last executing test programs: 1h14m36.097471631s ago: executing program 1 (id=116): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x6) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000540)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, 0x0) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) 1h14m30.769568547s ago: executing program 1 (id=117): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x4}}], 0x28}, 0x0, 0x0) r4 = syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x62) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x8, 0x88, &(0x7f0000000000)=0x10}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000002c0)=@attr_other={0x0, 0x9, 0x5, 0x0}) r7 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r8 = ioctl$KVM_GET_STATS_FD_cpu(r3, 0xaece) ioctl$KVM_HAS_DEVICE_ATTR_vm(r8, 0x4018aee3, &(0x7f0000000240)=@attr_other={0x0, 0x4, 0x3ff, &(0x7f0000000140)=0x1}) r9 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xc, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x20000000) ioctl$KVM_SET_DEVICE_ATTR_vm(r9, 0x8030aeb4, 0x0) 1h14m18.709145493s ago: executing program 1 (id=120): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) (async) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000740)={0x10002, 0x1c0, 0x0, &(0x7f0000000340)=[0x5, 0x3cdf73e0, 0x9, 0x10, 0xfffffffffffffff2, 0xfffffffffffffffd, 0x2, 0x32, 0x8, 0x5, 0x100000001, 0x8a02, 0x7, 0xf9, 0x4, 0x100, 0x5, 0x9, 0x1c0, 0xffff, 0x2, 0x9, 0x100000001, 0x8000000000000001, 0xe, 0x1e, 0x7, 0x7ef, 0x10000, 0x4, 0x7, 0x2, 0x8, 0x1, 0xfffffffffffffffe, 0xff, 0x9, 0x9de6, 0x5, 0xa, 0x401, 0x6, 0x6, 0x1, 0x2, 0x7fffffff, 0x4, 0x3, 0x3, 0x4, 0xfffffffffffffff3, 0x2, 0xfffffffffffffffb, 0x5, 0x1, 0x800, 0x6f09, 0xce7b, 0x8, 0x7ff, 0xfffffffffffffffb, 0x0, 0x38aa, 0x9, 0xffffffffffffffff, 0x400, 0xfff, 0x3ff, 0x7fff, 0x1, 0x2, 0x0, 0x7, 0x9, 0xbf, 0x800, 0x4, 0x3, 0x3, 0x6, 0x101, 0x80000001, 0x6, 0x487, 0x7cc2f64e, 0x6, 0x8, 0xffffffff, 0x7, 0x4, 0x6b, 0x2, 0x0, 0xa8, 0x4, 0xfffffffffffffff8, 0x5, 0x40, 0x8, 0xffffffffffffffff, 0x7fffffffffffffff, 0x7ff, 0xffffffff, 0x7fff, 0x94f, 0x4, 0x9, 0x1, 0x4, 0x6, 0x0, 0x6, 0x84, 0xa2, 0x6, 0x9, 0x4, 0x5, 0x0, 0x8, 0x1, 0x5, 0x3, 0x1ff, 0x7fffffff, 0x900000000000, 0x6, 0x1]}) (async) r4 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013c230, 0x8000}}], 0x20}, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = syz_kvm_add_vcpu$arm64(r3, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x81}], 0x1) ioctl$KVM_GET_MP_STATE(r8, 0x8004ae98, &(0x7f0000000000)) (async, rerun: 64) r9 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013c65d, 0xfffdffffc1af0ec0}}], 0x20}, 0x0, 0xffffffffffffff92) (rerun: 64) syz_kvm_add_vcpu$arm64(r2, 0x0, 0x0, 0x0) (async) syz_kvm_vgic_v3_setup(r1, 0x3, 0xa0) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) 1h14m17.250575768s ago: executing program 0 (id=121): r0 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r2 = mmap$KVM_VCPU(&(0x7f0000ffa000/0x3000)=nil, r0, 0x2000002, 0x30, r1, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) ioctl$KVM_HAS_DEVICE_ATTR_vm(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000040)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x1, 0x9, 0x1}}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x8) munmap(&(0x7f0000ff7000/0x9000)=nil, 0x9000) ioctl$KVM_SET_REGS(r1, 0x4360ae82, &(0x7f0000000080)={[0x9, 0x2, 0x1d7c, 0x2, 0x8, 0x4, 0xf98, 0xf92, 0x8, 0x7fffffffffffffff, 0xfffffffffffffffb, 0x5, 0x0, 0x18000000, 0x5, 0xa4], 0x8080000, 0x2000}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000140)="f9aed93a6004c726088fa168515990f2ada4e9380bb416cf3d1f2c4e984788e032a0b3fe99db7aa9e8674a31d3fb2d0eb1e85ac8fd2e37e8feb39f46af4dd4c2d347575f7edfe1d1", 0x0, 0x48) ioctl$KVM_GET_REGS(r1, 0x8360ae81, &(0x7f00000001c0)) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x9) r4 = eventfd2(0x8b22, 0x80800) r5 = eventfd2(0x7, 0x800) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000280)={r4, 0x6, 0x3, r5}) ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f00000002c0)={0xd, "f6ecaf417f0693267874ced7a5"}) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x35) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000300)={0x25000}) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) ioctl$KVM_GET_DEVICE_ATTR_vm(r3, 0x4018aee2, &(0x7f0000000380)=@attr_other={0x0, 0x80000000, 0x8, &(0x7f0000000340)=0x76}) ioctl$KVM_SET_GUEST_DEBUG_arm64(r1, 0x4208ae9b, &(0x7f00000003c0)={0x0, 0x0, {[0x1, 0xce, 0x9, 0x5, 0x9, 0x0, 0xa88f, 0x40, 0x9, 0x7, 0x4, 0xbf, 0xdd7, 0xe7, 0xc97, 0x4], [0x4059, 0x9, 0x0, 0x3, 0x67c2, 0x0, 0xffffffffffffffff, 0xd, 0x7fffffff, 0x62, 0x2, 0x6, 0x3, 0xfffffffffffffff7, 0x0, 0xffff], [0x31f4, 0x6, 0x0, 0x8, 0x1, 0x965, 0x2, 0x1, 0x4, 0xcea4, 0x8000000000000000, 0x85, 0x1, 0x16, 0x0, 0x8], [0x72b8, 0x6, 0x8000000000000000, 0x452, 0x0, 0x100000001, 0x2, 0x4, 0x5, 0x80000001, 0x1, 0x2, 0xa3b, 0x2, 0xffffffffffffffff, 0x6]}}) ioctl$KVM_RUN(r1, 0xae80, 0x0) syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000a40)={0x0, &(0x7f0000000600)=[@its_setup={0x82, 0x28, {0x2, 0x3, 0xa6}}, @its_setup={0x82, 0x28, {0x0, 0x4, 0x124}}, @eret={0xe6, 0x18, 0x6}, @uexit={0x0, 0x18, 0x8}, @msr={0x14, 0x20, {0x603000000013c510, 0x7}}, @smc={0x1e, 0x40, {0x80000001, [0x1, 0xf0b5e52, 0x1, 0x7, 0x4]}}, @mrs={0xbe, 0x18, {0x603000000013c119}}, @mrs={0xbe, 0x18, {0x603000000013e18d}}, @irq_setup={0x46, 0x18, {0x3, 0x13e}}, @svc={0x122, 0x40, {0x84000012, [0x7fffffffffffffff, 0x0, 0xd, 0x6, 0x5]}}, @uexit={0x0, 0x18, 0x8}, @mrs={0xbe, 0x18, {0x603000000013de87}}, @smc={0x1e, 0x40, {0x8400000b, [0x8000, 0x3b, 0x280000000, 0x0, 0x1]}}, @hvc={0x32, 0x40, {0x55, [0x1e3, 0xc, 0x3ff, 0x4]}}, @its_setup={0x82, 0x28, {0x3, 0x3, 0x3e0}}, @msr={0x14, 0x20, {0x603000000013c201, 0x254880000000}}, @its_setup={0x82, 0x28, {0x2, 0x1, 0xe4}}, @irq_setup={0x46, 0x18, {0x4, 0x21a}}, @its_send_cmd={0xaa, 0x28, {0xe, 0x1, 0x4, 0x5, 0x8, 0x1000000, 0x1}}, @irq_setup={0x46, 0x18, {0x3, 0x150}}, @its_setup={0x82, 0x28, {0x0, 0x1, 0x37f}}, @msr={0x14, 0x20, {0x603000000013de94, 0x7f}}, @hvc={0x32, 0x40, {0xc4000005, [0x7fffffffffffffff, 0xffff, 0x6, 0x63, 0x6]}}, @msr={0x14, 0x20, {0x603000000013ff11, 0x1}}, @svc={0x122, 0x40, {0x80008000, [0x8, 0x8, 0x2000000000000, 0x1, 0x8000000000000000]}}, @code={0xa, 0x6c, {"005c82d20060b0f2a10080d2c20080d2630180d2c40080d2020000d4a0c688d200a0b0f2210080d2820080d2430180d2840180d2020000d4000008d500b8a15e007008d5007008d50070df0c00e4a02e008c205e0000001f"}}], 0x434}, &(0x7f0000000a80)=[@featur1={0x1, 0x14}], 0x1) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_GUEST_DEBUG_arm64(r7, 0x4208ae9b, &(0x7f0000000ac0)={0x10000, 0x0, {[0x4, 0x8001, 0x3, 0x100000000, 0x2, 0x2, 0x0, 0x7, 0x100000001, 0x7ff, 0x0, 0x101, 0x1, 0xa, 0x80, 0xf], [0x7, 0x7, 0x8000, 0x7, 0x7, 0x6, 0x400, 0x6, 0x4, 0xfff, 0x3203, 0x1, 0xff, 0x7, 0x6da, 0x8], [0x990e, 0xf8, 0x9, 0x1, 0x0, 0x0, 0x10001, 0x1, 0x0, 0x55cb, 0xfffffffffffff800, 0x6, 0x100, 0x4, 0x2, 0x2], [0x5, 0xfffffffffffffffc, 0x2, 0x1, 0x3, 0x6, 0xfafd, 0x80000001, 0xa, 0x7, 0x80, 0x7, 0xe, 0x2000000000000000, 0x53a2, 0x4]}}) ioctl$KVM_CREATE_GUEST_MEMFD(r6, 0xc040aed4, &(0x7f0000000d00)={0x3, 0x44}) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x40) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x24) syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil) 1h14m12.22985695s ago: executing program 0 (id=122): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2d) (async) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2d) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x1fd, 0x2, 0x10000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000040)={0x9439, 0x3d02b5e6}) (async) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000040)={0x9439, 0x3d02b5e6}) ioctl$KVM_SET_DEVICE_ATTR_vm(r0, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x1ff, 0x1}}) ioctl$KVM_ARM_SET_COUNTER_OFFSET(r0, 0x4010aeb5, &(0x7f0000000100)={0x4, 0x7}) (async) ioctl$KVM_ARM_SET_COUNTER_OFFSET(r0, 0x4010aeb5, &(0x7f0000000100)={0x4, 0x7}) ioctl$KVM_HAS_DEVICE_ATTR_vm(r0, 0x4018aee3, &(0x7f0000000180)=@attr_other={0x0, 0x5, 0x54, &(0x7f0000000140)=0x10}) ioctl$KVM_GET_DEVICE_ATTR_vm(r0, 0x4018aee2, &(0x7f0000000200)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f00000001c0)={0x1ff, 0x8, 0x2}}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2f) (async) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x3, 0x5, 0x35a6c8a56b78c7d, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) (async) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, r3, 0x600000d, 0x10, r2, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, r3, 0x600000d, 0x10, r2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x5) (async) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x5) syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000a7e000/0x400000)=nil) (async) syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000a7e000/0x400000)=nil) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r0, 0x4068aea3, &(0x7f0000000280)={0xdf, 0x0, 0x8000}) ioctl$KVM_CAP_ARM_MTE(r1, 0x4068aea3, &(0x7f0000000300)) ioctl$KVM_HAS_DEVICE_ATTR_vm(r4, 0x4018aee3, &(0x7f00000003c0)=@attr_other={0x0, 0xfbdf, 0xd7f, &(0x7f0000000380)=0xdc4a}) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000400)={0x1000, "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"}) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r2, 0x4018aee3, &(0x7f0000001480)=@attr_other={0x0, 0x15, 0x401, &(0x7f0000001440)=0x5}) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f00000014c0)={0xa}) ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000001500)={0x4, 0x8}) close(r1) r5 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_S390_VCPU_FAULT(r2, 0x4008ae52, &(0x7f0000001540)=0x9) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r0, 0x4068aea3, &(0x7f0000001580)) 1h14m11.406031752s ago: executing program 1 (id=123): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x3}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x9b, 0xf, 0x0, 0x5, 0x8, 0x82, 0x46, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x100001, 0xffc0000, 0x0, 0x3, 0xa, 0x8, '\x00', 0x1, 0x93}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4000ae84, &(0x7f0000000200)={{0x0, 0x1000, 0x1, 0x3a, 0x0, 0x9, 0xba, 0xc, 0x2, 0x6, 0x0, 0x9}, {0xeeef0000, 0x0, 0xd, 0x1, 0xfc, 0x1, 0x5, 0xc, 0x7, 0x4, 0x6, 0x6}, {0x0, 0xeeee8000, 0x8, 0x9, 0x6, 0x7, 0x3, 0xdb, 0x8, 0x1, 0x1}, {0x1, 0xe000, 0xa, 0x55, 0x7f, 0x80, 0x4, 0x4, 0xa, 0x1, 0x8, 0xe}, {0x1, 0x0, 0x0, 0x38, 0x1, 0x6, 0x8, 0x1, 0x81, 0x93, 0x7f, 0x8}, {0xdddd1000, 0x41000, 0xd, 0x7, 0x9, 0x5, 0x2, 0x8, 0x81, 0xf, 0x5, 0xfe}, {0xffff1000, 0xb000, 0x14, 0x1, 0x1, 0x7b, 0xfd, 0x9, 0x6a, 0xe, 0x8, 0xd1}, {0xeeef0000, 0x7000, 0x4, 0x3, 0x0, 0x0, 0x7, 0xfa, 0x10, 0x2, 0x2, 0x1}, {0x40000, 0x2}, {0x8000000, 0xc71}, 0x20000002, 0x0, 0x1000, 0x8, 0x8, 0x8000, 0x7000, [0x3, 0x8000000000000000, 0x89, 0x1]}) write$eventfd(r2, &(0x7f00000001c0)=0x3, 0xfdef) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(0x5) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000000000/0x400000)=nil) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x25000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000240)="37e68986ad644f5dc57bbc1ff382863b67f3eee57a32ec911d95f88f3dd8ea716e4a29cefbd440b2ecf83f57baf33b0c97182970a47ef45c954e42f2055384921830f6e273d2eb30", 0x0, 0x2a2019ac5ed2a1ef) r9 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r10, 0xae03, 0x1e) r11 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r12 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil) r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000280)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r13, 0x4018aee1, &(0x7f00000002c0)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000000)={0x1ff, 0x4}}) ioctl$KVM_ARM_VCPU_INIT(r13, 0x4020aeae, &(0x7f0000000000)={0x3, 0xa6}) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) mmap$KVM_VCPU(&(0x7f0000572000/0x3000)=nil, 0x930, 0x0, 0x172011, 0xffffffffffffffff, 0x0) 1h14m6.627977601s ago: executing program 0 (id=124): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000040)={0x1000200001fe0000, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0x2000, &(0x7f0000ffc000/0x2000)=nil, 0x100000000000000, r2}) close(r1) close(r2) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x400000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000000)={0x7}) r5 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000080)={0x0, 0x6000, 0x0, r5, 0x1}) r6 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x31) r7 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f00000001c0)="fb0149dd833be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8faa767969d22627e700", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0x401c5820, 0x20000007) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f00000000c0)={0x8}) r8 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) syz_kvm_vgic_v3_setup(r9, 0x3, 0x320) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r11, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) ioctl$KVM_SIGNAL_MSI(r4, 0x4020aea5, &(0x7f0000000000)={0x6000, 0x0, 0x0, 0x1, 0x20000000}) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r12, 0xae01, 0x2d) 1h13m48.510447907s ago: executing program 0 (id=125): syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000080)="fb01ea6d6931e3ac2cc4a29ea6abf4e7454e37c4b8062147000000000067521ce16f8f1f3d9a7a835673312b54ebb2aa5cc87dd22627e700", 0x0, 0x48) r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x25) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000001c0)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000380)}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x5, 0x2, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000001c0)={0x8, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f00000002c0)=@attr_other={0x0, 0x8, 0x100, &(0x7f0000000300)=0xc000000000000000}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f00000001c0)="f21bc75509bf71c9d70236fc044842da97e87fd62c18b875c2357c6ed6000000000000000000000000002000e4ff00", 0x0, 0x48) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r6, &(0x7f00000001c0)=0xffffff7f, 0xff25) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x4, 0x2, 0x0}) 1h13m45.741731412s ago: executing program 1 (id=126): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) munmap$KVM_VCPU(0x0, 0x1000000000) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000e, 0x24132, 0xffffffffffffffff, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x7) r1 = mmap$KVM_VCPU(&(0x7f0000ff7000/0x3000)=nil, 0x0, 0x4, 0x10, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000000)="caf9d6ac7953c5a4571996b36c0135c684c5c0d4fad93b80dd7cb2b66d542f6173f233a6e1606154cf719c2550e01ad56fce42d3686e6f9b00a64f3728849edd28e62dda6398ff0f", 0x0, 0x48) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 1h13m40.880742027s ago: executing program 1 (id=127): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000080)="fb0149dd033be3ac4e37c4005a9614fbff67521ce16f8f09449a7a836b73312954000000000000000000000000000000000000000000000000000000dc6900", 0x0, 0x2e) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000080)="fb0149dd033be3ac4e37c4005a9614fbff67521ce16f8f09449a7a836b73312954000000000000000000000000000000000000000000000000000000dc6900", 0x0, 0x2e) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r3, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r3, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000180), 0x12ab43, 0x1f01) (async) openat$kvm(0xffffff9c, &(0x7f0000000180), 0x12ab43, 0x1f01) eventfd2(0x0, 0x0) (async) r4 = eventfd2(0x0, 0x0) close(r4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x88c80, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x88c80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x8) r6 = openat$kvm(0x0, &(0x7f00000002c0), 0x4a080, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) r8 = syz_kvm_vgic_v3_setup(r7, 0x1, 0x40) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x1, 0x0, 0xffffffffffffffff}) (async) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x1, 0x0, 0xffffffffffffffff}) mmap$KVM_VCPU(&(0x7f0000008000/0x3000)=nil, 0x0, 0x2800006, 0x40010, r4, 0x0) eventfd2(0x0, 0x0) (async) eventfd2(0x0, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x400000) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1f) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) (async) r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000000)={0x0, &(0x7f0000000040)=[@hvc={0x32, 0x40, {0x84000053, [0x800, 0x8, 0xc9, 0x0, 0xffffffffffffff52]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r12, 0xae80, 0x0) close(r3) 1h13m38.312409361s ago: executing program 0 (id=128): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x355101, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f00000001c0)}, &(0x7f0000000300)=[@featur2={0x1, 0xe2}], 0x1) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x25) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f00000001c0)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000380)}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000000c0)={0x5, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f00000002c0)=@attr_other={0x0, 0x8, 0x108, &(0x7f0000000000)=0xc000000000000000}) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x4, 0x2, 0x0}) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1h13m31.885661538s ago: executing program 0 (id=129): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000080)={0x5, 0x1}) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f00000001c0)=@arm64_sys={0x6030000000138064, &(0x7f00000000c0)=0x8000}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80403, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000140), 0x101000, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x0, 0x8032, 0xffffffffffffffff, 0x0) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x4f832, 0xffffffffffffffff, 0x1000000) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000647000/0x1000)=nil, 0x1000) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) eventfd2(0x0, 0x0) munmap(&(0x7f0000f87000/0x1000)=nil, 0x1000) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_ARM_VCPU_INIT(r7, 0x4020aeae, &(0x7f0000000100)={0x5, 0x18}) ioctl$KVM_GET_ONE_REG(r7, 0x4010aeab, &(0x7f0000000000)=@arm64_core={0x603000000010002e, &(0x7f0000000040)=0x8000000000000005}) r8 = ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3}) mmap$KVM_VCPU(&(0x7f0000f86000/0x4000)=nil, 0x930, 0x2000003, 0x2013, r8, 0x0) 1h12m54.631106341s ago: executing program 32 (id=127): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000080)="fb0149dd033be3ac4e37c4005a9614fbff67521ce16f8f09449a7a836b73312954000000000000000000000000000000000000000000000000000000dc6900", 0x0, 0x2e) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000080)="fb0149dd033be3ac4e37c4005a9614fbff67521ce16f8f09449a7a836b73312954000000000000000000000000000000000000000000000000000000dc6900", 0x0, 0x2e) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r3, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r3, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000180), 0x12ab43, 0x1f01) (async) openat$kvm(0xffffff9c, &(0x7f0000000180), 0x12ab43, 0x1f01) eventfd2(0x0, 0x0) (async) r4 = eventfd2(0x0, 0x0) close(r4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x88c80, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x88c80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x8) r6 = openat$kvm(0x0, &(0x7f00000002c0), 0x4a080, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) r8 = syz_kvm_vgic_v3_setup(r7, 0x1, 0x40) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x1, 0x0, 0xffffffffffffffff}) (async) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x1, 0x0, 0xffffffffffffffff}) mmap$KVM_VCPU(&(0x7f0000008000/0x3000)=nil, 0x0, 0x2800006, 0x40010, r4, 0x0) eventfd2(0x0, 0x0) (async) eventfd2(0x0, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x400000) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1f) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) (async) r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000000)={0x0, &(0x7f0000000040)=[@hvc={0x32, 0x40, {0x84000053, [0x800, 0x8, 0xc9, 0x0, 0xffffffffffffff52]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r12, 0xae80, 0x0) close(r3) 1h12m44.000438864s ago: executing program 33 (id=129): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000080)={0x5, 0x1}) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f00000001c0)=@arm64_sys={0x6030000000138064, &(0x7f00000000c0)=0x8000}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80403, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000140), 0x101000, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x0, 0x8032, 0xffffffffffffffff, 0x0) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x4f832, 0xffffffffffffffff, 0x1000000) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000647000/0x1000)=nil, 0x1000) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) eventfd2(0x0, 0x0) munmap(&(0x7f0000f87000/0x1000)=nil, 0x1000) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_ARM_VCPU_INIT(r7, 0x4020aeae, &(0x7f0000000100)={0x5, 0x18}) ioctl$KVM_GET_ONE_REG(r7, 0x4010aeab, &(0x7f0000000000)=@arm64_core={0x603000000010002e, &(0x7f0000000040)=0x8000000000000005}) r8 = ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3}) mmap$KVM_VCPU(&(0x7f0000f86000/0x4000)=nil, 0x930, 0x2000003, 0x2013, r8, 0x0) 51m57.68779555s ago: executing program 3 (id=255): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0x80111500, 0x20000000) close(r3) r4 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0x80111500, 0x20000000) ioctl$KVM_CREATE_VM(r6, 0x541b, 0x10000000000000) r7 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) r10 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r9, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r10, 0x20, &(0x7f0000000300)="fb4149dd033b8986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67525673312b01040000000000002627e7000000000000000200", 0x0, 0xfffffffffffffe73) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x12, r9, 0x0) r11 = eventfd2(0x2, 0x80001) close(r11) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x0) write$eventfd(r11, &(0x7f0000000100)=0xfffffffffffffffe, 0x8) r12 = eventfd2(0x0, 0x0) close(r12) r13 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) r15 = syz_kvm_setup_syzos_vm$arm64(r14, &(0x7f0000c00000/0x400000)=nil) r16 = syz_kvm_add_vcpu$arm64(r15, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000100)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r16, 0x4018aee1, &(0x7f00000011c0)=@attr_set_pmu={0x0, 0x0, 0x3, &(0x7f00000000c0)=0x8}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r17 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r7, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, r17, 0x2000004, 0x2011, r12, 0x0) 51m43.041450263s ago: executing program 2 (id=256): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x28081, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000769000/0x400000)=nil) r3 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dcea, 0x8000}}], 0x20}, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r6, 0x4018aee1, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vm(r4, 0x4018aee3, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000380)={0x0, &(0x7f0000000100)=[@smc={0x1e, 0x40, {0x84000002, [0x3, 0x3, 0x2, 0x3f8b, 0x3448]}}], 0x40}, &(0x7f00000000c0)=[@featur2={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r7, 0xae80, 0x0) 51m43.040479264s ago: executing program 3 (id=257): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x28081, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000769000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000380)={0x0, &(0x7f0000000100)=[@smc={0x1e, 0x40, {0x84000002, [0x3, 0x3, 0x2, 0x3f8b, 0x3448]}}], 0x40}, &(0x7f00000000c0)=[@featur2={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r7 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r6, 0x0) munmap$KVM_VCPU(0x0, 0x1000000000) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000e, 0x24132, 0xffffffffffffffff, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = eventfd2(0x8, 0x80800) ioctl$KVM_IOEVENTFD(r9, 0x4040ae79, &(0x7f00000000c0)={0x8000000000000000, 0x0, 0x1, r10, 0x2}) ioctl$KVM_IOEVENTFD(r9, 0x4040ae79, &(0x7f0000000000)={0x8000, 0x0, 0x1, r10, 0x3}) r11 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x29) syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000340)=[@uexit={0x0, 0x18, 0x1fd}, @smc={0x1e, 0x40, {0x84000050, [0x3, 0xc4, 0x80000000, 0x80000000]}}, @irq_setup={0x46, 0x18, {0x1, 0x28e}}], 0x70}, 0x0, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x1) r14 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r13, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r14, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0xffffffffffffffa7) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r13, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000100)={0x202, 0x2, 0x50000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f0000000100)="e88f6f425d22d10a43f75eb2e8c00712b480d9447bc8a9e7e65e5a445824e6db4f0c2745ef0f3ee7051ca3581628981b5c6f703fc06c3e415b0b8f16b9ea070b2c5cae1cacb1212d", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r6, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) 51m32.129367644s ago: executing program 2 (id=258): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x103580, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0xeffffffd, 0x801) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000000)={0x1, 0x4000, 0x4, r3, 0x1}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x400000103, 0x10000, 0x1, r3, 0x6}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000180)=@x86={0xff, 0x10, 0x4, 0x0, 0x2, 0x1, 0x5, 0x3, 0xe9, 0x5, 0x5, 0x7, 0x0, 0x8, 0xcf, 0x10, 0x8, 0x7f, 0x7, '\x00', 0x0, 0xff}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x2, 0x0, 0x2, r3, 0x2}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000140)={0x0, &(0x7f0000000200)=[@smc={0x1e, 0x40, {0x86000000, [0x0, 0x1, 0x2, 0x3, 0x4]}}], 0x40}, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 51m29.436226701s ago: executing program 3 (id=259): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_ARM_SYSTEM_SUSPEND(r2, 0x4068aea3, &(0x7f00000000c0)) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000000)={0x0, &(0x7f0000000040)=[@smc={0x1e, 0x40, {0xc400000e, [0x99b, 0x100000003, 0x5, 0x101, 0x10]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1) syz_kvm_vgic_v3_setup(r2, 0x3, 0xc0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_ASSIGN_SET_MSIX_NR(r5, 0x4008ae73, 0x0) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f00000000c0)={0x0, &(0x7f0000000380)=[@its_setup={0x82, 0x28, {0x3, 0x1, 0x39d}}], 0x28}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r5, 0xffffffffffbffffc, 0x120) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x4f832, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x4, 0x4, 0x0}) 51m20.388158494s ago: executing program 2 (id=260): mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) (async) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x9000000) (async) mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x9000000) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) r0 = eventfd2(0x5, 0x800) write$eventfd(r0, &(0x7f0000000000)=0xffffffffffffffff, 0x8) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r2, r3, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f00000000c0)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}], 0x1, 0x0, 0x0, 0x0) syz_kvm_vgic_v3_setup(r2, 0x1, 0x100) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f0000000100)={0x1000020, 0x1}) syz_kvm_setup_cpu$arm64(0xffffffffffffffff, r3, &(0x7f00009ea000/0x400000)=nil, &(0x7f0000000140)=[{0x0, &(0x7f00000001c0)=[@eret={0xe6, 0x18, 0x9}, @code={0xa, 0x6c, {"e0fe8dd20080b8f2410080d2c20080d2030180d2040180d2020000d40008285e0000600d000000b50000601f1020601ec05d87d20040b8f2a10080d2a20180d2030080d2c40180d2020000d4000000b2000028d50060000e"}}, @msr={0x14, 0x20, {0x603000000013e530, 0x401}}, @mrs={0xbe, 0x18, {0x6030000000139f71}}, @irq_setup={0x46, 0x18, {0x0, 0xe}}, @its_setup={0x82, 0x28, {0x3, 0x0, 0x277}}, @its_setup={0x82, 0x28, {0x2, 0x1, 0x8e}}, @its_setup={0x82, 0x28, {0x0, 0x0, 0x362}}], 0x14c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) (async) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) (async) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) (async) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) munmap(&(0x7f0000e76000/0x12000)=nil, 0x12000) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000f1a000/0x4000)=nil, 0x930, 0x0, 0x9032, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000f1a000/0x4000)=nil, 0x930, 0x0, 0x9032, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4360ae82, 0x0) mmap$KVM_VCPU(&(0x7f0000fed000/0x3000)=nil, 0x930, 0x0, 0x4030031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) 51m15.298176312s ago: executing program 3 (id=261): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000040)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013e66b, 0x5}}], 0x20}, &(0x7f0000000300)=[@featur2={0x1, 0x20}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4000ae84, &(0x7f0000000380)={{0x41000, 0x200000, 0xb, 0x8, 0x5, 0x0, 0x4, 0xee, 0xf8, 0x9c, 0x4, 0x86}, {0x2000, 0x1, 0xe, 0xf9, 0xc, 0x5, 0x9, 0x3, 0xb, 0x8, 0x8, 0x7}, {0xe6ef9002, 0x1004, 0x0, 0x3, 0x1c, 0xd, 0xcb, 0xf5, 0x3e, 0x8, 0x8, 0x8}, {0xd000, 0x200000, 0x0, 0x81, 0x1f, 0x84, 0x40, 0x1, 0x0, 0x80, 0x4, 0x10}, {0x8000000, 0x9000, 0xb, 0x1, 0x1, 0xfb, 0x10, 0x5, 0x5, 0xff, 0x0, 0x1}, {0x0, 0x3000, 0x10, 0x6e, 0x9, 0x7, 0x5, 0x7, 0x2, 0xff, 0x6, 0x3}, {0x0, 0x50000, 0x0, 0x5, 0x2, 0x90, 0x3c, 0xf, 0xfc, 0xb3, 0xf, 0x2}, {0x40000, 0x41000, 0x9, 0x2, 0x4, 0x2, 0x8, 0xb, 0x1, 0x1, 0x4, 0x7f}, {0x100000, 0x400}, {0x6000, 0x2}, 0xa0040001, 0x0, 0x100000, 0x5, 0xc, 0x1, 0xffffffff, [0x4945, 0x6, 0x400, 0x6]}) r6 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r7, 0x0) r8 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r10, 0x0) mmap$KVM_VCPU(&(0x7f0000e04000/0x2000)=nil, 0x930, 0x1, 0x11, r7, 0x0) r11 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r6, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, r11, 0x8, 0x13, r7, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_ARM_VCPU_INIT(r12, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) ioctl$KVM_SET_ONE_REG(r12, 0x4010aeac, &(0x7f00000000c0)=@arm64_sys={0x603000000013dce0, &(0x7f0000000000)=0x5}) 51m8.670234759s ago: executing program 2 (id=262): mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000000, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x8, 0x80800) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x48, 0xdddd1000, 0x0, r2}) close(r2) (async) close(r1) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) 51m3.618180802s ago: executing program 3 (id=263): openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0) (async) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2e) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x28) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r4, 0x4068aea3, &(0x7f0000000280)={0xdf, 0x0, 0x2000}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r6 = openat$kvm(0x0, &(0x7f0000000080), 0x80, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r8, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) (async) syz_kvm_add_vcpu$arm64(r8, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) r9 = syz_kvm_vgic_v3_setup(r7, 0x2, 0xe0) ioctl$KVM_GET_DEVICE_ATTR(r9, 0x4018aee2, &(0x7f0000000100)=@attr_other={0x0, 0x1, 0x6534, 0x0}) syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000540)={0x0, 0x0}, 0x0, 0x0) (async) r10 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000540)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_RESET_DIRTY_RINGS(r4, 0xaec7) syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000100)=[{0x0, 0x0}], 0x1, 0x0, &(0x7f00000003c0)=[@featur2={0x1, 0x17}], 0x1) ioctl$KVM_KVMCLOCK_CTRL(r10, 0xaead) openat$kvm(0x0, &(0x7f00000001c0), 0x0, 0x0) (async) r11 = openat$kvm(0x0, &(0x7f00000001c0), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r13, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) (async) r14 = syz_kvm_add_vcpu$arm64(r13, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_RUN(r14, 0xae80, 0x0) ioctl$KVM_SET_ONE_REG(r14, 0x4010aeac, &(0x7f0000000140)=@riscv64_aia_csr={0x8030000003010005, &(0x7f0000000000)=0x37}) (async) ioctl$KVM_SET_ONE_REG(r14, 0x4010aeac, &(0x7f0000000140)=@riscv64_aia_csr={0x8030000003010005, &(0x7f0000000000)=0x37}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@arm64={0xe6, 0x7, 0x8, '\x00', 0xff}) (async) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@arm64={0xe6, 0x7, 0x8, '\x00', 0xff}) 51m1.517499318s ago: executing program 2 (id=264): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x193300, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x25) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000b7b000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000000)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000280)=@arm64_core={0x6030000000100008, &(0x7f0000000100)=0x1000000000000017}) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x25) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, &(0x7f0000000100)=@arm64_bitmap={0x6030000000160003, &(0x7f0000000000)=0x1}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x18) r8 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) r11 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r11, 0xae04) r12 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x1) syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000c00000/0x400000)=nil) r14 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000300)=[@featur2={0x1, 0x4}], 0x1) syz_kvm_vgic_v3_setup(r13, 0x1, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r14, 0x4018aee1, &(0x7f0000000000)=@attr_pmu_irq={0x0, 0x0, 0x0, &(0x7f0000000040)=0xe7}) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r14, 0x4018aee2, &(0x7f00000000c0)=@attr_pmu_irq={0x0, 0x0, 0x0, &(0x7f0000000080)=0x7}) syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) 50m53.279162752s ago: executing program 2 (id=265): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x33) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = openat$kvm(0x0, &(0x7f0000000280), 0x103080, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r5 = syz_kvm_vgic_v3_setup(r4, 0x1, 0x40) ioctl$KVM_GET_DEVICE_ATTR(r5, 0x4018aee2, &(0x7f0000000100)=@attr_other={0x0, 0x5, 0x8, &(0x7f0000000140)=0x200a8a}) r6 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x0, 0x0, 0x2010, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000027000/0x13000)=nil, 0x930, 0x3, 0x4102932, 0xffffffffffffffff, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x22200, 0x0) r7 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r6, 0xae04) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x2b) ioctl$KVM_REGISTER_COALESCED_MMIO(r9, 0x4010ae67, &(0x7f0000000240)={0x1, 0xe000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x41000, 0x12f000, 0x1}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f0000001480)={0xfdfd, 0x13000, 0x1}) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, r7, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000002000/0x400000)=nil) r10 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}, 0x0, 0x0) r11 = syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8}) ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f00000001c0)=@attr_riscv64=@attr_addr={0x0, 0x1, @imsic=0x5, &(0x7f0000000300)=0x661}) ioctl$KVM_RUN(r10, 0xae80, 0x0) r12 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000100)={0xa983453cd6cf818b, 0x0, 0x6000, 0x2000, &(0x7f0000e65000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, &(0x7f00000002c0)={0x3, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x4, 0x2000000003, 0x0}) 50m45.574628337s ago: executing program 3 (id=266): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x2}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x4, 0x80003, 0xa, 0x0, 0x2, 0x2}}], 0x50}, 0x0, 0x0) (async) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x100, 0xd, &(0x7f0000000240)=0x7}) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) (async) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x1}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x300, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x28) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) (async) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r7, 0x4068aea3, &(0x7f0000000280)={0xdf, 0x0, 0x2000}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000e31000/0x2000)=nil, 0x930, 0xa, 0x2012, r8, 0x40000) (async) r9 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x8, 0xf, 0x0, 0x5, 0xf, 0x6, 0x6, 0x54, 0x86, 0xdd, 0xc4, 0x0, 0x20a, 0x0, 0x2, 0x2, 0x3, 0x5, '\x00', 0xfe, 0x7}) (async) r11 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r11, 0x4010ae67, &(0x7f0000000200)={0xc000, 0x11000, 0x1}) write$eventfd(r10, &(0x7f00000001c0)=0x3, 0x50) r12 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r13 = syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000bfd000/0x400000)=nil) r14 = syz_kvm_add_vcpu$arm64(r13, &(0x7f0000000b80)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r14, 0x4010aeac, &(0x7f0000000040)=@arm64_extra={0x603000000013c022, &(0x7f00000000c0)=0x6}) (async) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r15 = openat$kvm(0x0, &(0x7f0000000140), 0x10040, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r15, 0xae01, 0x0) 50m6.425374027s ago: executing program 34 (id=265): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x33) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = openat$kvm(0x0, &(0x7f0000000280), 0x103080, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r5 = syz_kvm_vgic_v3_setup(r4, 0x1, 0x40) ioctl$KVM_GET_DEVICE_ATTR(r5, 0x4018aee2, &(0x7f0000000100)=@attr_other={0x0, 0x5, 0x8, &(0x7f0000000140)=0x200a8a}) r6 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x0, 0x0, 0x2010, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000027000/0x13000)=nil, 0x930, 0x3, 0x4102932, 0xffffffffffffffff, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x22200, 0x0) r7 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r6, 0xae04) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x2b) ioctl$KVM_REGISTER_COALESCED_MMIO(r9, 0x4010ae67, &(0x7f0000000240)={0x1, 0xe000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x41000, 0x12f000, 0x1}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f0000001480)={0xfdfd, 0x13000, 0x1}) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, r7, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000002000/0x400000)=nil) r10 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}, 0x0, 0x0) r11 = syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8}) ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f00000001c0)=@attr_riscv64=@attr_addr={0x0, 0x1, @imsic=0x5, &(0x7f0000000300)=0x661}) ioctl$KVM_RUN(r10, 0xae80, 0x0) r12 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000100)={0xa983453cd6cf818b, 0x0, 0x6000, 0x2000, &(0x7f0000e65000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, &(0x7f00000002c0)={0x3, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x4, 0x2000000003, 0x0}) 49m58.360690333s ago: executing program 35 (id=266): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x2}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x4, 0x80003, 0xa, 0x0, 0x2, 0x2}}], 0x50}, 0x0, 0x0) (async) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x100, 0xd, &(0x7f0000000240)=0x7}) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) (async) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x1}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x300, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x28) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) (async) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r7, 0x4068aea3, &(0x7f0000000280)={0xdf, 0x0, 0x2000}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000e31000/0x2000)=nil, 0x930, 0xa, 0x2012, r8, 0x40000) (async) r9 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x8, 0xf, 0x0, 0x5, 0xf, 0x6, 0x6, 0x54, 0x86, 0xdd, 0xc4, 0x0, 0x20a, 0x0, 0x2, 0x2, 0x3, 0x5, '\x00', 0xfe, 0x7}) (async) r11 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r11, 0x4010ae67, &(0x7f0000000200)={0xc000, 0x11000, 0x1}) write$eventfd(r10, &(0x7f00000001c0)=0x3, 0x50) r12 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r13 = syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000bfd000/0x400000)=nil) r14 = syz_kvm_add_vcpu$arm64(r13, &(0x7f0000000b80)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r14, 0x4010aeac, &(0x7f0000000040)=@arm64_extra={0x603000000013c022, &(0x7f00000000c0)=0x6}) (async) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r15 = openat$kvm(0x0, &(0x7f0000000140), 0x10040, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r15, 0xae01, 0x0) 36m50.258592033s ago: executing program 4 (id=309): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x8800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x40000000, 0x80000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r5 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x27) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r8, 0x4010ae68, 0xfffffffffffffffe) syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r9, 0x4018aee2, &(0x7f0000000040)=@attr_pmu_init) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f00000001c0)="f21bc75509bf71c9d70236fc0448424234d6baffffffffff4c24501958da2e2c18b875c2357c6ed600", 0x0, 0x48) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x1}) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x8, 0xf, 0x0, 0x5, 0x6, 0x6, 0x6, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x1000009, 0x0, 0x0, 0x3, 0x5, 0x8, '\x00', 0x1, 0x400000000002}) write$eventfd(r12, &(0x7f00000001c0)=0x3, 0x50) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r13, &(0x7f00000001c0)=0xffffff7f, 0xff25) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x4c397dc9, 0xeeee8000, 0x0, r2, 0xf}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000001340)={0x0, 0x0, 0x2, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x5, 0x0, 0x0, r2, 0xa}) 36m44.857577314s ago: executing program 5 (id=310): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000180)=@arm64_core={0x6030000000100020, &(0x7f0000000200)=0x100}) 36m31.847308111s ago: executing