last executing test programs: 16m57.843845137s ago: executing program 0 (id=1): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000bfe000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x2}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x1, 0x80000, 0x10000, 0x20, 0x0, 0x2}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000240)={0xc0, 0x0, 0x10000}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)={0x100000, 0x26000, 0x9, 0x1, 0x6}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 16m41.647790151s ago: executing program 0 (id=4): r0 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000540)={0x0, &(0x7f0000000000)=[@irq_setup={0x46, 0x18, {0x4, 0x84}}, @smc={0x1e, 0x40, {0xc4000053, [0x9, 0x7, 0x1, 0xfd09]}}, @hvc={0x32, 0x40, {0x8, [0x5, 0x8, 0x800, 0xe, 0x2]}}, @its_send_cmd={0xaa, 0x28, {0xe, 0x0, 0x3, 0x5, 0x9, 0xee06}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80c0000, 0xffd0, 0x7, 0x2}}, @smc={0x1e, 0x40, {0x80000000, [0x5, 0xffff, 0x65, 0x400, 0x5]}}, @eret={0xe6, 0x18, 0x80000001}, @mrs={0xbe, 0x18, {0x603000000013c013}}, @irq_setup={0x46, 0x18, {0x2, 0x37}}, @its_setup={0x82, 0x28, {0x3, 0x2, 0x34a}}, @irq_setup={0x46, 0x18, {0x4, 0x9c}}, @eret={0xe6, 0x18, 0x7}, @eret={0xe6, 0x18, 0x1}, @code={0xa, 0x84, {"00a8217e007008d5c0fb8ed200a0b0f2410080d2020180d2830180d2640180d2020000d4000820bc00a0202ec0799fd20080b0f2410180d2820180d2430180d2640180d2020000d4007008d520ed82d20000b8f2210180d2820080d2030080d2840080d2020000d4000008d5007008d5"}}, @mrs={0xbe, 0x18}, @svc={0x122, 0x40, {0x84000014, [0x2, 0xe7a, 0x1000, 0xbf2d, 0x7]}}, @uexit={0x0, 0x18, 0x2}, @its_setup={0x82, 0x28, {0x2, 0x4, 0x3b7}}, @irq_setup={0x46, 0x18, {0x3, 0xac}}, @eret={0xe6, 0x18, 0x9}, @code={0xa, 0x6c, {"0000309e007008d5000028d5000c000ec05c98d20020b8f2610180d2c20180d2e30180d2c40080d2020000d4008008d520e389d20000b0f2810180d2e20080d2830180d2e40180d2020000d4000840380028214e0000407a"}}, @eret={0xe6, 0x18, 0x3}, @irq_setup={0x46, 0x18, {0x4, 0x2c8}}, @code={0xa, 0xb4, {"008040c8c07388d200e0b0f2810180d2220180d2a30180d2440180d2020000d41f0020ebc0db97d20080b0f2a10080d2820080d2a30180d2640180d2020000d4e05a8ed20040b0f2e10080d2020180d2430180d2640080d2020000d40000806c00c8215e00a0000dc0d286d20060b0f2210180d2820180d2030080d2040180d2020000d4000b9ad200e0b8f2610180d2620180d2830080d2e40180d2020000d4"}}, @mrs={0xbe, 0x18, {0x603000000013dce0}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x90}}, @uexit={0x0, 0x18, 0x6}, @smc={0x1e, 0x40, {0x31000000, [0xb, 0x3, 0xfff, 0xabb5, 0x3]}}], 0x524}, &(0x7f0000000580)=[@featur1={0x1, 0x3a}], 0x1) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f00000005c0)=@x86={0x2, 0x81, 0x5, 0x0, 0x6, 0xc, 0x6, 0x3, 0x1, 0x3, 0xa8, 0x2, 0x0, 0x7, 0x3, 0x7, 0x1, 0xff, 0x1, '\x00', 0x0, 0x401}) r1 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000ac0)={0x0, &(0x7f0000000600)=[@its_setup={0x82, 0x28, {0x4, 0x1, 0x242}}, @svc={0x122, 0x40, {0x84000050, [0x7, 0x8, 0x51, 0x8, 0x86]}}, @code={0xa, 0x6c, {"007008d50004805ae0039fda000028d560cf96d20040b8f2610080d2420180d2e30080d2440080d2020000d40004000f007008d5000028d5007008d5607186d20040b8f2e10080d2e20180d2830080d2040080d2020000d4"}}, @uexit={0x0, 0x18, 0x3}, @uexit={0x0, 0x18, 0x8}, @smc={0x1e, 0x40, {0x6000000, [0x1ff, 0xf31, 0x3, 0x1, 0xd]}}, @svc={0x122, 0x40, {0x8400000e, [0x80000001, 0x2, 0x73a9, 0x9, 0x3]}}, @uexit={0x0, 0x18, 0x9}, @its_setup={0x82, 0x28, {0x1, 0x3, 0xbc}}, @code={0xa, 0x54, {"007008d50000c06900000091207995d20000b0f2a10080d2220080d2c30080d2240080d2020000d4000028d50000002b00f8307e00c8a10e00a0800d00088038"}}, @code={0xa, 0x9c, {"405a86d200a0b8f2e10080d2020180d2230180d2040080d2020000d4c0398ed20020b0f2a10080d2420180d2630080d2c40180d2020000d4007008d50000781e000028d560a089d20000b8f2e10080d2c20180d2230180d2440180d2020000d4007008d5000000d280659ad200e0b8f2010080d2c20180d2830080d2840180d2020000d4008008d5"}}, @svc={0x122, 0x40, {0x2000, [0x39d, 0x81, 0x0, 0x33, 0x1]}}, @msr={0x14, 0x20, {0x603000000013df52, 0x5}}, @its_setup={0x82, 0x28, {0x2, 0x3, 0x56}}, @svc={0x122, 0x40, {0x32000000, [0x7ac5, 0x7, 0x0, 0x940c, 0xffffffffffffffff]}}, @irq_setup={0x46, 0x18, {0x3, 0x357}}, @irq_setup={0x46, 0x18, {0x4, 0x231}}, @irq_setup={0x46, 0x18, {0x1, 0x3b7}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x80, 0x4, 0xd}}, @code={0xa, 0x54, {"007008d500fc200e007008d5008008d500d294d20060b0f2410080d2620080d2e30180d2a40080d2020000d4008008d50020c00c000028d50000007a000028d5"}}, @eret={0xe6, 0x18, 0x7fffffff}, @hvc={0x32, 0x40, {0x4ed84ab16c9251c8, [0x3, 0xfffffffffffffff8, 0xfffffffffffffffd, 0x5, 0xb0e]}}], 0x4a0}, &(0x7f0000000b00)=[@featur1={0x1, 0x2}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r1, 0x4018aee1, &(0x7f0000000b80)=@attr_pmu_irq={0x0, 0x0, 0x0, &(0x7f0000000b40)=0x3}) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1c) syz_kvm_setup_cpu$arm64(r2, r1, &(0x7f0000bfd000/0x400000)=nil, &(0x7f0000001000)=[{0x0, &(0x7f0000000bc0)=[@eret={0xe6, 0x18, 0x3}, @its_setup={0x82, 0x28, {0x2, 0x0, 0x183}}, @its_setup={0x82, 0x28, {0x0, 0x1, 0x211}}, @svc={0x122, 0x40, {0x4000, [0xd270, 0x3, 0xf2e, 0xff, 0x80]}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x0, 0x2, 0x7, 0x8, 0x3}}, @mrs={0xbe, 0x18, {0x603000000013e531}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x1, 0x0, 0x6, 0x1, 0x0, 0x1}}, @irq_setup={0x46, 0x18, {0x3, 0x228}}, @smc={0x1e, 0x40, {0x4000, [0x7, 0x8, 0xef, 0x6, 0x7a0]}}, @uexit={0x0, 0x18, 0x5}, @mrs={0xbe, 0x18, {0x6030000000138054}}, @svc={0x122, 0x40, {0x84000005, [0x3, 0x4, 0x3, 0xca, 0x4]}}, @mrs={0xbe, 0x18, {0x603000000013804e}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x88, 0x9, 0x1}}, @its_send_cmd={0xaa, 0x28, {0xe, 0x1, 0x0, 0xa, 0x2, 0x4, 0x3}}, @its_setup={0x82, 0x28, {0x4, 0x3, 0x65}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xffd0, 0x8}}, @eret={0xe6, 0x18, 0x6}, @svc={0x122, 0x40, {0xffff, [0x1, 0x2, 0x8000, 0x7fff, 0x2]}}, @irq_setup={0x46, 0x18, {0x4, 0x3b5}}, @irq_setup={0x46, 0x18, {0x2, 0x171}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x8100000, 0x80, 0x80, 0x6}}, @svc={0x122, 0x40, {0xc400000d, [0x9, 0x2, 0x9, 0x8000000000000000, 0x8000000000000000]}}, @eret={0xe6, 0x18, 0xfffffffffffffff8}, @eret={0xe6, 0x18, 0xd}, @its_send_cmd={0xaa, 0x28, {0xe, 0x1, 0x0, 0x8, 0x6f56, 0x8, 0x2}}, @memwrite={0x6e, 0x30, @generic={0x7000, 0xa5b, 0xfffffffffffffc01, 0x2}}], 0x420}], 0x1, 0x0, &(0x7f0000001040)=[@featur2={0x1, 0x80}], 0x1) ioctl$KVM_PPC_ALLOCATE_HTAB(r2, 0xc004aea7, &(0x7f0000001080)=0x5) ioctl$KVM_RUN(r1, 0xae80, 0x0) r3 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f00000017c0)={0x0, &(0x7f00000010c0)=[@its_setup={0x82, 0x28, {0x0, 0x0, 0x340}}, @msr={0x14, 0x20, {0x603000000013c4c9, 0xa6e8}}, @uexit={0x0, 0x18, 0xb6a9}, @smc={0x1e, 0x40, {0xc4000012, [0xf, 0xff, 0x2d6c6efe, 0x74, 0xfffffffffffffff9]}}, @uexit={0x0, 0x18, 0x8}, @code={0xa, 0x6c, {"008008d5007008d500a0a00d007008d5000008d5e0979dd20000b0f2610180d2620080d2430180d2640180d2020000d400b4200e0080000d40e39ed20040b0f2e10080d2c20080d2830180d2840080d2020000d40000009c"}}, @eret={0xe6, 0x18, 0x3}, @smc={0x1e, 0x40, {0x31000000, [0x80000000, 0x9, 0x10001, 0x1, 0x9b25]}}, @code={0xa, 0x6c, {"007008d5005cc09a007008d500a0000d007008d5007008d560fb8dd200a0b0f2c10180d2820080d2430080d2e40080d2020000d4008008d5c0ac9ed200e0b8f2610080d2a20080d2830080d2640080d2020000d400bc200e"}}, @msr={0x14, 0x20, {0x603000000013c091, 0xd787}}, @smc={0x1e, 0x40, {0x8400000e, [0x1000, 0xd5, 0xffffffffffff9406, 0x7, 0x683]}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x18, 0xa9, 0x2}}, @eret={0xe6, 0x18, 0x7c}, @code={0xa, 0xe4, {"00f19dd20000b8f2610080d2220080d2830080d2640180d2020000d4800983d20020b0f2c10180d2a20080d2630080d2640080d2020000d4e0079f1a405189d20080b0f2610180d2020180d2a30080d2440180d2020000d40000802d008008d540038bd200c0b8f2a10080d2020080d2030080d2a40080d2020000d420cc87d20080b0f2210080d2a20180d2e30180d2c40080d2020000d4c02683d20080b0f2610080d2420080d2630080d2c40180d2020000d4006f8ed200e0b8f2610080d2020080d2e30080d2640080d2020000d4"}}, @its_setup={0x82, 0x28, {0x0, 0x3, 0x3a0}}, @mrs={0xbe, 0x18, {0x603000000013e6c1}}, @uexit={0x0, 0x18, 0xff}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x1a00, 0x7, 0x1}}, @mrs={0xbe, 0x18, {0x603000000013e66c}}, @irq_setup={0x46, 0x18, {0x4, 0x138}}, @hvc={0x32, 0x40, {0x80008000, [0x7f, 0x2, 0x10001, 0x8, 0x8]}}, @code={0xa, 0x6c, {"0000c0930000c05a000008d560bb99d20000b8f2e10080d2820080d2c30080d2e40180d2020000d4000008d5007008d50004003c000028d5008040c860d39ed20060b8f2e10080d2c20180d2030080d2440080d2020000d4"}}, @msr={0x14, 0x20, {0x603000000013c032, 0xffffffff7fffffff}}, @smc={0x1e, 0x40, {0x1000, [0xffffffffffffffff, 0x2, 0x8, 0x1, 0x51f4]}}, @smc={0x1e, 0x40, {0x30000000, [0x3, 0xffffffffffff8000, 0x9, 0x7fffffff, 0x7]}}, @irq_setup={0x46, 0x18, {0x3, 0x89}}, @hvc={0x32, 0x40, {0x84000006, [0x8, 0x10, 0xb6, 0x8000, 0x3]}}, @svc={0x122, 0x40, {0x84000008, [0x8, 0xffff, 0x1, 0x4, 0x8]}}, @irq_setup={0x46, 0x18, {0x2, 0x199}}, @eret={0xe6, 0x18, 0x2}, @its_setup={0x82, 0x28, {0x1, 0x0, 0x37c}}, @code={0xa, 0x84, {"c00c99d200a0b8f2810180d2020180d2430080d2040180d2020000d4000028d5008008d5009c007f60538bd20040b0f2010080d2220080d2630080d2a40080d2020000d40084200ec05988d20000b8f2210080d2220180d2630180d2640180d2020000d4007008d5007008d50004801a"}}], 0x6ec}, &(0x7f0000001800)=[@featur1={0x1, 0xa0}], 0x1) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000001880)=@riscv64_config={0x8030000000100002, &(0x7f0000001840)=0x6}) close(r3) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000018c0)={0x1, 0xffffffffffffffff, 0x1}) ioctl$KVM_GET_DEVICE_ATTR(r4, 0x4018aee2, &(0x7f0000001940)=@attr_arm64={0x0, 0x6, 0x5, &(0x7f0000001900)=0x10}) r5 = eventfd2(0x8000, 0x80000) r6 = eventfd2(0xffffff81, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000001980)={r5, 0x5, 0x2, r6}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f00000019c0)=@x86={0x8, 0x7, 0x4, 0x0, 0xef45, 0x7, 0x66, 0x81, 0x3, 0x4, 0x40, 0x6, 0x0, 0x2, 0x52, 0x72, 0x9, 0x64, 0xff, '\x00', 0xa, 0x3}) ioctl$KVM_CLEAR_DIRTY_LOG(r2, 0xc018aec0, &(0x7f0000001e00)={0x10002, 0x200, 0x380, &(0x7f0000001a00)=[0x6, 0x400, 0x3, 0xc, 0x5, 0x80000000, 0x4, 0x7, 0xfffffffffffffffa, 0xd625, 0x84e6, 0x889, 0x8, 0x7ff, 0x8, 0xa, 0x7, 0x7, 0x81, 0x7, 0x2, 0x2e05bd1d, 0xffff, 0x0, 0x9, 0xffffffff, 0x9a7, 0x0, 0x1000, 0xfffffffffffff161, 0x7f71, 0xfffffffffffffffe, 0x100000001, 0x9, 0xeb1, 0x1, 0x4, 0x2, 0x9, 0x265, 0x1, 0xffffffff, 0x2, 0xfff, 0x8000000000000000, 0x7f, 0x8001, 0x7, 0x5, 0x6, 0x3, 0x9, 0xfffffffffffffffa, 0x200, 0x8, 0x80000001, 0x9d, 0x7, 0x2, 0xa, 0x200, 0x4, 0x3, 0x8, 0x177, 0xd, 0x1, 0x2, 0x8, 0xe, 0x6, 0x9, 0x10, 0x0, 0x9, 0x5, 0x4, 