)=@attr_other={0x0, 0x0, 0x8000, 0x0}) 1m4.998400422s ago: executing program 7 (id=741): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) (async) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x101800, 0x0) (async) openat$kvm(0x0, &(0x7f0000000040), 0x101800, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000700)={0x7}) (async) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000700)={0x7, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x4, 0x0, 0x0}) ioctl$KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, &(0x7f0000000340)=@attr_other={0x0, 0x5, 0x8, &(0x7f0000000000)=0xcb1}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r3, 0x401054d5, 0x10000000000000) 58.687870926s ago: executing program 8 (id=742): r0 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000000)=[@uexit={0x0, 0x18, 0x7f}, @eret={0xe6, 0x18, 0xffff}, @msr={0x14, 0x20, {0x0, 0xa2}}, @uexit={0x0, 0x18, 0x2}], 0x68}, &(0x7f00000000c0)=[@featur1={0x1, 0x20}], 0x1) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r0, 0x4018aee3, &(0x7f0000000140)=@attr_other={0x0, 0x80000000, 0x0, &(0x7f0000000100)=0xffff}) ioctl$KVM_ARM_PREFERRED_TARGET(r0, 0x8020aeaf, &(0x7f0000000180)) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, &(0x7f00000001c0)={0x3, 0x8}) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r0, 0x4018aee3, &(0x7f0000000240)=@attr_irq_timer={0x0, 0x1, 0x0, &(0x7f0000000200)=0x11}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x22) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000280)={0x54000, 0xfec02000, 0x8, 0x1, 0xfffffff8}) ioctl$KVM_SET_SREGS(r0, 0x4000ae84, &(0x7f00000002c0)={{0x26000, 0x9000, 0xe, 0x2, 0x2, 0x80, 0x1, 0x7f, 0x8, 0x5, 0xbb, 0x2}, {0x0, 0x70000, 0x4, 0xd3, 0x3, 0x7, 0xf9, 0x8, 0x6, 0x2, 0x6, 0x6}, {0x60000, 0xeeee8000, 0x0, 0x81, 0x3, 0x8, 0xf7, 0x9, 0xa, 0xe, 0x1, 0x6}, {0x70000, 0xdddd1000, 0xb, 0x35, 0xb, 0x6, 0x7, 0x0, 0x8, 0x9, 0x0, 0x2}, {0x2, 0x2, 0x4, 0x1, 0x3, 0xe, 0x6, 0x7, 0x0, 0xe, 0xe, 0xb7}, {0x6000, 0x70000, 0xb, 0x10, 0x39, 0x13, 0x6, 0x80, 0x1, 0x2, 0x0, 0x80}, {0xfec00000, 0x54000, 0x8, 0x0, 0x7, 0x85, 0x40, 0x2, 0x4, 0x5, 0x3, 0x5c}, {0xeeee8000, 0x4, 0xa, 0x8, 0x2, 0xa, 0x9, 0x6, 0x1, 0x1, 0x8, 0xc0}, {0xa000, 0x2}, {0xeeee8000, 0x8}, 0x20, 0x0, 0x10000, 0x100002, 0xe, 0x8100, 0x4, [0x7, 0x6, 0x4aa00000, 0x7fff]}) r2 = mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x0, 0x9, 0x2010, r0, 0x0) munmap$KVM_VCPU(r2, 0x72bf) ioctl$KVM_GET_REG_LIST(r0, 0xc008aeb0, &(0x7f0000000400)={0x2, [0x5, 0x40]}) r3 = eventfd2(0x7fffffff, 0x1) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000440)={0x5, 0xf000, 0x0, r3, 0x4}) r4 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000a80)={0x0, &(0x7f0000000480)=[@svc={0x122, 0x40, {0x80000001, [0x1, 0x88, 0x0, 0x7, 0x1]}}, @msr={0x14, 0x20, {0x603000000013e65d, 0x4db5de11}}, @mrs={0xbe, 0x18, {0x603000000013dee8}}, @code={0xa, 0x54, {"00609f0d007008d5007008d5007008d5007008d5008008d520ac83d20020b0f2e10180d2020080d2030180d2240180d2020000d40020df0d000008d5007008d5"}}, @msr={0x14, 0x20, {0x603000000013e6df, 0x100000001}}, @its_setup={0x82, 0x28, {0x3, 0x1, 0x255}}, @its_setup={0x82, 0x28, {0x1, 0x1, 0x8d}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x1, 0x1, 0x8, 0x1000000, 0x4b, 0x4}}, @smc={0x1e, 0x40, {0x4985c1ab2b0d9dc, [0x1, 0xffffffffffffff58, 0xfffffffffffffa3f, 0x3, 0x7]}}, @its_setup={0x82, 0x28, {0x0, 0x4, 0x2eb}}, @uexit={0x0, 0x18, 0x10}, @smc={0x1e, 0x40, {0x1, [0x47, 0x6dd, 0x6, 0x1d727471, 0x3]}}, @smc={0x1e, 0x40, {0xc700ff1b, [0x10000, 0x8001, 0x6, 0x4, 0x4]}}, @code={0xa, 0x84, {"c02a97d20040b0f2e10180d2c20080d2630180d2440180d2020000d4c0638cd20080b8f2610180d2a20180d2430080d2e40180d2020000d41f0000ab0030206ec0199ad20060b0f2210180d2420180d2a30180d2640180d2020000d400b0200e000000ab000028d5000008d5000028d5"}}, @uexit={0x0, 0x18}, @svc={0x122, 0x40, {0xc400000e, [0x9, 0x8001, 0x8000000000000000, 0xa, 0x10001]}}, @uexit={0x0, 0x18}, @hvc={0x32, 0x40, {0xc4000004, [0x9, 0x1, 0x8, 0x1, 0x65]}}, @mrs={0xbe, 0x18, {0x603000000013e65a}}, @code={0xa, 0xcc, {"0028000e00ad90d200e0b8f2010180d2620080d2430080d2a40080d2020000d400a0004fa0d985d20000b8f2a10180d2220180d2430180d2440180d2020000d4000008d5208c84d200c0b8f2a10080d2220080d2030080d2040180d2020000d4007008d5a09296d20080b8f2c10080d2c20180d2830180d2440180d2020000d440af82d20000b0f2a10080d2620080d2430080d2240080d2020000d460ac90d200c0b8f2e10080d2820180d2230080d2440080d2020000d4"}}, @its_setup={0x82, 0x28, {0x0, 0x1, 0x395}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x1, 0x3, 0x5, 0xc, 0x7}}, @uexit={0x0, 0x18, 0x3}, @msr={0x14, 0x20, {0x603000000013e110, 0xa00000}}, @smc={0x1e, 0x40, {0x8400000f, [0x1, 0xfffffffffffffffb, 0x3, 0x6, 0xf32]}}, @memwrite={0x6e, 0x30, @generic={0x33000, 0x713, 0xfffffffffffffffa, 0xb}}, @msr={0x14, 0x20, {0x603000000013e682, 0x3}}, @irq_setup={0x46, 0x18, {0x0, 0x312}}, @eret={0xe6, 0x18, 0x69}, @its_setup={0x82, 0x28, {0x2, 0x2, 0x25a}}], 0x5ec}, &(0x7f0000000ac0)=[@featur2={0x1, 0x40}], 0x1) ioctl$KVM_SET_SREGS(r4, 0x4000ae84, &(0x7f0000000b00)={{0x9000, 0xffff1000, 0xe, 0xfe, 0x1, 0x2, 0x8, 0x1, 0xba, 0x6, 0x4, 0x8}, {0xeeee0001, 0x10000, 0x3, 0x82, 0x0, 0xf9, 0x0, 0xc, 0x5, 0xfb, 0x9, 0xd}, {0xd000, 0x30000, 0xc, 0x9, 0x8, 0x8, 0x40, 0x12, 0x3, 0xe, 0xe, 0x8}, {0xeeef0000, 0x9000, 0xd, 0x71, 0x2, 0x9, 0x5b, 0x8, 0x8, 0x0, 0x76}, {0x8000000, 0x0, 0xe, 0x1, 0x8, 0x0, 0xd, 0x75, 0x3, 0x4, 0x1, 0x9}, {0xe000, 0x200000, 0xa, 0x0, 0xa6, 0x81, 0x6, 0x9, 0x9, 0x40, 0x81, 0x5}, {0x3000, 0x200000, 0x8, 0x8, 0x2, 0x0, 0x8, 0x4, 0x8, 0x8, 0x2b}, {0x80a0000, 0xffff1000, 0x69406e9bd82491e9, 0x7, 0xe, 0x3, 0x5, 0x0, 0x0, 0x6, 0x0, 0xf7}, {0xc000, 0xab}, {0x0, 0x8}, 0x40040000, 0x0, 0x70000, 0x70117, 0xb, 0x800, 0x1, [0x8, 0x9, 0x6]}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000c40), 0x80, 0x0) r6 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000001040)={0x0, &(0x7f0000000c80)=[@eret={0xe6, 0x18, 0xa}, @its_send_cmd={0xaa, 0x28, {0x1, 0x3, 0x2, 0xa, 0x715, 0x40, 0x4}}, @svc={0x122, 0x40, {0xaf344122446cf39, [0x8c, 0x0, 0x401, 0x0, 0x7]}}, @msr={0x14, 0x20, {0x603000000013f528, 0x400}}, @msr={0x14, 0x20, {0x603000000013df54, 0x8}}, @eret={0xe6, 0x18, 0xadda}, @memwrite={0x6e, 0x30, @generic={0xdddd1000, 0x139, 0x6, 0x2}}, @smc={0x1e, 0x40, {0xc4000053, [0x1, 0x6, 0x7, 0x8000000, 0xf]}}, @uexit={0x0, 0x18, 0xfff}, @code={0xa, 0xb4, {"805795d20000b8f2e10080d2820180d2430080d2e40080d2020000d4007008d540e594d20000b0f2010180d2c20080d2c30180d2c40180d2020000d480009ed20020b0f2c10080d2220180d2830180d2e40080d2020000d4007008d5c0a68ad20060b8f2810180d2220080d2c30180d2e40180d2020000d400dc205e008008d5007008d5406090d20040b0f2610080d2020180d2430080d2440080d2020000d4"}}, @smc={0x1e, 0x40, {0xf2000007, [0x2aeb0266, 0x3, 0x1, 0x8, 0x1255]}}, @irq_setup={0x46, 0x18, {0x0, 0x27}}, @msr={0x14, 0x20, {0x603000000013f300, 0x8}}, @uexit={0x0, 0x18, 0x8}, @smc={0x1e, 0x40, {0x0, [0x7, 0x2, 0x3, 0x100]}}, @smc={0x1e, 0x40, {0xc4000014, [0x3, 0x1, 0x10, 0xc, 0x86]}}, @svc={0x122, 0x40, {0x40000000, [0xb4, 0x0, 0x8000000000000000, 0x9, 0x8]}}, @msr={0x14, 0x20, {0x603000000013805e, 0x1}}], 0x384}, &(0x7f0000001080)=[@featur2={0x1, 0x5}], 0x1) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000010c0)={0xa}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_INTERRUPT(r6, 0x4004ae86, &(0x7f0000001100)=0x3) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x32) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000001140)=@x86={0x5, 0xbb, 0x4f, 0x0, 0x4, 0xcd, 0x0, 0x1, 0x3, 0xf0, 0x8, 0x6, 0x0, 0x9, 0x8, 0x1, 0x4, 0x3, 0xc3, '\x00', 0x9, 0x6}) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f0000001180)=@arm64={0x7, 0xfa, 0x4, '\x00', 0x8}) r9 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r9, &(0x7f0000001680)={0x0, &(0x7f00000011c0)=[@eret={0xe6, 0x18, 0x6}, @its_setup={0x82, 0x28, {0x1, 0x1, 0x41}}, @code={0xa, 0x9c, {"e0ed87d200c0b0f2e10180d2a20180d2a30080d2240080d2020000d40300a0d4000c00780008200e0004c038005c94d20020b8f2210080d2620180d2230180d2e40180d2020000d4c08e83d20040b8f2210180d2a20180d2030080d2c40180d2020000d40000429ee01b9ed20060b8f2010180d2420080d2630080d2c40180d2020000d4007008d5"}}, @mrs={0xbe, 0x18, {0x5f32}}, @svc={0x122, 0x40, {0x0, [0x9, 0x6, 0x1, 0xbf3, 0x5]}}, @hvc={0x32, 0x40, {0x84000003, [0xf, 0x6, 0x1200000, 0xfffffffffffffffb, 0x612]}}, @code={0xa, 0xb4, {"000028d5007008d5000028d540db84d20060b0f2810180d2620080d2030180d2440080d2020000d4c09f98d20060b0f2a10180d2420080d2230080d2a40080d2020000d420ba92d20080b8f2810080d2a20080d2e30180d2a40180d2020000d4600d82d20060b8f2210080d2820080d2630080d2a40080d2020000d40008403a204482d20040b8f2610080d2c20180d2630080d2240180d2020000d4008008d5"}}, @hvc={0x32, 0x40, {0x84000009, [0x2, 0x7, 0xc3a, 0x0, 0x4]}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x0, 0x4, 0xd, 0xffffff21, 0x8, 0x1}}, @svc={0x122, 0x40, {0x60034f6, [0xfffffffffffffffd, 0x6, 0x3, 0xfffffffffffffff2, 0xb]}}, @code={0xa, 0x9c, {"e0cc96d200c0b0f2010080d2020080d2c30080d2040080d2020000d4007008d5c0f387d20060b8f2010080d2020180d2830080d2040080d2020000d4007008d5000028d50088a10e007c200e00b69cd200e0b0f2610080d2820080d2630080d2640180d2020000d4007008d5e0859ad200c0b0f2810080d2e20080d2030180d2e40180d2020000d4"}}, @its_send_cmd={0xaa, 0x28, {0x4, 0x0, 0x2, 0x6, 0xa0, 0x37d, 0x1}}, @uexit={0x0, 0x18, 0x8000000000000000}, @its_send_cmd={0xaa, 0x28, {0xd, 0x0, 0x1, 0x2, 0x6, 0x4}}, @uexit={0x0, 0x18, 0xe}, @msr={0x14, 0x20, {0x603000000013c4ca, 0x401}}, @svc={0x122, 0x40, {0xc5000020, [0x80, 0x4, 0x80000001, 0xddf3, 0xffffffffffffffff]}}, @smc={0x1e, 0x40, {0x8400000b, [0x106daf79, 0x1000, 0x81, 0xb]}}, @msr={0x14, 0x20, {0x603000000013df68, 0xb0}}], 0x4ac}, &(0x7f00000016c0)=[@featur1={0x1, 0x94}], 0x1) r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000001840)={0x0, &(0x7f0000001700)=[@code={0xa, 0xcc, {"602c8ed20080b8f2c10180d2220080d2630180d2840080d2020000d4000008d5403a8fd20060b8f2410080d2220080d2a30180d2040080d2020000d4c01186d20020b8f2810180d2c20180d2a30180d2640180d2020000d4000008d5e0e18ed20000b8f2c10080d2420080d2230080d2c40180d2020000d4a02081d20060b0f2410080d2820080d2630080d2a40180d2020000d4000028d5007008d520b690d20080b0f2a10180d2020080d2430080d2640180d2020000d4"}}, @svc={0x122, 0x40, {0x84000013, [0xe30, 0x4, 0x5, 0x70000000, 0x4]}}, @its_send_cmd={0xaa, 0x28, {0xa, 0x1, 0x1, 0xd, 0xfff, 0x5, 0x2}}], 0x134}, &(0x7f0000001880), 0x1) syz_kvm_setup_cpu$arm64(r7, r10, &(0x7f0000bfd000/0x400000)=nil, &(0x7f0000001d00)=[{0x0, &(0x7f00000018c0)=[@memwrite={0x6e, 0x30, @generic={0xe28db9a91fda39d4, 0xfce, 0x93, 0x4}}, @hvc={0x32, 0x40, {0x8000, [0x2000000, 0x6, 0x1, 0x7fff, 0x2]}}, @hvc={0x32, 0x40, {0x84000007, [0xfffffffffffffffa, 0x60de3e6c, 0x3, 0xf, 0x173]}}, @irq_setup={0x46, 0x18, {0x0, 0x1af}}, @eret={0xe6, 0x18, 0x8000000000000000}, @mrs={0xbe, 0x18, {0x603000000013803d}}, @msr={0x14, 0x20, {0x603000000013c2c0, 0x6}}, @svc={0x122, 0x40, {0xc4000010, [0xffff, 0x2, 0xce, 0x4, 0xa]}}, @its_send_cmd={0xaa, 0x28, {0xe, 0x1, 0x4, 0x6, 0x400, 0x2, 0x4}}, @svc={0x122, 0x40, {0x3200005f, [0xd, 0x80000001, 0x10, 0x1, 0x8]}}, @mrs={0xbe, 0x18, {0x603000000013deff}}, @its_setup={0x82, 0x28, {0x0, 0x4, 0xf2}}, @msr={0x14, 0x20, {0x603000000013f089, 0x5}}, @its_setup={0x82, 0x28, {0x1, 0x2, 0x17b}}, @irq_setup={0x46, 0x18, {0x0, 0x123}}, @irq_setup={0x46, 0x18, {0x0, 0x2b3}}, @svc={0x122, 0x40, {0x200, [0x1, 0x100000000, 0x5, 0xc, 0x6]}}, @hvc={0x32, 0x40, {0x8, [0x2, 0x7f, 0x7, 0x1, 0x605d8ebc]}}, @eret={0xe6, 0x18, 0x9}, @its_setup={0x82, 0x28, {0x0, 0x1, 0x2a}}, @irq_setup={0x46, 0x18, {0x3, 0x303}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80c0000, 0xffe8, 0x6, 0x8}}, @hvc={0x32, 0x40, {0xc4000012, [0xffffffff00000001, 0xc70, 0x0, 0x3, 0xf5f5]}}, @eret={0xe6, 0x18, 0x1}, @its_setup={0x82, 0x28, {0x4, 