program 5 (id=311): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, &(0x7f0000000080)={0x0, 0xffffff6e}) ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, &(0x7f00000001c0)={0x0, 0xffffffff}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x31) r7 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000000)={0x1}) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x2}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x1, 0x80000, 0x10000, 0x0, 0x0, 0x2}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r5, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r8, 0xae80, 0x0) r10 = syz_kvm_vgic_v3_setup(r1, 0x1, 0x40) ioctl$KVM_GET_DEVICE_ATTR(r10, 0x4018aee2, &(0x7f0000000100)=@attr_other={0x0, 0x1, 0x5, &(0x7f0000000140)=0x6}) 36m28.873831815s ago: executing program 4 (id=312): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x42741, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x40001, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r6, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) ioctl$KVM_GET_ONE_REG(r6, 0x4010aeab, &(0x7f0000000180)=@arm64_sys={0x603000000013df65, 0x0}) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r7, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffc000/0x3000)=nil, r8, 0x1, 0x12, r3, 0x0) r9 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, r9, 0x8, 0x13, r3, 0x0) r10 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r12, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x2000)=nil, r9, 0x1000001, 0x12, r3, 0x0) 35m55.395700967s ago: executing program 4 (id=313): openat$kvm(0x0, &(0x7f0000000080), 0x101e40, 0x0) (async) r0 = openat$kvm(0x0, &(0x7f0000000080), 0x101e40, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x28) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x28) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000b75000/0x400000)=nil) (async) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000b75000/0x400000)=nil) ioctl$KVM_SET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee1, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1f0100, 0x0) ioctl$KVM_CREATE_VM(r3, 0x400454d0, 0x23) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000000, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@eret={0xe6, 0x18, 0x5}, @hvc={0x32, 0x40, {0x2, [0x8, 0x8000000000000000, 0x3, 0x5, 0x5]}}, @mrs={0xbe, 0x18, {0x603000000013df54}}, @hvc={0x32, 0x40, {0xc400000e, [0x4, 0x40, 0x7, 0x1, 0x1000]}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x1, 0x4, 0x10, 0x35, 0xe75, 0x2}}, @memwrite={0x6e, 0x30, @generic={0x25000, 0xc3a, 0x5, 0x1}}, @uexit={0x0, 0x18, 0x6cd5}, @smc={0x1e, 0x40, {0xc4000001, [0x3, 0x6, 0x7b4, 0x1, 0x1]}}, @irq_setup={0x46, 0x18, {0x3, 0x302}}], 0x178}, 0x0, 0x0) (async) r5 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@eret={0xe6, 0x18, 0x5}, @hvc={0x32, 0x40, {0x2, [0x8, 0x8000000000000000, 0x3, 0x5, 0x5]}}, @mrs={0xbe, 0x18, {0x603000000013df54}}, @hvc={0x32, 0x40, {0xc400000e, [0x4, 0x40, 0x7, 0x1, 0x1000]}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x1, 0x4, 0x10, 0x35, 0xe75, 0x2}}, @memwrite={0x6e, 0x30, @generic={0x25000, 0xc3a, 0x5, 0x1}}, @uexit={0x0, 0x18, 0x6cd5}, @smc={0x1e, 0x40, {0xc4000001, [0x3, 0x6, 0x7b4, 0x1, 0x1]}}, @irq_setup={0x46, 0x18, {0x3, 0x302}}], 0x178}, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 35m54.430465012s ago: executing program 5 (id=314): r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x82880, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000140), 0x101282, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000bc5000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0) r9 = syz_kvm_vgic_v3_setup(r7, 0x2, 0x120) ioctl$KVM_HAS_DEVICE_ATTR(r9, 0x4018aee3, &(0x7f00000002c0)=@attr_arm64={0x0, 0x5, 0x1, 0x0}) r10 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r11 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil) r14 = syz_kvm_add_vcpu$arm64(r13, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@smc={0x1e, 0x40, {0x84000053, [0x1000009, 0x8000000000000001, 0xfffffffffffffffc, 0xb4d5, 0x9]}}], 0x40}, 0x0, 0x0) ioctl$KVM_RUN(r14, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000c0b000/0x1000)=nil, r10, 0x2000003, 0x11, r5, 0x0) r15 = syz_kvm_add_vcpu$arm64(r0, &(0x7f0000000100)={0x0, &(0x7f0000000880)=[@msr={0x14, 0x20, {0x603000000013defc, 0x5a8}}], 0x20}, 0x0, 0x0) ioctl$KVM_RUN(r15, 0xae80, 0x0) 35m44.613840432s ago: executing program 4 (id=315): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x7, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f00000002c0)=@attr_arm64={0x0, 0x4, 0x0, 0x0}) r4 = eventfd2(0x8801, 0x800) r5 = eventfd2(0x3ff, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r5, 0x1, 0x2, r5}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000140)={r5, 0x5, 0x2, r4}) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0x80111500, 0xfffffffffffff000) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000140)={0x7}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x7}) (async) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f00000002c0)=@attr_arm64={0x0, 0x4, 0x0, 0x0}) (async) eventfd2(0x8801, 0x800) (async) eventfd2(0x3ff, 0x0) (async) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r5, 0x1, 0x2, r5}) (async) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000140)={r5, 0x5, 0x2, r4}) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) (async) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r7, 0x80111500, 0xfffffffffffff000) (async) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000140)={0x7}) (async) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) 35m38.792391821s ago: executing program 5 (id=316): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f0000000380)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x7ffe}}], 0x20}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = eventfd2(0x4, 0x0) write$eventfd(r4, &(0x7f0000000400)=0xfffffffffffffffc, 0x8) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0xc3033, 0xffffffffffffffff, 0x0) syz_kvm_add_vcpu$arm64(0x0, 0x0, 0x0, 0x0) close(0x4) close(0x5) syz_kvm_vgic_v3_setup(r1, 0x2, 0x0) 35m27.905450771s ago: executing program 4 (id=317): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) r1 = openat$kvm(0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r3, 0xae03, 0x83) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f00000001c0)={0x200001fe4000, 0x1}) mmap$KVM_VCPU(&(0x7f0000ffc000/0x1000)=nil, 0x930, 0x2000002, 0x2013, r5, 0x0) 35m23.150544505s ago: executing program 5 (id=318): openat$kvm(0x0, &(0x7f00000000c0), 0x490e00, 0x0) r0 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r2, r3, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000000)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000080)=@arm64_core={0x603000000010002c, &(0x7f0000000140)=0x80000000}) munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) munmap(&(0x7f0000eed000/0x4000)=nil, 0x4000) munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000) r4 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f00000001c0)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000380)}) ioctl$KVM_GET_DEVICE_ATTR(r6, 0x4018aee2, &(0x7f0000000080)=@attr_other={0x0, 0x8, 0x100, &(0x7f0000000040)}) munmap(&(0x7f0000e51000/0x4000)=nil, 0x4000) mmap$KVM_VCPU(&(0x7f0000c79000/0x4000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0) 35m13.42849423s ago: executing program 4 (id=319): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) (async) r4 = eventfd2(0x0, 0x0) close(r4) (async) r5 = eventfd2(0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000004000/0x4000)=nil, 0x930, 0x0, 0x11, r5, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) (async) r6 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000100)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r9, 0x4010aeab, &(0x7f00000002c0)=@arm64_core={0x6030000000100014, &(0x7f0000000300)=0x55b8}) (async) write$eventfd(r4, &(0x7f0000000180)=0x5, 0xfffffde3) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0) write$eventfd(r4, 0x0, 0x0) (async) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000002000/0x400000)=nil) (async, rerun: 32) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) (async, rerun: 32) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0) 35m4.960848123s ago: executing program 5 (id=320): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 64) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (rerun: 64) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffc000/0x3000)=nil, r5, 0x1, 0x12, r3, 0x0) (async, rerun: 64) r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) (rerun: 64) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, r6, 0x8, 0x13, r3, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x2000)=nil, r6, 0x1000001, 0x12, r3, 0x0) 34m26.158050106s ago: executing program 36 (id=319): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) (async) r4 = eventfd2(0x0, 0x0) close(r4) (async) r5 = eventfd2(0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000004000/0x4000)=nil, 0x930, 0x0, 0x11, r5, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) (async) r6 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000100)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r9, 0x4010aeab, &(0x7f00000002c0)=@arm64_core={0x6030000000100014, &(0x7f0000000300)=0x55b8}) (async) write$eventfd(r4, &(0x7f0000000180)=0x5, 0xfffffde3) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0) write$eventfd(r4, 0x0, 0x0) (async) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000002000/0x400000)=nil) (async, rerun: 32) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) (async, rerun: 32) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0) 34m16.841210863s ago: executing program 37 (id=320): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 64) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (rerun: 64) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffc000/0x3000)=nil, r5, 0x1, 0x12, r3, 0x0) (async, rerun: 64) r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) (rerun: 64) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, r6, 0x8, 0x13, r3, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x2000)=nil, r6, 0x1000001, 0x12, r3, 0x0) 25m59.630278211s ago: executing program 7 (id=322): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x2a) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@its_setup={0x7, 0x28, {0x2, 0x2, 0x1}}], 0x28}, 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04) syz_kvm_vgic_v3_setup(r6, 0x3, 0xa0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000100)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f0000000000)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000180)=0x8080000}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f0000000300)=@attr_arm64={0x0, 0x4, 0x1, 0x0}) (async, rerun: 64) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x4, 0x2, 0x0}) r10 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000b80)={0x0, 0x0}, &(0x7f0000000340)=[@featur2={0x1, 0x4}], 0x1) ioctl$KVM_SET_ONE_REG(r10, 0x4010aeac, &(0x7f0000000140)=@arm64_fw={0x6030000000140000, &(0x7f0000000180)=0x2}) r11 = syz_kvm_add_vcpu$arm64(r1, &(0x7f0000000b80)={0x0, &(0x7f0000000000)=[@hvc={0x32, 0x40, {0xc4000011, [0x100000004, 0x8000000000000000, 0xffffffffffffffff, 0x6, 0xfffffffffffeffff]}}], 0x40}, &(0x7f0000000040)=[@featur1={0x1, 0x4}], 0x1) r12 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = eventfd2(0xfffffffa, 0x80001) ioctl$KVM_IOEVENTFD(r13, 0x4040ae79, &(0x7f0000000140)={0x80, 0x4, 0x0, r14}) ioctl$KVM_REGISTER_COALESCED_MMIO(r13, 0x4010ae67, &(0x7f0000000080)={0x7001, 0x37d03030d7a92616}) ioctl$KVM_REGISTER_COALESCED_MMIO(r13, 0x4010ae67, &(0x7f0000000180)={0x5000}) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r15 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r15, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) 25m34.257565131s ago: executing program 7 (id=324): openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x24) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f0000000240)={0x200002f}) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r5, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000140)={0x0, 0x0}, 0x0, 0x0) r7 = syz_kvm_vgic_v3_setup(r0, 0x1, 0x40) close(r6) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000f9a000/0x3000)=nil, 0x3000) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000fff000/0x1000)=nil, 0x0, 0x1000003, 0x220010, 0xffffffffffffffff, 0x9000000) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) munmap(&(0x7f0000e76000/0x12000)=nil, 0x12000) mmap$KVM_VCPU(&(0x7f0000f1a000/0x4000)=nil, 0x930, 0x0, 0x9032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000fed000/0x3000)=nil, 0x930, 0x0, 0x4030031, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) close(0x4) close(r7) close(0x5) r8 = syz_kvm_setup_syzos_vm$arm64(r0, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) 25m33.477645153s ago: executing program 6 (id=325): mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) mmap$KVM_VCPU(&(0x7f00006c4000/0x4000)=nil, r0, 0x7, 0x2010, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x9000000) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x2000000a, 0x80000) write$eventfd(r1, &(0x7f0000000000)=0xffffffffffffffff, 0x8) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) munmap(&(0x7f0000e76000/0x12000)=nil, 0x12000) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000f1a000/0x4000)=nil, 0x930, 0x0, 0x9032, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4360ae82, 0x0) mmap$KVM_VCPU(&(0x7f0000fed000/0x3000)=nil, 0x930, 0x0, 0x4030031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) munmap(&(0x7f0000011000/0xc00000)=nil, 0xc00000) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) munmap(&(0x7f0000d8f000/0x4000)=nil, 0x4000) munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x3000000, 0x4d832, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x28081, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) 25m11.128363391s ago: executing program 6 (id=326): r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000bff000/0x400000)=nil, &(0x7f0000000c00)=[{0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x3, 0x3, 0x185}}, @eret={0xe6, 0x18, 0x42d5}, @hvc={0x32, 0x40, {0xc4000005, [0x2, 0x543ba709, 0x4, 0x7, 0x3]}}, @eret={0xe6, 0x18, 0xc22}, @svc={0x122, 0x40, {0x5000000, [0x5, 0x1, 0x5, 0x2, 0x6]}}, @hvc={0x32, 0x40, {0xc4000007, [0x401, 0x2, 0x1, 0x8, 0x5]}}, @its_setup={0x82, 0x28, {0x2, 0x4, 0x311}}, @smc={0x1e, 0x40, {0x200, [0x0, 0x8, 0x2, 0x8, 0xfffffffffffffff9]}}, @hvc={0x32, 0x40, {0xc5000021, [0xffffffffffff0000, 0x0, 0x3, 0x9, 0x6]}}, @msr={0x14, 0x20, {0x6030000000138012, 0x5}}, @msr={0x14, 0x20, {0x603000000013dea9, 0x4}}, @uexit={0x0, 0x18, 0x2}, @uexit={0x0, 0x18, 0x1}], 0x230}], 0x1, 0x0, &(0x7f0000000c40)=[@featur2={0x1, 0x8}], 0x1) (async) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000040)=@arm64_sys={0x603000000013c028, &(0x7f0000000600)=0x6}) 25m9.548241355s ago: executing program 7 (id=327): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2e) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000740)={0x0, &(0x7f0000000bc0)=[@smc={0x1e, 0x40, {0x84000011, [0x885a, 0x86, 0x5, 0xe63, 0x5]}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80e0000, 0xc00, 0x8, 0x4}}, @msr={0x14, 0x20, {0x603000000013e703, 0x8}}, @smc={0x1e, 0x40, {0x84000014, [0x3, 0x6, 0x2, 0x3, 0x80]}}, @memwrite={0x6e, 0x30, @generic={0x1, 0x11, 0x81, 0x1}}, @eret={0xe6, 0x18, 0x91}, @smc={0x1e, 0x40, {0x80008000, [0x6, 0x8, 0xd56, 0x7dd, 0x5]}}, @code={0xa, 0x84, {"00c8a05e007008d5408e8ed200e0b0f2010180d2420080d2230080d2e40080d2020000d4000008d540919ad20000b0f2210080d2820080d2c30180d2440080d2020000d4000008d5404781d20000b8f2e10180d2220180d2e30080d2640180d2020000d40008c09a007008d500fc200e"}}, @msr={0x14, 0x20, {0x603000000013c006}}, @its_setup={0x82, 0x28, {0x0, 0x0, 0x104}}, @uexit={0x0, 0x18, 0x4}, @code={0xa, 0x54, {"000800b80040800c0050005e0004006e007008d5007008d5007008d5000008d5001597d200e0b8f2010080d2020180d2a30180d2840080d2020000d4000028d5"}}, @mrs={0xbe, 0x18, {0x603000000013e642}}, @its_setup={0x82, 0x28, {0x0, 0x4, 0x240}}, @irq_setup={0x46, 0x18, {0x1, 0x3bd}}, @smc={0x1e, 0x40, {0x40000486, [0x7ff, 0x7, 0x9, 0x7fffffffffffffff, 0x8f2]}}, @svc={0x122, 0x40, {0x80007fff, [0x42b56188, 0x3, 0x7fffffff, 0x12, 0x7]}}], 0x368}, &(0x7f0000000780)=[@featur2={0x1, 0x46}], 0x1) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000b80)={0x0, &(0x7f0000000100)=[@smc={0x1e, 0x40, {0x8400000a, [0x84000015, 0x7, 0xaca, 0x2, 0x10]}}], 0x40}, &(0x7f00000000c0)=[@featur2={0x1, 0x65}], 0x1) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x1}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x1}) r10 = ioctl$KVM_CREATE_VM(r9, 0x894c, 0x2) ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f0000000200)={0xb6, 0x0, 0x9}) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = eventfd2(0x5, 0x800) ioctl$KVM_IOEVENTFD(r12, 0x4040ae79, &(0x7f00000000c0)={0x8000000008000800, 0x0, 0x0, r13, 0x2}) ioctl$KVM_IOEVENTFD(r12, 0x4040ae79, &(0x7f0000000000)={0x1, 0x0, 0x0, r13, 0x2}) r14 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0) r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r15, &(0x7f0000c00000/0x400000)=nil) r16 = ioctl$KVM_CREATE_VCPU(r15, 0xae41, 0x1) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r16, 0x4018aee2, &(0x7f00000000c0)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0xffffffffffffffff}) ioctl$KVM_CREATE_VCPU(r10, 0x8008b70d, 0xfffffffffffffffb) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000100)=[{0x0, 0x0}], 0x1, 0x0, &(0x7f00000003c0)=[@featur2={0x1, 0x17}], 0x1) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)=@arm64_core={0x6030000000100042, &(0x7f0000000000)=0xfffffffffffffffe}) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f00000001c0)=@riscv64_v={0x8030000009000022, &(0x7f0000000180)=0x2324}) 24m56.406225707s ago: executing program 6 (id=328): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x28) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x2b) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r4 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r6, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f0000000080)="fb0149dd033be3abf408020000001b0000005a9610fbff67521ce16f8f1f449a7ab2aa76c829d2262f00000000000000000200df38000000000000000020001e91114900", 0x0, 0xfda9) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r6, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x100, 0x0) r8 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r10, 0x4008ae6a, &(0x7f00000002c0)={0x2, 0x0, [{0x3, 0x1, 0x0, 0x0, @adapter={0x0, 0x6a, 0x8, 0x5, 0x3}}, {0x3, 0x1, 0x0, 0x0, @msi={0x0, 0xf, 0x9, 0xfffffff9}}]}) r11 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r12, 0x8040aeb6, &(0x7f00000001c0)=@attr_other={0x0, 0x0, 0x5, &(0x7f0000000100)=0x9}) r13 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r13, 0x4010aeab, &(0x7f00000000c0)=@arm64_core={0x6030000000100028, &(0x7f0000000080)=0x8e5}) r14 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r15 = syz_kvm_add_vcpu$arm64(r14, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=[@featur2={0x1, 0x2}], 0x1) ioctl$KVM_RUN(r15, 0xae80, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xfffffffffffffffc) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x1}) r16 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r17 = ioctl$KVM_CREATE_VM(r16, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r17, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x6, 0xf, 0x0, 0x5, 0x6, 0x86, 0x6, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x0, 0x800001, 0x0, 0x3, 0x5, 0x8, '\x00', 0x9, 0x93}) 24m37.392940678s ago: executing program 7 (id=329): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000080)={0x5, 0x1}) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f00000000c0)=@arm64_fw={0x6030000000140000, &(0x7f0000000180)=0x7}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1000009, 0x16831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x100000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000380)={0x2, 0x25000, 0x1}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f0000000240)={0xffff1000, 0xa000}) 24m27.880250903s ago: executing program 6 (id=330): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x9) r1 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000140)={0x2, 0x4}) ioctl$KVM_SET_USER_MEMORY_REGION2(r0, 0x40a0ae49, &(0x7f0000000180)={0x10001, 0x1, 0x41000, 0x1000, &(0x7f0000fc0000/0x1000)=nil, 0x100000000, r1}) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x2041, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r6, 0x3, 0x11, r5, 0x40000) r7 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r10, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)={0xef000000, 0x1000, 0x2}}) r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@hvc={0x32, 0x40, {0xc5000021, [0x8001, 0xffffffffffff449b, 0xffffffffffffffff, 0x2, 0xfffffffffffffff9]}}], 0x40}, 0x0, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) r13 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r14 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r14, 0x0) r15 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r13, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffc000/0x3000)=nil, r15, 