0x8, 0x0, 0x5, 0x3, 0xe23b, 0x1, 0x3, 0x8, 0x6, 0x9, 0x2, 0xf, 0x7, 0x6, 0x6, 0x9, 0x9a, 0x81, 0x6, 0x0, 0xfffffffffffffff7, 0xf, 0x80, 0xc986, 0x9, 0x3, 0x3, 0x5, 0x6, 0x4, 0x4, 0x3, 0x370, 0x401, 0x4, 0x4, 0x5, 0x5ae, 0x4, 0x9, 0x2, 0x7, 0x68, 0xc5bd, 0x6, 0x200, 0x1, 0x1, 0x1, 0x1, 0x5]}) ioctl$KVM_HAS_DEVICE_ATTR(r4, 0x4018aee3, &(0x7f0000001e80)=@attr_riscv64=@attr_ctrl={0x0, 0x1, 0x1, &(0x7f0000001e40)=0x4}) r7 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000002380)={0x0, &(0x7f0000001ec0)=[@eret={0xe6, 0x18}, @svc={0x122, 0x40, {0x84000009, [0x0, 0x8001, 0x0, 0x0, 0xffffffffffffffff]}}, @irq_setup={0x46, 0x18, {0x0, 0x1ee}}, @eret={0xe6, 0x18, 0x8}, @its_send_cmd={0xaa, 0x28, {0x9, 0x0, 0x2, 0x0, 0x5, 0x5, 0x2}}, @its_setup={0x82, 0x28, {0x0, 0x4, 0x241}}, @mrs={0xbe, 0x18, {0x603000000013e6dc}}, @its_setup={0x82, 0x28, {0x1, 0x1, 0x239}}, @smc={0x1e, 0x40, {0x84000005, [0x1, 0x7a665f42, 0xfa4, 0x0, 0x8001]}}, @msr={0x14, 0x20, {0x603000000013c298, 0x1}}, @mrs={0xbe, 0x18, {0x603000000013e65b}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xffe0, 0x9, 0x1}}, @hvc={0x32, 0x40, {0x84000051, [0x1ff, 0x100000001, 0x2, 0x2, 0x94b]}}, @msr={0x14, 0x20, {0x603000000013df45, 0x7}}, @its_send_cmd={0xaa, 0x28, {0x4, 0x0, 0x4, 0x6, 0x9, 0x0, 0x1}}, @mrs={0xbe, 0x18, {0x603000000013c644}}, @eret={0xe6, 0x18}, @msr={0x14, 0x20, {0x603000000013801f, 0x7}}, @mrs={0xbe, 0x18, {0x603000000013e6d6}}, @hvc={0x32, 0x40, {0xc4000012, [0x8, 0x4, 0x1, 0x0, 0x400]}}, @irq_setup={0x46, 0x18, {0x0, 0x21e}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xfff4, 0xffffffffffffffff, 0xb}}, @eret={0xe6, 0x18, 0x5c3}, @its_send_cmd={0xaa, 0x28, {0x3, 0x0, 0x2, 0x6, 0x8, 0x7f, 0x3}}, @hvc={0x32, 0x40, {0xf5af669d0c625f34, [0x8, 0xa, 0x0, 0x2, 0xa]}}, @svc={0x122, 0x40, {0x84000050, [0x9, 0x3, 0x81, 0x2, 0x4]}}, @uexit={0x0, 0x18, 0x3}, @mrs={0xbe, 0x18, {0x603000000013e284}}, @svc={0x122, 0x40, {0x84000010, [0x7fffffff, 0x7ff, 0x44d, 0x3, 0xffffffffffffffff]}}, @hvc={0x32, 0x40, {0x84000007, [0x4, 0x0, 0x2, 0x0, 0x4]}}], 0x4a8}, &(0x7f00000023c0)=[@featur1={0x1, 0x1}], 0x1) ioctl$KVM_SET_MP_STATE(r7, 0x4004ae99, &(0x7f0000002400)=0x5) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000002440)={0x7}) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002480), 0x200000, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x33) r10 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x15) r11 = eventfd2(0x821, 0x80001) ioctl$KVM_IRQFD(r10, 0x4020ae76, &(0x7f00000024c0)={r5, 0x4, 0x0, r11}) ioctl$KVM_IOEVENTFD(r9, 0x4040ae79, &(0x7f0000002500)={0x1ff, 0xffffffff, 0x8, 0xffffffffffffffff, 0x9}) 16m34.577088733s ago: executing program 0 (id=5): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x1}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x8, 0xf, 0x0, 0x5, 0x6, 0x6, 0x6, 0x54, 0x86, 0xdd, 0x68, 0x0, 0x20b, 0x0, 0x0, 0x3, 0x5, 0x5, '\x00', 0x1, 0x3}) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000200)={0xc000, 0x11000, 0x1}) write$eventfd(r3, &(0x7f00000001c0)=0x3, 0x50) r5 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4000ae84, 0xffffffffffffffff) 16m34.402098757s ago: executing program 1 (id=6): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000040)=@arm64_core={0x6030000000100050, &(0x7f0000000000)=0x85c7}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r3, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r3, 0x0) r5 = eventfd2(0x0, 0x0) close(r5) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) write$eventfd(r5, &(0x7f0000000180)=0x5, 0xfffffde3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x10) r7 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000580)={0x0, &(0x7f00000003c0)=[@msr={0x14, 0x20, {0x603000000013f528, 0x61}}, @irq_setup={0x46, 0x18, {0x3, 0x396}}, @svc={0x122, 0x40, {0x2, [0x3, 0x3, 0x3, 0x43a9593a, 0x5]}}, @its_setup={0x82, 0x28, {0x0, 0x2, 0x3a8}}, @mrs={0xbe, 0x18, {0x603000000013e18d}}, @its_setup={0x82, 0x28, {0x0, 0x4, 0x14}}, @msr={0x14, 0x20, {0x603000000013df18, 0xf60c}}, @svc={0x122, 0x40, {0x100, [0x8, 0xfff, 0x5, 0x2, 0xfff]}}, @svc={0x122, 0x40, {0x84000012, [0x4, 0x5, 0xc1, 0x1ff, 0x3]}}, @msr={0x14, 0x20, {0x0, 0x3}}], 0x1a0}, &(0x7f00000005c0)=[@featur1={0x1, 0xe2}], 0x1) syz_kvm_setup_cpu$arm64(r6, r7, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000880)=[{0x0, &(0x7f0000000600)=[@mrs={0xbe, 0x18, {0x603000000013c64a}}, @mrs={0xbe, 0x18, {0x603000000013dea6}}, @uexit={0x0, 0x18, 0xffffffffffffffff}, @hvc={0x32, 0x40, {0x98ddeaf1e4764d24, [0x4, 0x8000, 0x8001, 0x80, 0x7]}}, @hvc={0x32, 0x40, {0x0, [0x7, 0x9, 0x8, 0x1854, 0x4]}}, @memwrite={0x6e, 0x30, @generic={0x4, 0x885, 0x9, 0x9}}, @msr={0x14, 0x20, {0x603000000013c038, 0x461a}}, @uexit={0x0, 0x18, 0x5}, @irq_setup={0x46, 0x18, {0x3, 0x144}}, @eret={0xe6, 0x18}, @irq_setup={0x46, 0x18, {0x3, 0x2ce}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x1, 0x0, 0x1, 0x10, 0x1000, 0x2}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x80, 0xfff, 0x1}}, @hvc={0x32, 0x40, {0x2000, [0x3, 0x66, 0x2, 0xfffffffffffff17a, 0x80000001]}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x1, 0x3, 0x9, 0xf, 0x8, 0x1}}, @smc={0x1e, 0x40, {0xb002457, [0x2, 0xffe0000000000000, 0xf9, 0x1ff, 0x7ff]}}], 0x278}], 0x1, 0x0, &(0x7f00000008c0)=[@featur2={0x1, 0x44}], 0x1) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) r8 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x25) ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f00000001c0)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000380)}) ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f00000002c0)=@attr_other={0x0, 0x8, 0x108, &(0x7f0000000000)=0xc000000000000000}) ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x4, 0x1, 0x0}) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 16m25.933544371s ago: executing program 0 (id=7): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000000)={0x7, 0xffffffffffffffff}) ioctl$KVM_GET_DEVICE_ATTR(r4, 0x4018aee2, &(0x7f0000000640)=@attr_other={0x0, 0x1, 0xc, &(0x7f0000000600)=0x2}) r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r8, 0x4010aeab, &(0x7f0000000180)=@arm64_sys={0x603000000013e08c, 0x0}) r9 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000180)={0x0, &(0x7f0000000100)}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r12, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) ioctl$KVM_RUN(r12, 0xae80, 0x0) r13 = eventfd2(0x3, 0x0) write$eventfd(r13, &(0x7f0000000400)=0xfffffffffffffffc, 0x8) syz_kvm_add_vcpu$arm64(0x0, 0x0, 0x0, 0x0) close(0x4) close(0x5) r14 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0) r16 = ioctl$KVM_CREATE_VCPU(r15, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r15, r16, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x20}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000240)=@riscv64_smstateen_csr={0x8030000003020000, &(0x7f00000001c0)=0x6}) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x1fd, 0x2, 0x8000000, 0x2000, &(0x7f0000ecf000/0x2000)=nil}) 16m21.956172162s ago: executing program 1 (id=8): r0 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r0, 0x4010ae74, &(0x7f0000000000)={0x5212, 0x0, 0x400}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2c) ioctl$KVM_PPC_ALLOCATE_HTAB(r0, 0xc004aea7, &(0x7f0000000040)=0xd0) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000080)=0x7fff) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x1}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x28) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000100)={0xa, 0xffffffffffffffff}) ioctl$KVM_GET_DEVICE_ATTR(r4, 0x4018aee2, &(0x7f0000000180)=@attr_riscv64=@attr_ctrl={0x0, 0x1, 0x1, &(0x7f0000000140)=0x2}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000200)=@attr_riscv64=@attr_ctrl={0x0, 0x1, 0x1, &(0x7f00000001c0)=0x6}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000240)={0x8000, 0x1, 0x70000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r3, 0xc018aec0, &(0x7f0000000680)={0x5, 0x3c0, 0x80, &(0x7f0000000280)=[0xe, 0xb, 0x7, 0x3ff, 0x3, 0x40, 0x2, 0x5, 0x1, 0x1, 0x5, 0xffff, 0xf5bf, 0x8, 0xff, 0x9, 0x5, 0x20000, 0x87f, 0x2, 0x8, 0x89e, 0x4, 0x2, 0x47e, 0x1, 0xffffffffffffff22, 0x8, 0xfffffffffffffffd, 0x5, 0x1, 0x4, 0x100000000, 0xffffffffffffffff, 0x8, 0x9, 0x7, 0x5b68, 0x81, 0x8, 0x1f74, 0xbc, 0x8, 0x0, 0x8, 0x200, 0x7, 0x40, 0x44, 0xd, 0x9, 0x9, 0x2, 0x7, 0xe, 0x2, 0xffffffffffffffff, 0x536e, 0x7, 0x26, 0xe, 0x8, 0x3, 0x6, 0xfff, 0x8, 0x9, 0x7, 0x7, 0x3, 0x7, 0x8, 0xe1f, 0x7, 0x6c378bd9, 0xfffffffffffff001, 0x519b, 0x4, 0x7, 0xfffffffffffffffa, 0x1, 0x2, 0x1000, 0x3ff, 0x9, 0x294, 0x3f2, 0x7fffffff, 0x7f, 0xa, 0x5, 0xc, 0x7f00, 0x9, 0x87f, 0x100, 0x0, 0x80, 0x81, 0x4, 0x8, 0x3, 0x7, 0xfffffffffffffff7, 0x8000, 0x5, 0x10, 0x36, 0xfd6, 0x2, 0x1, 0x6, 0x6, 0x0, 0x1ff, 0x8, 0x3, 0xfffffffffffffff7, 0xd, 0x3, 0x2, 0x8001, 0x4, 0x4, 0x0, 0x3, 0x5, 0x7fffffff]}) ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, &(0x7f00000006c0)={0x10201, 0x5, 0x10000, 0x2000, &(0x7f0000ffd000/0x2000)=nil, 0x7, r0}) ioctl$KVM_SET_SREGS(r0, 0x4000ae84, &(0x7f0000000780)={{0x80a0000, 0xdddd0000, 0x3, 0x0, 0x3, 0x1, 0x7, 0x25, 0x48, 0x4, 0x2, 0x83}, {0x2, 0x40000, 0xe, 0x1, 0x8, 0x3, 0x2, 0x9, 0x2, 0x8, 0xf5, 0x64}, {0x50000, 0x4000, 0xc, 0x9, 0x6, 0x10, 0x0, 0x1, 0x4, 0xe, 0xe, 0x8}, {0xeeef0000, 0x200000, 0x8, 0xc, 0x5, 0x9, 0xff, 0x5, 0xf, 0x7, 0x9, 0x8}, {0x8080000, 0xfec00000, 0x0, 0x10, 0x5, 0xd, 0x40, 0xfd, 0x3, 0x2, 0x9, 0x6}, {0xeeee8000, 0x5000, 0x9, 0x0, 0x5, 0x9, 0xa9, 0x81, 0x0, 0xa1, 0xe, 0x8}, {0x4, 0xdddd1000, 0x8, 0x2, 0xa6, 0x9, 0x60, 0x4, 0xa, 0xd, 0x4, 0x80}, {0x41000, 0x25000, 0x4, 0x9, 0x81, 0x2, 0xe, 0x71, 0xb, 0xe, 0xb, 0x6}, {0xeeee8000, 0x200}, {0x10000, 0x9}, 0x10020, 0x0, 0xffffffff, 0x75000a, 0x3, 0x2001, 0x41000, [0x2, 0x7, 0x2, 0x4]}) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r3, 0x4068aea3, &(0x7f00000008c0)={0xa8, 0x0, 0x3}) ioctl$KVM_GET_REG_LIST(r0, 0xc008aeb0, &(0x7f0000000940)={0x8, [0x1, 0x400, 0xfef1, 0x9, 0x7, 0x0, 0xb, 0x400]}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000009c0)={0x4, 0x1}) ioctl$KVM_PPC_ALLOCATE_HTAB(r3, 0xc004aea7, &(0x7f0000000a00)=0x81) openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x408080, 0x0) ioctl$KVM_RESET_DIRTY_RINGS(r3, 0xaec7) r5 = eventfd2(0x8, 0x800) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000a80)={0x1fe, 0x0, &(0x7f0000ffb000/0x3000)=nil}) ioctl$KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, &(0x7f0000000b00)=@attr_riscv64=@attr_addr={0x0, 0x1, @aplic, &(0x7f0000000ac0)=0x3}) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x33) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000b40)={0x3, 