0x4, 0x217}}, @eret={0xe6, 0x18, 0x3}], 0x418}], 0x1, 0x0, &(0x7f0000001d40)=[@featur1={0x1, 0x44}], 0x1) r11 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_ARM_VCPU_INIT(r11, 0x4020aeae, &(0x7f0000001d80)={0x1}) 51.628891998s ago: executing program 7 (id=743): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8a902, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34) ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f00000005c0)={0xb6, 0x0, 0x4}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000b80)={0x0, &(0x7f0000000100)=[@msr={0x14, 0x20, {0x603000000013dee7, 0x4e}}, @its_send_cmd={0xaa, 0x28, {0x5, 0x1, 0x4, 0x9, 0x4, 0x9, 0x2}}, @mrs={0xbe, 0x18, {0x603000000013df42}}, @code={0xa, 0x84, {"00b580d20060b0f2410180d2420180d2e30180d2440180d2020000d4007008d5801d82d20000b8f2810080d2220080d2430180d2a40180d2020000d40060800c000008d560ee82d20060b8f2610080d2420080d2230080d2840080d2020000d4000028d5007008d5008000880014007f"}}, @hvc={0x32, 0x40, {0x80000001, [0x3, 0x2, 0x3, 0x1, 0x3]}}, @smc={0x1e, 0x40, {0x2, [0xed, 0x9, 0x0, 0x3, 0x867]}}, @svc={0x122, 0x40, {0xc5000021, [0x2eb3, 0x6, 0x0, 0x9, 0xffffffffffffff81]}}, @eret={0xe6, 0x18, 0x6}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x400, 0x10000, 0x3}}, @eret={0xe6, 0x18, 0x8}, @svc={0x122, 0x40, {0x800, [0x1, 0x8, 0x8, 0x6, 0xfffffffffffffffe]}}, @its_setup={0x82, 0x28, {0x4, 0x4, 0xaa}}, @code={0xa, 0xb4, {"0000271ee0ca83d20060b0f2210080d2a20180d2630180d2040180d2020000d4008008d5008a9bd20080b0f2a10080d2420080d2830180d2040080d2020000d400fc209b008008d5e09682d20060b8f2210180d2220180d2a30180d2c40080d2020000d420688bd20020b8f2010180d2220080d2c30180d2840180d2020000d400f685d200e0b8f2c10080d2020080d2e30180d2040180d2020000d400b8217e"}}, @uexit={0x0, 0x18, 0x6}, @irq_setup={0x46, 0x18, {0x2, 0x30f}}, @svc={0x122, 0x40, {0xc400000c, [0x1, 0x100000001, 0x8, 0x8001, 0x80]}}, @smc={0x1e, 0x40, {0x4, [0x9, 0x25f, 0x3, 0x4, 0x4]}}, @hvc={0x32, 0x40, {0xc4000014, [0x3c1, 0x4, 0x1, 0x9, 0x9]}}, @its_send_cmd={0xaa, 0x28, {0x0, 0x1, 0x2, 0x9, 0x7, 0x2, 0x1}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x1, 0x3, 0x9, 0x1, 0x10000}}, @msr={0x14, 0x20, {0x603000000013801d, 0xd}}, @hvc={0x32, 0x40, {0x1000, [0x1d2, 0x3, 0x930, 0x6, 0x9a74]}}], 0x4c0}, &(0x7f0000000bc0)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) munmap(&(0x7f0000fe8000/0x4000)=nil, 0x4000) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000080)=@attr_arm64={0x0, 0x6}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8a902, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34) (async) ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f00000005c0)={0xb6, 0x0, 0x4}) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) (async) syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000b80)={0x0, &(0x7f0000000100)=[@msr={0x14, 0x20, {0x603000000013dee7, 0x4e}}, @its_send_cmd={0xaa, 0x28, {0x5, 0x1, 0x4, 0x9, 0x4, 0x9, 0x2}}, @mrs={0xbe, 0x18, {0x603000000013df42}}, @code={0xa, 0x84, {"00b580d20060b0f2410180d2420180d2e30180d2440180d2020000d4007008d5801d82d20000b8f2810080d2220080d2430180d2a40180d2020000d40060800c000008d560ee82d20060b8f2610080d2420080d2230080d2840080d2020000d4000028d5007008d5008000880014007f"}}, @hvc={0x32, 0x40, {0x80000001, [0x3, 0x2, 0x3, 0x1, 0x3]}}, @smc={0x1e, 0x40, {0x2, [0xed, 0x9, 0x0, 0x3, 0x867]}}, @svc={0x122, 0x40, {0xc5000021, [0x2eb3, 0x6, 0x0, 0x9, 0xffffffffffffff81]}}, @eret={0xe6, 0x18, 0x6}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x400, 0x10000, 0x3}}, @eret={0xe6, 0x18, 0x8}, @svc={0x122, 0x40, {0x800, [0x1, 0x8, 0x8, 0x6, 0xfffffffffffffffe]}}, @its_setup={0x82, 0x28, {0x4, 0x4, 0xaa}}, @code={0xa, 0xb4, {"0000271ee0ca83d20060b0f2210080d2a20180d2630180d2040180d2020000d4008008d5008a9bd20080b0f2a10080d2420080d2830180d2040080d2020000d400fc209b008008d5e09682d20060b8f2210180d2220180d2a30180d2c40080d2020000d420688bd20020b8f2010180d2220080d2c30180d2840180d2020000d400f685d200e0b8f2c10080d2020080d2e30180d2040180d2020000d400b8217e"}}, @uexit={0x0, 0x18, 0x6}, @irq_setup={0x46, 0x18, {0x2, 0x30f}}, @svc={0x122, 0x40, {0xc400000c, [0x1, 0x100000001, 0x8, 0x8001, 0x80]}}, @smc={0x1e, 0x40, {0x4, [0x9, 0x25f, 0x3, 0x4, 0x4]}}, @hvc={0x32, 0x40, {0xc4000014, [0x3c1, 0x4, 0x1, 0x9, 0x9]}}, @its_send_cmd={0xaa, 0x28, {0x0, 0x1, 0x2, 0x9, 0x7, 0x2, 0x1}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x1, 0x3, 0x9, 0x1, 0x10000}}, @msr={0x14, 0x20, {0x603000000013801d, 0xd}}, @hvc={0x32, 0x40, {0x1000, [0x1d2, 0x3, 0x930, 0x6, 0x9a74]}}], 0x4c0}, &(0x7f0000000bc0)=[@featur1={0x1, 0x4}], 0x1) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) munmap(&(0x7f0000fe8000/0x4000)=nil, 0x4000) (async) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000080)=@attr_arm64={0x0, 0x6}) (async) 10.318676332s ago: executing program 39 (id=742): r0 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000000)=[@uexit={0x0, 0x18, 0x7f}, @eret={0xe6, 0x18, 0xffff}, @msr={0x14, 0x20, {0x0, 0xa2}}, @uexit={0x0, 0x18, 0x2}], 0x68}, &(0x7f00000000c0)=[@featur1={0x1, 0x20}], 0x1) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r0, 0x4018aee3, &(0x7f0000000140)=@attr_other={0x0, 0x80000000, 0x0, &(0x7f0000000100)=0xffff}) ioctl$KVM_ARM_PREFERRED_TARGET(r0, 0x8020aeaf, &(0x7f0000000180)) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, &(0x7f00000001c0)={0x3, 0x8}) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r0, 0x4018aee3, &(0x7f0000000240)=@attr_irq_timer={0x0, 0x1, 0x0, &(0x7f0000000200)=0x11}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x22) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000280)={0x54000, 0xfec02000, 0x8, 0x1, 0xfffffff8}) ioctl$KVM_SET_SREGS(r0, 0x4000ae84, &(0x7f00000002c0)={{0x26000, 0x9000, 0xe, 0x2, 0x2, 0x80, 0x1, 0x7f, 0x8, 0x5, 0xbb, 0x2}, {0x0, 0x70000, 0x4, 0xd3, 0x3, 0x7, 0xf9, 0x8, 0x6, 0x2, 0x6, 0x6}, {0x60000, 0xeeee8000, 0x0, 0x81, 0x3, 0x8, 0xf7, 0x9, 0xa, 0xe, 0x1, 0x6}, {0x70000, 0xdddd1000, 0xb, 0x35, 0xb, 0x6, 0x7, 0x0, 0x8, 0x9, 0x0, 0x2}, {0x2, 0x2, 0x4, 0x1, 0x3, 0xe, 0x6, 0x7, 0x0, 0xe, 0xe, 0xb7}, {0x6000, 0x70000, 0xb, 0x10, 0x39, 0x13, 0x6, 0x80, 0x1, 0x2, 0x0, 0x80}, {0xfec00000, 0x54000, 0x8, 0x0, 0x7, 0x85, 0x40, 0x2, 0x4, 0x5, 0x3, 0x5c}, {0xeeee8000, 0x4, 0xa, 0x8, 0x2, 0xa, 0x9, 0x6, 0x1, 0x1, 0x8, 0xc0}, {0xa000, 0x2}, {0xeeee8000, 0x8}, 0x20, 0x0, 0x10000, 0x100002, 0xe, 0x8100, 0x4, [0x7, 0x6, 0x4aa00000, 0x7fff]}) r2 = mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x0, 0x9, 0x2010, r0, 0x0) munmap$KVM_VCPU(r2, 0x72bf) ioctl$KVM_GET_REG_LIST(r0, 0xc008aeb0, &(0x7f0000000400)={0x2, [0x5, 0x40]}) r3 = eventfd2(0x7fffffff, 0x1) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000440)={0x5, 0xf000, 0x0, r3, 0x4}) r4 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000a80)={0x0, &(0x7f0000000480)=[@svc={0x122, 0x40, {0x80000001, [0x1, 0x88, 0x0, 0x7, 0x1]}}, @msr={0x14, 0x20, {0x603000000013e65d, 0x4db5de11}}, @mrs={0xbe, 0x18, {0x603000000013dee8}}, @code={0xa, 0x54, {"00609f0d007008d5007008d5007008d5007008d5008008d520ac83d20020b0f2e10180d2020080d2030180d2240180d2020000d40020df0d000008d5007008d5"}}, @msr={0x14, 0x20, {0x603000000013e6df, 0x100000001}}, @its_setup={0x82, 0x28, {0x3, 0x1, 0x255}}, @its_setup={0x82, 0x28, {0x1, 0x1, 0x8d}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x1, 0x1, 0x8, 0x1000000, 0x4b, 0x4}}, @smc={0x1e, 0x40, {0x4985c1ab2b0d9dc, [0x1, 0xffffffffffffff58, 0xfffffffffffffa3f, 0x3, 0x7]}}, @its_setup={0x82, 0x28, {0x0, 0x4, 0x2eb}}, @uexit={0x0, 0x18, 0x10}, @smc={0x1e, 0x40, {0x1, [0x47, 0x6dd, 0x6, 0x1d727471, 0x3]}}, @smc={0x1e, 0x40, {0xc700ff1b, [0x10000, 0x8001, 0x6, 0x4, 0x4]}}, @code={0xa, 0x84, {"c02a97d20040b0f2e10180d2c20080d2630180d2440180d2020000d4c0638cd20080b8f2610180d2a20180d2430080d2e40180d2020000d41f0000ab0030206ec0199ad20060b0f2210180d2420180d2a30180d2640180d2020000d400b0200e000000ab000028d5000008d5000028d5"}}, @uexit={0x0, 0x18}, @svc={0x122, 0x40, {0xc400000e, [0x9, 0x8001, 0x8000000000000000, 0xa, 0x10001]}}, @uexit={0x0, 0x18}, @hvc={0x32, 0x40, {0xc4000004, [0x9, 0x1, 0x8, 0x1, 0x65]}}, @mrs={0xbe, 0x18, {0x603000000013e65a}}, @code={0xa, 0xcc, {"0028000e00ad90d200e0b8f2010180d2620080d2430080d2a40080d2020000d400a0004fa0d985d20000b8f2a10180d2220180d2430180d2440180d2020000d4000008d5208c84d200c0b8f2a10080d2220080d2030080d2040180d2020000d4007008d5a09296d20080b8f2c10080d2c20180d2830180d2440180d2020000d440af82d20000b0f2a10080d2620080d2430080d2240080d2020000d460ac90d200c0b8f2e10080d2820180d2230080d2440080d2020000d4"}}, @its_setup={0x82, 0x28, {0x0, 0x1, 0x395}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x1, 0x3, 0x5, 0xc, 0x7}}, @uexit={0x0, 0x18, 0x3}, @msr={0x14, 0x20, {0x603000000013e110, 0xa00000}}, @smc={0x1e, 0x40, {0x8400000f, [0x1, 0xfffffffffffffffb, 0x3, 0x6, 0xf32]}}, @memwrite={0x6e, 0x30, @generic={0x33000, 0x713, 0xfffffffffffffffa, 0xb}}, @msr={0x14, 0x20, {0x603000000013e682, 0x3}}, @irq_setup={0x46, 0x18, {0x0, 0x312}}, @eret={0xe6, 0x18, 0x69}, @its_setup={0x82, 0x28, {0x2, 0x2, 0x25a}}], 0x5ec}, &(0x7f0000000ac0)=[@featur2={0x1, 0x40}], 0x1) ioctl$KVM_SET_SREGS(r4, 0x4000ae84, &(0x7f0000000b00)={{0x9000, 0xffff1000, 0xe, 0xfe, 0x1, 0x2, 0x8, 0x1, 0xba, 0x6, 0x4, 0x8}, {0xeeee0001, 0x10000, 0x3, 0x82, 0x0, 0xf9, 0x0, 0xc, 0x5, 0xfb, 0x9, 0xd}, {0xd000, 0x30000, 0xc, 0x9, 0x8, 0x8, 0x40, 0x12, 0x3, 0xe, 0xe, 0x8}, {0xeeef0000, 0x9000, 0xd, 0x71, 0x2, 0x9, 0x5b, 0x8, 0x8, 0x0, 0x76}, {0x8000000, 0x0, 0xe, 0x1, 0x8, 0x0, 0xd, 0x75, 0x3, 0x4, 0x1, 0x9}, {0xe000, 0x200000, 0xa, 0x0, 0xa6, 0x81, 0x6, 0x9, 0x9, 0x40, 0x81, 0x5}, {0x3000, 0x200000, 0x8, 0x8, 0x2, 0x0, 0x8, 0x4, 0x8, 0x8, 0x2b}, {0x80a0000, 0xffff1000, 0x69406e9bd82491e9, 0x7, 0xe, 0x3, 0x5, 0x0, 0x0, 0x6, 0x0, 0xf7}, {0xc000, 0xab}, {0x0, 0x8}, 0x40040000, 0x0, 0x70000, 0x70117, 0xb, 0x800, 0x1, [0x8, 0x9, 0x6]}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000c40), 0x80, 0x0) r6 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000001040)={0x0, &(0x7f0000000c80)=[@eret={0xe6, 0x18, 0xa}, @its_send_cmd={0xaa, 0x28, {0x1, 0x3, 0x2, 0xa, 0x715, 0x40, 0x4}}, @svc={0x122, 0x40, {0xaf344122446cf39, [0x8c, 0x0, 0x401, 0x0, 0x7]}}, @msr={0x14, 0x20, {0x603000000013f528, 0x400}}, @msr={0x14, 0x20, {0x603000000013df54, 0x8}}, @eret={0xe6, 0x18, 0xadda}, @memwrite={0x6e, 0x30, @generic={0xdddd1000, 0x139, 0x6, 0x2}}, @smc={0x1e, 0x40, {0xc4000053, [0x1, 0x6, 0x7, 0x8000000, 0xf]}}, @uexit={0x0, 0x18, 0xfff}, @code={0xa, 0xb4, {"805795d20000b8f2e10080d2820180d2430080d2e40080d2020000d4007008d540e594d20000b0f2010180d2c20080d2c30180d2c40180d2020000d480009ed20020b0f2c10080d2220180d2830180d2e40080d2020000d4007008d5c0a68ad20060b8f2810180d2220080d2c30180d2e40180d2020000d400dc205e008008d5007008d5406090d20040b0f2610080d2020180d2430080d2440080d2020000d4"}}, @smc={0x1e, 0x40, {0xf2000007, [0x2aeb0266, 0x3, 0x1, 0x8, 0x1255]}}, @irq_setup={0x46, 0x18, {0x0, 0x27}}, @msr={0x14, 0x20, {0x603000000013f300, 0x8}}, @uexit={0x0, 0x18, 0x8}, @smc={0x1e, 0x40, {0x0, [0x7, 0x2, 0x3, 0x100]}}, @smc={0x1e, 0x40, {0xc4000014, [0x3, 0x1, 0x10, 0xc, 0x86]}}, @svc={0x122, 0x40, {0x40000000, [0xb4, 0x0, 0x8000000000000000, 0x9, 0x8]}}, @msr={0x14, 0x20, {0x603000000013805e, 0x1}}], 0x384}, &(0x7f0000001080)=[@featur2={0x1, 0x5}], 0x1) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000010c0)={0xa}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_INTERRUPT(r6, 0x4004ae86, &(0x7f0000001100)=0x3) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x32) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000001140)=@x86={0x5, 0xbb, 0x4f, 0x0, 0x4, 0xcd, 0x0, 0x1, 0x3, 0xf0, 0x8, 0x6, 0x0, 0x9, 0x8, 0x1, 0x4, 0x3, 0xc3, '\x00', 0x9, 0x6}) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f0000001180)=@arm64={0x7, 0xfa, 0x4, '\x00', 0x8}) r9 