0x1, 0x11, r14, 0x0) r16 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r13, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, r16, 0x8, 0x13, r14, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x2000)=nil, r16, 0x1000001, 0x12, r14, 0x0) ioctl$KVM_GET_STATS_FD_vm(r10, 0xaece) r17 = openat$kvm(0x0, &(0x7f0000000040), 0x400, 0x0) ioctl$KVM_CREATE_VM(r17, 0x80086601, 0x20000000) 24m18.217997059s ago: executing program 7 (id=331): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x22) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x1fe, 0x3, 0xffff1000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000000)={0x0, 0x0}, &(0x7f00000000c0)=[@featur1={0x1, 0x5}], 0x1) r8 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000b80)={0x0, &(0x7f0000000100)=[@smc={0x1e, 0x40, {0x84000003, [0x80000000000000, 0x53960c3d, 0xac8, 0x2, 0x8000000000000000]}}], 0x40}, &(0x7f00000001c0)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_GET_ONE_REG(r7, 0x4010aeab, &(0x7f0000000140)=@arm64_fp={0x604000000010005c, &(0x7f0000000080)=0xe03}) ioctl$KVM_ARM_VCPU_INIT(0xffffffffffffffff, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x2c) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000040)=@arm64_bitmap={0x6030000000160002, &(0x7f0000000000)=0xd3}) 24m4.555989927s ago: executing program 6 (id=332): r0 = openat$kvm(0x0, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0xc2881, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000140), 0x101282, 0x0) r7 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) r9 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r6, 0xae04) mmap$KVM_VCPU(&(0x7f0000c0b000/0x1000)=nil, r9, 0x3, 0x40b2811, r8, 0x0) r10 = syz_kvm_add_vcpu$arm64(r3, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x3, 0x1, 0x1}}], 0x28}, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) r11 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r12 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil) r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0xfffffffffffffffe}}, @msr={0x14, 0x20, {0x603000000013dce1, 0xffffffffffff7fff}}], 0x40}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r13, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) ioctl$KVM_RUN(r13, 0xae80, 0x0) syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000a00)={0x0, &(0x7f0000000380)=[@eret={0xe6, 0x18, 0xfffffffffffffffc}, @hvc={0x32, 0x40, {0x80008000, [0xa7e, 0x9, 0x400, 0x3, 0x9]}}, @its_setup={0x82, 0x28, {0x0, 0x0, 0x76}}, @eret={0xe6, 0x18, 0x2}, @uexit={0x0, 0x18, 0x5}, @msr={0x14, 0x20, {0x603000000013df73, 0x4}}, @hvc={0x32, 0x40, {0xc400000c, [0x1, 0x4, 0x4, 0xde7, 0x80000000]}}, @mrs={0xbe, 0x18, {0x6030000000138014}}, @its_setup={0x82, 0x28, {0x3, 0x4, 0x1fb}}, @eret={0xe6, 0x18, 0x24}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80c0000, 0x400, 0x5}}, @code={0xa, 0xcc, {"000028d5c05788d20060b8f2410080d2220180d2c30180d2840180d2020000d4c0d09bd20040b8f2010180d2a20080d2630180d2640080d2020000d4a0289ad200a0b8f2610080d2a20180d2c30080d2e40180d2020000d4007008d5c0ef8bd20060b8f2c10180d2820080d2830080d2840080d2020000d4008008d5a09799d200a0b0f2810180d2e20080d2a30180d2240180d2020000d4004c207e40ee86d200c0b0f2a10080d2020180d2e30080d2c40180d2020000d4"}}, @its_setup={0x82, 0x28, {0x3, 0x0, 0x2e}}, @its_send_cmd={0xaa, 0x28, {0x4, 0x0, 0x2, 0x3, 0x3, 0xbd74}}, @irq_setup={0x46, 0x18, {0x2, 0x2f}}, @code={0xa, 0xcc, {"00fc202ea05583d200c0b8f2610080d2e20080d2a30180d2e40180d2020000d4007008d5007008d5607c85d20060b0f2010180d2220180d2e30080d2a40180d2020000d420c69dd200c0b8f2610080d2e20080d2c30180d2440180d2020000d4408388d20020b8f2610080d2620080d2630080d2440180d2020000d480e29fd20040b8f2c10080d2220180d2230180d2040180d2020000d480b684d200c0b0f2e10180d2a20080d2c30180d2a40080d2020000d4000008d5"}}, @svc={0x122, 0x40, {0x1000, [0x2, 0x5, 0x8000000000000001, 0x9, 0x6]}}, @svc={0x122, 0x40, {0x0, [0x3, 0x9, 0x3, 0x3, 0x1800000]}}, @msr={0x14, 0x20, {0x6030000000138036, 0x3ff}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x0, 0x2, 0x6, 0x9, 0x200, 0x4}}, @smc={0x1e, 0x40, {0x80003fff, [0x0, 0x1, 0x0, 0x10, 0x4279]}}, @hvc={0x32, 0x40, {0xc4000011, [0x7, 0x373, 0x7fffffffffffffff, 0x9, 0xee]}}, @hvc={0x32, 0x40, {0x8400000c, [0x100000001, 0x2, 0x6, 0x2, 0xfff]}}, @msr={0x14, 0x20, {0x603000000013defe, 0x101}}, @msr={0x14, 0x20, {0x603000000013c018, 0x3}}, @uexit={0x0, 0x18, 0xb863}, @smc={0x1e, 0x40, {0x800, [0x4, 0x1, 0x0, 0x40, 0x2]}}, @smc={0x1e, 0x40, {0x8, [0x6, 0x2, 0x18e3a028, 0x3, 0x7fffffff]}}, @irq_setup={0x46, 0x18, {0x0, 0x360}}, @mrs={0xbe, 0x18, {0x603000000013802f}}, @msr={0x14, 0x20, {0x603000000013c602, 0x2354}}], 0x648}, &(0x7f0000000a40)=[@featur1={0x1, 0x8}], 0x1) r14 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r14, 0x4360ae82, 0xfffffffffffffffe) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 23m51.615980258s ago: executing program 7 (id=333): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2e) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000140)=[{0x0, 0x0}], 0x1, 0x0, &(0x7f00000003c0)=[@featur2={0x1, 0x3}], 0x1) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000180)=@arm64_core={0x6030000000100042, &(0x7f0000000000)=0x80003ff}) mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000bff000/0x400000)=nil) r3 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000680)="38ce8347fc1e86008cfc72bb352c8659dcc9225b48cb5cb00c73b0b33018748e73f7f1f493e89c859e17625ad1b19ca88da9c227db3473a7fd4ce992bfc316bd22ccc646cd69c728", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xf, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0) 23m43.539828568s ago: executing program 6 (id=334): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x200000001fffe) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000300)=[@featur2], 0x1) syz_kvm_setup_cpu$arm64(r1, r0, &(0x7f0000bfd000/0x400000)=nil, &(0x7f00000000c0)=[{0x0, 0x0, 0x4a}], 0x1, 0x0, &(0x7f0000000100)=[@featur1={0x1, 0x12}], 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x32) r4 = openat$kvm(0x0, &(0x7f00000002c0), 0x10000, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x10400, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x8004000000815) r6 = mmap$KVM_VCPU(&(0x7f0000f81000/0x2000)=nil, 0x0, 0x2800002, 0x10010, r5, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000300)="fb4149dd033b8986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67525673312b01040000000000002627e7000000000000000200", 0x0, 0xfffffffffffffe73) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x2, 0x1010, r5, 0x0) r7 = eventfd2(0xffffffff, 0x800) close(r7) r8 = eventfd2(0x0, 0x80800) close(r8) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x109272, 0x1f01) write$eventfd(r8, &(0x7f0000000180)=0x6, 0x8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8082, 0x0) write$eventfd(r7, &(0x7f0000000100)=0xfffffffffffffffe, 0xfdef) openat$kvm(0x0, &(0x7f0000000140), 0x400, 0x0) r9 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x4000000000e) ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f00000000c0)={0x7, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x1000004, 0x81, &(0x7f0000000280)=0x7}) ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f0000000080)=@attr_arm64={0x0, 0x1, 0x1, &(0x7f0000000240)}) r11 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) ioctl$KVM_ARM_VCPU_INIT(r11, 0x4020aeae, &(0x7f0000000000)={0x5, 0x4}) ioctl$KVM_RUN(r11, 0xae80, 0x0) 23m4.057869323s ago: executing program 38 (id=333): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2e) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000140)=[{0x0, 0x0}], 0x1, 0x0, &(0x7f00000003c0)=[@featur2={0x1, 0x3}], 0x1) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000180)=@arm64_core={0x6030000000100042, &(0x7f0000000000)=0x80003ff}) mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000bff000/0x400000)=nil) r3 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000680)="38ce8347fc1e86008cfc72bb352c8659dcc9225b48cb5cb00c73b0b33018748e73f7f1f493e89c859e17625ad1b19ca88da9c227db3473a7fd4ce992bfc316bd22ccc646cd69c728", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xf, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0) 22m53.349130996s ago: executing program 39 (id=334): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x200000001fffe) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000300)=[@featur2], 0x1) syz_kvm_setup_cpu$arm64(r1, r0, &(0x7f0000bfd000/0x400000)=nil, &(0x7f00000000c0)=[{0x0, 0x0, 0x4a}], 0x1, 0x0, &(0x7f0000000100)=[@featur1={0x1, 0x12}], 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x32) r4 = openat$kvm(0x0, &(0x7f00000002c0), 0x10000, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x10400, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x8004000000815) r6 = mmap$KVM_VCPU(&(0x7f0000f81000/0x2000)=nil, 0x0, 0x2800002, 0x10010, r5, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000300)="fb4149dd033b8986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67525673312b01040000000000002627e7000000000000000200", 0x0, 0xfffffffffffffe73) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x2, 0x1010, r5, 0x0) r7 = eventfd2(0xffffffff, 0x800) close(r7) r8 = eventfd2(0x0, 0x80800) close(r8) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x109272, 0x1f01) write$eventfd(r8, &(0x7f0000000180)=0x6, 0x8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8082, 0x0) write$eventfd(r7, &(0x7f0000000100)=0xfffffffffffffffe, 0xfdef) openat$kvm(0x0, &(0x7f0000000140), 0x400, 0x0) r9 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x4000000000e) ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f00000000c0)={0x7, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x1000004, 0x81, &(0x7f0000000280)=0x7}) ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f0000000080)=@attr_arm64={0x0, 0x1, 0x1, &(0x7f0000000240)}) r11 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) ioctl$KVM_ARM_VCPU_INIT(r11, 0x4020aeae, &(0x7f0000000000)={0x5, 0x4}) ioctl$KVM_RUN(r11, 0xae80, 0x0) 3m21.490255276s ago: executing program 8 (id=383): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xd7, 0x80000001}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x29) syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000340)=[@uexit={0x0, 0x18, 0x1f95}, @svc={0x122, 0x40, {0x100, [0x9, 0x7030, 0x3, 0x5, 0x3]}}, @code={0xa, 0x6c, {"008008d50044207e0000809a007008d5006c200e007c001b20ec99d20040b8f2810180d2e20180d2230180d2240180d2020000d4a0a19dd20080b0f2810180d2620080d2630080d2640080d2020000d40820601e000008d5"}}], 0xc4}, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r7 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r6, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0xffffffffffffffa7) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r6, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x202, 0x2, 0x1, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) r11 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) r12 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x1800002, 0x11, r11, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r12, 0x20, &(0x7f0000000200)="f301181301d136000000000000f4ff0000802346cbd987000001000200ecff0900010200250000000000000000000000000001000000000040000000000000000000000100", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r11, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r10, 0x40305829, &(0x7f0000000040)=@attr_arm64={0x0, 0x0, 0x0, 0x0}) 3m3.878143562s ago: executing program 9 (id=384): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f00000001c0)={0x2, 0x0, [{0x0, 0x2, 0x0, 0x0, @sint={0x6, 0x5}}, {0xfff, 0x5, 0x0, 0x0, @adapter={0xe, 0x7, 0x7, 0x3, 0x3ff}}]}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x700, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0x80111500, 0x20000000) write$eventfd(r9, &(0x7f0000000000), 0xfffffdef) munmap$KVM_VCPU(0x0, 0x1000000000) ioctl$KVM_GET_ONE_REG(r7, 0x4010aeab, &(0x7f0000000180)=@riscv64_sbi_fwft={0x803000000a010004, &(0x7f0000000100)=0x4}) (async) r10 = eventfd2(0xeffffffd, 0x801) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000000)={0x200, 0x4000, 0x4, r10, 0x1}) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000001340)={0x3, 0x0, 0x2, r10, 0x3}) (async) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000000c0)={0x1000000000003, 0x0, 0x2, r10}) 2m52.0588342s ago: executing program 8 (id=385): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000b80)={0x0, &(0x7f0000000100)=[@smc={0x1e, 0x40, {0x8400000a, [0x84000001, 0xa, 0x0, 0x6, 0x10]}}], 0x40}, &(0x7f00000000c0)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = openat$kvm(0x0, &(0x7f0000000000), 0x2, 0x0) r7 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r8, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)={0xef000000, 0x1000, 0x2}}) syz_kvm_vgic_v3_setup(r8, 0x2, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r8, 0xc040aed4, &(0x7f0000000140)={0xebe5, 0x5}) close(r8) r9 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r8, 0x4010ae74, &(0x7f0000000180)={0x6, 0x1000, 0x7}) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r11 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r6, 0xae04) mmap$KVM_VCPU(&(0x7f0000e31000/0x2000)=nil, r11, 0x1, 0x2012, r10, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000001c0)={0x5000, 0x25000, 0x15ebde45, 0x0, 0x7f}) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x2000001, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x0) syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r12 = ioctl$KVM_CREATE_GUEST_MEMFD(r5, 0xc040aed4, &(0x7f0000000000)={0xaa77, 0x6}) ioctl$KVM_SET_USER_MEMORY_REGION2(r5, 0x40a0ae49, &(0x7f0000000040)={0x2, 0x0, 0x50000, 0x1000, &(0x7f0000d5f000/0x1000)=nil, 0xa2b, r12}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000240)={0x1fe, 0x3, 0xffff6000, 0x1000, &(0x7f0000b24000/0x1000)=nil}) mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0xb, 0x28031, 0xffffffffffffffff, 0x0) 2m36.680167709s ago: executing program 9 (id=386): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8902, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x69) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_GUEST_DEBUG_arm64(r3, 0x4208ae9b, &(0x7f0000000240)={0x659aa93486115af1, 0x0, {[0x1, 0x5, 0xffff, 0x8, 0x2, 0x7, 0x102, 0x641, 0x1, 0x53, 0x59, 0x3ff, 0x100000001, 0xcf3b, 0x8, 0x40006], [0x8, 0x7, 0x4, 0x6, 0x7, 0x0, 0x4000000042, 0x2, 0x3, 0x1, 0xa, 0x8000000000000001, 0x8, 0x9, 0x8, 0x6], [0x31, 0x53, 0xe, 0xf59, 0x5, 0x2, 0x4, 0xc, 0x1, 0x1, 0x9, 0x2, 0x3, 0x9, 0x78], [0xd6ef, 0x9, 0x4, 0x5, 0x83ff, 0x0, 0x0, 0xd, 0x7, 0x80, 0xd, 0xabb, 0xffffffffffffffff, 0x623, 0x1, 0x2]}}) 2m20.885697006s ago: executing program 8 (id=387): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x29) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x20}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async, rerun: 64) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000140)=@riscv64_config={0x1, &(0x7f00000000c0)=0x8000}) (async, rerun: 64) openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0) (rerun: 64) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x25) r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r6, 0x0) ioctl$KVM_GET_API_VERSION(r5, 0xae00, 0x0) (async) syz_kvm_vgic_v3_setup(r4, 0x3, 0x100) r7 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r9, 0x0) (async) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r11 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r10, 0xae04) mmap$KVM_VCPU(&(0x7f0000c60000/0x2000)=nil, r11, 0x300000a, 0x16831, 0xffffffffffffffff, 0x0) (async) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) (async) mmap$KVM_VCPU(&(0x7f0000e04000/0x2000)=nil, 0x930, 0x1, 0x11, r6, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0x3}) (async) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r12, 0xc0189436, 0x1ffffffc) (async) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) (async) r13 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, r13, 0x8, 0x13, r6, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) 2m16.322071101s ago: executing program 9 (id=388): r0 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r1 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r2 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x1000)=nil, r0, 0x300000a, 0x40010, r1, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r1, 0x4018aee3, &(0x7f0000000000)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0x9}) ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000040)) ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000080)) ioctl$KVM_RUN(r1, 0xae80, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f00000000c0)="7da42f11c8316d25d44498f4f8599e324b11e030685f46ff03a78bf70d71da39a2f4705a5b28a6a5922183a5d08d147f8a3832f74129a52a66fcdf5e74699128459c37cab303a0c1", 0x0, 0x48) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x101ff, 0x5, 0x58000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x36) ioctl$KVM_SET_SREGS(r1, 0x4000ae84, &(0x7f0000000180)={{0x1000, 0xe000, 0x3, 0xff, 0x8, 0x0, 0x0, 0x80, 0x8, 0x9, 0x1, 0x50}, {0x30000, 0x60000, 0xb, 0x2, 0x2, 0x2, 0x7c, 0x2, 0x2, 0x10, 0x9, 0x6}, {0x10000, 0x80a0000, 0x6, 0x5, 0x81, 0x87, 0x6, 0x5, 0x5, 0x6, 0x2, 0x2}, {0xffffffff, 0x58000, 0x0, 0x7f, 0x8, 0x6, 0x4, 0x2, 0x8, 0x6, 0x7}, {0x60000, 0x5000, 0x9, 0x40, 0x3b, 0x6, 0x10, 0x1, 0x2, 0xbf, 0x8, 0x5f}, {0x70000, 0x40000, 0xb, 0x8, 0x7, 0x0, 0x8, 0x7, 0x2, 0x9, 0x8}, {0xfec00000, 0x58000, 0x4, 0x0, 0xa, 0x1, 0xb, 0x69, 0xff, 0x1, 0x7, 0x2}, {0x967c01b86d8473c5, 0x2000, 0xa, 0xc, 0xff, 0x94, 0x44, 0x6, 0x4, 0x7, 0x8, 0xd}, {0x54000, 0x3ff}, {0xeeef0000, 0xe0}, 0x60000020, 0x0, 0x7000, 0x4, 0xd, 0x1001, 0xdddd0000, [0xffffffffffffffff, 0x5, 0xba, 0x400]}) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r1, 0x4018aee2, &(0x7f0000000300)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f00000002c0)={0xae0b}}) ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, &(0x7f0000000340)) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) munmap$KVM_VCPU(r2, 0x5) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x27) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000380)={0x2710, 0x0, &(0x7f0000d7a000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION2(r4, 0x40a0ae49, &(0x7f00000003c0)={0x2710, 0x6, 0xe000, 0x1000, &(0x7f0000e78000/0x1000)=nil, 0xad, r1}) eventfd2(0x9, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000480)={0xa8, 0x0, 0x3}) ioctl$KVM_CAP_ARM_INJECT_SERROR_ESR(r3, 0x4068aea3, &(0x7f0000000500)) ioctl$KVM_HAS_DEVICE_ATTR_vm(r4, 0x4018aee3, &(0x7f00000005c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000580)={0x4, 0x2}}) munmap$KVM_VCPU(r2, 0x7) munmap$KVM_VCPU(r2, 0x600000) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000600)={0x4, 0x5, 0xeeef0000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, &(0x7f0000000640)=@arm64) munmap$KVM_VCPU(r2, 0x7fffffffffffffff) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x18) 2m0.225603262s ago: executing program 8 (id=389): mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000280), 0x103080, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x100000000) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_ARM_VCPU_INIT(r6, 0x4020aeae, &(0x7f0000000140)={0x5, 0x8}) ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, &(0x7f0000000080)=@arm64_core={0x6030000000100048, &(0x7f0000000240)=0xd7}) r7 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil) r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x16}], 0x1) ioctl$KVM_RUN(r10, 0xae80, 0x0) r11 = syz_kvm_vgic_v3_setup(r3, 0x1, 0x40) ioctl$KVM_GET_DEVICE_ATTR(r11, 0x4018aee2, &(0x7f0000000240)=@attr_other={0x0, 0x6, 0xb2, 0x0}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r13 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r12, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r13, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r12, 0x0) r14 = eventfd2(0x0, 0x0) close(r14) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) write$eventfd(r14, &(0x7f0000000180)=0x5, 0xfffffde3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0) 1m58.037664204s ago: executing program 9 (id=390): munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000c58000/0x1000)=nil, r1, 0x2000003, 0xaf832, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) mmap$KVM_VCPU(&(0x7f0000f2b000/0x3000)=nil, r1, 0x3000002, 0x112, r4, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x155100, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04) munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000) ioctl$KVM_SET_REGS(r4, 0x4360ae82, &(0x7f00000000c0)={[0x8000000000000001, 0x9, 0x100000001, 0xbe, 0x25, 0x7, 0x4, 0x8000000000000001, 0x1, 0x4, 0x240, 0xf, 0x4000, 0x1ff, 0x8, 0x1], 0x100000, 0x100b96}) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x2e) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r7, r8, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000140)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r8, 0x4010aeab, &(0x7f0000000100)=@arm64_core={0x603000000010001e, &(0x7f0000000000)=0x3}) munmap(&(0x7f0000482000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000) mmap$KVM_VCPU(&(0x7f0000f1a000/0x4000)=nil, 0x930, 0x0, 0x9032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xc, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x20000000) 1m23.77378863s