0xffffffffffffffff, 0x1}) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000b80)={r0, 0x0, 0x1, r5}) ioctl$KVM_ARM_PREFERRED_TARGET(r0, 0x8020aeaf, &(0x7f0000000bc0)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 16m17.038429402s ago: executing program 1 (id=9): mmap$KVM_VCPU(&(0x7f0000ce2000/0x2000)=nil, 0x0, 0x0, 0x8010, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x9000000) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000) munmap(&(0x7f0000482000/0x2000)=nil, 0x2000) munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000) munmap(&(0x7f0000e76000/0x12000)=nil, 0x12000) mmap$KVM_VCPU(&(0x7f0000f1a000/0x4000)=nil, 0x930, 0x0, 0x9032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000fed000/0x3000)=nil, 0x930, 0x0, 0x4030031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) munmap(&(0x7f00004af000/0x3000)=nil, 0x3000) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0xc, 0x8032, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f000064b000/0x4000)=nil, r1, 0x100000d, 0x9032, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000667000/0x2000)=nil, 0x2000) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x28) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r5 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r4, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000000080)="fb01db06033ce3c60100a29ea6ab8031d1dfd92f0000dc0320002c005a9610fbff67521c966f8f1f4408357070c2c7aadad0b207000000000400", 0x0, 0xfffffffffffffc3b) mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, 0x930, 0x1000001, 0x11, r4, 0x0) 16m13.065159632s ago: executing program 0 (id=10): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x1}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x8, 0xf, 0x0, 0x5, 0x6, 0x6, 0x6, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x1000009, 0x0, 0x0, 0x3, 0x5, 0x8, '\x00', 0x1, 0x400000000002}) write$eventfd(r5, &(0x7f00000001c0)=0x3, 0x50) syz_kvm_vgic_v3_setup(r1, 0x1, 0x40) r6 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x2c) r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) r9 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) r13 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0) r14 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r15, 0x4020ae46, &(0x7f0000000040)={0x5, 0x4, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r15, 0x4020ae46, &(0x7f0000000500)={0x5, 0x1, 0x1000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r13, 0xae80, 0x0) r16 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r16, 0xae01, 0x0) r17 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r17, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) 16m6.521627695s ago: executing program 1 (id=11): openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2ee940, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x14) (async) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r2 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r4, 0x400454d1, 0x110c230004) (async) munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r6, 0x4068aea3, &(0x7f0000000100)={0xef, 0x0, 0x7}) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_ARM_VCPU_INIT(r7, 0x4020aeae, &(0x7f0000000080)={0x5}) (async) ioctl$KVM_SET_ONE_REG(r7, 0x4010aeac, &(0x7f0000000280)=@arm64_sys={0x603000000013c807, &(0x7f0000000240)=0x2}) (async) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) (async) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, 0xfffffffffffffffe) 15m59.565207775s ago: executing program 0 (id=12): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, r2, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000027000/0x13000)=nil, 0x930, 0x3, 0x4102932, 0xffffffffffffffff, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) munmap(&(0x7f000000f000/0x2000)=nil, 0x2000) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x80000, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000300)=[@mrs={0xbe, 0x18, {0x603000000013c800}}], 0x18}, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r8, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) ioctl$KVM_SET_ONE_REG(r8, 0x4010aeac, &(0x7f00000000c0)=@arm64_sys={0x603000000013c00a, &(0x7f0000000000)=0x337a2444}) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000100)="746abf250f7959c813e4adfb369b808022e69fe80cfadce4a1259e77bab54ac9749537b3d016bb7f745a6e22d2f9ff443f19467748a3fe02c239457600", 0x0, 0xfffffffffffffec5) 15m58.927185103s ago: executing program 1 (id=13): r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x181082, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0xc3) 15m54.055122654s ago: executing program 1 (id=14): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1, 0x16831, 0xffffffffffffffff, 0x0) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000180)={0x80000000, 0x6000, 0x0, 0xffffffffffffffff, 0xf}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r7, 0x4018aee1, &(0x7f00000000c0)=@attr_other={0x0, 0xb4, 0x1, 0x0}) r8 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff}) write$eventfd(r10, &(0x7f00000001c0)=0xfffffffffffffdff, 0x8) r11 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r11, 0x4068aea3, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x3) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) r13 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r13, &(0x7f0000000000)={0x0, 0x0, 0xd}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r12, 0x4018aee1, &(0x7f0000000140)=@attr_other={0x0, 0x0, 0x2, &(0x7f00000000c0)=0x4}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, &(0x7f0000000280)=@attr_riscv64=@attr_addr={0x0, 0x1, @aplic, &(0x7f0000000240)=0x2}) 15m13.752832583s ago: executing program 32 (id=12): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, r2, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000027000/0x13000)=nil, 0x930, 0x3, 0x4102932, 0xffffffffffffffff, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) munmap(&(0x7f000000f000/0x2000)=nil, 0x2000) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x80000, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000300)=[@mrs={0xbe, 0x18, {0x603000000013c800}}], 0x18}, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r8, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) ioctl$KVM_SET_ONE_REG(r8, 0x4010aeac, &(0x7f00000000c0)=@arm64_sys={0x603000000013c00a, &(0x7f0000000000)=0x337a2444}) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000100)="746abf250f7959c813e4adfb369b808022e69fe80cfadce4a1259e77bab54ac9749537b3d016bb7f745a6e22d2f9ff443f19467748a3fe02c239457600", 0x0, 0xfffffffffffffec5) 15m7.162733404s ago: executing program 33 (id=14): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1, 0x16831, 0xffffffffffffffff, 0x0) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000180)={0x80000000, 0x6000, 0x0, 0xffffffffffffffff, 0xf}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r7, 0x4018aee1, &(0x7f00000000c0)=@attr_other={0x0, 0xb4, 0x1, 0x0}) r8 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff}) write$eventfd(r10, &(0x7f00000001c0)=0xfffffffffffffdff, 0x8) r11 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r11, 0x4068aea3, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x3) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) r13 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r13, &(0x7f0000000000)={0x0, 0x0, 0xd}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r12, 0x4018aee1, &(0x7f0000000140)=@attr_other={0x0, 0x0, 0x2, &(0x7f00000000c0)=0x4}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, &(0x7f0000000280)=@attr_riscv64=@attr_addr={0x0, 0x1, @aplic, &(0x7f0000000240)=0x2}) 9m2.94420152s ago: executing program 3 (id=25): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x300, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x28) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000100)={0x7, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000002c0)=@attr_arm64={0x0, 0x4, 0x0, 0x0}) r6 = eventfd2(0x8801, 0x800) r7 = eventfd2(0x3ff, 0x0) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000000)={r7, 0x1, 0x2, r7}) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000140)={r7, 0x5, 0x2, r6}) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r2, 0x4068aea3, &(0x7f0000000280)={0xdf, 0x0, 0x2000}) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000e31000/0x2000)=nil, 0x930, 0xa, 0x2012, r8, 0x40000) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r9, r10, &(0x7f0000bfe000/0x400000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="320000000000000040000000000000000c0000c400000000070000000000000009000000000000000800"], 0x40}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_GET_DIRTY_LOG(r9, 0x4010ae42, &(0x7f0000000000)={0x1ff, 0x0, &(0x7f0000e9e000/0x4000)=nil}) ioctl$KVM_RUN(r10, 0xae80, 0x0) 8m49.622263538s ago: executing program 3 (id=27): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x2}}], 0x28}, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f0000000100)=@arm64_extra={0x603000000013c103, &(0x7f00000000c0)=0xa0}) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x9) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x200, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) r9 = ioctl$KVM_CREATE_VM(r8, 0x894c, 0x18) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xb701, 0x0) syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xb701, 0x10000006) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x3) r13 = ioctl$KVM_CREATE_GUEST_MEMFD(r12, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000}) r14 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0) r16 = syz_kvm_setup_syzos_vm$arm64(r15, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r16, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r15, 0xc00caee0, &(0x7f0000000000)={0x7, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r17, 0x4018aee3, &(0x7f0000000140)=@attr_arm64={0x0, 0x6, 0xeb08481d27d23ce7, 0x0}) mmap$KVM_VCPU(&(0x7f0000ffc000/0x1000)=nil, 0x930, 0x2000002, 0x2013, r13, 0x0) r18 = ioctl$KVM_CREATE_GUEST_MEMFD(r5, 0xc040aed4, &(0x7f0000000040)={0x1000200001fe0000, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION2(r5, 0x40a0ae49, &(0x7f0000000180)={0x0, 0x4, 0x6000, 0x2000, &(0x7f0000ffd000/0x2000)=nil, 0x100000000000000, r18}) ioctl$KVM_PPC_ALLOCATE_HTAB(r5, 0xc004aea7, &(0x7f0000000080)=0x1ff) 8m35.232432134s ago: executing program 2 (id=29): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000080)={0x100000000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000140)={0x2, 0x4, 0xf000, 0x1000, &(0x7f0000e21000/0x1000)=nil, 0x0, r2}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000080)={0x1fd, 