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r9, &(0x7f0000001680)={0x0, &(0x7f00000011c0)=[@eret={0xe6, 0x18, 0x6}, @its_setup={0x82, 0x28, {0x1, 0x1, 0x41}}, @code={0xa, 0x9c, {"e0ed87d200c0b0f2e10180d2a20180d2a30080d2240080d2020000d40300a0d4000c00780008200e0004c038005c94d20020b8f2210080d2620180d2230180d2e40180d2020000d4c08e83d20040b8f2210180d2a20180d2030080d2c40180d2020000d40000429ee01b9ed20060b8f2010180d2420080d2630080d2c40180d2020000d4007008d5"}}, @mrs={0xbe, 0x18, {0x5f32}}, @svc={0x122, 0x40, {0x0, [0x9, 0x6, 0x1, 0xbf3, 0x5]}}, @hvc={0x32, 0x40, {0x84000003, [0xf, 0x6, 0x1200000, 0xfffffffffffffffb, 0x612]}}, @code={0xa, 0xb4, {"000028d5007008d5000028d540db84d20060b0f2810180d2620080d2030180d2440080d2020000d4c09f98d20060b0f2a10180d2420080d2230080d2a40080d2020000d420ba92d20080b8f2810080d2a20080d2e30180d2a40180d2020000d4600d82d20060b8f2210080d2820080d2630080d2a40080d2020000d40008403a204482d20040b8f2610080d2c20180d2630080d2240180d2020000d4008008d5"}}, @hvc={0x32, 0x40, {0x84000009, [0x2, 0x7, 0xc3a, 0x0, 0x4]}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x0, 0x4, 0xd, 0xffffff21, 0x8, 0x1}}, @svc={0x122, 0x40, {0x60034f6, [0xfffffffffffffffd, 0x6, 0x3, 0xfffffffffffffff2, 0xb]}}, @code={0xa, 0x9c, {"e0cc96d200c0b0f2010080d2020080d2c30080d2040080d2020000d4007008d5c0f387d20060b8f2010080d2020180d2830080d2040080d2020000d4007008d5000028d50088a10e007c200e00b69cd200e0b0f2610080d2820080d2630080d2640180d2020000d4007008d5e0859ad200c0b0f2810080d2e20080d2030180d2e40180d2020000d4"}}, @its_send_cmd={0xaa, 0x28, {0x4, 0x0, 0x2, 0x6, 0xa0, 0x37d, 0x1}}, @uexit={0x0, 0x18, 0x8000000000000000}, @its_send_cmd={0xaa, 0x28, {0xd, 0x0, 0x1, 0x2, 0x6, 0x4}}, @uexit={0x0, 0x18, 0xe}, @msr={0x14, 0x20, {0x603000000013c4ca, 0x401}}, @svc={0x122, 0x40, {0xc5000020, [0x80, 0x4, 0x80000001, 0xddf3, 0xffffffffffffffff]}}, @smc={0x1e, 0x40, {0x8400000b, [0x106daf79, 0x1000, 0x81, 0xb]}}, @msr={0x14, 0x20, {0x603000000013df68, 0xb0}}], 0x4ac}, &(0x7f00000016c0)=[@featur1={0x1, 0x94}], 0x1) r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000001840)={0x0, &(0x7f0000001700)=[@code={0xa, 0xcc, {"602c8ed20080b8f2c10180d2220080d2630180d2840080d2020000d4000008d5403a8fd20060b8f2410080d2220080d2a30180d2040080d2020000d4c01186d20020b8f2810180d2c20180d2a30180d2640180d2020000d4000008d5e0e18ed20000b8f2c10080d2420080d2230080d2c40180d2020000d4a02081d20060b0f2410080d2820080d2630080d2a40180d2020000d4000028d5007008d520b690d20080b0f2a10180d2020080d2430080d2640180d2020000d4"}}, @svc={0x122, 0x40, {0x84000013, [0xe30, 0x4, 0x5, 0x70000000, 0x4]}}, @its_send_cmd={0xaa, 0x28, {0xa, 0x1, 0x1, 0xd, 0xfff, 0x5, 0x2}}], 0x134}, &(0x7f0000001880), 0x1) syz_kvm_setup_cpu$arm64(r7, r10, &(0x7f0000bfd000/0x400000)=nil, &(0x7f0000001d00)=[{0x0, &(0x7f00000018c0)=[@memwrite={0x6e, 0x30, @generic={0xe28db9a91fda39d4, 0xfce, 0x93, 0x4}}, @hvc={0x32, 0x40, {0x8000, [0x2000000, 0x6, 0x1, 0x7fff, 0x2]}}, @hvc={0x32, 0x40, {0x84000007, [0xfffffffffffffffa, 0x60de3e6c, 0x3, 0xf, 0x173]}}, @irq_setup={0x46, 0x18, {0x0, 0x1af}}, @eret={0xe6, 0x18, 0x8000000000000000}, @mrs={0xbe, 0x18, {0x603000000013803d}}, @msr={0x14, 0x20, {0x603000000013c2c0, 0x6}}, @svc={0x122, 0x40, {0xc4000010, [0xffff, 0x2, 0xce, 0x4, 0xa]}}, @its_send_cmd={0xaa, 0x28, {0xe, 0x1, 0x4, 0x6, 0x400, 0x2, 0x4}}, @svc={0x122, 0x40, {0x3200005f, [0xd, 0x80000001, 0x10, 0x1, 0x8]}}, @mrs={0xbe, 0x18, {0x603000000013deff}}, @its_setup={0x82, 0x28, {0x0, 0x4, 0xf2}}, @msr={0x14, 0x20, {0x603000000013f089, 0x5}}, @its_setup={0x82, 0x28, {0x1, 0x2, 0x17b}}, @irq_setup={0x46, 0x18, {0x0, 0x123}}, @irq_setup={0x46, 0x18, {0x0, 0x2b3}}, @svc={0x122, 0x40, {0x200, [0x1, 0x100000000, 0x5, 0xc, 0x6]}}, @hvc={0x32, 0x40, {0x8, [0x2, 0x7f, 0x7, 0x1, 0x605d8ebc]}}, @eret={0xe6, 0x18, 0x9}, @its_setup={0x82, 0x28, {0x0, 0x1, 0x2a}}, @irq_setup={0x46, 0x18, {0x3, 0x303}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80c0000, 0xffe8, 0x6, 0x8}}, @hvc={0x32, 0x40, {0xc4000012, [0xffffffff00000001, 0xc70, 0x0, 0x3, 0xf5f5]}}, @eret={0xe6, 0x18, 0x1}, @its_setup={0x82, 0x28, {0x4, 0x4, 0x217}}, @eret={0xe6, 0x18, 0x3}], 0x418}], 0x1, 0x0, &(0x7f0000001d40)=[@featur1={0x1, 0x44}], 0x1) r11 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_ARM_VCPU_INIT(r11, 0x4020aeae, &(0x7f0000001d80)={0x1}) 0s ago: executing program 40 (id=743): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8a902, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34) ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f00000005c0)={0xb6, 0x0, 0x4}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000b80)={0x0, &(0x7f0000000100)=[@msr={0x14, 0x20, {0x603000000013dee7, 0x4e}}, @its_send_cmd={0xaa, 0x28, {0x5, 0x1, 0x4, 0x9, 0x4, 0x9, 0x2}}, @mrs={0xbe, 0x18, {0x603000000013df42}}, @code={0xa, 0x84, {"00b580d20060b0f2410180d2420180d2e30180d2440180d2020000d4007008d5801d82d20000b8f2810080d2220080d2430180d2a40180d2020000d40060800c000008d560ee82d20060b8f2610080d2420080d2230080d2840080d2020000d4000028d5007008d5008000880014007f"}}, @hvc={0x32, 0x40, {0x80000001, [0x3, 0x2, 0x3, 0x1, 0x3]}}, @smc={0x1e, 0x40, {0x2, [0xed, 0x9, 0x0, 0x3, 0x867]}}, @svc={0x122, 0x40, {0xc5000021, [0x2eb3, 0x6, 0x0, 0x9, 0xffffffffffffff81]}}, @eret={0xe6, 0x18, 0x6}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x400, 0x10000, 0x3}}, @eret={0xe6, 0x18, 0x8}, @svc={0x122, 0x40, {0x800, [0x1, 0x8, 0x8, 0x6, 0xfffffffffffffffe]}}, @its_setup={0x82, 0x28, {0x4, 0x4, 0xaa}}, @code={0xa, 0xb4, {"0000271ee0ca83d20060b0f2210080d2a20180d2630180d2040180d2020000d4008008d5008a9bd20080b0f2a10080d2420080d2830180d2040080d2020000d400fc209b008008d5e09682d20060b8f2210180d2220180d2a30180d2c40080d2020000d420688bd20020b8f2010180d2220080d2c30180d2840180d2020000d400f685d200e0b8f2c10080d2020080d2e30180d2040180d2020000d400b8217e"}}, @uexit={0x0, 0x18, 0x6}, @irq_setup={0x46, 0x18, {0x2, 0x30f}}, @svc={0x122, 0x40, {0xc400000c, [0x1, 0x100000001, 0x8, 0x8001, 0x80]}}, @smc={0x1e, 0x40, {0x4, [0x9, 0x25f, 0x3, 0x4, 0x4]}}, @hvc={0x32, 0x40, {0xc4000014, [0x3c1, 0x4, 0x1, 0x9, 0x9]}}, @its_send_cmd={0xaa, 0x28, {0x0, 0x1, 0x2, 0x9, 0x7, 0x2, 0x1}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x1, 0x3, 0x9, 0x1, 0x10000}}, @msr={0x14, 0x20, {0x603000000013801d, 0xd}}, @hvc={0x32, 0x40, {0x1000, [0x1d2, 0x3, 0x930, 0x6, 0x9a74]}}], 0x4c0}, &(0x7f0000000bc0)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) munmap(&(0x7f0000fe8000/0x4000)=nil, 0x4000) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000080)=@attr_arm64={0x0, 0x6}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8a902, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34) (async) ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f00000005c0)={0xb6, 0x0, 0x4}) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) (async) syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000b80)={0x0, &(0x7f0000000100)=[@msr={0x14, 0x20, {0x603000000013dee7, 0x4e}}, @its_send_cmd={0xaa, 0x28, {0x5, 0x1, 0x4, 0x9, 0x4, 0x9, 0x2}}, @mrs={0xbe, 0x18, {0x603000000013df42}}, @code={0xa, 0x84, {"00b580d20060b0f2410180d2420180d2e30180d2440180d2020000d4007008d5801d82d20000b8f2810080d2220080d2430180d2a40180d2020000d40060800c000008d560ee82d20060b8f2610080d2420080d2230080d2840080d2020000d4000028d5007008d5008000880014007f"}}, @hvc={0x32, 0x40, {0x80000001, [0x3, 0x2, 0x3, 0x1, 0x3]}}, @smc={0x1e, 0x40, {0x2, [0xed, 0x9, 0x0, 0x3, 0x867]}}, @svc={0x122, 0x40, {0xc5000021, [0x2eb3, 0x6, 0x0, 0x9, 0xffffffffffffff81]}}, @eret={0xe6, 0x18, 0x6}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x400, 0x10000, 0x3}}, @eret={0xe6, 0x18, 0x8}, @svc={0x122, 0x40, {0x800, [0x1, 0x8, 0x8, 0x6, 0xfffffffffffffffe]}}, @its_setup={0x82, 0x28, {0x4, 0x4, 0xaa}}, @code={0xa, 0xb4, {"0000271ee0ca83d20060b0f2210080d2a20180d2630180d2040180d2020000d4008008d5008a9bd20080b0f2a10080d2420080d2830180d2040080d2020000d400fc209b008008d5e09682d20060b8f2210180d2220180d2a30180d2c40080d2020000d420688bd20020b8f2010180d2220080d2c30180d2840180d2020000d400f685d200e0b8f2c10080d2020080d2e30180d2040180d2020000d400b8217e"}}, @uexit={0x0, 0x18, 0x6}, @irq_setup={0x46, 0x18, {0x2, 0x30f}}, @svc={0x122, 0x40, {0xc400000c, [0x1, 0x100000001, 0x8, 0x8001, 0x80]}}, @smc={0x1e, 0x40, {0x4, [0x9, 0x25f, 0x3, 0x4, 0x4]}}, @hvc={0x32, 0x40, {0xc4000014, [0x3c1, 0x4, 0x1, 0x9, 0x9]}}, @its_send_cmd={0xaa, 0x28, {0x0, 0x1, 0x2, 0x9, 0x7, 0x2, 0x1}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x1, 0x3, 0x9, 0x1, 0x10000}}, @msr={0x14, 0x20, {0x603000000013801d, 0xd}}, @hvc={0x32, 0x40, {0x1000, [0x1d2, 0x3, 0x930, 0x6, 0x9a74]}}], 0x4c0}, &(0x7f0000000bc0)=[@featur1={0x1, 0x4}], 0x1) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) munmap(&(0x7f0000fe8000/0x4000)=nil, 0x4000) (async) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000080)=@attr_arm64={0x0, 0x6}) (async) kernel console output (not intermixed with test programs): [ 356.968271][ T24] audit: type=1400 audit(356.130:74): avc: denied { read } for pid=3210 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 363.402134][ T24] audit: type=1400 audit(362.580:75): avc: denied { write } for pid=3265 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 367.540529][ T24] audit: type=1400 audit(366.720:76): avc: denied { write } for pid=3268 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 370.051467][ T3210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.688483][ T24] audit: type=1400 audit(375.860:77): avc: denied { write } for pid=3273 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 380.499212][ T24] audit: type=1400 audit(379.670:78): avc: denied { write } for pid=3276 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 391.437349][ T24] audit: type=1400 audit(390.600:79): avc: denied { write } for pid=3280 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 396.061613][ T24] audit: type=1400 audit(395.230:80): avc: denied { write } for pid=3283 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 407.213250][ T24] audit: type=1400 audit(406.390:81): avc: denied { write } for pid=3288 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 410.838161][ T24] audit: type=1400 audit(410.010:82): avc: denied { write } for pid=3291 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 413.133233][ T3210] eql: remember to turn off Van-Jacobson compression on your slave devices [ 422.047554][ T24] audit: type=1400 audit(421.180:83): avc: denied { write } for pid=3297 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 425.548690][ T24] audit: type=1400 audit(424.690:84): avc: denied { write } for pid=3300 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 436.652209][ T24] audit: type=1400 audit(435.830:85): avc: denied { write } for pid=3306 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 440.211508][ T24] audit: type=1400 audit(439.390:86): avc: denied { write } for pid=3309 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 450.674759][ T24] audit: type=1400 audit(449.850:87): avc: denied { write } for pid=3313 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 455.417066][ T24] audit: type=1400 audit(454.590:88): avc: denied { write } for pid=3316 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 461.018392][ T24] audit: type=1400 audit(460.190:89): avc: denied { write } for pid=3318 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 464.598232][ T24] audit: type=1400 audit(463.770:90): avc: denied { write } for pid=3321 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 471.918092][ T24] audit: type=1400 audit(471.090:91): avc: denied { write } for pid=3325 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 475.384517][ T24] audit: type=1400 audit(474.560:92): avc: denied { write } for pid=3328 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 