ago: executing program 8 (id=391): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x28081, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000769000/0x400000)=nil) (async, rerun: 32) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) (rerun: 32) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) (async) r4 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000380)={0x0, &(0x7f0000000100)=[@smc={0x1e, 0x40, {0x84000002, [0x3, 0x3, 0x2, 0x3f8b, 0x3448]}}], 0x40}, &(0x7f00000000c0)=[@featur2={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) munmap(&(0x7f00009e3000/0x1000)=nil, 0x1000) 1m18.477909175s ago: executing program 9 (id=392): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x2a040, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xd8) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013c4f1, 0x8000}}, @msr={0x14, 0x20, {0x603000000013dce4, 0x8000}}], 0x40}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x2b) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dcf0, 0x7fff}}], 0x20}, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r4, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) ioctl$KVM_RUN(r4, 0xae80, 0x0) r8 = openat$kvm(0x0, &(0x7f0000000140), 0x101, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil) r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x7fff}}, @msr={0x14, 0x20, {0x603000000013dce4, 0x1}}], 0x40}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r11, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) ioctl$KVM_RUN(r11, 0xae80, 0x0) r12 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000240)={0x8, 0xffffffffffffffff}) ioctl$KVM_GET_DEVICE_ATTR(r14, 0x4018aee2, 0xfffffffffffffffe) ioctl$KVM_RUN(r11, 0xae80, 0x0) 1m2.271902793s ago: executing program 8 (id=393): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000000)=0x9) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x38) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1fb, 0x3, 0xeeee0000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000480)={0x10001, 0x0, 0x2c0, &(0x7f0000000080)=[0xffffffffffff0001, 0xf2, 0xfc, 0x7fffffffffffffff, 0x7, 0x2, 0x4, 0xffff, 0x0, 0x9, 0xd, 0x5, 0x4034, 0x8, 0x0, 0x2, 0x6, 0x1578, 0xa5c, 0x7d0, 0x8, 0x2, 0x0, 0x254a, 0x2, 0x0, 0x3ff, 0x9, 0x6, 0x2, 0x93, 0xd, 0x6, 0xfffffffffffff605, 0xfffffffffffffff9, 0x0, 0x2, 0x1000, 0x100, 0x500, 0x81, 0x800, 0x2, 0x100000001, 0x4, 0x8, 0xdfa, 0x8, 0x7, 0xa62e, 0x6, 0xfffffffffffffc21, 0x7ff, 0x1ff, 0x400, 0x7, 0x1, 0x80, 0x3, 0x2c, 0x4400000000, 0x9, 0x5, 0x3, 0x80000001, 0x2, 0x3, 0x3, 0x4, 0x3, 0x0, 0x0, 0x8, 0x6, 0x4, 0x5, 0x7, 0x35a, 0x3, 0x6, 0x1, 0xe, 0x5, 0x7fffffffffffffff, 0x9c4, 0xfffffffffffffffd, 0x9, 0x0, 0x29, 0x1, 0x78, 0xe8, 0x149, 0xfffffffffffffffd, 0x6, 0x4, 0x8000, 0x1, 0x6, 0x100000001, 0xb084735000000000, 0x8000000000000000, 0x81, 0x1000, 0x9, 0xffffffffffffffff, 0x0, 0x8, 0x11, 0xffffffff, 0x5, 0x54, 0x400, 0xfffffffffffffffc, 0x7fffffff, 0x7, 0x9, 0xb, 0xffffffffffffffff, 0xfffe0, 0x3, 0x4, 0x61742e8c, 0x7, 0x5, 0x9, 0x3, 0x4]}) r2 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000a80)={0x0, &(0x7f00000004c0)=[@svc={0x122, 0x40, {0x84000013, [0x1, 0x8, 0x3, 0x9, 0x1000]}}, @code={0xa, 0x6c, {"00088038c0fc8cd20080b0f2610080d2620180d2830180d2640080d2020000d4600280d20040b0f2810180d2c20080d2630180d2440080d2020000d4000008d5e003202a000008d50000ae9e0000619e0068210e009c007f"}}, @svc={0x122, 0x40, {0xc400000c, [0xd, 0x6, 0x8000, 0x0, 0x7]}}, @uexit={0x0, 0x18, 0x5}, @uexit={0x0, 0x18, 0x800}, @mrs={0xbe, 0x18, {0x603000000013c708}}, @eret={0xe6, 0x18, 0x4f}, @hvc={0x32, 0x40, {0x8400000d, [0xb, 0x0, 0x9, 0xf64, 0x2]}}, @svc={0x122, 0x40, {0x80000000, [0x1, 0x0, 0x2, 0xc6, 0x9]}}, @memwrite={0x6e, 0x30, @generic={0xeeef0000, 0xfb3, 0xd, 0x8}}, @uexit={0x0, 0x18, 0xffffffff7fffffff}, @its_send_cmd={0xaa, 0x28, {0xe, 0x0, 0x0, 0xa, 0x9, 0xf, 0x3}}, @code={0xa, 0x9c, {"a0c097d200e0b0f2e10180d2c20080d2030080d2840080d2020000d4007008d5002b8ad200c0b8f2010080d2020180d2c30080d2440180d2020000d4007008d5601c87d20040b0f2e10180d2220180d2030080d2240180d2020000d4007008d5c0b79ad20000b0f2010180d2820080d2c30180d2040080d2020000d4000008d500c0202e0004c0da"}}, @uexit={0x0, 0x18, 0x3a}, @irq_setup={0x46, 0x18, {0x4, 0x300}}, @its_setup={0x82, 0x28, {0x3, 0x0, 0x14b}}, @memwrite={0x6e, 0x30, @generic={0x4, 0xaff, 0x8000, 0x18}}, @its_setup={0x82, 0x28, {0x2, 0x2, 0x138}}, @its_send_cmd={0xaa, 0x28, {0xb, 0x0, 0x1, 0x0, 0xc, 0x50000000, 0x3}}, @smc={0x1e, 0x40, {0x2000, [0xf5, 0x0, 0x3, 0xb13]}}, @msr={0x14, 0x20, {0x603000000013df00, 0x8}}, @its_setup={0x82, 0x28, {0x2, 0x3, 0xcd}}, @msr={0x14, 0x20, {0x603000000013e21b, 0xfffffffffffffffa}}, @svc={0x122, 0x40, {0x8400000c, [0x9, 0x69996670, 0x4, 0x80000001, 0x1]}}, @irq_setup={0x46, 0x18, {0x2, 0x136}}, @hvc={0x32, 0x40, {0x84000011, [0x100, 0x96c, 0xfffffffffffffff9, 0xffffffffffffffff, 0x2]}}, @eret={0xe6, 0x18, 0x6}, @code={0xa, 0x84, {"0020202e20389ed20080b8f2c10080d2a20080d2230080d2a40180d2020000d4007008d5c0d28bd20080b8f2010180d2620180d2a30180d2c40180d2020000d4000008d50038300e00db9ad20020b0f2410180d2a20080d2230080d2c40180d2020000d400f4202e000c803c000008d5"}}], 0x58c}, &(0x7f0000000ac0)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000b00)=@arm64={0xc, 0x9, 0x40, '\x00', 0x3}) ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000b40)={0x4, 0x2}) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000bc0)=@riscv64_aia_csr={0x8030000003010004, &(0x7f0000000b80)=0xffffffffffffff81}) ioctl$KVM_GET_SREGS(r2, 0x8000ae83, &(0x7f0000000c00)) ioctl$KVM_SET_DEVICE_ATTR_vm(r1, 0x4018aee1, &(0x7f0000000d80)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000d40)={0xa, 0x3}}) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) mmap$KVM_VCPU(&(0x7f0000ff5000/0x9000)=nil, r3, 0x4, 0x8010, r0, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r1, 0x4018aee1, &(0x7f0000000e00)=@attr_other={0x0, 0x1, 0x8, &(0x7f0000000dc0)=0x6}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000e40)={0x8, 0xffffffffffffffff, 0x1}) ioctl$KVM_ARM_VCPU_FINALIZE(r2, 0x4004aec2, &(0x7f0000000e80)=0x6) close(r0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) close(r2) ioctl$KVM_SET_DEVICE_ATTR_vm(r1, 0x4018aee1, &(0x7f0000000f00)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x10000, 0x5, 0x2}}) mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, r3, 0xe, 0x1010, r2, 0x0) syz_kvm_setup_cpu$arm64(r1, r0, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000001380)=[{0x0, &(0x7f0000000f40)=[@memwrite={0x6e, 0x30, @generic={0x60000, 0x911, 0x9, 0x2}}, @smc={0x1e, 0x40, {0x84000011, [0x8a, 0x26d, 0x7fff, 0xf7, 0x900000]}}, @eret={0xe6, 0x18}, @mrs={0xbe, 0x18}, @svc={0x122, 0x40, {0x8000, [0x7ff, 0x40, 0x8, 0x640f, 0xce0]}}, @smc={0x1e, 0x40, {0x6000000, [0x8, 0x7f, 0x7, 0x522aab62, 0xa33e]}}, @hvc={0x32, 0x40, {0x30000000, [0x6, 0x10, 0x6, 0xaca, 0x6]}}, @mrs={0xbe, 0x18, {0xa0500000003438ab}}, @msr={0x14, 0x20, {0x603000000013c009}}, @svc={0x122, 0x40, {0x80000001, [0x8, 0x1, 0x2ae, 0x3ff, 0x4]}}, @irq_setup={0x46, 0x18, {0x1, 0x11}}, @msr={0x14, 0x20, {0x603000000013e6c5, 0x1}}, @irq_setup={0x46, 0x18, {0x0, 0x2ea}}, @uexit={0x0, 0x18, 0x7}, @mrs={0xbe, 0x18, {0x603000000013f687}}, @msr={0x14, 0x20, {0x15a3, 0xfff}}, @smc={0x1e, 0x40, {0x8400000d, [0x0, 0x2, 0x5, 0x4042]}}, @mrs={0xbe, 0x18, {0x603000000013e659}}, @msr={0x14, 0x20, {0x603000000013e4c8, 0xff}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x0, 0x2, 0x3, 0xcc4, 0x7}}, @mrs={0xbe, 0x18, {0x603000000013df4f}}, @mrs={0xbe, 0x18, {0x603000000013c2a3}}, @eret={0xe6, 0x18, 0x2e2d}, @uexit={0x0, 0x18, 0x8}, @irq_setup={0x46, 0x18, {0x3, 0x1af}}, @eret={0xe6, 0x18, 0x77b6}, @its_setup={0x82, 0x28, {0x0, 0x0, 0x2c6}}, @its_setup={0x82, 0x28, {0x1, 0x3, 0x19f}}, @irq_setup={0x46, 0x18}, @eret={0xe6, 0x18, 0xd3ce}, @irq_setup={0x46, 0x18, {0x2, 0x350}}], 0x440}], 0x1, 0x0, &(0x7f00000013c0)=[@featur2={0x1, 0x6}], 0x1) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x17) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000001400)={0xa, 0xffffffffffffffff, 0x1}) ioctl$KVM_GET_SREGS(r2, 0x8000ae83, &(0x7f0000001440)) ioctl$KVM_CLEAR_DIRTY_LOG(r4, 0xc018aec0, &(0x7f0000001980)={0x10000, 0x40, 0x0, &(0x7f0000001580)=[0x2, 0x5, 0x3, 0x3, 0x9, 0xffffffffffffff81, 0x8e9, 0x8000000000000000, 0x8, 0x7f, 0x3, 0x9, 0x3, 0x8, 0x1ff, 0x5, 0x9, 0x200, 0xdf2, 0x80000000, 0x2dc, 0xfb9, 0x7, 0x0, 0x5, 0x3ff, 0x7, 0x7, 0x10001, 0x0, 0x8b37967, 0x5, 0x6, 0x4, 0x9, 0x764f649e, 0x1, 0x1b, 0xff, 0xd80, 0x8, 0x101, 0x2, 0x9, 0x1, 0x7f7b, 0x1, 0xffffffffffffff99, 0x2, 0x5c5, 0x100000001, 0x100000000, 0x8, 0x3ff, 0xf2, 0x9, 0x2, 0x5, 0x8, 0xd, 0x3, 0x4f85, 0x1, 0x5, 0x29a8, 0xfffffffffffffffd, 0x8, 0x7fffffff, 0x33d1, 0x0, 0xb1, 0x7, 0x8000, 0x5, 0x4, 0x3, 0x10, 0x3, 0x80000000, 0x7, 0x3, 0x6, 0x9, 0x4c, 0x8, 0x3, 0x1000, 0x7, 0x200, 0x2, 0x7, 0x3, 0x329, 0x7fff, 0x3, 0x0, 0x1, 0x3, 0x454d, 0x1000, 0xdc0, 0x8, 0x1, 0x1719, 0x40400000000, 0xffff, 0x40000, 0x0, 0x4, 0x401, 0x81, 0xfffffffffffffffe, 0x0, 0x2, 0x4, 0x2, 0x2, 0xfffffffffffffffb, 0x5e, 0x40, 0x200, 0x0, 0x1, 0x1, 0x8, 0x7, 0xe7, 0x6]}) ioctl$KVM_CAP_ARM_SYSTEM_SUSPEND(r4, 0x4068aea3, &(0x7f00000019c0)) ioctl$KVM_ARM_VCPU_INIT(r0, 0x4020aeae, &(0x7f0000001a40)={0x0, 0x115}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001a80), 0x200, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x34) 51.961953707s ago: executing program 9 (id=394): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xd7, 0x80000001}) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) (async) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r6 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x1800002, 0x11, r5, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000200)="f301181301d136000000000000f4ff0000802346cbd987000001000200ecff0900010200250000000000000000000000000001000000000040000000000000000000000100", 0x0, 0x48) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000100)={0x7, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r9, 0x4018aee3, &(0x7f0000000140)=@attr_arm64={0x0, 0x0, 0x2, 0x0}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x0, 0x300000b, 0x2010, r5, 0x0) (async) r10 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) munmap$KVM_VCPU(0x0, 0x1000000000) (async) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) (async) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r12, 0x4020aeae, &(0x7f0000000100)={0x5, 0x18}) (async) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async) syz_kvm_vgic_v3_setup(0xffffffffffffffff, 0x2, 0x100) (async) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000180)={0x1010020, 0x1}) r13 = eventfd2(0x1, 0x801) r14 = eventfd2(0xff, 0x80000) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000001c0)={r13, 0x3, 0x2, r14}) (async) write$eventfd(r13, &(0x7f00000000c0)=0x3, 0x8) ioctl$KVM_GET_ONE_REG(r12, 0x4010aeab, &(0x7f0000000000)=@arm64_sve={0x60800000001501ff, &(0x7f0000000080)=0xb0af}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x40305829, &(0x7f0000000040)=@attr_arm64={0x0, 0x0, 0x0, 0x0}) 13.178100252s ago: executing program 40 (id=393): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000000)=0x9) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x38) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1fb, 0x3, 0xeeee0000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000480)={0x10001, 0x0, 0x2c0, &(0x7f0000000080)=[0xffffffffffff0001, 0xf2, 0xfc, 0x7fffffffffffffff, 0x7, 0x2, 0x4, 0xffff, 0x0, 0x9, 0xd, 0x5, 0x4034, 0x8, 0x0, 0x2, 0x6, 0x1578, 0xa5c, 0x7d0, 0x8, 0x2, 0x0, 0x254a, 0x2, 0x0, 0x3ff, 0x9, 0x6, 0x2, 0x93, 0xd, 0x6, 0xfffffffffffff605, 0xfffffffffffffff9, 0x0, 0x2, 0x1000, 0x100, 0x500, 0x81, 0x800, 0x2, 0x100000001, 0x4, 0x8, 0xdfa, 0x8, 0x7, 0xa62e, 0x6, 0xfffffffffffffc21, 0x7ff, 0x1ff, 0x400, 0x7, 0x1, 0x80, 0x3, 0x2c, 0x4400000000, 0x9, 0x5, 0x3, 0x80000001, 0x2, 0x3, 0x3, 0x4, 0x3, 0x0, 0x0, 0x8, 0x6, 0x4, 0x5, 0x7, 0x35a, 0x3, 0x6, 0x1, 0xe, 0x5, 0x7fffffffffffffff, 0x9c4, 0xfffffffffffffffd, 0x9, 0x0, 0x29, 0x1, 0x78, 0xe8, 0x149, 0xfffffffffffffffd, 0x6, 0x4, 0x8000, 0x1, 0x6, 0x100000001, 0xb084735000000000, 0x8000000000000000, 0x81, 0x1000, 0x9, 0xffffffffffffffff, 0x0, 0x8, 0x11, 0xffffffff, 0x5, 0x54, 0x400, 0xfffffffffffffffc, 0x7fffffff, 0x7, 0x9, 0xb, 0xffffffffffffffff, 0xfffe0, 0x3, 0x4, 0x61742e8c, 0x7, 0x5, 0x9, 0x3, 0x4]}) r2 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000a80)={0x0, &(0x7f00000004c0)=[@svc={0x122, 0x40, {0x84000013, [0x1, 0x8, 0x3, 0x9, 0x1000]}}, @code={0xa, 0x6c, {"00088038c0fc8cd20080b0f2610080d2620180d2830180d2640080d2020000d4600280d20040b0f2810180d2c20080d2630180d2440080d2020000d4000008d5e003202a000008d50000ae9e0000619e0068210e009c007f"}}, @svc={0x122, 0x40, {0xc400000c, [0xd, 0x6, 0x8000, 0x0, 0x7]}}, @uexit={0x0, 0x18, 0x5}, @uexit={0x0, 0x18, 0x800}, @mrs={0xbe, 0x18, {0x603000000013c708}}, @eret={0xe6, 0x18, 0x4f}, @hvc={0x32, 0x40, {0x8400000d, [0xb, 0x0, 0x9, 0xf64, 0x2]}}, @svc={0x122, 0x40, {0x80000000, [0x1, 0x0, 0x2, 0xc6, 0x9]}}, @memwrite={0x6e, 0x30, @generic={0xeeef0000, 0xfb3, 0xd, 0x8}}, @uexit={0x0, 0x18, 0xffffffff7fffffff}, @its_send_cmd={0xaa, 0x28, {0xe, 0x0, 0x0, 0xa, 0x9, 0xf, 0x3}}, @code={0xa, 0x9c, {"a0c097d200e0b0f2e10180d2c20080d2030080d2840080d2020000d4007008d5002b8ad200c0b8f2010080d2020180d2c30080d2440180d2020000d4007008d5601c87d20040b0f2e10180d2220180d2030080d2240180d2020000d4007008d5c0b79ad20000b0f2010180d2820080d2c30180d2040080d2020000d4000008d500c0202e0004c0da"}}, @uexit={0x0, 0x18, 0x3a}, @irq_setup={0x46, 0x18, {0x4, 0x300}}, @its_setup={0x82, 0x28, {0x3, 0x0, 0x14b}}, @memwrite={0x6e, 0x30, @generic={0x4, 0xaff, 0x8000, 0x18}}, @its_setup={0x82, 0x28, {0x2, 0x2, 0x138}}, @its_send_cmd={0xaa, 0x28, {0xb, 0x0, 0x1, 0x0, 0xc, 0x50000000, 0x3}}, @smc={0x1e, 0x40, {0x2000, [0xf5, 0x0, 0x3, 0xb13]}}, @msr={0x14, 0x20, {0x603000000013df00, 0x8}}, @its_setup={0x82, 0x28, {0x2, 0x3, 0xcd}}, @msr={0x14, 0x20, {0x603000000013e21b, 0xfffffffffffffffa}}, @svc={0x122, 0x40, {0x8400000c, [0x9, 0x69996670, 0x4, 0x80000001, 0x1]}}, @irq_setup={0x46, 0x18, {0x2, 0x136}}, @hvc={0x32, 0x40, {0x84000011, [0x100, 0x96c, 0xfffffffffffffff9, 0xffffffffffffffff, 0x2]}}, @eret={0xe6, 0x18, 0x6}, @code={0xa, 0x84, {"0020202e20389ed20080b8f2c10080d2a20080d2230080d2a40180d2020000d4007008d5c0d28bd20080b8f2010180d2620180d2a30180d2c40180d2020000d4000008d50038300e00db9ad20020b0f2410180d2a20080d2230080d2c40180d2020000d400f4202e000c803c000008d5"}}], 0x58c}, &(0x7f0000000ac0)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000b00)=@arm64={0xc, 0x9, 0x40, '\x00', 0x3}) ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000b40)={0x4, 0x2}) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000bc0)=@riscv64_aia_csr={0x8030000003010004, &(0x7f0000000b80)=0xffffffffffffff81}) ioctl$KVM_GET_SREGS(r2, 0x8000ae83, &(0x7f0000000c00)) ioctl$KVM_SET_DEVICE_ATTR_vm(r1, 0x4018aee1, &(0x7f0000000d80)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000d40)={0xa, 0x3}}) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) mmap$KVM_VCPU(&(0x7f0000ff5000/0x9000)=nil, r3, 0x4, 0x8010, r0, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r1, 0x4018aee1, &(0x7f0000000e00)=@attr_other={0x0, 0x1, 0x8, &(0x7f0000000dc0)=0x6}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000e40)={0x8, 0xffffffffffffffff, 0x1}) ioctl$KVM_ARM_VCPU_FINALIZE(r2, 0x4004aec2, &(0x7f0000000e80)=0x6) close(r0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) close(r2) ioctl$KVM_SET_DEVICE_ATTR_vm(r1, 0x4018aee1, &(0x7f0000000f00)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x10000, 0x5, 0x2}}) mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, r3, 0xe, 0x1010, r2, 0x0) syz_kvm_setup_cpu$arm64(r1, r0, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000001380)=[{0x0, &(0x7f0000000f40)=[@memwrite={0x6e, 0x30, @generic={0x60000, 0x911, 0x9, 0x2}}, @smc={0x1e, 0x40, {0x84000011, [0x8a, 0x26d, 0x7fff, 0xf7, 0x900000]}}, @eret={0xe6, 0x18}, @mrs={0xbe, 0x18}, @svc={0x122, 0x40, {0x8000, [0x7ff, 0x40, 0x8, 0x640f, 0xce0]}}, @smc={0x1e, 0x40, {0x6000000, [0x8, 0x7f, 0x7, 0x522aab62, 0xa33e]}}, @hvc={0x32, 0x40, {0x30000000, [0x6, 0x10, 0x6, 0xaca, 0x6]}}, @mrs={0xbe, 0x18, {0xa0500000003438ab}}, @msr={0x14, 0x20, {0x603000000013c009}}, @svc={0x122, 0x40, {0x80000001, [0x8, 0x1, 0x2ae, 0x3ff, 0x4]}}, @irq_setup={0x46, 0x18, {0x1, 0x11}}, @msr={0x14, 0x20, {0x603000000013e6c5, 0x1}}, @irq_setup={0x46, 0x18, {0x0, 0x2ea}}, @uexit={0x0, 0x18, 0x7}, @mrs={0xbe, 0x18, {0x603000000013f687}}, @msr={0x14, 0x20, {0x15a3, 0xfff}}, @smc={0x1e, 0x40, {0x8400000d, [0x0, 0x2, 0x5, 0x4042]}}, @mrs={0xbe, 0x18, {0x603000000013e659}}, @msr={0x14, 0x20, {0x603000000013e4c8, 0xff}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x0, 0x2, 0x3, 0xcc4, 0x7}}, @mrs={0xbe, 0x18, {0x603000000013df4f}}, @mrs={0xbe, 0x18, {0x603000000013c2a3}}, @eret={0xe6, 0x18, 0x2e2d}, @uexit={0x0, 0x18, 0x8}, @irq_setup={0x46, 0x18, {0x3, 0x1af}}, @eret={0xe6, 0x18, 0x77b6}, @its_setup={0x82, 0x28, {0x0, 0x0, 0x2c6}}, @its_setup={0x82, 0x28, {0x1, 0x3, 0x19f}}, @irq_setup={0x46, 0x18}, @eret={0xe6, 0x18, 0xd3ce}, @irq_setup={0x46, 0x18, {0x2, 0x350}}], 0x440}], 0x1, 0x0, &(0x7f00000013c0)=[@featur2={0x1, 0x6}], 0x1) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x17) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000001400)={0xa, 0xffffffffffffffff, 0x1}) ioctl$KVM_GET_SREGS(r2, 0x8000ae83, &(0x7f0000001440)) ioctl$KVM_CLEAR_DIRTY_LOG(r4, 0xc018aec0, &(0x7f0000001980)={0x10000, 0x40, 0x0, &(0x7f0000001580)=[0x2, 0x5, 0x3, 0x3, 0x9, 0xffffffffffffff81, 0x8e9, 0x8000000000000000, 0x8, 0x7f, 0x3, 0x9, 0x3, 0x8, 0x1ff, 0x5, 0x9, 0x200, 0xdf2, 0x80000000, 0x2dc, 0xfb9, 0x7, 0x0, 0x5, 0x3ff, 0x7, 0x7, 0x10001, 0x0, 0x8b37967, 0x5, 0x6, 0x4, 0x9, 0x764f649e, 0x1, 0x1b, 0xff, 0xd80, 0x8, 0x101, 0x2, 0x9, 0x1, 0x7f7b, 0x1, 0xffffffffffffff99, 0x2, 0x5c5, 0x100000001, 0x100000000, 0x8, 0x3ff, 0xf2, 0x9, 0x2, 0x5, 0x8, 0xd, 0x3, 0x4f85, 0x1, 0x5, 0x29a8, 0xfffffffffffffffd, 0x8, 0x7fffffff, 0x33d1, 0x0, 0xb1, 0x7, 0x8000, 0x5, 0x4, 0x3, 0x10, 0x3, 0x80000000, 0x7, 0x3, 0x6, 0x9, 0x4c, 0x8, 0x3, 0x1000, 0x7, 0x200, 0x2, 0x7, 0x3, 0x329, 0x7fff, 0x3, 0x0, 0x1, 0x3, 0x454d, 0x1000, 0xdc0, 0x8, 0x1, 0x1719, 0x40400000000, 0xffff, 0x40000, 0x0, 0x4, 0x401, 0x81, 0xfffffffffffffffe, 0x0, 0x2, 0x4, 0x2, 0x2, 0xfffffffffffffffb, 0x5e, 0x40, 0x200, 0x0, 0x1, 0x1, 0x8, 0x7, 0xe7, 0x6]}) ioctl$KVM_CAP_ARM_SYSTEM_SUSPEND(r4, 0x4068aea3, &(0x7f00000019c0)) ioctl$KVM_ARM_VCPU_INIT(r0, 0x4020aeae, &(0x7f0000001a40)={0x0, 0x115}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001a80), 0x200, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x34) 0s ago: executing program 41 (id=394): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xd7, 0x80000001}) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) (async) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r6 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x1800002, 0x11, r5, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000200)="f301181301d136000000000000f4ff0000802346cbd987000001000200ecff0900010200250000000000000000000000000001000000000040000000000000000000000100", 0x0, 0x48) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000100)={0x7, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r9, 0x4018aee3, &(0x7f0000000140)=@attr_arm64={0x0, 0x0, 0x2, 0x0}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x0, 0x300000b, 0x2010, r5, 0x0) (async) r10 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) munmap$KVM_VCPU(0x0, 0x1000000000) (async) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) (async) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r12, 0x4020aeae, &(0x7f0000000100)={0x5, 0x18}) (async) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async) syz_kvm_vgic_v3_setup(0xffffffffffffffff, 0x2, 0x100) (async) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000180)={0x1010020, 0x1}) r13 = eventfd2(0x1, 0x801) r14 = eventfd2(0xff, 0x80000) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000001c0)={r13, 0x3, 0x2, r14}) (async) write$eventfd(r13, &(0x7f00000000c0)=0x3, 0x8) ioctl$KVM_GET_ONE_REG(r12, 0x4010aeab, &(0x7f0000000000)=@arm64_sve={0x60800000001501ff, &(0x7f0000000080)=0xb0af}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x40305829, &(0x7f0000000040)=@attr_arm64={0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): [ 368.768933][ T24] audit: type=1400 audit(368.020:74): avc: denied { write } for pid=3259 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 372.798899][ T24] audit: type=1400 audit(372.050:75): avc: denied { write } for pid=3263 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 375.403333][ T3205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.842252][ T24] audit: type=1400 audit(385.110:76): avc: denied { write } for pid=3271 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 391.051515][ T24] audit: type=1400 audit(390.320:77): avc: denied { write } for pid=3274 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 404.802658][ T24] audit: type=1400 audit(404.070:78): avc: denied { write } for pid=3279 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 408.725520][ T24] audit: type=1400 audit(407.990:79): avc: denied { write } for pid=3282 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 419.222804][ T24] audit: type=1400 audit(418.490:80): avc: denied { write } for pid=3287 