0x4, 0x8000000, 0x2000, &(0x7f0000ffd000/0x2000)=nil, 0x10000, r2}) 8m32.811559369s ago: executing program 3 (id=30): ioctl$KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, 0x0) r0 = openat$kvm(0x0, 0x0, 0x400, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x8, 0xf, 0x0, 0x8005, 0x9, 0x86, 0x6, 0x48, 0x86, 0xdd, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x8, '\x00', 0x1, 0x4000000000807}) r1 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r4 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r3, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000300)="fb4149dd033b8986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67525673312b01040000000000002627e7000000000000000200", 0x0, 0xfffffffffffffe73) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r7, 0x4020aeae, &(0x7f0000000100)={0x5, 0x18}) ioctl$KVM_GET_ONE_REG(r7, 0x4010aeab, &(0x7f0000000140)=@arm64_sve={0x603000000013df1a, 0x0}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x12, r3, 0x0) r8 = eventfd2(0x2, 0x80001) close(r8) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x0) write$eventfd(r8, &(0x7f0000000100)=0xfffffffffffffffe, 0x8) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r10, 0x4010ae68, &(0x7f0000000000)={0xeeee0000, 0xc867899643193eab}) write$eventfd(r11, &(0x7f00000001c0)=0x3, 0xfdef) 8m24.173793813s ago: executing program 2 (id=31): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000c60000/0x2000)=nil, r1, 0x300000a, 0x16831, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r4, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f0000000000)=@arm64_core={0x6030000000100036, &(0x7f00000002c0)=0x1}) mmap$KVM_VCPU(&(0x7f0000c61000/0x3000)=nil, 0x930, 0x100000f, 0x4019032, 0xffffffffffffffff, 0x0) 8m16.932039955s ago: executing program 3 (id=32): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$kvm(0x0, &(0x7f00000001c0), 0xc1102, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r7 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffa000/0x4000)=nil, r7, 0x1, 0x12, r6, 0x0) r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, r8, 0x8, 0x13, r6, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x2000)=nil, r8, 0x1000001, 0x12, r6, 0x0) mmap$KVM_VCPU(&(0x7f0000e38000/0x4000)=nil, 0x0, 0x10, 0x10, r6, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000180)=0x8080000}) ioctl$KVM_GET_DEVICE_ATTR(r9, 0x4018aee2, &(0x7f0000000080)=@attr_other={0x0, 0x8, 0x8, 0xffffffffffffffff}) r10 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0) r12 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil) syz_kvm_vgic_v3_setup(r11, 0x3, 0x320) r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@msr={0x14, 0x20, {0x603000000013806e, 0x8}}], 0x20}, 0x0, 0x0) ioctl$KVM_RUN(r13, 0xae80, 0x0) 8m11.713450714s ago: executing program 2 (id=33): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$arm64(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000bfe000/0x400000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="3200000000000000400000000000000001ff008600000000070000000000000009000000ab512e4a5a68d4bccf8b30378dcc6c000000000800000000000000f88ac11bca4544083f3b49b2389fd2918447b33b839ae6348405a708d1ff7d37f9fdda96c72f489224283ff5ce6068008609cc09f355"], 0x40}], 0x1, 0x0, 0x0, 0x0) (async) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000bfe000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x2}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x1, 0x80000, 0x10000, 0x20, 0x0, 0x2}}], 0x50}, 0x0, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r6 = eventfd2(0x8, 0x80800) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000000)={0x48, 0xdddd1000, 0x0, r6, 0xf}) (async) close(r6) (async) close(0xffffffffffffffff) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) (async) r7 = mmap$KVM_VCPU(&(0x7f0000e6f000/0x2000)=nil, 0x0, 0x0, 0x20010, r3, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32) (async) r8 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32) (async) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) r12 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r11, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r12, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48) r13 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x12, r11, 0x0) r14 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r14, 0x40049409, 0x9) (async) r15 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r15, 0xae01, 0x0) 8m2.415859522s ago: executing program 3 (id=34): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) r1 = openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000700)={0x7, 0xffffffffffffffff}) ioctl$KVM_GET_DEVICE_ATTR(r4, 0x4018aee2, &(0x7f00000000c0)=@attr_arm64={0x0, 0x3, 0x0, 0x0}) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_GUEST_MEMFD(r5, 0xc040aed4, &(0x7f00000001c0)={0x200001fe4000, 0x1}) mmap$KVM_VCPU(&(0x7f0000ffc000/0x1000)=nil, 0x930, 0x2000002, 0x2013, r6, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x1e1642, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r7, 0xae04) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r11 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, r9, 0x2800002, 0x100010, r10, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r11, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0x3000)=nil, 0x0, 0x3, 0x810, r10, 0x0) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x400000, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r14, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) syz_kvm_vgic_v3_setup(r13, 0x5, 0x1e0) openat$kvm(0x0, &(0x7f0000000140), 0x335e03, 0x0) r15 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r16 = ioctl$KVM_CREATE_VM(r15, 0xae01, 0x0) r17 = ioctl$KVM_CREATE_VCPU(r16, 0xae41, 0x2) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r17, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r14, 0x4018aee1, &(0x7f0000000100)=@attr_pmu_irq={0x0, 0x0, 0x0, 0x0}) openat$kvm(0x0, &(0x7f0000000040), 0x400, 0x0) 7m58.757815157s ago: executing program 2 (id=35): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_vgic_v3_setup(r1, 0x3, 0x320) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async) r4 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) (async) r6 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$KVM_ARM_PREFERRED_TARGET(r6, 0x8020aeaf, &(0x7f0000000100)) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000b80)={0x0, 0x0}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1) r9 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r9, 0x4018aee1, 0x0) (async) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r9, 0x4018aee1, 0x0) r10 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@hvc={0x32, 0x40, {0x84000003, [0x6, 0x0, 0x4, 0x9, 0x2]}}], 0x9b}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r10, 0xae80, 0x0) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) 7m47.637008961s ago: executing program 3 (id=36): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x21) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2, 0x1000, 0x4, 0x0, 0x8}) r1 = eventfd2(0xff, 0x1) write$eventfd(r1, &(0x7f0000000040)=0x4, 0x8) (async) ioctl$KVM_GET_MP_STATE(r0, 0x8004ae98, &(0x7f0000000080)) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x3000, 0x0, r1, 0xa}) (async) write$eventfd(r1, &(0x7f0000000100)=0x8, 0x8) ioctl$KVM_CAP_HALT_POLL(r0, 0x4068aea3, &(0x7f0000000140)={0xb6, 0x0, 0x5}) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x8001, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) (async) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000200)={0x7, 0x26000, 0x1, r0, 0xd}) (async, rerun: 64) ioctl$KVM_CAP_ARM_INJECT_SERROR_ESR(r0, 0x4068aea3, &(0x7f0000000240)) (async, rerun: 64) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x4) r3 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000740)={0x0, &(0x7f00000002c0)=[@hvc={0x32, 0x40, {0x84000053, [0x1, 0x20000000, 0x3, 0x6, 0xdf6d]}}, @its_setup={0x82, 0x28, {0x3, 0x1, 0x180}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x0, 0x4, 0x2, 0x3, 0x6, 0x4}}, @msr={0x14, 0x20, {0x6030000000138026, 0x3}}, @smc={0x1e, 0x40, {0x0, [0x4, 0x10, 0x3, 0x5745, 0x3ff]}}, @smc={0x1e, 0x40, {0x84000006, [0x2, 0x2, 0xf, 0x4, 0xd3c]}}, @irq_setup={0x46, 0x18, {0x2, 0x5f}}, @mrs={0xbe, 0x18, {0x603000000013dee7}}, @mrs={0xbe, 0x18, {0x603000000013c2a8}}, @irq_setup={0x46, 0x18, {0x3, 0xb4}}, @code={0xa, 0xb4, {"405180d20080b0f2410080d2a20180d2430080d2440080d2020000d4000028d5c0a682d200e0b8f2c10080d2620180d2430080d2a40180d2020000d400e4005f009d9fd200c0b0f2210180d2220080d2c30080d2c40180d2020000d4208793d20060b0f2010080d2e20080d2830080d2640180d2020000d4007008d5604496d20040b0f2a10180d2820080d2030080d2040080d2020000d4000008d5000028d5"}}, @its_send_cmd={0xaa, 0x28, {0xa, 0x1, 0x4, 0x7, 0x6, 0x6}}, @irq_setup={0x46, 0x18, {0x3, 0x20e}}, @irq_setup={0x46, 0x18, {0x3, 0xb2}}, @smc={0x1e, 0x40, {0x8000fff7, [0xf8c9, 0x6, 0x6, 0x100000000, 0x3]}}, @uexit={0x0, 0x18, 0x5}, @code={0xa, 0x9c, {"201f82d200e0b8f2410080d2020180d2e30080d2840180d2020000d4007008d500044078008008d5a03398d20040b0f2610180d2a20180d2e30080d2440180d2020000d400d28fd20020b8f2810080d2620080d2a30180d2040180d2020000d4007008d5000028d5e04095d20020b8f2010180d2620080d2230180d2240180d2020000d4000440b8"}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x0, 0x2, 0x5, 0x300a, 0x6, 0x3}}, @its_setup={0x82, 0x28, {0x2, 0x0, 0xff}}, @svc={0x122, 0x40, {0xc4000014, [0x4, 0x3ff, 0x401, 0x0, 0x2]}}, @uexit={0x0, 0x18, 0x1}, @its_setup={0x82, 0x28, {0x2, 0x3, 0x196}}, @irq_setup={0x46, 0x18, {0x1, 0x7f}}], 0x478}, &(0x7f0000000780)=[@featur2={0x1, 0xe7}], 0x1) ioctl$KVM_GET_REG_LIST(r3, 0xc008aeb0, &(0x7f00000007c0)={0x1, [0xcb9]}) ioctl$KVM_ARM_VCPU_INIT(r3, 0x4020aeae, &(0x7f0000000800)={0x5, 0x2}) (async) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000840)={0x1, 0xfb43ebe51cf6b51f, 0x1, r1}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000880), 0x8000, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f00000008c0)={0xf, 0xffffffffffffffff, 0x1}) (async) ioctl$KVM_GET_DEVICE_ATTR_vm(r0, 0x4018aee2, &(0x7f0000000940)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000900)={0x100, 0xdf42, 0x1}}) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000980)={0x41000, 0x1c000, 0x1}) (async, rerun: 32) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x34) (rerun: 32) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r4, 0x4010ae74, &(0x7f00000009c0)={0x2, 0x5, 0xfff}) (async, rerun: 32) write$eventfd(r1, &(0x7f0000000a00), 0x8) (rerun: 32) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) (async, rerun: 