494.091648][ T24] audit: type=1400 audit(493.270:93): avc: denied { write } for pid=3338 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 497.737600][ T24] audit: type=1400 audit(496.880:94): avc: denied { write } for pid=3341 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 505.967351][ T24] audit: type=1400 audit(505.140:95): avc: denied { write } for pid=3345 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 510.637799][ T24] audit: type=1400 audit(509.810:96): avc: denied { write } for pid=3348 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 521.679077][ T24] audit: type=1400 audit(520.850:97): avc: denied { write } for pid=3352 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 525.267453][ T24] audit: type=1400 audit(524.430:98): avc: denied { write } for pid=3355 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 534.951015][ T24] audit: type=1400 audit(534.130:99): avc: denied { write } for pid=3359 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 538.566997][ T24] audit: type=1400 audit(537.740:100): avc: denied { write } for pid=3362 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:50718' (ED25519) to the list of known hosts. [ 560.823194][ T24] audit: type=1400 audit(559.990:101): avc: denied { name_bind } for pid=3367 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 562.196821][ T24] audit: type=1400 audit(561.370:102): avc: denied { execute } for pid=3368 comm="sh" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 562.240258][ T24] audit: type=1400 audit(561.420:103): avc: denied { execute_no_trans } for pid=3368 comm="sh" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 590.364022][ T24] audit: type=1400 audit(589.540:104): avc: denied { mounton } for pid=3368 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 590.403781][ T24] audit: type=1400 audit(589.580:105): avc: denied { mount } for pid=3368 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 590.483516][ T3368] cgroup: Unknown subsys name 'net' [ 590.538773][ T24] audit: type=1400 audit(589.710:106): avc: denied { unmount } for pid=3368 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 590.923075][ T3368] cgroup: Unknown subsys name 'cpuset' [ 591.023111][ T3368] cgroup: Unknown subsys name 'rlimit' [ 591.793534][ T24] audit: type=1400 audit(590.970:107): avc: denied { setattr } for pid=3368 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 591.811697][ T24] audit: type=1400 audit(590.990:108): avc: denied { mounton } for pid=3368 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 591.834252][ T24] audit: type=1400 audit(591.010:109): avc: denied { mount } for pid=3368 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 592.769480][ T3371] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 592.785400][ T24] audit: type=1400 audit(591.960:110): avc: denied { relabelto } for pid=3371 comm="mkswap" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 592.812223][ T24] audit: type=1400 audit(591.990:111): avc: denied { write } for pid=3371 comm="mkswap" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 592.984656][ T24] audit: type=1400 audit(592.160:112): avc: denied { read } for pid=3368 comm="syz-executor" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 593.002373][ T24] audit: type=1400 audit(592.180:113): avc: denied { open } for pid=3368 comm="syz-executor" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 593.046751][ T3368] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 648.270281][ T24] audit: type=1400 audit(647.450:114): avc: denied { execmem } for pid=3372 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 651.625173][ T24] audit: type=1400 audit(650.800:116): avc: denied { open } for pid=3374 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 651.643189][ T24] audit: type=1400 audit(650.790:115): avc: denied { read } for pid=3375 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 651.710977][ T24] audit: type=1400 audit(650.870:117): avc: denied { mounton } for pid=3374 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 651.891269][ T24] audit: type=1400 audit(651.070:118): avc: denied { module_request } for pid=3374 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 651.918260][ T24] audit: type=1400 audit(651.090:119): avc: denied { module_request } for pid=3375 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 652.824257][ T24] audit: type=1400 audit(652.000:120): avc: denied { sys_module } for pid=3375 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 673.087521][ T3374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 673.327907][ T3374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 673.384850][ T3375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 673.829286][ T3375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 684.519272][ T3374] hsr_slave_0: entered promiscuous mode [ 684.547948][ T3374] hsr_slave_1: entered promiscuous mode [ 685.562389][ T3375] hsr_slave_0: entered promiscuous mode [ 685.602568][ T3375] hsr_slave_1: entered promiscuous mode [ 685.658385][ T3375] debugfs: 'hsr0' already exists in 'hsr' [ 685.663534][ T3375] Cannot create hsr debugfs directory [ 691.758976][ T24] audit: type=1400 audit(690.930:121): avc: denied { create } for pid=3374 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 691.877555][ T24] audit: type=1400 audit(690.960:122): avc: denied { write } for pid=3374 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 691.948670][ T24] audit: type=1400 audit(691.060:123): avc: denied { read } for pid=3374 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 692.130482][ T3374] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 692.402907][ T3374] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 692.569619][ T3374] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 692.910569][ T3374] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 693.059458][ T3374] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 693.284109][ T3374] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 693.609185][ T3374] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 693.790659][ T3374] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 695.841343][ T3375] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 696.014733][ T3375] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 696.312054][ T3375] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 696.489850][ T3375] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 696.569647][ T3375] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 696.731512][ T3375] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 696.824030][ T3375] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 696.965221][ T3375] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 709.170707][ T3374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 711.098690][ T3375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 754.798058][ T3374] veth0_vlan: entered promiscuous mode [ 755.304542][ T3374] veth1_vlan: entered promiscuous mode [ 757.780880][ T3375] veth0_vlan: entered promiscuous mode [ 758.531275][ T3374] veth0_macvtap: entered promiscuous mode [ 758.901042][ T3375] veth1_vlan: entered promiscuous mode [ 759.222344][ T3374] veth1_macvtap: entered promiscuous mode [ 762.128909][ T3375] veth0_macvtap: entered promiscuous mode [ 762.562732][ T3435] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.598976][ T3435] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.614178][ T3435] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.622140][ T3435] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.961482][ T3375] veth1_macvtap: entered promiscuous mode [ 765.822729][ T24] audit: type=1400 audit(765.000:124): avc: denied { mount } for pid=3374 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 766.128362][ T24] audit: type=1400 audit(765.190:125): avc: denied { mounton } for pid=3374 comm="syz-executor" path="/syzkaller.kZ77XY/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 766.333751][ T24] audit: type=1400 audit(765.510:126): avc: denied { mount } for pid=3374 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 766.795430][ T3453] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.800250][ T3453] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.840172][ T3453] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.843829][ T3453] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.954805][ T24] audit: type=1400 audit(766.130:127): avc: denied { mounton } for pid=3374 comm="syz-executor" path="/syzkaller.kZ77XY/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 767.158705][ T24] audit: type=1400 audit(766.330:128): avc: denied { mounton } for pid=3374 comm="syz-executor" path="/syzkaller.kZ77XY/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 767.675123][ T24] audit: type=1400 audit(766.810:129): avc: denied { unmount } for pid=3374 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 767.865462][ T24] audit: type=1400 audit(767.030:130): avc: denied { mounton } for pid=3374 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1544 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 768.007649][ T24] audit: type=1400 audit(767.180:131): avc: denied { mount } for pid=3374 comm="syz-executor" name="/" dev="gadgetfs" ino=3735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 768.276736][ T24] audit: type=1400 audit(767.450:132): avc: denied { mount } for pid=3374 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 768.390862][ T24] audit: type=1400 audit(767.560:133): avc: denied { mounton } for pid=3374 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 769.358156][ T3374] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 778.305341][ T24] kauditd_printk_skb: 4 callbacks suppressed [ 778.336764][ T24] audit: type=1400 audit(777.480:138): avc: denied { read } for pid=3525 comm="syz.1.2" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 778.389654][ T24] audit: type=1400 audit(777.560:139): avc: denied { open } for pid=3525 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 778.741409][ T24] audit: type=1400 audit(777.920:140): avc: denied { ioctl } for pid=3525 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 780.355045][ T24] audit: type=1400 audit(779.530:141): avc: denied { write } for pid=3525 comm="syz.1.2" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 809.440586][ T24] audit: type=1400 audit(808.570:142): avc: denied { execute } for pid=3543 comm="syz.1.8" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=4217 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 838.178024][ T24] audit: type=1400 audit(837.300:143): avc: denied { mmap_zero } for pid=3556 comm="syz.1.