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 423.139700][ T24] audit: type=1400 audit(422.400:81): avc: denied { write } for pid=3290 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 425.625736][ T3205] eql: remember to turn off Van-Jacobson compression on your slave devices [ 433.548631][ T24] audit: type=1400 audit(432.810:82): avc: denied { write } for pid=3295 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 437.349853][ T24] audit: type=1400 audit(436.600:83): avc: denied { write } for pid=3298 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 447.819022][ T24] audit: type=1400 audit(447.030:84): avc: denied { write } for pid=3302 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 452.789901][ T24] audit: type=1400 audit(452.040:85): avc: denied { write } for pid=3305 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 461.559285][ T24] audit: type=1400 audit(460.820:86): avc: denied { write } for pid=3308 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 465.369901][ T24] audit: type=1400 audit(464.620:87): avc: denied { write } for pid=3311 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 477.518670][ T24] audit: type=1400 audit(476.780:88): avc: denied { write } for pid=3317 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 481.423616][ T24] audit: type=1400 audit(480.690:89): avc: denied { write } for pid=3320 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 486.652030][ T24] audit: type=1400 audit(485.890:90): avc: denied { write } for pid=3322 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 490.592690][ T24] audit: type=1400 audit(489.860:91): avc: denied { write } for pid=3325 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 500.245149][ T24] audit: type=1400 audit(499.510:92): avc: denied { write } for pid=3329 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 504.034797][ T24] audit: type=1400 audit(503.300:93): avc: denied { write } for pid=3332 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 524.399903][ T24] audit: type=1400 audit(523.650:94): avc: denied { write } for pid=3341 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 528.216184][ T24] audit: type=1400 audit(527.480:95): avc: denied { write } for pid=3344 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 537.949911][ T24] audit: type=1400 audit(537.210:96): avc: denied { write } for pid=3348 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 541.850865][ T24] audit: type=1400 audit(541.100:97): avc: denied { write } for pid=3351 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 557.049304][ T24] audit: type=1400 audit(556.310:98): avc: denied { write } for pid=3356 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 560.869871][ T24] audit: type=1400 audit(560.120:99): avc: denied { write } for pid=3359 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:9242' (ED25519) to the list of known hosts. [ 594.014317][ T24] audit: type=1400 audit(593.280:100): avc: denied { name_bind } for pid=3364 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 594.842932][ T24] audit: type=1400 audit(594.110:101): avc: denied { execute } for pid=3365 comm="sh" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 594.867391][ T24] audit: type=1400 audit(594.130:102): avc: denied { execute_no_trans } for pid=3365 comm="sh" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 618.909689][ T24] audit: type=1400 audit(618.170:103): avc: denied { mounton } for pid=3365 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 618.946966][ T24] audit: type=1400 audit(618.210:104): avc: denied { mount } for pid=3365 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 619.041527][ T3365] cgroup: Unknown subsys name 'net' [ 619.098886][ T24] audit: type=1400 audit(618.360:105): avc: denied { unmount } for pid=3365 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 619.524034][ T3365] cgroup: Unknown subsys name 'cpuset' [ 619.636326][ T3365] cgroup: Unknown subsys name 'rlimit' [ 620.530687][ T24] audit: type=1400 audit(619.790:106): avc: denied { setattr } for pid=3365 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 620.554752][ T24] audit: type=1400 audit(619.820:107): avc: denied { mounton } for pid=3365 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 620.572217][ T24] audit: type=1400 audit(619.840:108): avc: denied { mount } for pid=3365 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 621.594409][ T3369] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 621.614878][ T24] audit: type=1400 audit(620.880:109): avc: denied { relabelto } for pid=3369 comm="mkswap" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 621.636493][ T24] audit: type=1400 audit(620.900:110): avc: denied { write } for pid=3369 comm="mkswap" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 621.851636][ T24] audit: type=1400 audit(621.100:111): avc: denied { read } for pid=3365 comm="syz-executor" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 621.860325][ T24] audit: type=1400 audit(621.110:112): avc: denied { open } for pid=3365 comm="syz-executor" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 621.913231][ T3365] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 682.424790][ T24] audit: type=1400 audit(681.690:113): avc: denied { execmem } for pid=3370 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 686.245964][ T24] audit: type=1400 audit(685.510:114): avc: denied { read } for pid=3372 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 686.291815][ T24] audit: type=1400 audit(685.560:115): avc: denied { open } for pid=3373 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 686.339772][ T24] audit: type=1400 audit(685.590:116): avc: denied { mounton } for pid=3372 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 686.566917][ T24] audit: type=1400 audit(685.830:117): avc: denied { module_request } for pid=3373 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 686.595182][ T24] audit: type=1400 audit(685.850:118): avc: denied { module_request } for pid=3372 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 687.601537][ T24] audit: type=1400 audit(686.850:119): avc: denied { sys_module } for pid=3373 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 712.745617][ T3373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 713.113482][ T3373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 713.213006][ T3372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 713.436394][ T3372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 724.825504][ T3373] hsr_slave_0: entered promiscuous mode [ 724.875421][ T3373] hsr_slave_1: entered promiscuous mode [ 726.143718][ T3372] hsr_slave_0: entered promiscuous mode [ 726.193223][ T3372] hsr_slave_1: entered promiscuous mode [ 726.240288][ T3372] debugfs: 'hsr0' already exists in 'hsr' [ 726.250556][ T3372] Cannot create hsr debugfs directory [ 731.520875][ T24] audit: type=1400 audit(730.780:120): avc: denied { create } for pid=3373 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 731.549085][ T24] audit: type=1400 audit(730.810:121): avc: denied { write } for pid=3373 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 731.619003][ T24] audit: type=1400 audit(730.860:122): avc: denied { read } for pid=3373 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 731.785994][ T3373] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 732.136077][ T3373] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 732.231162][ T3373] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 732.424290][ T3373] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 732.552611][ T3373] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 732.698424][ T3373] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 732.880507][ T3373] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 733.010884][ T3373] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 734.410124][ T3372] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 734.551919][ T3372] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 734.633394][ T3372] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 734.830760][ T3372] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 734.939295][ T3372] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 735.085296][ T3372] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 735.177266][ T3372] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 735.335276][ T3372] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 746.830949][ T3373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 749.236821][ T3372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 800.082968][ T3373] veth0_vlan: entered promiscuous mode [ 800.621414][ T3373] veth1_vlan: entered promiscuous mode [ 802.507247][ T3373] veth0_macvtap: entered promiscuous mode [ 802.886974][ T3373] veth1_macvtap: entered promiscuous mode [ 803.512353][ T3372] veth0_vlan: entered promiscuous mode [ 804.430432][ T3372] veth1_vlan: entered promiscuous mode [ 805.571761][ T3382] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.591506][ T3382] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.665137][ T3382] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.679853][ T3382] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.715429][ T3372] veth0_macvtap: entered promiscuous mode [ 808.231613][ T3372] veth1_macvtap: entered promiscuous mode [ 808.266391][ T24] audit: type=1400 audit(807.530:123): avc: denied { mount } for pid=3373 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 808.553627][ T24] audit: type=1400 audit(807.820:124): avc: denied { mounton } for pid=3373 comm="syz-executor" path="/syzkaller.1A92SI/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 808.775700][ T24] audit: type=1400 audit(808.040:125): avc: denied { mount } for pid=3373 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 809.064030][ T24] audit: type=1400 audit(808.330:126): avc: denied { mounton } for pid=3373 comm="syz-executor" path="/syzkaller.1A92SI/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 809.185622][ T24] audit: type=1400 audit(808.450:127): avc: denied { mounton } for pid=3373 comm="syz-executor" path="/syzkaller.1A92SI/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 809.664209][ T24] audit: type=1400 audit(808.920:128): avc: denied { unmount } for pid=3373 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 810.090039][ T24] audit: type=1400 audit(809.350:129): avc: denied { mounton } for pid=3373 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1548 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 810.271615][ T24] audit: type=1400 audit(809.420:130): avc: denied { mount } for pid=3373 comm="syz-executor" name="/" dev="gadgetfs" ino=3754 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 810.481098][ T24] audit: type=1400 audit(809.740:131): avc: denied { mount } for pid=3373 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 810.507021][ T3424] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.520363][ T3478] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.544883][ T3478] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.549917][ T3478] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.616723][ T24] audit: type=1400 audit(809.880:132): avc: denied { mounton } for pid=3373 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 812.084645][ T3373] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 813.588590][ T24] kauditd_printk_skb: 1 callbacks suppressed [ 813.600069][ T24] audit: type=1400 audit(812.840:134): avc: denied { read write } for pid=3373 comm="syz-executor" name="loop1" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 813.642285][ T24] audit: type=1400 audit(812.890:135): avc: denied { open } for pid=3373 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 813.704148][ T24] audit: type=1400 audit(812.950:136): avc: denied { ioctl } for pid=3373 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=639 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 826.370863][ T24] audit: type=1400 audit(825.630:137): avc: denied { read } for pid=3526 comm="syz.1.2" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 826.469954][ T24] audit: type=1400 audit(825.720:138): avc: denied { open } for pid=3526 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 826.560594][ T24] audit: type=1400 audit(825.820:139): avc: denied { ioctl } for pid=3526 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 832.491940][ T24] audit: type=1400 audit(831.730:140): avc: denied { execute } for pid=3528 comm="syz.0.1" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=3877 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 835.940399][ T24] audit: type=1400 audit(835.160:141): avc: denied { write } for pid=3536 comm="syz.1.3" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 851.211905][ T24] audit: type=1400 audit(850.470:142): avc: denied { append } for pid=3547 comm="syz.0.6" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 853.853486][ T3548] kvm [3548]: Failed to find VMA for hva 0x20deb000 [ 869.880607][ T24] audit: type=1400 audit(869.140:143): avc: denied { setattr } for pid=3559 comm="syz.0.9" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 902.112828][ T24] audit: type=1400 audit(901.340:144): avc: denied { map } for pid=3579 comm="syz.1.16" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 902.122826][ T24] audit: type=1400 audit(901.370:145): avc: denied { execute } for pid=3579 comm="syz.1.16" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 981.461191][ T24] audit: type=1400 audit(980.700:146): avc: denied { create } for pid=3625 comm="syz.0.29" anonclass=[kvm-gmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1038.198990][ T24] audit: type=1400 audit(1037.370:147): avc: denied { write } for pid=3652 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1046.130982][ T24] audit: type=1400 audit(1045.390:148): avc: denied { write } for pid=3659 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1155.916429][ T24] audit: type=1400 audit(1155.180:149): avc: denied { execute } for pid=3725 comm="syz.1.59" path=2F32392F10FBFF67525673312B0104 dev="tmpfs" ino=164 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1188.269503][ T24] audit: type=1400 audit(1187.510:150): avc: denied { map } for pid=3745 comm="syz.0.65" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=7542 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1188.330906][ T24] audit: type=1400 audit(1187.580:151): avc: denied { read } for pid=3745 comm="syz.0.65" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=7542 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1219.047051][ T24] audit: type=1400 audit(1218.310:152): avc: denied { write } for pid=3763 comm="syz.0.71" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=7933 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1552.460114][ T24] audit: type=1400 audit(1551.700:153): avc: denied { write } for pid=3935 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1559.333378][ T24] audit: type=1400 audit(1558.590:154): avc: denied { write } for pid=3942 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1602.113544][ T3933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1603.224683][ T3933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1617.377003][ T3944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1618.094345][ T3944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1632.324516][ T3933] hsr_slave_0: entered promiscuous mode [ 1632.402732][ T3933] hsr_slave_1: entered promiscuous mode [ 1632.481509][ T3933] debugfs: 'hsr0' already exists in 'hsr' [ 1632.501931][ T3933] Cannot create hsr debugfs directory [ 1643.311408][ T3425] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1644.152775][ T3425] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1645.017196][ T3425] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1645.912080][ T3425] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1647.284733][ T3944] hsr_slave_0: entered promiscuous mode [ 1647.382470][ T3944] hsr_slave_1: entered promiscuous mode [ 1647.441358][ T3944] debugfs: 'hsr0' already exists in 'hsr' [ 1647.445743][ T3944] Cannot create hsr debugfs directory [ 1653.013277][ T3933] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1653.151311][ T3933] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1653.713910][ T3933] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1653.920484][ T3933] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1661.141705][ T3425] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1661.410464][ T3425] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1661.550232][ T3425] bond0 (unregistering): Released all slaves [ 1661.874530][ T3933] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1662.067062][ T3933] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1662.752595][ T3933] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1663.001730][ T3933] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1663.481744][ T3425] hsr_slave_0: left promiscuous mode [ 1663.545519][ T3425] hsr_slave_1: left promiscuous mode [ 1663.969343][ T3425] veth1_macvtap: left promiscuous mode [ 1663.971305][ T3425] veth0_macvtap: left promiscuous mode [ 1663.983879][ T3425] veth1_vlan: left promiscuous mode [ 1664.001951][ T3425] veth0_vlan: left promiscuous mode [ 1670.631908][ T24] audit: type=1400 audit(1669.880:155): avc: denied { write } for pid=4009 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1676.202298][ T24] audit: type=1400 audit(1675.440:156): avc: denied { write } for pid=4012 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1685.275383][ T3205] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1690.294736][ T3425] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1691.959173][ T3425] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1693.402214][ T3425] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1695.125889][ T3425] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1696.376350][ T3944] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1696.787437][ T3944] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1696.974112][ T3944] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1697.384812][ T3944] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1697.476482][ T3944] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1697.813731][ T3944] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1698.543496][ T3944] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1698.842985][ T3944] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1701.469956][ T24] audit: type=1400 audit(1700.720:157): avc: denied { write } for pid=4025 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1710.495407][ T24] audit: type=1400 audit(1709.760:158): avc: denied { write } for pid=4043 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1714.476095][ T3425] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1714.601656][ T3425] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1714.662463][ T3425] bond0 (unregistering): Released all slaves [ 1715.285335][ T3205] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1715.943873][ T3425] hsr_slave_0: left promiscuous mode [ 1716.009668][ T3425] hsr_slave_1: left promiscuous mode [ 1716.268654][ T3425] veth1_macvtap: left promiscuous mode [ 1716.272303][ T3425] veth0_macvtap: left promiscuous mode [ 1716.282399][ T3425] veth1_vlan: left promiscuous mode [ 1716.297224][ T3425] veth0_vlan: left promiscuous mode [ 1740.823814][ T3933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1746.862775][ T3944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1750.202829][ T24] audit: type=1400 audit(1749.460:159): avc: denied { write } for pid=4053 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1756.391409][ T24] audit: type=1400 audit(1755.650:160): avc: denied { write } for pid=4062 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1761.536275][ T3205] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1775.111897][ T24] audit: type=1400 audit(1774.330:161): avc: denied { write } for pid=4076 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1781.199549][ T24] audit: type=1400 audit(1780.440:162): avc: denied { write } for pid=4085 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1786.324546][ T3205] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1801.118737][ T24] audit: type=1400 audit(1800.270:163): avc: denied { write } for pid=4100 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1807.171437][ T24] audit: type=1400 audit(1806.410:164): avc: denied { write } for pid=4111 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1811.403555][ T3205] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1824.663454][ T3933] veth0_vlan: entered promiscuous mode [ 1825.420132][ T3933] veth1_vlan: entered promiscuous mode [ 1828.226568][ T3933] veth0_macvtap: entered promiscuous mode [ 1828.729950][ T24] audit: type=1400 audit(1827.980:165): avc: denied { write } for pid=4128 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1828.743918][ T3933] veth1_macvtap: entered promiscuous mode [ 1832.207280][ T3944] veth0_vlan: entered promiscuous mode [ 1833.020026][ T3466] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1833.027308][ T3466] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1833.100422][ T3424] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1833.119683][ T3424] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1833.963061][ T3944] veth1_vlan: entered promiscuous mode [ 1835.771454][ T24] audit: type=1400 audit(1835.030:166): avc: denied { write } for pid=4133 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1838.186248][ T3944] veth0_macvtap: entered promiscuous mode [ 1838.581831][ T24] audit: type=1400 audit(1837.810:167): avc: denied { unmount } for pid=3933 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1838.684937][ T3944] veth1_macvtap: entered promiscuous mode [ 1840.436632][ T3205] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1842.996973][ T21] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1843.030615][ T21] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1843.069281][ T21] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1843.165451][ T4071] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1864.879959][ T24] audit: type=1400 audit(1864.120:168): avc: denied { write } for pid=4145 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1876.123923][ T24] audit: type=1400 audit(1875.330:169): avc: denied { write } for pid=4153 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1882.920728][ T3205] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1905.391507][ T24] audit: type=1400 audit(1904.640:170): avc: denied { write } for pid=4173 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1916.630922][ T24] audit: type=1400 audit(1915.860:171): avc: denied { write } for pid=4183 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1924.401681][ T3205] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1947.789725][ T24] audit: type=1400 audit(1947.050:172): avc: denied { write } for pid=4203 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1956.410028][ T24] audit: type=1400 audit(1955.590:173): avc: denied { write } for pid=4206 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2002.045813][ T24] audit: type=1400 audit(2001.250:174): avc: denied { write } for pid=4236 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2011.241877][ T24] audit: type=1400 audit(2010.510:175): avc: denied { write } for pid=4245 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2027.569696][ T24] audit: type=1400 audit(2026.830:176): avc: denied { write } for pid=4254 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2038.569246][ T24] audit: type=1400 audit(2037.790:177): avc: denied { write } for pid=4261 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2040.041338][ T24] audit: type=1400 audit(2039.250:178): avc: denied { ioctl } for pid=4262 comm="syz.3.154" path="net:[4026531833]" dev="nsfs" ino=4026531833 ioctlcmd=0x582b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2077.206543][ T24] audit: type=1400 audit(2076.460:179): avc: denied { write } for pid=4281 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2088.390831][ T24] audit: type=1400 audit(2087.490:180): avc: denied { write } for pid=4292 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2108.191224][ T24] audit: type=1400 audit(2107.460:181): avc: denied { write } for pid=4300 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2118.609667][ T24] audit: type=1400 audit(2117.830:182): avc: denied { write } for pid=4309 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2134.463789][ T24] audit: type=1400 audit(2133.670:183): avc: denied { write } for pid=4317 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2145.220471][ T24] audit: type=1400 audit(2144.400:184): avc: denied { write } for pid=4326 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2181.069211][ T24] audit: type=1400 audit(2180.330:185): avc: denied { write } for pid=4343 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2190.759115][ T24] audit: type=1400 audit(2190.010:186): avc: denied { write } for pid=4354 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2208.228858][ T24] audit: type=1400 audit(2207.480:187): avc: denied { write } for pid=4363 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2219.568983][ T24] audit: type=1400 audit(2218.750:188): avc: denied { write } for pid=4373 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2242.947131][ T24] audit: type=1400 audit(2242.210:189): avc: denied { write } for pid=4388 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2252.439740][ T24] audit: type=1400 audit(2251.630:190): avc: denied { write } for pid=4394 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2366.621250][ T4454] kvm [4454]: Failed to find VMA for hva 0x203b0000 [ 2547.149354][ T24] audit: type=1400 audit(2546.390:191): avc: denied { write } for pid=4540 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2556.511774][ T24] audit: type=1400 audit(2555.760:192): avc: denied { write } for pid=4544 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2960.921064][ T3424] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2962.465435][ T3424] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2963.731339][ T3424] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2964.534091][ T3424] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2981.875838][ T3424] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2981.992038][ T3424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2982.102109][ T3424] bond0 (unregistering): Released all slaves [ 2984.589976][ T3424] hsr_slave_0: left promiscuous mode [ 2984.719384][ T3424] hsr_slave_1: left promiscuous mode [ 2985.449753][ T3424] veth1_macvtap: left promiscuous mode [ 2985.450783][ T3424] veth0_macvtap: left promiscuous mode [ 2985.454821][ T3424] veth1_vlan: left promiscuous mode [ 2985.456479][ T3424] veth0_vlan: left promiscuous mode [ 2993.765690][ T24] audit: type=1400 audit(2993.030:193): avc: denied { write } for pid=4757 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3000.313324][ T24] audit: type=1400 audit(2999.580:194): avc: denied { write } for pid=4760 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3010.844249][ T3205] 8021q: adding VLAN 0 to HW filter on device eth9 [ 3013.549059][ T4711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3013.966085][ T4711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3017.063492][ T24] audit: type=1400 audit(3016.330:195): avc: denied { write } for pid=4763 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3021.833314][ T3424] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3023.275060][ T3424] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3024.470737][ T24] audit: type=1400 audit(3023.680:196): avc: denied { write } for pid=4773 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3024.891879][ T3424] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3026.296484][ T3424] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3043.100256][ T24] audit: type=1400 audit(3042.360:197): avc: denied { write } for pid=4787 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3044.805513][ T3424] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3045.036576][ T3424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3045.230706][ T3424] bond0 (unregistering): Released all slaves [ 3046.316203][ T4718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3047.403042][ T3424] hsr_slave_0: left promiscuous mode [ 3047.853285][ T3424] hsr_slave_1: left promiscuous mode [ 3048.751799][ T3424] veth1_macvtap: left promiscuous mode [ 3048.773223][ T3424] veth0_macvtap: left promiscuous mode [ 3048.780778][ T3424] veth1_vlan: left promiscuous mode [ 3048.792276][ T3424] veth0_vlan: left promiscuous mode [ 3049.975671][ T24] audit: type=1400 audit(3049.210:198): avc: denied { write } for pid=4793 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3068.571925][ T4718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3070.030314][ T3205] 8021q: adding VLAN 0 to HW filter on device eth10 [ 3072.474579][ T4711] hsr_slave_0: entered promiscuous mode [ 3072.512391][ T4711] hsr_slave_1: entered promiscuous mode [ 3083.489980][ T24] audit: type=1400 audit(3082.750:199): avc: denied { write } for pid=4803 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3086.927248][ T4711] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 3087.304176][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 3087.449622][ T4711] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 3087.606604][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3087.722724][ T4711] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 3088.031004][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 3088.114734][ T4711] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 3088.347279][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 3090.744822][ T24] audit: type=1400 audit(3089.980:200): avc: denied { write } for pid=4810 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3094.229691][ T4718] hsr_slave_0: entered promiscuous mode [ 3094.284411][ T4718] hsr_slave_1: entered promiscuous mode [ 3094.380668][ T4718] debugfs: 'hsr0' already exists in 'hsr' [ 3094.391786][ T4718] Cannot create hsr debugfs directory [ 3095.396293][ T3205] 8021q: adding VLAN 0 to HW filter on device eth11 [ 3109.023784][ T24] audit: type=1400 audit(3108.290:201): avc: denied { write } for pid=4828 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3113.219053][ T4718] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 3113.595298][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 3113.975709][ T4718] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 3114.364416][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3114.860734][ T4718] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 3115.135274][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 3115.561090][ T4718] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 3115.874510][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 3117.540487][ T24] audit: type=1400 audit(3116.700:202): avc: denied { write } for pid=4833 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3118.126254][ T4711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3124.356952][ T3205] 8021q: adding VLAN 0 to HW filter on device eth12 [ 3140.488476][ T24] audit: type=1400 audit(3139.750:203): avc: denied { write } for pid=4854 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3147.580859][ T24] audit: type=1400 audit(3146.830:204): avc: denied { write } for pid=4859 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3147.646675][ T4718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3153.334868][ T3205] 8021q: adding VLAN 0 to HW filter on device eth13 [ 3170.869557][ T24] audit: type=1400 audit(3170.120:205): avc: denied { write } for pid=4873 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3181.291349][ T24] audit: type=1400 audit(3180.550:206): avc: denied { write } for pid=4881 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3187.695415][ T3205] 8021q: adding VLAN 0 to HW filter on device eth14 [ 3205.298955][ T24] audit: type=1400 audit(3204.550:207): avc: denied { write } for pid=4897 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3213.098724][ T24] audit: type=1400 audit(3212.310:208): avc: denied { write } for pid=4907 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3218.125596][ T3205] 8021q: adding VLAN 0 to HW filter on device eth15 [ 3233.071119][ T24] audit: type=1400 audit(3232.330:209): avc: denied { write } for pid=4919 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3243.401209][ T24] audit: type=1400 audit(3242.560:210): avc: denied { write } for pid=4930 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3251.414040][ T4711] veth0_vlan: entered promiscuous mode [ 3252.617097][ T4711] veth1_vlan: entered promiscuous mode [ 3257.542230][ T4711] veth0_macvtap: entered promiscuous mode [ 3258.274475][ T4711] veth1_macvtap: entered promiscuous mode [ 3261.509699][ T3382] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3261.510988][ T3382] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3261.512102][ T3382] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3261.512891][ T3382] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3270.206834][ T24] audit: type=1400 audit(3269.450:211): avc: denied { write } for pid=4941 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3280.750781][ T24] audit: type=1400 audit(3279.930:212): avc: denied { write } for pid=4953 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3283.143730][ T4718] veth0_vlan: entered promiscuous mode [ 3284.334855][ T4718] veth1_vlan: entered promiscuous mode [ 3288.340653][ T4718] veth0_macvtap: entered promiscuous mode [ 3289.086630][ T3205] 8021q: adding VLAN 0 to HW filter on device eth16 [ 3289.403996][ T4718] veth1_macvtap: entered promiscuous mode [ 3293.675124][ T4843] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3293.703152][ T50] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3293.776746][ T4561] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3293.839181][ T4561] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3352.612234][ T24] audit: type=1400 audit(3351.860:213): avc: denied { write } for pid=4980 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3365.859770][ T24] audit: type=1400 audit(3365.030:214): avc: denied { write } for pid=4989 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3393.439255][ T24] audit: type=1400 audit(3392.700:215): avc: denied { write } for pid=5000 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3404.929873][ T24] audit: type=1400 audit(3404.140:216): avc: denied { write } for pid=5013 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3437.084724][ T24] audit: type=1400 audit(3436.350:217): avc: denied { write } for pid=5024 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3450.299952][ T24] audit: type=1400 audit(3449.490:218): avc: denied { write } for pid=5034 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3472.282880][ T24] audit: type=1400 audit(3471.520:219): avc: denied { write } for pid=5042 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3485.531332][ T24] audit: type=1400 audit(3484.790:220): avc: denied { write } for pid=5053 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3508.494709][ T24] audit: type=1400 audit(3507.760:221): avc: denied { write } for pid=5064 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3520.303418][ T24] audit: type=1400 audit(3519.550:222): avc: denied { write } for pid=5075 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3587.361024][ T24] audit: type=1400 audit(3586.620:223): avc: denied { write } for pid=5107 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3600.629852][ T24] audit: type=1400 audit(3599.860:224): avc: denied { write } for pid=5119 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3624.270695][ T24] audit: type=1400 audit(3623.520:225): avc: denied { write } for pid=5131 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3636.039526][ T24] audit: type=1400 audit(3635.260:226): avc: denied { write } for pid=5143 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3665.473603][ T24] audit: type=1400 audit(3664.730:227): avc: denied { write } for pid=5161 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3678.316958][ T24] audit: type=1400 audit(3677.480:228): avc: denied { write } for pid=5167 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3804.010359][ T24] audit: type=1400 audit(3803.250:229): avc: denied { write } for pid=5220 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3815.909372][ T24] audit: type=1400 audit(3815.120:230): avc: denied { write } for pid=5230 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3938.611666][ T5237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3938.989962][ T5237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3949.924762][ T5242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3950.480776][ T5242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3978.265818][ T5237] hsr_slave_0: entered promiscuous mode [ 3978.373668][ T5237] hsr_slave_1: entered promiscuous mode [ 3978.481876][ T5237] debugfs: 'hsr0' already exists in 'hsr' [ 3978.518798][ T5237] Cannot create hsr debugfs directory [ 3994.242094][ T5242] hsr_slave_0: entered promiscuous mode [ 3994.434732][ T5242] hsr_slave_1: entered promiscuous mode [ 3994.520985][ T5242] debugfs: 'hsr0' already exists in 'hsr' [ 3994.530011][ T5242] Cannot create hsr debugfs directory [ 4002.708940][ T5237] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 4003.122531][ T5237] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 4003.920967][ T5237] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 4004.214855][ T5237] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 4004.859771][ T5237] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 4005.132998][ T5237] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 4005.231532][ T5237] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 4005.447450][ T5237] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 4022.591218][ T5242] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 4023.016847][ T5242] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 4023.204871][ T5242] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 4023.732708][ T5242] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 4023.975771][ T5242] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 4024.447220][ T5242] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 4024.626685][ T5242] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 4025.286931][ T5242] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 4054.393789][ T5237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4065.594297][ T5242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4128.870676][ T4843] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4130.990914][ T4843] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4132.963478][ T4843] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4135.414732][ T4843] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4161.972389][ T4843] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 4162.320859][ T4843] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 4162.500806][ T4843] bond0 (unregistering): Released all slaves [ 4166.352973][ T4843] hsr_slave_0: left promiscuous mode [ 4167.155022][ T4843] hsr_slave_1: left promiscuous mode [ 4167.843046][ T4843] veth1_macvtap: left promiscuous mode [ 4167.890966][ T4843] veth0_macvtap: left promiscuous mode [ 4167.964700][ T4843] veth1_vlan: left promiscuous mode [ 4168.006158][ T4843] veth0_vlan: left promiscuous mode [ 4203.474684][ T4843] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4205.884620][ T4843] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4208.465880][ T4843] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4210.834726][ T4843] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4224.011212][ T24] audit: type=1400 audit(4223.160:231): avc: denied { write } for pid=5379 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4234.552888][ T24] audit: type=1400 audit(4233.800:232): avc: denied { write } for pid=5392 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4238.640245][ T4843] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 4239.254645][ T4843] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 4239.623039][ T4843] bond0 (unregistering): Released all slaves [ 4240.942616][ T3205] 8021q: adding VLAN 0 to HW filter on device eth17 [ 4241.705911][ T4843] hsr_slave_0: left promiscuous mode [ 4241.938949][ T4843] hsr_slave_1: left promiscuous mode [ 4242.785598][ T4843] veth1_macvtap: left promiscuous mode [ 4242.800684][ T4843] veth0_macvtap: left promiscuous mode [ 4242.804822][ T4843] veth1_vlan: left promiscuous mode [ 4242.869286][ T4843] veth0_vlan: left promiscuous mode [ 4292.519185][ T24] audit: type=1400 audit(4291.780:233): avc: denied { write } for pid=5406 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4301.730812][ T24] audit: type=1400 audit(4300.960:234): avc: denied { write } for pid=5417 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4306.243544][ T5237] veth0_vlan: entered promiscuous mode [ 4307.236465][ T5237] veth1_vlan: entered promiscuous mode [ 4308.184594][ T3205] 8021q: adding VLAN 0 to HW filter on device eth18 [ 4311.033918][ T5237] veth0_macvtap: entered promiscuous mode [ 4311.872246][ T5237] veth1_macvtap: entered promiscuous mode [ 4315.965709][ T4843] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 4315.980845][ T4843] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 4316.239704][ T48] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 4316.241793][ T48] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 4323.002541][ T24] audit: type=1400 audit(4322.230:235): avc: denied { write } for pid=5423 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4325.890474][ T5242] veth0_vlan: entered promiscuous mode [ 4327.755946][ T5242] veth1_vlan: entered promiscuous mode [ 4332.422855][ T5242] veth0_macvtap: entered promiscuous mode [ 4333.495459][ T5242] veth1_macvtap: entered promiscuous mode [ 4337.859014][ T24] audit: type=1400 audit(4337.110:236): avc: denied { write } for pid=5431 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4338.845745][ T50] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 4338.856734][ T50] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 4339.031152][ T50] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 4339.094684][ T50] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 4376.076724][ T24] audit: type=1400 audit(4375.310:237): avc: denied { write } for pid=5446 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4390.780693][ T24] audit: type=1400 audit(4389.940:238): avc: denied { write } for pid=5453 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4401.032712][ T3205] 8021q: adding VLAN 0 to HW filter on device eth19 [ 4431.820846][ T24] audit: type=1400 audit(4431.080:239): avc: denied { write } for pid=5467 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4446.699271][ T24] audit: type=1400 audit(4445.920:240): avc: denied { write } for pid=5473 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4456.353949][ T3205] 8021q: adding VLAN 0 to HW filter on device eth20 [ 4486.414728][ T24] audit: type=1400 audit(4485.680:241): avc: denied { write } for pid=5488 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4500.681419][ T24] audit: type=1400 audit(4499.900:242): avc: denied { write } for pid=5497 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4508.254456][ T3205] 8021q: adding VLAN 0 to HW filter on device eth21 [ 4530.292007][ T24] audit: type=1400 audit(4529.500:243): avc: denied { write } for pid=5502 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4539.899136][ T24] audit: type=1400 audit(4539.160:244): avc: denied { write } for pid=5506 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4546.514642][ T3205] 8021q: adding VLAN 0 to HW filter on device eth22 [ 4573.112356][ T24] audit: type=1400 audit(4572.350:245): avc: denied { write } for pid=5514 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4587.213176][ T24] audit: type=1400 audit(4586.340:246): avc: denied { write } for pid=5526 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4596.593702][ T3205] 8021q: adding VLAN 0 to HW filter on device eth24 [ 4613.735293][ T24] audit: type=1400 audit(4612.980:247): avc: denied { write } for pid=5533 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4627.335153][ T24] audit: type=1400 audit(4626.570:248): avc: denied { write } for pid=5540 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4627.421721][ T48] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4629.994477][ T48] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4633.395206][ T48] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4636.821406][ T48] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4661.438905][ T24] audit: type=1400 audit(4660.690:249): avc: denied { write } for pid=5557 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4668.563960][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 4668.963678][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 4669.105675][ T48] bond0 (unregistering): Released all slaves [ 4670.085969][ T24] audit: type=1400 audit(4669.260:250): avc: denied { write } for pid=5562 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4673.659699][ T48] hsr_slave_0: left promiscuous mode [ 4673.813547][ T48] hsr_slave_1: left promiscuous mode [ 4674.691325][ T48] veth1_macvtap: left promiscuous mode [ 4674.702326][ T48] veth0_macvtap: left promiscuous mode [ 4674.743922][ T48] veth1_vlan: left promiscuous mode [ 4674.761351][ T48] veth0_vlan: left promiscuous mode [ 4706.082444][ T3205] 8021q: adding VLAN 0 to HW filter on device eth23 [ 4714.584237][ T3984] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4716.142549][ T3984] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4718.880854][ T3984] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4722.281252][ T5510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4722.934072][ T3984] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4723.885804][ T5510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4727.320059][ T24] audit: type=1400 audit(4726.550:251): avc: denied { write } for pid=5575 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4740.190991][ T24] audit: type=1400 audit(4739.360:252): avc: denied { write } for pid=5585 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4751.697043][ T3984] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 4752.142798][ T3984] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 4752.431893][ T3984] bond0 (unregistering): Released all slaves [ 4755.165954][ T3205] 8021q: adding VLAN 0 to HW filter on device eth25 [ 4755.711091][ T3984] hsr_slave_0: left promiscuous mode [ 4755.787209][ T3984] hsr_slave_1: left promiscuous mode [ 4756.313834][ T3984] veth1_macvtap: left promiscuous mode [ 4756.344753][ T3984] veth0_macvtap: left promiscuous mode [ 4756.372337][ T3984] veth1_vlan: left promiscuous mode [ 4756.412058][ T3984] veth0_vlan: left promiscuous mode [ 4780.212168][ T5515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4781.036831][ T5515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4801.729682][ T24] audit: type=1400 audit(4800.960:253): avc: denied { write } for pid=5602 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4802.832789][ T5510] hsr_slave_0: entered promiscuous mode [ 4802.955090][ T5510] hsr_slave_1: entered promiscuous mode [ 4811.541690][ T24] audit: type=1400 audit(4810.800:254): avc: denied { write } for pid=5610 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4818.565304][ T3205] 8021q: adding VLAN 0 to HW filter on device eth26 [ 4821.954836][ T5515] hsr_slave_0: entered promiscuous mode [ 4822.152469][ T5515] hsr_slave_1: entered promiscuous mode [ 4822.242878][ T5515] debugfs: 'hsr0' already exists in 'hsr' [ 4822.268577][ T5515] Cannot create hsr debugfs directory [ 4830.308971][ T5510] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 4830.702553][ T5510] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 4831.540368][ T5510] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 4831.766259][ T5510] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 4833.009312][ T5510] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 4833.245765][ T5510] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 4835.192085][ T5510] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 4835.631719][ T5510] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 4841.514632][ T24] audit: type=1400 audit(4840.780:255): avc: denied { write } for pid=5618 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4846.543522][ T5515] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 4846.994084][ T5515] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 4847.240749][ T5515] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 4847.650722][ T5515] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 4847.833019][ T5515] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 4848.283481][ T5515] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 4848.452470][ T5515] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 4848.984032][ T5515] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 4853.449835][ T24] audit: type=1400 audit(4852.580:256): avc: denied { write } for pid=5631 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4861.981212][ T3205] 8021q: adding VLAN 0 to HW filter on device eth27 [ 4879.105604][ T5510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4891.012556][ T5515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4899.396902][ T24] audit: type=1400 audit(4898.640:257): avc: denied { write } for pid=5654 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4910.253916][ T24] audit: type=1400 audit(4909.510:258): avc: denied { write } for pid=5664 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4919.883819][ T3205] 8021q: adding VLAN 0 to HW filter on device eth28 [ 4956.442183][ T24] audit: type=1400 audit(4955.590:259): avc: denied { write } for pid=5680 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4966.831046][ T24] audit: type=1400 audit(4966.060:260): avc: denied { write } for pid=5691 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4974.334289][ T3205] 8021q: adding VLAN 0 to HW filter on device eth29 [ 5005.020043][ T24] audit: type=1400 audit(5004.280:261): avc: denied { write } for pid=5708 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5017.743514][ T24] audit: type=1400 audit(5017.010:262): avc: denied { write } for pid=5719 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5025.345521][ T3205] 8021q: adding VLAN 0 to HW filter on device eth30 [ 5056.963313][ T24] audit: type=1400 audit(5056.150:263): avc: denied { write } for pid=5737 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5062.111385][ T5510] veth0_vlan: entered promiscuous mode [ 5063.733999][ T5510] veth1_vlan: entered promiscuous mode [ 5069.000228][ T5510] veth0_macvtap: entered promiscuous mode [ 5070.301618][ T5510] veth1_macvtap: entered promiscuous mode [ 5072.187344][ T24] audit: type=1400 audit(5071.450:264): avc: denied { write } for pid=5746 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5077.819002][ T3382] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 5077.824845][ T3382] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 5077.860414][ T3382] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 5077.943870][ T4843] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 5078.911321][ T5515] veth0_vlan: entered promiscuous mode [ 5082.052451][ T3205] 8021q: adding VLAN 0 to HW filter on device eth31 [ 5082.271431][ T5515] veth1_vlan: entered promiscuous mode [ 5089.704898][ T5515] veth0_macvtap: entered promiscuous mode [ 5090.883678][ T5515] veth1_macvtap: entered promiscuous mode [ 5096.680559][ T48] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 5096.686148][ T48] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 5096.840461][ T48] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 5096.891359][ T3984] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 5097.369542][ T24] audit: type=1400 audit(5096.490:265): avc: denied { write } for pid=5749 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5115.738730][ T24] audit: type=1400 audit(5114.950:266): avc: denied { write } for pid=5758 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5152.742835][ T24] audit: type=1400 audit(5151.990:267): avc: denied { write } for pid=5770 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5171.339515][ T24] audit: type=1400 audit(5170.420:268): avc: denied { write } for pid=5781 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5220.860492][ T24] audit: type=1400 audit(5220.080:269): avc: denied { write } for pid=5793 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5238.132054][ T24] audit: type=1400 audit(5237.350:270): avc: denied { write } for pid=5803 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5250.571937][ T3205] 8021q: adding VLAN 0 to HW filter on device eth32 [ 5353.649021][ T24] audit: type=1400 audit(5352.890:271): avc: denied { write } for pid=5848 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5372.199342][ T24] audit: type=1400 audit(5371.360:272): avc: denied { write } for pid=5861 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5416.530863][ T24] audit: type=1400 audit(5415.730:273): avc: denied { write } for pid=5876 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5434.769052][ T24] audit: type=1400 audit(5434.020:274): avc: denied { write } for pid=5889 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5468.986024][ T24] audit: type=1400 audit(5468.220:275): avc: denied { write } for pid=5899 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5487.822650][ T24] audit: type=1400 audit(5487.060:276): avc: denied { write } for pid=5912 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5522.794225][ T24] audit: type=1400 audit(5522.060:277): avc: denied { write } for pid=5926 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5541.219147][ T24] audit: type=1400 audit(5540.280:278): avc: denied { write } for pid=5938 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5579.946392][ T24] audit: type=1400 audit(5579.210:279): avc: denied { write } for pid=5949 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5598.834600][ T24] audit: type=1400 audit(5598.070:280): avc: denied { write } for pid=5960 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5701.729740][ T24] audit: type=1400 audit(5700.820:281): avc: denied { write } for pid=6001 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5719.361667][ T24] audit: type=1400 audit(5718.500:282): avc: denied { write } for pid=6012 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5768.418926][ T24] audit: type=1400 audit(5767.680:283): avc: denied { write } for pid=6028 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5785.805767][ T24] audit: type=1400 audit(5784.910:284): avc: denied { write } for pid=6036 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5825.589789][ T24] audit: type=1400 audit(5824.810:285): avc: denied { write } for pid=6053 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5844.141441][ T24] audit: type=1400 audit(5843.390:286): avc: denied { write } for pid=6060 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5888.139071][ T24] audit: type=1400 audit(5887.370:287): avc: denied { write } for pid=6078 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5901.779229][ T24] audit: type=1400 audit(5900.990:288): avc: denied { write } for pid=6081 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5972.159671][ T24] audit: type=1400 audit(5971.270:289): avc: denied { write } for pid=6101 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5987.809890][ T24] audit: type=1400 audit(5987.070:290): avc: denied { write } for pid=6112 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6028.508346][ T24] audit: type=1400 audit(6027.630:291): avc: denied { write } for pid=6119 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6044.604187][ T24] audit: type=1400 audit(6043.870:292): avc: denied { write } for pid=6132 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6074.614471][ T24] audit: type=1400 audit(6073.870:293): avc: denied { write } for pid=6141 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6087.535315][ T6089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 6088.299675][ T6089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 6091.022730][ T24] audit: type=1400 audit(6090.290:294): avc: denied { write } for pid=6153 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6100.314052][ T6094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 6101.016493][ T6094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 6121.809272][ T24] audit: type=1400 audit(6121.060:295): avc: denied { write } for pid=6158 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6138.679855][ T24] audit: type=1400 audit(6137.900:296): avc: denied { write } for pid=6169 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6157.097029][ T6089] hsr_slave_0: entered promiscuous mode [ 6157.353648][ T6089] hsr_slave_1: entered promiscuous mode [ 6157.563337][ T6089] debugfs: 'hsr0' already exists in 'hsr' [ 6157.620652][ T6089] Cannot create hsr debugfs directory [ 6170.885087][ T6094] hsr_slave_0: entered promiscuous mode [ 6171.055282][ T6094] hsr_slave_1: entered promiscuous mode [ 6171.195708][ T6094] debugfs: 'hsr0' already exists in 'hsr' [ 6171.220511][ T6094] Cannot create hsr debugfs directory [ 6239.781143][ T24] audit: type=1400 audit(6239.040:297): avc: denied { write } for pid=6195 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6249.914390][ T6089] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 6251.153539][ T6089] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 6251.506515][ T6089] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 6252.336968][ T6089] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 6252.895143][ T6089] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 6253.684423][ T6089] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 6254.513874][ T24] audit: type=1400 audit(6253.750:298): avc: denied { write } for pid=6198 comm="rm" name="hook-state" dev="tmpfs" ino=92 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6255.829823][ T6089] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 6256.382725][ T6089] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 6266.400696][ T6094] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 6266.926465][ T6094] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 6267.252168][ T6094] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 6267.884728][ T6094] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 6268.114031][ T6094] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 6268.746917][ T6094] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 6269.042033][ T6094] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 6269.751819][ T6094] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 6311.630480][ T26] INFO: task syz.9.394:6073 blocked for more than 430 seconds. [ 6311.691051][ T26] Not tainted syzkaller #0 [ 6311.722513][ T26] Blocked by coredump. [ 6311.722978][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 6311.723467][ T26] task:syz.9.394 state:D stack:0 pid:6073 tgid:6073 ppid:5515 task_flags:0x40004c flags:0x00000010 [ 6311.724942][ T26] Call trace: [ 6311.725949][ T26] __switch_to+0x5e0/0xb70 (T) [ 6311.860295][ T26] __schedule+0x2554/0x3828 [ 6311.869293][ T26] schedule+0xac/0x278 [ 6311.869883][ T26] schedule_timeout+0x68/0x1ec [ 6311.870394][ T26] do_wait_for_common+0x270/0x428 [ 6311.870813][ T26] wait_for_completion+0x44/0x5c [ 6311.871236][ T26] __synchronize_srcu+0x1b4/0x1f4 [ 6311.871739][ T26] synchronize_srcu+0x668/0x8dc [ 6311.872245][ T26] __mmu_notifier_release+0x668/0x858 [ 6311.872747][ T26] exit_mmap+0xcc/0xb64 [ 6311.873237][ T26] __mmput+0x10c/0x51c [ 6311.873726][ T26] mmput+0x70/0xa8 [ 6311.874219][ T26] exit_mm+0x1e4/0x2f8 [ 6311.874678][ T26] do_exit+0x828/0x23d8 [ 6311.875138][ T26] do_group_exit+0x288/0x2ac [ 6311.876103][ T26] __arm64_sys_exit_group+0x40/0x48 [ 6311.876664][ T26] invoke_syscall+0x94/0x1ec [ 6311.877192][ T26] el0_svc_common+0x120/0x2f4 SYZFAIL: failed to recv rpc [ 6312.163211][ T26] do_el0_svc+0x58/0x74 [ 6312.163923][ T26] el0_svc+0x60/0x238 [ 6312.164425][ T26] el0t_64_sync_handler+0x84/0x12c [ 6312.164952][ T26] el0t_64_sync+0x198/0x19c [ 6312.229695][ T26] [ 6312.229695][ T26] Showing all locks held in the system: [ 6312.269967][ T26] 1 lock held by khungtaskd/26: [ 6312.270558][ T26] #0: ffff800087db4518 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire+0x0/0x44 [ 6312.273151][ T26] 3 locks held by kworker/u4:5/50: [ 6312.273644][ T26] 2 locks held by getty/3235: [ 6312.274010][ T26] #0: 17f000001276e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 6312.276306][ T26] #1: 81ff80008cb4b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x314/0x1214 [ 6312.471322][ T26] 1 lock held by sshd-session/3364: [ 6312.471858][ T26] 2 locks held by syz-executor/3365: [ 6312.472213][ T26] 2 locks held by kworker/u4:0/3382: [ 6312.472547][ T26] #0: bbf000000d036540 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_one_work+0x804/0x1d5c [ 6312.474631][ T26] #1: ffff80008ff27cb8 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x890/0x1d5c [ 6312.476926][ T26] 3 locks held by kworker/u4:3/3424: [ 6312.477273][ T26] 2 locks held by kworker/0:4/3522: [ 6312.574075][ T26] 3 locks held by kworker/u4:2/3984: [ 6312.574539][ T26] 3 locks held by kworker/u4:8/4071: [ 6312.574897][ T26] 3 locks held by kworker/u4:9/4590: [ 6312.575221][ T26] #0: 4df000001269d940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x804/0x1d5c [ 6312.683932][ T26] #1: ffff8000a0687cb8 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x890/0x1d5c [ 6312.701720][ T26] #2: ffff8000880e2838 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c [ 6312.703496][ T26] 2 locks held by kworker/u4:13/5345: [ 6312.703867][ T26] 2 locks held by kworker/u4:7/5591: [ 6312.704193][ T26] #0: bbf000000d036540 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_one_work+0x804/0x1d5c [ 6312.706029][ T26] #1: ffff80008fee7cb8 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x890/0x1d5c [ 6312.872394][ T26] 3 locks held by kworker/u4:1/5997: [ 6312.872891][ T26] 2 locks held by syz.8.393/6069: [ 6312.873248][ T26] 1 lock held by syz-executor/6089: [ 6312.873576][ T26] 3 locks held by kworker/u4:10/6125: [ 6312.873911][ T26] 2 locks held by modprobe/6233: [ 6312.962347][ T26] [ 6312.963022][ T26] ============================================= [ 6312.963022][ T26] [ 6312.964085][ T26] Kernel panic - not syncing: hung_task: blocked tasks [ 6312.969229][ T26] CPU: 0 UID: 0 PID: 26 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT [ 6312.970773][ T26] Hardware name: linux,dummy-virt (DT) [ 6312.971752][ T26] Call trace: [ 6312.972597][ T26] show_stack+0x2c/0x3c (C) [ 6312.973653][ T26] __dump_stack+0x30/0x40 [ 6312.974631][ T26] dump_stack_lvl+0x30/0x12c [ 6312.975447][ T26] dump_stack+0x1c/0x28 [ 6312.976386][ T26] vpanic+0x4cc/0x844 [ 6312.977309][ T26] vpanic+0x0/0x844 [ 6312.978189][ T26] hung_task_panic+0x0/0x2c [ 6312.979234][ T26] kthread+0x4d4/0x51c [ 6312.980218][ T26] ret_from_fork+0x10/0x20 [ 6312.982235][ T26] Kernel Offset: disabled [ 6312.983018][ T26] CPU features: 0x00000000,0034600b,f7c647a1,057ffe1f [ 6312.984269][ T26] Memory Limit: none [ 6312.986567][ T26] Rebooting in 86400 seconds..