32) eventfd2(0x4, 0x80000) (rerun: 32) ioctl$KVM_ASSIGN_SET_MSIX_NR(r4, 0x4008ae73, &(0x7f0000000a40)={0x6, 0x100}) (async) ioctl$KVM_GET_SREGS(r3, 0x8000ae83, &(0x7f0000000a80)) (async, rerun: 64) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2c) (rerun: 64) 7m46.592562057s ago: executing program 2 (id=37): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x204040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000bc5000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@mrs={0xbe, 0x18, {0x603000000013dce6}}], 0x18}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7m38.074223202s ago: executing program 2 (id=38): r0 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (rerun: 64) ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000040)={0x5}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1, 0x16831, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$arm64(r1, 0xffffffffffffffff, &(0x7f0000bfe000/0x400000)=nil, &(0x7f0000000100)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x42042, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000000)={0x1000, 0x11c000, 0x1}) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000200)={0xc000, 0x11000, 0x1}) (async) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f0000000040)={0x17000, 0x206000, 0x1}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10002, 0x6, 0x1, 0x2000, &(0x7f0000000000/0x2000)=nil}) 7m1.41011695s ago: executing program 34 (id=36): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x21) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2, 0x1000, 0x4, 0x0, 0x8}) r1 = eventfd2(0xff, 0x1) write$eventfd(r1, &(0x7f0000000040)=0x4, 0x8) (async) ioctl$KVM_GET_MP_STATE(r0, 0x8004ae98, &(0x7f0000000080)) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x3000, 0x0, r1, 0xa}) (async) write$eventfd(r1, &(0x7f0000000100)=0x8, 0x8) ioctl$KVM_CAP_HALT_POLL(r0, 0x4068aea3, &(0x7f0000000140)={0xb6, 0x0, 0x5}) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x8001, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) (async) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000200)={0x7, 0x26000, 0x1, r0, 0xd}) (async, rerun: 64) ioctl$KVM_CAP_ARM_INJECT_SERROR_ESR(r0, 0x4068aea3, &(0x7f0000000240)) (async, rerun: 64) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x4) r3 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000740)={0x0, &(0x7f00000002c0)=[@hvc={0x32, 0x40, {0x84000053, [0x1, 0x20000000, 0x3, 0x6, 0xdf6d]}}, @its_setup={0x82, 0x28, {0x3, 0x1, 0x180}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x0, 0x4, 0x2, 0x3, 0x6, 0x4}}, @msr={0x14, 0x20, {0x6030000000138026, 0x3}}, @smc={0x1e, 0x40, {0x0, [0x4, 0x10, 0x3, 0x5745, 0x3ff]}}, @smc={0x1e, 0x40, {0x84000006, [0x2, 0x2, 0xf, 0x4, 0xd3c]}}, @irq_setup={0x46, 0x18, {0x2, 0x5f}}, @mrs={0xbe, 0x18, {0x603000000013dee7}}, @mrs={0xbe, 0x18, {0x603000000013c2a8}}, @irq_setup={0x46, 0x18, {0x3, 0xb4}}, @code={0xa, 0xb4, {"405180d20080b0f2410080d2a20180d2430080d2440080d2020000d4000028d5c0a682d200e0b8f2c10080d2620180d2430080d2a40180d2020000d400e4005f009d9fd200c0b0f2210180d2220080d2c30080d2c40180d2020000d4208793d20060b0f2010080d2e20080d2830080d2640180d2020000d4007008d5604496d20040b0f2a10180d2820080d2030080d2040080d2020000d4000008d5000028d5"}}, @its_send_cmd={0xaa, 0x28, {0xa, 0x1, 0x4, 0x7, 0x6, 0x6}}, @irq_setup={0x46, 0x18, {0x3, 0x20e}}, @irq_setup={0x46, 0x18, {0x3, 0xb2}}, @smc={0x1e, 0x40, {0x8000fff7, [0xf8c9, 0x6, 0x6, 0x100000000, 0x3]}}, @uexit={0x0, 0x18, 0x5}, @code={0xa, 0x9c, {"201f82d200e0b8f2410080d2020180d2e30080d2840180d2020000d4007008d500044078008008d5a03398d20040b0f2610180d2a20180d2e30080d2440180d2020000d400d28fd20020b8f2810080d2620080d2a30180d2040180d2020000d4007008d5000028d5e04095d20020b8f2010180d2620080d2230180d2240180d2020000d4000440b8"}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x0, 0x2, 0x5, 0x300a, 0x6, 0x3}}, @its_setup={0x82, 0x28, {0x2, 0x0, 0xff}}, @svc={0x122, 0x40, {0xc4000014, [0x4, 0x3ff, 0x401, 0x0, 0x2]}}, @uexit={0x0, 0x18, 0x1}, @its_setup={0x82, 0x28, {0x2, 0x3, 0x196}}, @irq_setup={0x46, 0x18, {0x1, 0x7f}}], 0x478}, &(0x7f0000000780)=[@featur2={0x1, 0xe7}], 0x1) ioctl$KVM_GET_REG_LIST(r3, 0xc008aeb0, &(0x7f00000007c0)={0x1, [0xcb9]}) ioctl$KVM_ARM_VCPU_INIT(r3, 0x4020aeae, &(0x7f0000000800)={0x5, 0x2}) (async) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000840)={0x1, 0xfb43ebe51cf6b51f, 0x1, r1}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000880), 0x8000, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f00000008c0)={0xf, 0xffffffffffffffff, 0x1}) (async) ioctl$KVM_GET_DEVICE_ATTR_vm(r0, 0x4018aee2, &(0x7f0000000940)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000900)={0x100, 0xdf42, 0x1}}) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000980)={0x41000, 0x1c000, 0x1}) (async, rerun: 32) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x34) (rerun: 32) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r4, 0x4010ae74, &(0x7f00000009c0)={0x2, 0x5, 0xfff}) (async, rerun: 32) write$eventfd(r1, &(0x7f0000000a00), 0x8) (rerun: 32) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) (async, rerun: 32) eventfd2(0x4, 0x80000) (rerun: 32) ioctl$KVM_ASSIGN_SET_MSIX_NR(r4, 0x4008ae73, &(0x7f0000000a40)={0x6, 0x100}) (async) ioctl$KVM_GET_SREGS(r3, 0x8000ae83, &(0x7f0000000a80)) (async, rerun: 64) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2c) (rerun: 64) 6m50.337009541s ago: executing program 35 (id=38): r0 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (rerun: 64) ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000040)={0x5}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1, 0x16831, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$arm64(r1, 0xffffffffffffffff, &(0x7f0000bfe000/0x400000)=nil, &(0x7f0000000100)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x42042, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000000)={0x1000, 0x11c000, 0x1}) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000200)={0xc000, 0x11000, 0x1}) (async) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f0000000040)={0x17000, 0x206000, 0x1}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10002, 0x6, 0x1, 0x2000, &(0x7f0000000000/0x2000)=nil}) 46.386574875s ago: executing program 4 (id=39): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000bfe000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000040)={0x0, &(0x7f00000003c0)=[@its_setup={0x82, 0x28, {0x4, 0x0, 0x179}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80a0000, 0xa0, 0x8000000000000000, 0xc}}], 0x58}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x2, 0x100) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CAP_ARM_SYSTEM_SUSPEND(r1, 0x4068aea3, &(0x7f00000000c0)) ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r1, 0x4068aea3, &(0x7f0000000140)={0xe4, 0x0, 0x101}) 31.112181533s ago: executing program 5 (id=40): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x4, 0x7f, 0x0}) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) close(r3) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000) munmap(&(0x7f0000482000/0x2000)=nil, 0x2000) munmap(&(0x7f0000e76000/0x12000)=nil, 0x12000) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) mmap$KVM_VCPU(0x0, 0x50000, 0x3, 0x11, r8, 0x0) r9 = syz_kvm_add_vcpu$arm64(r5, &(0x7f00000000c0)={0x0, &(0x7f0000000280)=[@uexit={0x0, 0x18, 0x3}, @smc={0x1e, 0x40, {0x84000011, [0xebb3, 0x10001, 0xeae1, 0x7, 0x9]}}, @svc={0x122, 0x40, {0x8, [0x1, 0x8, 0x8000, 0x1, 0x1]}}, @mrs={0xbe, 0x18, {0x603000000013c4ca}}, @its_setup={0x82, 0x28, {0x4, 0x3, 0x358}}, @irq_setup={0x46, 0x18, {0x4, 0xde}}, @msr={0x14, 0x20, {0x603000000013807c, 0x3392}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80e0000, 0x280, 0x4, 0x5}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x90, 0x101, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x4, 0x1, 0x2, 0x8, 0x5, 0x700000}}, @svc={0x122, 0x40, {0x8400000a, [0x3, 0x6, 0x4, 0x1, 0x4]}}, @hvc={0x32, 0x40, {0x4, [0x9, 0x5, 0x60, 0x1, 0x8000]}}, @memwrite={0x6e, 0x30, @generic={0xc000, 0xca, 0x9, 0x1}}, @msr={0x14, 0x20, {0x603000000013f201}}, @hvc={0x32, 0x40, {0x1006, [0x1, 0x3, 0x9, 0x7]}}, @msr={0x14, 0x20, {0x6734, 0x10}}, @irq_setup={0x46, 0x18, {0x1, 0x1d1}}, @eret={0xe6, 0x18, 0x400}, @its_send_cmd={0xaa, 0x28, {0x1, 0x0, 0x1, 0x2, 0x6, 0x1d6, 0x3}}, @eret={0xe6, 0x18, 0xf}, @its_setup={0x82, 0x28, {0x3, 0x1, 0xe6}}, @irq_setup={0x46, 0x18, {0x4, 0x3bf}}, @mrs={0xbe, 0x18, {0x603000000013e721}}, @smc={0x1e, 0x40, {0x8, [0x5, 0x4, 0xdb2, 0x6, 0x5]}}, @msr={0x14, 0x20, {0x603000000013c4cb, 0x7}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80e0000, 0x280, 0x4, 0xc}}, @svc={0x122, 0x40, {0x3f000000, [0x3, 0x81, 0x8001, 0x8, 0x4]}}, @smc={0x1e, 0x40, {0x84000008, [0x1, 0x0, 0x2, 0x2, 0x3]}}, @its_setup={0x82, 0x28, {0x4, 0x4, 0xe2}}], 0x4c8}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r4, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000240)=0x8080000}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 0s ago: executing program 36 (id=39): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000bfe000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000040)={0x0, &(0x7f00000003c0)=[@its_setup={0x82, 0x28, {0x4, 0x0, 0x179}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80a0000, 0xa0, 0x8000000000000000, 0xc}}], 0x58}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x2, 0x100) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CAP_ARM_SYSTEM_SUSPEND(r1, 0x4068aea3, &(0x7f00000000c0)) ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r1, 0x4068aea3, &(0x7f0000000140)={0xe4, 0x0, 0x101}) kernel console output (not intermixed with test programs): [ 375.090129][ T24] audit: type=1400 audit(374.230:74): avc: denied { read } for pid=3210 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 382.339097][ T24] audit: type=1400 audit(381.500:75): avc: denied { write } for pid=3264 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=74 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 386.265730][ T24] audit: type=1400 audit(385.420:76): avc: denied { write } for pid=3267 comm="rm" name="hook-state" dev="tmpfs" ino=74 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 389.132851][ T3210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.860205][ T24] audit: type=1400 audit(400.050:77): avc: denied { write } for pid=3272 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=74 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 405.118834][ T24] audit: type=1400 audit(404.310:78): avc: denied { write } for pid=3275 comm="rm" name="hook-state" dev="tmpfs" ino=74 