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 853.002018][ T24] audit: type=1400 audit(852.170:144): avc: denied { append } for pid=3571 comm="syz.0.17" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 855.742646][ T24] audit: type=1400 audit(854.900:145): avc: denied { ioctl } for pid=3571 comm="syz.0.17" path="net:[4026532628]" dev="nsfs" ino=4026532628 ioctlcmd=0xae46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 874.049900][ T24] audit: type=1400 audit(873.230:146): avc: denied { write } for pid=3583 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 882.849158][ T24] audit: type=1400 audit(882.010:147): avc: denied { write } for pid=3591 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 901.533599][ T24] audit: type=1400 audit(900.710:148): avc: denied { create } for pid=3599 comm="syz.0.26" anonclass=[kvm-gmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 901.692450][ T24] audit: type=1400 audit(900.820:149): avc: denied { map } for pid=3599 comm="syz.0.26" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=5267 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 901.726736][ T24] audit: type=1400 audit(900.890:150): avc: denied { read } for pid=3599 comm="syz.0.26" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=5267 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 934.239166][ T24] audit: type=1400 audit(933.340:151): avc: denied { setattr } for pid=3617 comm="syz.0.33" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1076.139543][ T24] audit: type=1400 audit(1075.310:152): avc: denied { execute } for pid=3709 comm="syz.0.66" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=7260 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1098.452457][ T24] audit: type=1400 audit(1097.630:153): avc: denied { execute } for pid=3723 comm="syz.0.72" path="/37/T" dev="tmpfs" ino=204 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1219.701960][ T3807] kvm [3807]: Failed to find VMA for hva 0x20c01000 [ 1360.561293][ T24] audit: type=1400 audit(1359.710:154): avc: denied { write } for pid=3899 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1369.881384][ T24] audit: type=1400 audit(1368.990:155): avc: denied { write } for pid=3909 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1425.452980][ T24] audit: type=1400 audit(1424.630:156): avc: denied { write } for pid=3952 comm="syz.0.145" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=11678 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1535.473914][ T4037] kvm [4037]: Failed to find VMA for hva 0x203b0000 [ 1653.788309][ T24] audit: type=1400 audit(1652.920:157): avc: denied { write } for pid=4108 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1659.887033][ T24] audit: type=1400 audit(1659.060:158): avc: denied { write } for pid=4116 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1719.483632][ C0] perf: interrupt took too long (17766 > 2500), lowering kernel.perf_event_max_sample_rate to 11200 [ 1732.276909][ T24] audit: type=1400 audit(1731.440:159): avc: denied { map } for pid=4154 comm="syz.0.208" path="pipe:[2718]" dev="pipefs" ino=2718 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1931.769714][ T24] audit: type=1400 audit(1930.860:160): avc: denied { write } for pid=4312 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1938.364582][ T24] audit: type=1400 audit(1937.500:161): avc: denied { write } for pid=4319 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1975.838252][ T4338] kvm [4338]: Failed to find VMA for hva 0x20c79000 [ 2015.468765][ T24] audit: type=1400 audit(2014.640:162): avc: denied { map } for pid=4363 comm="syz.1.267" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2015.502686][ T24] audit: type=1400 audit(2014.670:163): avc: denied { execute } for pid=4363 comm="syz.1.267" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2072.849192][ T4396] KVM: debugfs: duplicate directory 4396-4 [ 2373.375076][ T4586] kvm [4585]: Unsupported guest access at: eeef0000 [ 2373.375076][ T4586] { Op0( 2), Op1( 0), CRn( 0), CRm( 6), Op2( 2), func_read }, [ 2475.392281][ T31] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2476.435380][ T31] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2477.463070][ T31] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2478.327149][ T31] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2487.793332][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2487.881538][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2487.930487][ T31] bond0 (unregistering): Released all slaves [ 2489.118383][ T31] hsr_slave_0: left promiscuous mode [ 2489.180346][ T31] hsr_slave_1: left promiscuous mode [ 2489.647423][ T31] veth1_macvtap: left promiscuous mode [ 2489.651326][ T31] veth0_macvtap: left promiscuous mode [ 2489.668044][ T31] veth1_vlan: left promiscuous mode [ 2489.672343][ T31] veth0_vlan: left promiscuous mode [ 2505.590800][ T31] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2506.462070][ T31] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2507.192890][ T31] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2507.453971][ T24] audit: type=1400 audit(2506.620:164): avc: denied { write } for pid=4648 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2508.630366][ T31] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2512.525098][ T24] audit: type=1400 audit(2511.700:165): avc: denied { write } for pid=4652 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2522.858060][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2522.975330][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2523.052917][ T31] bond0 (unregistering): Released all slaves [ 2523.607109][ T3210] 8021q: adding VLAN 0 to HW filter on device eth1 [ 2525.141976][ T31] hsr_slave_0: left promiscuous mode [ 2525.266936][ T31] hsr_slave_1: left promiscuous mode [ 2525.988416][ T31] veth1_macvtap: left promiscuous mode [ 2525.999845][ T31] veth0_macvtap: left promiscuous mode [ 2526.019862][ T31] veth1_vlan: left promiscuous mode [ 2526.038225][ T31] veth0_vlan: left promiscuous mode [ 2539.968664][ T24] audit: type=1400 audit(2539.120:166): avc: denied { write } for pid=4667 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2543.141406][ T24] audit: type=1400 audit(2542.320:167): avc: denied { write } for pid=4675 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2549.864343][ T4621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2550.028995][ T4621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2552.537314][ T4625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2552.699976][ T4625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2553.288024][ T24] audit: type=1400 audit(2552.430:168): avc: denied { write } for pid=4690 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2557.397045][ T24] audit: type=1400 audit(2556.560:169): avc: denied { write } for pid=4698 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2560.053917][ T3210] 8021q: adding VLAN 0 to HW filter on device eth2 [ 2567.012459][ T4621] hsr_slave_0: entered promiscuous mode [ 2567.090720][ T4621] hsr_slave_1: entered promiscuous mode [ 2568.858173][ T24] audit: type=1400 audit(2568.010:170): avc: denied { write } for pid=4712 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2570.194738][ T4625] hsr_slave_0: entered promiscuous mode [ 2570.242124][ T4625] hsr_slave_1: entered promiscuous mode [ 2570.293176][ T4625] debugfs: 'hsr0' already exists in 'hsr' [ 2570.307234][ T4625] Cannot create hsr debugfs directory [ 2572.077312][ T24] audit: type=1400 audit(2571.250:171): avc: denied { write } for pid=4717 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2574.641652][ T3210] 8021q: adding VLAN 0 to HW filter on device eth3 [ 2581.854445][ T4621] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2582.415120][ T4621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2582.610043][ T4621] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2583.073130][ T4621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2583.104638][ T4621] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2583.364712][ T4621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2583.594419][ T4621] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2584.022836][ T4621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2586.741531][ T24] audit: type=1400 audit(2585.850:172): avc: denied { write } for pid=4724 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2588.284169][ T4625] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2588.645271][ T4625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2588.793238][ T4625] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2589.055252][ T4625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2589.217578][ T4625] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2589.461385][ T4625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2589.588100][ T4625] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2589.832277][ T4625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2593.464039][ T24] audit: type=1400 audit(2592.640:173): avc: denied { write } for pid=4743 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2597.293011][ T3210] 8021q: adding VLAN 0 to HW filter on device eth4 [ 2605.601607][ T4621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2608.300532][ T24] audit: type=1400 audit(2607.480:174): avc: denied { write } for pid=4757 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2609.971700][ T4625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2614.553686][ T24] audit: type=1400 audit(2613.730:175): avc: denied { write } for pid=4764 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2618.274772][ T3210] 8021q: adding VLAN 0 to HW filter on device eth5 [ 2635.393979][ T24] audit: type=1400 audit(2634.570:176): avc: denied { write } for pid=4781 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2642.638417][ T24] audit: type=1400 audit(2641.780:177): avc: denied { write } for pid=4790 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2647.442302][ T3210] 8021q: adding VLAN 0 to HW filter on device eth6 [ 2662.155142][ T24] audit: type=1400 audit(2661.330:178): avc: denied { write } for pid=4809 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2667.980551][ T24] audit: type=1400 audit(2667.110:179): avc: denied { write } for pid=4819 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2672.364068][ T3210] 8021q: adding VLAN 0 to HW filter on device eth7 [ 2685.892597][ T4621] veth0_vlan: entered promiscuous mode [ 2686.114890][ T24] audit: type=1400 audit(2685.290:180): avc: denied { write } for pid=4836 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2686.752498][ T4621] veth1_vlan: entered promiscuous mode [ 2689.699240][ T4625] veth0_vlan: entered promiscuous mode [ 2690.869316][ T4621] veth0_macvtap: entered promiscuous mode [ 2691.444640][ T4621] veth1_macvtap: entered promiscuous mode [ 2691.610287][ T4625] veth1_vlan: entered promiscuous mode [ 2693.008557][ T24] audit: type=1400 audit(2692.170:181): avc: denied { write } for pid=4842 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2695.238662][ T4632] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2695.249250][ T4632] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2695.272764][ T4632] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2695.283565][ T4632] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2695.680612][ T4625] veth0_macvtap: entered promiscuous mode [ 2696.651219][ T4625] veth1_macvtap: entered promiscuous mode [ 2697.733165][ T3210] 8021q: adding VLAN 0 to HW filter on device eth8 [ 2701.915154][ T4776] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2701.921620][ T4776] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2702.043565][ T4776] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2702.068394][ T4776] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2721.597753][ T24] audit: type=1400 audit(2720.760:182): avc: denied { write } for pid=4854 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2731.021373][ T24] audit: type=1400 audit(2730.130:183): avc: denied { write } for pid=4870 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2767.043853][ T24] audit: type=1400 audit(2766.220:184): avc: denied { write } for pid=4897 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2775.236815][ T24] audit: type=1400 audit(2774.400:185): avc: denied { write } for pid=4900 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2794.292834][ T24] audit: type=1400 audit(2793.460:186): avc: denied { write } for pid=4913 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2803.257086][ T24] audit: type=1400 audit(2802.420:187): avc: denied { write } for pid=4922 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2828.254172][ T24] audit: type=1400 audit(2827.420:188): avc: denied { write } for pid=4937 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2838.837391][ T24] audit: type=1400 audit(2838.010:189): avc: denied { write } for pid=4946 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2861.739719][ T24] audit: type=1400 audit(2860.910:190): avc: denied { write } for pid=4959 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2870.808943][ T24] audit: type=1400 audit(2869.900:191): avc: denied { write } for pid=4970 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2903.732609][ T24] audit: type=1400 audit(2902.910:192): avc: denied { write } for pid=4991 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2912.691424][ T24] audit: type=1400 audit(2911.860:193): avc: denied { write } for pid=5002 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2931.574682][ T24] audit: type=1400 audit(2930.720:194): avc: denied { write } for pid=5012 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2940.797368][ T24] audit: type=1400 audit(2939.970:195): avc: denied { write } for pid=5022 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2959.021445][ T24] audit: type=1400 audit(2958.180:196): avc: denied { write } for pid=5025 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2968.596948][ T24] audit: type=1400 audit(2967.700:197): avc: denied { write } for pid=5038 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2978.112955][ T5046] kvm [5046]: Failed to find VMA for hva 0x20c01000 [ 2978.153520][ T5045] kvm [5045]: Failed to find VMA for hva 0x20c01000 [ 3105.857653][ T24] audit: type=1400 audit(3105.030:198): avc: denied { write } for pid=5128 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3110.329303][ T5133] KVM: debugfs: duplicate directory 5133-4 [ 3114.938125][ T24] audit: type=1400 audit(3114.090:199): avc: denied { write } for pid=5140 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3387.122732][ T5298] kvm [5298]: Failed to find VMA for hva 0x20d8d000 [ 3449.332844][ T4243] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3451.000653][ T4243] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3452.100542][ T4243] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3453.334083][ T4243] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3470.431899][ T4243] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3470.703939][ T4243] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3470.889752][ T4243] bond0 (unregistering): Released all slaves [ 3472.811268][ T4243] hsr_slave_0: left promiscuous mode [ 3472.860310][ T4243] hsr_slave_1: left promiscuous mode [ 3473.409517][ T4243] veth1_macvtap: left promiscuous mode [ 3473.410808][ T4243] veth0_macvtap: left promiscuous mode [ 3473.427769][ T4243] veth1_vlan: left promiscuous mode [ 3473.439607][ T4243] veth0_vlan: left promiscuous mode [ 3517.298793][ T24] audit: type=1400 audit(3516.470:200): avc: denied { write } for pid=5358 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3524.359255][ T24] audit: type=1400 audit(3523.510:201): avc: denied { write } for pid=5368 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3528.963784][ T3210] 8021q: adding VLAN 0 to HW filter on device eth9 [ 3545.037366][ T24] audit: type=1400 audit(3544.210:202): avc: denied { write } for pid=5382 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3552.694641][ T5318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3553.097896][ T5318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3553.402855][ T24] audit: type=1400 audit(3552.500:203): avc: denied { write } for pid=5391 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3559.015414][ T3210] 8021q: adding VLAN 0 to HW filter on device eth10 [ 3566.568043][ T24] audit: type=1400 audit(3565.730:204): avc: denied { write } for pid=5398 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3573.688909][ T24] audit: type=1400 audit(3572.840:205): avc: denied { write } for pid=5406 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3584.733703][ T5318] hsr_slave_0: entered promiscuous mode [ 3584.821499][ T5318] hsr_slave_1: entered promiscuous mode [ 3584.913716][ T5318] debugfs: 'hsr0' already exists in 'hsr' [ 3584.927179][ T5318] Cannot create hsr debugfs directory [ 3591.953102][ T24] audit: type=1400 audit(3591.130:206): avc: denied { write } for pid=5417 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3598.638114][ T24] audit: type=1400 audit(3597.790:207): avc: denied { write } for pid=5425 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3602.399407][ T5318] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 3602.895101][ T5318] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 3603.015393][ T5318] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 3603.410494][ T5318] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3603.475266][ T5318] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 3604.060784][ T5318] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 3604.344768][ T3210] 8021q: adding VLAN 0 to HW filter on device eth11 [ 3604.393951][ T5318] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 3604.922621][ T5318] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 3631.028087][ T24] audit: type=1400 audit(3630.180:208): avc: denied { write } for pid=5447 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3635.579405][ T5318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3640.400420][ T24] audit: type=1400 audit(3639.550:209): avc: denied { write } for pid=5453 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3645.844791][ T3210] 8021q: adding VLAN 0 to HW filter on device eth12 [ 3685.044639][ T24] audit: type=1400 audit(3684.220:210): avc: denied { write } for pid=5489 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3694.428017][ T24] audit: type=1400 audit(3693.590:211): avc: denied { write } for pid=5498 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3710.197710][ T24] audit: type=1400 audit(3709.350:212): avc: denied { write } for pid=5508 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3716.370139][ T24] audit: type=1400 audit(3715.550:213): avc: denied { write } for pid=5515 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3734.428164][ T24] audit: type=1400 audit(3733.540:214): avc: denied { write } for pid=5525 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3744.947086][ T24] audit: type=1400 audit(3744.110:215): avc: denied { write } for pid=5535 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3761.828997][ T5318] veth0_vlan: entered promiscuous mode [ 3762.588592][ T24] audit: type=1400 audit(3761.730:216): avc: denied { write } for pid=5548 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3763.018607][ T5318] veth1_vlan: entered promiscuous mode [ 3766.238969][ T5318] veth0_macvtap: entered promiscuous mode [ 3766.859901][ T5318] veth1_macvtap: entered promiscuous mode [ 3770.441101][ T4204] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3770.442324][ T4204] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3770.468529][ T4243] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3770.508283][ T4243] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3772.899703][ T24] audit: type=1400 audit(3772.050:217): avc: denied { write } for pid=5555 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3804.288822][ T24] audit: type=1400 audit(3803.460:218): avc: denied { write } for pid=5569 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3815.527413][ T24] audit: type=1400 audit(3814.680:219): avc: denied { write } for pid=5576 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4185.933620][ T5724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4186.233068][ T5724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4206.950349][ T5732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4207.293803][ T5732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4215.869723][ T5724] hsr_slave_0: entered promiscuous mode [ 4216.000392][ T5724] hsr_slave_1: entered promiscuous mode [ 4216.118840][ T5724] debugfs: 'hsr0' already exists in 'hsr' [ 4216.127593][ T5724] Cannot create hsr debugfs directory [ 4237.022424][ T5724] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 4237.483314][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 4237.664309][ T5724] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 4237.891827][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 4238.009917][ T5724] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 4238.384252][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 4238.979311][ T5724] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 4239.243360][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 4242.319592][ T5732] hsr_slave_0: entered promiscuous mode [ 4242.401161][ T5732] hsr_slave_1: entered promiscuous mode [ 4242.468165][ T5732] debugfs: 'hsr0' already exists in 'hsr' [ 4242.477024][ T5732] Cannot create hsr debugfs directory [ 4260.542258][ T5732] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 4261.018251][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 4261.054618][ T5732] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 4261.401211][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 4261.600916][ T5732] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 4261.950226][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 4262.098900][ T5732] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 4262.358845][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 4272.478572][ T5724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4299.401620][ T5732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4314.342716][ T31] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4316.379346][ T31] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4317.904983][ T31] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4319.343132][ T31] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4340.207300][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 4340.551948][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 4340.762382][ T31] bond0 (unregistering): Released all slaves [ 4343.028210][ T31] hsr_slave_0: left promiscuous mode [ 4343.368143][ T31] hsr_slave_1: left promiscuous mode [ 4344.190374][ T31] veth1_macvtap: left promiscuous mode [ 4344.194488][ T31] veth0_macvtap: left promiscuous mode [ 4344.220676][ T31] veth1_vlan: left promiscuous mode [ 4344.260315][ T31] veth0_vlan: left promiscuous mode [ 4370.003973][ T31] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4372.162496][ T31] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4373.955592][ T31] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4375.817742][ T31] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4385.301666][ T24] audit: type=1400 audit(4384.460:220): avc: denied { write } for pid=5846 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4394.763171][ T24] audit: type=1400 audit(4393.910:221): avc: denied { write } for pid=5857 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4398.835466][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 4399.232126][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 4399.549884][ T31] bond0 (unregistering): Released all slaves [ 4400.494213][ T3210] 8021q: adding VLAN 0 to HW filter on device eth13 [ 4403.760170][ T31] hsr_slave_0: left promiscuous mode [ 4403.968409][ T31] hsr_slave_1: left promiscuous mode [ 4404.767977][ T31] veth1_macvtap: left promiscuous mode [ 4404.777554][ T31] veth0_macvtap: left promiscuous mode [ 4404.779376][ T31] veth1_vlan: left promiscuous mode [ 4404.780737][ T31] veth0_vlan: left promiscuous mode [ 4433.117261][ T24] audit: type=1400 audit(4432.290:222): avc: denied { write } for pid=5867 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4440.052324][ T24] audit: type=1400 audit(4439.200:223): avc: denied { write } for pid=5877 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4461.519879][ T24] audit: type=1400 audit(4460.620:224): avc: denied { write } for pid=5893 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4469.750261][ T24] audit: type=1400 audit(4468.890:225): avc: denied { write } for pid=5902 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4474.683199][ T3210] 8021q: adding VLAN 0 to HW filter on device eth14 [ 4477.923573][ T5724] veth0_vlan: entered promiscuous mode [ 4478.748855][ T5724] veth1_vlan: entered promiscuous mode [ 4481.631223][ T5724] veth0_macvtap: entered promiscuous mode [ 4482.269263][ T5724] veth1_macvtap: entered promiscuous mode [ 4486.374855][ T5746] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 4486.432427][ T5746] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 4486.444048][ T5746] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 4486.445023][ T5746] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 4493.838975][ T24] audit: type=1400 audit(4493.000:226): avc: denied { write } for pid=5915 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4503.640404][ T24] audit: type=1400 audit(4502.770:227): avc: denied { write } for pid=5926 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4510.390819][ T5732] veth0_vlan: entered promiscuous mode [ 4511.351459][ T3210] 8021q: adding VLAN 0 to HW filter on device eth15 [ 4511.820906][ T5732] veth1_vlan: entered promiscuous mode [ 4515.959945][ T5732] veth0_macvtap: entered promiscuous mode [ 4516.712690][ T5732] veth1_macvtap: entered promiscuous mode [ 4521.029506][ T4793] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 4521.051212][ T5814] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 4521.060159][ T5814] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 4521.387859][ T5814] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 4538.050401][ T24] audit: type=1400 audit(4537.210:228): avc: denied { write } for pid=5939 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4549.628351][ T24] audit: type=1400 audit(4548.780:229): avc: denied { write } for pid=5944 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4556.922785][ T3210] 8021q: adding VLAN 0 to HW filter on device eth16 [ 4583.713591][ T24] audit: type=1400 audit(4582.890:230): avc: denied { write } for pid=5964 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4595.803685][ T24] audit: type=1400 audit(4594.980:231): avc: denied { write } for pid=5975 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4604.582076][ T3210] 8021q: adding VLAN 0 to HW filter on device eth17 [ 4627.798078][ T24] audit: type=1400 audit(4626.940:232): avc: denied { write } for pid=5990 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4640.367764][ T24] audit: type=1400 audit(4639.520:233): avc: denied { write } for pid=5999 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4648.912114][ T3210] 8021q: adding VLAN 0 to HW filter on device eth18 [ 4676.959344][ T24] audit: type=1400 audit(4676.130:234): avc: denied { write } for pid=6018 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4687.740187][ T24] audit: type=1400 audit(4686.900:235): avc: denied { write } for pid=6031 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4696.381389][ T3210] 8021q: adding VLAN 0 to HW filter on device eth19 [ 4730.650605][ T24] audit: type=1400 audit(4729.800:236): avc: denied { write } for pid=6048 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4741.322444][ T24] audit: type=1400 audit(4740.490:237): avc: denied { write } for pid=6060 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4749.744331][ T3210] 8021q: adding VLAN 0 to HW filter on device eth20 [ 4814.708867][ T24] audit: type=1400 audit(4813.800:238): avc: denied { write } for pid=6101 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4828.429028][ T24] audit: type=1400 audit(4827.560:239): avc: denied { write } for pid=6110 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4861.837344][ T24] audit: type=1400 audit(4860.940:240): avc: denied { write } for pid=6127 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4873.769346][ T24] audit: type=1400 audit(4872.940:241): avc: denied { write } for pid=6139 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4901.982293][ T24] audit: type=1400 audit(4901.130:242): avc: denied { write } for pid=6152 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4914.131491][ T24] audit: type=1400 audit(4913.290:243): avc: denied { write } for pid=6161 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4932.969774][ T24] audit: type=1400 audit(4932.100:244): avc: denied { write } for pid=6168 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4946.329318][ T24] audit: type=1400 audit(4945.490:245): avc: denied { write } for pid=6176 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4969.940872][ T24] audit: type=1400 audit(4969.100:246): avc: denied { write } for pid=6188 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4981.934268][ T24] audit: type=1400 audit(4981.110:247): avc: denied { write } for pid=6197 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5016.190283][ T24] audit: type=1400 audit(5015.260:248): avc: denied { write } for pid=6212 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5029.838714][ T24] audit: type=1400 audit(5028.940:249): avc: denied { write } for pid=6220 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5085.507818][ T24] audit: type=1400 audit(5084.680:250): avc: denied { write } for pid=6247 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5097.718506][ T24] audit: type=1400 audit(5096.830:251): avc: denied { write } for pid=6259 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5125.493342][ T24] audit: type=1400 audit(5124.670:252): avc: denied { write } for pid=6269 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5138.351870][ T24] audit: type=1400 audit(5137.510:253): avc: denied { write } for pid=6281 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5162.799475][ T24] audit: type=1400 audit(5161.890:254): avc: denied { write } for pid=6291 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5174.795052][ T24] audit: type=1400 audit(5173.930:255): avc: denied { write } for pid=6300 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5204.117422][ T24] audit: type=1400 audit(5203.260:256): avc: denied { write } for pid=6311 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5217.298590][ T24] audit: type=1400 audit(5216.460:257): avc: denied { write } for pid=6322 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5679.127292][ T24] audit: type=1400 audit(5678.270:258): avc: denied { write } for pid=6539 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5691.017006][ T24] audit: type=1400 audit(5690.190:259): avc: denied { write } for pid=6549 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5915.317443][ T24] audit: type=1400 audit(5914.470:260): avc: denied { write } for pid=6654 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5927.571456][ T24] audit: type=1400 audit(5926.690:261): avc: denied { write } for pid=6665 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6205.202834][ T6748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 6205.585114][ T6748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 6211.324553][ T6750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 6211.763227][ T6750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 6241.315129][ T6748] hsr_slave_0: entered promiscuous mode [ 6241.444584][ T6748] hsr_slave_1: entered promiscuous mode [ 6247.222322][ T6750] hsr_slave_0: entered promiscuous mode [ 6247.330686][ T6750] hsr_slave_1: entered promiscuous mode [ 6247.387736][ T6750] debugfs: 'hsr0' already exists in 'hsr' [ 6247.397618][ T6750] Cannot create hsr debugfs directory [ 6272.244371][ T6748] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 6273.259684][ T6748] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 6273.652445][ T6748] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 6274.473673][ T6748] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 6274.762116][ T6748] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 6275.451611][ T6748] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 6277.091133][ T6748] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 6277.533802][ T6748] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 6284.143455][ T6750] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 6284.555278][ T6750] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 6284.694005][ T6750] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 6285.053393][ T6750] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 6285.192976][ T6750] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 6285.723495][ T6750] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 6285.943649][ T6750] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 6286.392836][ T6750] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 6315.054176][ T24] audit: type=1400 audit(6314.230:262): avc: denied { write } for pid=6837 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6319.262499][ T6748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 6329.371622][ T6750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 6330.348130][ T24] audit: type=1400 audit(6329.380:263): avc: denied { write } for pid=6844 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6360.942096][ T5478] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6363.558324][ T5478] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6365.413348][ T5478] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6367.282840][ T5478] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6392.479726][ T5478] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 6393.451317][ T5478] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 6394.195513][ T5478] bond0 (unregistering): Released all slaves [ 6396.853802][ T5478] hsr_slave_0: left promiscuous mode [ 6396.988489][ T5478] hsr_slave_1: left promiscuous mode [ 6397.497675][ T5478] veth1_macvtap: left promiscuous mode [ 6397.509690][ T5478] veth0_macvtap: left promiscuous mode [ 6397.519179][ T5478] veth1_vlan: left promiscuous mode [ 6397.539014][ T5478] veth0_vlan: left promiscuous mode [ 6427.373844][ T5478] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6429.695235][ T5478] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6431.621551][ T5478] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6433.631604][ T5478] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6450.909459][ T24] audit: type=1400 audit(6450.040:264): avc: denied { write } for pid=6876 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6461.276765][ T24] audit: type=1400 audit(6460.430:265): avc: denied { write } for pid=6885 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6461.509179][ T5478] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 6461.891783][ T5478] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 6462.084176][ T5478] bond0 (unregistering): Released all slaves [ 6465.498873][ T5478] hsr_slave_0: left promiscuous mode [ 6465.919217][ T5478] hsr_slave_1: left promiscuous mode [ 6466.691352][ T5478] veth1_macvtap: left promiscuous mode [ 6466.694791][ T5478] veth0_macvtap: left promiscuous mode [ 6466.734491][ T5478] veth1_vlan: left promiscuous mode [ 6466.798388][ T5478] veth0_vlan: left promiscuous mode [ 6487.035013][ T3210] 8021q: adding VLAN 0 to HW filter on device eth21 [ 6510.991312][ T24] audit: type=1400 audit(6510.150:266): avc: denied { write } for pid=6897 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6521.080636][ T24] audit: type=1400 audit(6520.260:267): avc: denied { write } for pid=6908 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6527.121456][ T3210] 8021q: adding VLAN 0 to HW filter on device eth22 [ 6544.037414][ T24] audit: type=1400 audit(6543.180:268): avc: denied { write } for pid=6922 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6552.318382][ T24] audit: type=1400 audit(6551.450:269): avc: denied { write } for pid=6933 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6559.553843][ T3210] 8021q: adding VLAN 0 to HW filter on device eth23 [ 6584.342070][ T24] audit: type=1400 audit(6583.510:270): avc: denied { write } for pid=6949 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6585.222936][ T6750] veth0_vlan: entered promiscuous mode [ 6586.110332][ T6748] veth0_vlan: entered promiscuous mode [ 6587.483759][ T6750] veth1_vlan: entered promiscuous mode [ 6588.361681][ T6748] veth1_vlan: entered promiscuous mode [ 6592.839053][ T6750] veth0_macvtap: entered promiscuous mode [ 6593.707192][ T24] audit: type=1400 audit(6592.860:271): avc: denied { write } for pid=6954 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6594.130937][ T6750] veth1_macvtap: entered promiscuous mode [ 6594.678424][ T6748] veth0_macvtap: entered promiscuous mode [ 6595.722559][ T6748] veth1_macvtap: entered promiscuous mode [ 6599.498505][ T6792] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 6599.530985][ T6288] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 6599.533690][ T6288] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 6599.638409][ T5812] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 6600.381527][ T3210] 8021q: adding VLAN 0 to HW filter on device eth24 [ 6601.863505][ T4204] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 6601.871827][ T4204] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 6602.368808][ T6702] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 6602.420090][ T5740] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 6610.008872][ T24] audit: type=1400 audit(6609.180:272): avc: denied { write } for pid=6956 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6623.335526][ T24] audit: type=1400 audit(6622.510:273): avc: denied { write } for pid=6964 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6663.675236][ T24] audit: type=1400 audit(6662.850:274): avc: denied { write } for pid=6979 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6676.070549][ T24] audit: type=1400 audit(6675.200:275): avc: denied { write } for pid=6991 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6683.503984][ T3210] 8021q: adding VLAN 0 to HW filter on device eth25 [ 6711.700044][ T24] audit: type=1400 audit(6710.850:276): avc: denied { write } for pid=6995 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6722.568396][ T24] audit: type=1400 audit(6721.720:277): avc: denied { write } for pid=7000 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6729.832194][ T3210] 8021q: adding VLAN 0 to HW filter on device eth26 [ 6761.142946][ T24] audit: type=1400 audit(6760.270:278): avc: denied { write } for pid=7013 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6775.749280][ T24] audit: type=1400 audit(6774.920:279): avc: denied { write } for pid=7023 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6784.188870][ T3210] 8021q: adding VLAN 0 to HW filter on device eth27 [ 6798.340756][ T24] audit: type=1400 audit(6797.410:280): avc: denied { write } for pid=7028 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6811.908384][ T24] audit: type=1400 audit(6811.060:281): avc: denied { write } for pid=7037 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6846.341383][ T24] audit: type=1400 audit(6845.470:282): avc: denied { write } for pid=7051 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6858.538750][ T24] audit: type=1400 audit(6857.610:283): avc: denied { write } for pid=7063 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6861.549352][ T7002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 6862.060252][ T7002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 6868.644067][ T3210] 8021q: adding VLAN 0 to HW filter on device eth28 [ 6869.248806][ T7006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 6869.724919][ T7006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 6917.714666][ T7002] hsr_slave_0: entered promiscuous mode [ 6917.855067][ T7002] hsr_slave_1: entered promiscuous mode [ 6918.108793][ T7002] debugfs: 'hsr0' already exists in 'hsr' [ 6918.142054][ T7002] Cannot create hsr debugfs directory [ 6926.791417][ T7006] hsr_slave_0: entered promiscuous mode [ 6926.911416][ T7006] hsr_slave_1: entered promiscuous mode [ 6927.091824][ T7006] debugfs: 'hsr0' already exists in 'hsr' [ 6927.153821][ T7006] Cannot create hsr debugfs directory [ 6944.620555][ T24] audit: type=1400 audit(6943.730:284): avc: denied { write } for pid=7095 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6956.508290][ T24] audit: type=1400 audit(6955.660:285): avc: denied { write } for pid=7099 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6964.010604][ T7002] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 6964.673438][ T7002] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 6964.911430][ T7002] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 6965.514643][ T7002] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 6968.960810][ T7002] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 6969.914171][ T7002] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 6970.139574][ T7002] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 6970.718918][ T7002] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 6996.857401][ T24] audit: type=1400 audit(6995.990:286): avc: denied { write } for pid=7113 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6997.942856][ T7006] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 6998.624920][ T7006] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 6998.901782][ T7006] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 6999.459118][ T7006] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 6999.555616][ T7006] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 7000.105217][ T7006] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 7000.265518][ T7006] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 7000.875157][ T7006] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 7014.020267][ T24] audit: type=1400 audit(7013.010:287): avc: denied { write } for pid=7131 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7029.712223][ T7002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 7049.538261][ T24] audit: type=1400 audit(7048.700:288): avc: denied { write } for pid=7142 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7051.911173][ T7006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 7065.327671][ T24] audit: type=1400 audit(7064.440:289): avc: denied { write } for pid=7151 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7090.215120][ T24] audit: type=1400 audit(7089.390:290): avc: denied { write } for pid=7157 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7106.369580][ T24] audit: type=1400 audit(7105.500:291): avc: denied { write } for pid=7166 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7131.973597][ T24] audit: type=1400 audit(7131.030:292): avc: denied { write } for pid=7173 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7146.158270][ T24] audit: type=1400 audit(7145.170:293): avc: denied { write } for pid=7184 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7170.238869][ T24] audit: type=1400 audit(7169.400:294): avc: denied { write } for pid=7192 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7184.979927][ T24] audit: type=1400 audit(7184.110:295): avc: denied { write } for pid=7203 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7205.143186][ T26] INFO: task syz.8.742:6981 blocked for more than 430 seconds. [ 7205.198992][ T26] Not tainted syzkaller #0 [ 7205.262152][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 7205.280963][ T26] task:syz.8.742 state:D stack:0 pid:6981 tgid:6981 ppid:6750 task_flags:0x400040 flags:0x00000011 [ 7205.284214][ T26] Call trace: [ 7205.284738][ T26] __switch_to+0x5e0/0xb70 (T) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 7205.393456][ T26] __schedule+0x1e0c/0x38cc [ 7205.394258][ T26] schedule+0x1b4/0x274 [ 7205.394804][ T26] schedule_timeout+0x68/0x1e4 [ 7205.395352][ T26] wait_for_completion+0x1b8/0x414 [ 7205.498066][ T26] __synchronize_srcu+0x1c8/0x208 [ 7205.524807][ T26] synchronize_srcu+0x668/0x8dc [ 7205.525567][ T26] mmu_notifier_unregister+0x33c/0x444 [ 7205.591437][ T26] kvm_put_kvm+0x69c/0xbbc [ 7205.592246][ T26] kvm_vm_release+0x58/0x78 [ 7205.592763][ T26] __fput+0x4ac/0x978 [ 7205.593210][ T26] ____fput+0x20/0x30 [ 7205.593683][ T26] task_work_run+0x1b8/0x250 [ 7205.594266][ T26] exit_to_user_mode_loop+0x110/0x188 [ 7205.594860][ T26] el0_svc+0x18c/0x240 [ 7205.595400][ T26] el0t_64_sync_handler+0x84/0x12c [ 7205.678271][ T26] el0t_64_sync+0x198/0x19c [ 7205.680214][ T26] [ 7205.680214][ T26] Showing all locks held in the system: [ 7205.680769][ T26] 1 lock held by khungtaskd/26: [ 7205.681177][ T26] #0: ffff800087e93598 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x4c/0x188 [ 7205.683677][ T26] 2 locks held by kworker/u4:2/31: [ 7205.684061][ T26] #0: 4ef000000d034140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x958/0x154c [ 7205.813401][ T26] #1: ffff80008cf37ce8 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x978/0x154c [ 7205.815595][ T26] 2 locks held by getty/3239: [ 7205.868756][ T26] #0: e5f00000124aa0a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 7205.870756][ T26] #1: 43ff80008cbdb2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x314/0x11f8 [ 7205.872472][ T26] 2 locks held by syz-executor/3368: [ 7205.872830][ T26] 3 locks held by kworker/u4:0/4204: [ 7205.873177][ T26] 2 locks held by kworker/u4:4/5740: [ 7205.873470][ T26] #0: 4ef000000d034140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x958/0x154c [ 7205.875252][ T26] #1: ffff80008fc97ce8 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x978/0x154c [ 7205.989988][ T26] 3 locks held by kworker/u4:8/6702: [ 7205.990415][ T26] 2 locks held by syz.7.743/6988: [ 7205.990810][ T26] 3 locks held by kworker/u4:7/7116: [ 7205.991139][ T26] 1 lock held by dhcpcd-run-hook/7213: [ 7205.991439][ T26] 2 locks held by modprobe/7214: [ 7206.103847][ T26] [ 7206.104472][ T26] ============================================= [ 7206.104472][ T26] [ 7206.105511][ T26] Kernel panic - not syncing: hung_task: blocked tasks [ 7206.110835][ T26] CPU: 0 UID: 0 PID: 26 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT [ 7206.112235][ T26] Hardware name: linux,dummy-virt (DT) [ 7206.113235][ T26] Call trace: [ 7206.114090][ T26] show_stack+0x2c/0x3c (C) [ 7206.115259][ T26] __dump_stack+0x30/0x40 [ 7206.116370][ T26] dump_stack_lvl+0x30/0x12c [ 7206.117517][ T26] dump_stack+0x1c/0x28 [ 7206.118613][ T26] vpanic+0x4cc/0x844 [ 7206.119567][ T26] vpanic+0x0/0x844 [ 7206.120526][ T26] hung_task_panic+0x0/0x2c [ 7206.121558][ T26] kthread+0x4cc/0x514 [ 7206.122531][ T26] ret_from_fork+0x10/0x20 [ 7206.124229][ T26] Kernel Offset: disabled [ 7206.125050][ T26] CPU features: 0x00000000,00d1802f,df1847a1,057ffe1f [ 7206.126312][ T26] Memory Limit: none [ 7206.128619][ T26] Rebooting in 86400 seconds..