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 416.669976][ T24] audit: type=1400 audit(415.860:79): avc: denied { write } for pid=3280 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=74 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 420.352132][ T24] audit: type=1400 audit(419.510:80): avc: denied { write } for pid=3283 comm="rm" name="hook-state" dev="tmpfs" ino=74 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 430.245297][ T24] audit: type=1400 audit(429.440:81): avc: denied { write } for pid=3288 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=74 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 433.869450][ T24] audit: type=1400 audit(433.060:82): avc: denied { write } for pid=3291 comm="rm" name="hook-state" dev="tmpfs" ino=74 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 436.467232][ T3210] eql: remember to turn off Van-Jacobson compression on your slave devices [ 443.950207][ T24] audit: type=1400 audit(443.140:83): avc: denied { write } for pid=3296 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=74 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 447.571037][ T24] audit: type=1400 audit(446.770:84): avc: denied { write } for pid=3299 comm="rm" name="hook-state" dev="tmpfs" ino=74 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 454.078488][ T24] audit: type=1400 audit(453.240:85): avc: denied { write } for pid=3301 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=74 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 458.909637][ T24] audit: type=1400 audit(458.090:86): avc: denied { write } for pid=3304 comm="rm" name="hook-state" dev="tmpfs" ino=74 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 470.829128][ T24] audit: type=1400 audit(470.010:87): avc: denied { write } for pid=3309 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=74 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 474.458633][ T24] audit: type=1400 audit(473.620:88): avc: denied { write } for pid=3312 comm="rm" name="hook-state" dev="tmpfs" ino=74 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 479.860946][ T24] audit: type=1400 audit(479.050:89): avc: denied { write } for pid=3314 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=74 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 483.561037][ T24] audit: type=1400 audit(482.720:90): avc: denied { write } for pid=3317 comm="rm" name="hook-state" dev="tmpfs" ino=74 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 493.073502][ T24] audit: type=1400 audit(492.270:91): avc: denied { write } for pid=3322 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=74 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 496.840566][ T24] audit: type=1400 audit(496.030:92): avc: denied { write } for pid=3325 comm="rm" name="hook-state" dev="tmpfs" ino=74 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 505.879938][ T24] audit: type=1400 audit(505.060:93): avc: denied { write } for pid=3329 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=74 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 509.480058][ T24] audit: type=1400 audit(508.660:94): avc: denied { write } for pid=3332 comm="rm" name="hook-state" dev="tmpfs" ino=74 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 530.832571][ T24] audit: type=1400 audit(530.030:95): avc: denied { write } for pid=3342 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=74 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 534.499339][ T24] audit: type=1400 audit(533.680:96): avc: denied { write } for pid=3345 comm="rm" name="hook-state" dev="tmpfs" ino=74 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 547.009937][ T24] audit: type=1400 audit(546.200:97): avc: denied { write } for pid=3351 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=74 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 550.713416][ T24] audit: type=1400 audit(549.910:98): avc: denied { write } for pid=3354 comm="rm" name="hook-state" dev="tmpfs" ino=74 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 561.590214][ T24] audit: type=1400 audit(560.770:99): avc: denied { write } for pid=3358 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=74 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 565.199022][ T24] audit: type=1400 audit(564.390:100): avc: denied { write } for pid=3361 comm="rm" name="hook-state" dev="tmpfs" ino=74 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:6821' (ED25519) to the list of known hosts. [ 587.708761][ T24] audit: type=1400 audit(586.900:101): avc: denied { name_bind } for pid=3366 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 589.670033][ T24] audit: type=1400 audit(588.860:102): avc: denied { execute } for pid=3367 comm="sh" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 589.706616][ T24] audit: type=1400 audit(588.900:103): avc: denied { execute_no_trans } for pid=3367 comm="sh" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 617.186292][ T24] audit: type=1400 audit(616.380:104): avc: denied { mounton } for pid=3367 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 617.230500][ T24] audit: type=1400 audit(616.420:105): avc: denied { mount } for pid=3367 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 617.312353][ T3367] cgroup: Unknown subsys name 'net' [ 617.366518][ T24] audit: type=1400 audit(616.560:106): avc: denied { unmount } for pid=3367 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 617.761318][ T3367] cgroup: Unknown subsys name 'cpuset' [ 617.866703][ T3367] cgroup: Unknown subsys name 'rlimit' [ 618.652010][ T24] audit: type=1400 audit(617.850:107): avc: denied { setattr } for pid=3367 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 618.683217][ T24] audit: type=1400 audit(617.860:108): avc: denied { mounton } for pid=3367 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 618.700028][ T24] audit: type=1400 audit(617.890:109): avc: denied { mount } for pid=3367 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 619.662654][ T3370] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 619.683318][ T24] audit: type=1400 audit(618.870:110): avc: denied { relabelto } for pid=3370 comm="mkswap" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 619.703111][ T24] audit: type=1400 audit(618.900:111): avc: denied { write } for pid=3370 comm="mkswap" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 619.893382][ T24] audit: type=1400 audit(619.090:112): avc: denied { read } for pid=3367 comm="syz-executor" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 619.922598][ T24] audit: type=1400 audit(619.100:113): avc: denied { open } for pid=3367 comm="syz-executor" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 619.969529][ T3367] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 678.181472][ T24] audit: type=1400 audit(677.380:114): avc: denied { execmem } for pid=3371 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 681.729028][ T24] audit: type=1400 audit(680.920:115): avc: denied { read } for pid=3374 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 681.753630][ T24] audit: type=1400 audit(680.950:116): avc: denied { open } for pid=3373 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 681.834011][ T24] audit: type=1400 audit(681.000:117): avc: denied { mounton } for pid=3373 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 682.023497][ T24] audit: type=1400 audit(681.220:119): avc: denied { module_request } for pid=3373 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 682.051471][ T24] audit: type=1400 audit(681.210:118): avc: denied { module_request } for pid=3374 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 683.001418][ T24] audit: type=1400 audit(682.190:120): avc: denied { sys_module } for pid=3374 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 707.801076][ T3373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 708.068706][ T3373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 708.163355][ T3374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 708.791561][ T3374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 719.733944][ T3373] hsr_slave_0: entered promiscuous mode [ 719.762385][ T3373] hsr_slave_1: entered promiscuous mode [ 720.894229][ T3374] hsr_slave_0: entered promiscuous mode [ 720.925385][ T3374] hsr_slave_1: entered promiscuous mode [ 720.954224][ T3374] debugfs: 'hsr0' already exists in 'hsr' [ 720.969341][ T3374] Cannot create hsr debugfs directory [ 726.412531][ T24] audit: type=1400 audit(725.600:121): avc: denied { create } for pid=3373 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 726.450646][ T24] audit: type=1400 audit(725.630:122): avc: denied { write } for pid=3373 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 726.524747][ T24] audit: type=1400 audit(725.720:123): avc: denied { read } for pid=3373 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 726.677261][ T3373] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 727.030738][ T3373] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 727.153570][ T3373] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 727.337290][ T3373] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 727.434809][ T3373] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 727.535677][ T3373] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 727.695000][ T3373] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 727.772048][ T3373] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 729.226454][ T3374] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 729.372605][ T3374] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 729.423102][ T3374] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 729.562256][ T3374] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 729.686025][ T3374] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 729.853759][ T3374] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 729.915241][ T3374] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 730.142721][ T3374] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 741.447356][ T3373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 743.652521][ T3374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 793.304435][ T3373] veth0_vlan: entered promiscuous mode [ 793.873776][ T3373] veth1_vlan: entered promiscuous mode [ 795.994933][ T3373] veth0_macvtap: entered promiscuous mode [ 796.034885][ T3374] veth0_vlan: entered promiscuous mode [ 796.352113][ T3373] veth1_macvtap: entered promiscuous mode [ 796.873050][ T3374] veth1_vlan: entered promiscuous mode [ 798.872399][ T3455] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.935776][ T3455] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.942283][ T3455] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.949448][ T3455] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.983114][ T3374] veth0_macvtap: entered promiscuous mode [ 800.580452][ T3374] veth1_macvtap: entered promiscuous mode [ 801.507219][ T24] audit: type=1400 audit(800.700:124): avc: denied { mount } for pid=3373 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 801.739936][ T24] audit: type=1400 audit(800.930:125): avc: denied { mounton } for pid=3373 comm="syz-executor" path="/syzkaller.nVA3SS/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 802.015525][ T24] audit: type=1400 audit(801.200:126): avc: denied { mount } for pid=3373 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 802.218983][ T24] audit: type=1400 audit(801.410:127): avc: denied { mounton } for pid=3373 comm="syz-executor" path="/syzkaller.nVA3SS/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 802.405968][ T24] audit: type=1400 audit(801.600:128): avc: denied { mounton } for pid=3373 comm="syz-executor" path="/syzkaller.nVA3SS/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 802.965403][ T24] audit: type=1400 audit(802.140:129): avc: denied { unmount } for pid=3373 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 803.084048][ T3424] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.090477][ T3424] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.096711][ T3424] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.120363][ T3424] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.345957][ T24] audit: type=1400 audit(802.540:130): avc: denied { mounton } for pid=3373 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1548 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 803.543025][ T24] audit: type=1400 audit(802.730:131): avc: denied { mount } for pid=3373 comm="syz-executor" name="/" dev="gadgetfs" ino=3740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 803.946202][ T24] audit: type=1400 audit(803.130:132): avc: denied { mount } for pid=3373 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 804.083898][ T24] audit: type=1400 audit(803.190:133): avc: denied { mounton } for pid=3373 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 805.705059][ T3373] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 806.699788][ T24] kauditd_printk_skb: 2 callbacks suppressed [ 806.701570][ T24] audit: type=1400 audit(805.820:136): avc: denied { read write } for pid=3373 comm="syz-executor" name="loop0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 806.702933][ T24] audit: type=1400 audit(805.890:137): avc: denied { open } for pid=3373 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 806.828789][ T24] audit: type=1400 audit(805.890:138): avc: denied { ioctl } for pid=3373 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=638 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 815.460481][ T24] audit: type=1400 audit(814.650:139): avc: denied { read } for pid=3524 comm="syz.0.1" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 815.524497][ T24] audit: type=1400 audit(814.710:140): avc: denied { open } for pid=3524 comm="syz.0.1" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 815.914689][ T24] audit: type=1400 audit(815.110:141): avc: denied { ioctl } for pid=3524 comm="syz.0.1" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 834.142265][ T24] audit: type=1400 audit(833.330:142): avc: denied { write } for pid=3535 comm="syz.1.6" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 969.809985][ T3563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 970.042966][ T3563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 978.172399][ T3570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 978.420044][ T3570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 986.740270][ T24] audit: type=1400 audit(985.860:143): avc: denied { write } for pid=3614 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=74 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 993.419675][ T24] audit: type=1400 audit(992.600:144): avc: denied { write } for pid=3623 comm="rm" name="hook-state" dev="tmpfs" ino=74 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 995.801333][ T3563] hsr_slave_0: entered promiscuous mode [ 995.872577][ T3563] hsr_slave_1: entered promiscuous mode [ 995.960580][ T3563] debugfs: 'hsr0' already exists in 'hsr' [ 995.969428][ T3563] Cannot create hsr debugfs directory [ 1006.390187][ T3570] hsr_slave_0: entered promiscuous mode [ 1006.452079][ T3570] hsr_slave_1: entered promiscuous mode [ 1006.529723][ T3570] debugfs: 'hsr0' already exists in 'hsr' [ 1006.532923][ T3570] Cannot create hsr debugfs directory [ 1020.779202][ T3563] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1021.174084][ T3563] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1021.227117][ T3563] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1021.610323][ T3563] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1022.610808][ T3563] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1022.861747][ T3563] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1023.980657][ T3563] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1024.423090][ T3563] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1028.657356][ T3455] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1029.431999][ T3455] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1030.351004][ T3455] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.433007][ T3455] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1032.759993][ T3570] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1032.984435][ T3570] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1033.085244][ T3570] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1033.485451][ T3570] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1033.574169][ T3570] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1033.933031][ T3570] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1034.576784][ T3570] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1034.855406][ T3570] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1045.544300][ T3455] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1045.662056][ T3455] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1045.741699][ T3455] bond0 (unregistering): Released all slaves [ 1048.049652][ T3455] hsr_slave_0: left promiscuous mode [ 1048.390178][ T3455] hsr_slave_1: left promiscuous mode [ 1049.338962][ T3455] veth1_macvtap: left promiscuous mode [ 1049.340790][ T3455] veth0_macvtap: left promiscuous mode [ 1049.360319][ T3455] veth1_vlan: left promiscuous mode [ 1049.372033][ T3455] veth0_vlan: left promiscuous mode [ 1072.995827][ T3455] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.662106][ T3455] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1075.613629][ T3563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1076.515594][ T3455] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1078.055221][ T3455] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1078.606111][ T24] audit: type=1400 audit(1077.720:145): avc: denied { write } for pid=3665 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=74 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1087.962729][ T24] audit: type=1400 audit(1087.160:146): avc: denied { write } for pid=3673 comm="rm" name="hook-state" dev="tmpfs" ino=74 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1094.656297][ T3455] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1094.755948][ T3455] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1094.804209][ T3455] bond0 (unregistering): Released all slaves [ 1095.580853][ T3210] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1096.034641][ T3455] hsr_slave_0: left promiscuous mode [ 1096.085299][ T3455] hsr_slave_1: left promiscuous mode [ 1096.373358][ T3455] veth1_macvtap: left promiscuous mode [ 1096.376635][ T3455] veth0_macvtap: left promiscuous mode [ 1096.399523][ T3455] veth1_vlan: left promiscuous mode [ 1096.404022][ T3455] veth0_vlan: left promiscuous mode [ 1114.811805][ T3570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1124.850278][ T24] audit: type=1400 audit(1124.040:147): avc: denied { write } for pid=3688 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=74 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1132.232692][ T24] audit: type=1400 audit(1131.390:148): avc: denied { write } for pid=3697 comm="rm" name="hook-state" dev="tmpfs" ino=74 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1137.674433][ T3210] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1150.848576][ T24] audit: type=1400 audit(1149.980:149): avc: denied { write } for pid=3710 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=74 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1156.493353][ T24] audit: type=1400 audit(1155.690:150): avc: denied { write } for pid=3721 comm="rm" name="hook-state" dev="tmpfs" ino=74 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1160.005035][ T3210] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1171.584263][ T24] audit: type=1400 audit(1170.740:151): avc: denied { write } for pid=3735 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=74 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1177.324577][ T24] audit: type=1400 audit(1176.470:152): avc: denied { write } for pid=3745 comm="rm" name="hook-state" dev="tmpfs" ino=74 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1181.805780][ T3210] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1182.096230][ T3563] veth0_vlan: entered promiscuous mode [ 1182.951613][ T3563] veth1_vlan: entered promiscuous mode [ 1186.041380][ T3563] veth0_macvtap: entered promiscuous mode [ 1186.543578][ T3563] veth1_macvtap: entered promiscuous mode [ 1189.934929][ T3465] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1189.955304][ T3465] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1189.999260][ T3465] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.000346][ T3465] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.476714][ T24] audit: type=1400 audit(1193.670:153): avc: denied { mount } for pid=3563 comm="syz-executor" name="/" dev="gadgetfs" ino=5774 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1199.402791][ T24] audit: type=1400 audit(1198.590:154): avc: denied { write } for pid=3756 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=74 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1200.480380][ T3570] veth0_vlan: entered promiscuous mode [ 1201.562937][ T3570] veth1_vlan: entered promiscuous mode [ 1203.945540][ T24] audit: type=1400 audit(1203.110:155): avc: denied { setattr } for pid=3761 comm="syz.2.15" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1205.463971][ T3570] veth0_macvtap: entered promiscuous mode [ 1206.298327][ T3570] veth1_macvtap: entered promiscuous mode [ 1210.045889][ T21] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1210.205796][ T30] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1210.214785][ T30] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1210.249750][ T30] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1211.141560][ T24] audit: type=1400 audit(1210.310:156): avc: denied { write } for pid=3766 comm="rm" name="hook-state" dev="tmpfs" ino=74 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1217.396695][ T3210] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1234.915333][ T24] audit: type=1400 audit(1234.110:157): avc: denied { write } for pid=3781 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=74 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1244.726645][ T24] audit: type=1400 audit(1243.890:158): avc: denied { write } for pid=3792 comm="rm" name="hook-state" dev="tmpfs" ino=74 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1251.579874][ T3210] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1260.676022][ T24] audit: type=1400 audit(1259.870:159): avc: denied { append } for pid=3800 comm="syz.3.21" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1261.285592][ T24] audit: type=1400 audit(1260.430:160): avc: denied { write } for pid=3799 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=74 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1262.798860][ T24] audit: type=1400 audit(1261.710:161): avc: denied { execute } for pid=3803 comm="syz.2.22" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=6348 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1272.606279][ T24] audit: type=1400 audit(1271.780:162): avc: denied { write } for pid=3811 comm="rm" name="hook-state" dev="tmpfs" ino=74 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1297.666347][ T24] audit: type=1400 audit(1296.860:163): avc: denied { write } for pid=3827 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=74 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1304.335908][ T24] audit: type=1400 audit(1303.530:164): avc: denied { create } for pid=3830 comm="syz.3.27" anonclass=[kvm-gmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1307.780800][ T24] audit: type=1400 audit(1306.870:165): avc: denied { write } for pid=3838 comm="rm" name="hook-state" dev="tmpfs" ino=74 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1314.935867][ T3210] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1336.729843][ T24] audit: type=1400 audit(1335.910:166): avc: denied { write } for pid=3851 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=74 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1346.679556][ T24] audit: type=1400 audit(1345.750:167): avc: denied { write } for pid=3862 comm="rm" name="hook-state" dev="tmpfs" ino=74 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1348.570440][ T24] audit: type=1400 audit(1347.760:168): avc: denied { map } for pid=3863 comm="syz.3.34" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=7043 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1348.627205][ T24] audit: type=1400 audit(1347.820:169): avc: denied { read } for pid=3863 comm="syz.3.34" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=7043 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1352.977442][ T3210] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1400.151162][ T24] audit: type=1400 audit(1399.340:170): avc: denied { write } for pid=3896 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=74 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1405.582441][ T24] audit: type=1400 audit(1404.760:171): avc: denied { write } for pid=3899 comm="rm" name="hook-state" dev="tmpfs" ino=74 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1411.490854][ T24] audit: type=1400 audit(1410.680:172): avc: denied { read } for pid=3904 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1411.571785][ T24] audit: type=1400 audit(1410.740:173): avc: denied { open } for pid=3904 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1421.002328][ T24] audit: type=1400 audit(1420.200:174): avc: denied { write } for pid=3907 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=74 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1429.911395][ T24] audit: type=1400 audit(1429.100:175): avc: denied { write } for pid=3915 comm="rm" name="hook-state" dev="tmpfs" ino=74 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1448.586044][ T24] audit: type=1400 audit(1447.780:176): avc: denied { write } for pid=3927 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=74 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1457.728503][ T24] audit: type=1400 audit(1456.890:177): avc: denied { write } for pid=3935 comm="rm" name="hook-state" dev="tmpfs" ino=74 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1481.030558][ T24] audit: type=1400 audit(1480.150:178): avc: denied { write } for pid=3949 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=74 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1490.000039][ T24] audit: type=1400 audit(1489.160:179): avc: denied { write } for pid=3960 comm="rm" name="hook-state" dev="tmpfs" ino=74 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1497.802705][ T3904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1498.324210][ T3904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1509.311876][ T24] audit: type=1400 audit(1508.480:180): avc: denied { write } for pid=3971 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=74 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1512.816503][ T3914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1513.303591][ T3914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1518.299194][ T24] audit: type=1400 audit(1517.460:181): avc: denied { write } for pid=3979 comm="rm" name="hook-state" dev="tmpfs" ino=74 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1532.193926][ T24] audit: type=1400 audit(1531.390:182): avc: denied { write } for pid=3989 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=74 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1535.973282][ T3904] hsr_slave_0: entered promiscuous mode [ 1536.092896][ T3904] hsr_slave_1: entered promiscuous mode [ 1540.289805][ T24] audit: type=1400 audit(1539.400:183): avc: denied { write } for pid=3995 comm="rm" name="hook-state" dev="tmpfs" ino=74 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1552.263894][ T3914] hsr_slave_0: entered promiscuous mode [ 1552.347233][ T3914] hsr_slave_1: entered promiscuous mode [ 1552.502617][ T3914] debugfs: 'hsr0' already exists in 'hsr' [ 1552.518812][ T3914] Cannot create hsr debugfs directory [ 1565.234255][ T3904] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1565.670926][ T3904] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1565.800376][ T3904] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1566.225838][ T3904] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1567.173237][ T3904] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1567.464245][ T3904] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1568.466315][ T3904] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1568.842796][ T3904] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1572.092681][ T24] audit: type=1400 audit(1571.270:184): avc: denied { write } for pid=4006 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=74 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1580.815667][ T24] audit: type=1400 audit(1580.010:185): avc: denied { write } for pid=4018 comm="rm" name="hook-state" dev="tmpfs" ino=74 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1584.712563][ T3914] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1585.154622][ T3914] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1585.276596][ T3914] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1585.706625][ T3914] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1585.817162][ T3914] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1586.442929][ T3914] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1586.665333][ T3914] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1587.152717][ T3914] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1605.179824][ T24] audit: type=1400 audit(1604.350:186): avc: denied { write } for pid=4037 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=74 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1611.377318][ T3904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1618.180710][ T24] audit: type=1400 audit(1617.370:187): avc: denied { write } for pid=4046 comm="rm" name="hook-state" dev="tmpfs" ino=74 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1625.223101][ T3914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1748.170214][ T24] audit: type=1400 audit(1747.240:188): avc: denied { write } for pid=4110 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=74 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1754.133475][ T3904] veth0_vlan: entered promiscuous mode [ 1755.743621][ T3904] veth1_vlan: entered promiscuous mode [ 1760.402023][ T3904] veth0_macvtap: entered promiscuous mode [ 1761.370461][ T3904] veth1_macvtap: entered promiscuous mode [ 1761.919891][ T24] audit: type=1400 audit(1761.000:189): avc: denied { write } for pid=4118 comm="rm" name="hook-state" dev="tmpfs" ino=74 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1765.449965][ T4010] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1765.483060][ T2167] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1765.608894][ T21] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1765.610248][ T21] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1770.992010][ T3914] veth0_vlan: entered promiscuous mode [ 1772.463826][ T3914] veth1_vlan: entered promiscuous mode [ 1776.757230][ T3914] veth0_macvtap: entered promiscuous mode [ 1777.292901][ T3914] veth1_macvtap: entered promiscuous mode [ 1782.042713][ T3424] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1782.096746][ T4009] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1782.310700][ T3424] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1782.313761][ T3424] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1804.690405][ T24] audit: type=1400 audit(1803.860:190): avc: denied { mmap_zero } for pid=4127 comm="syz.5.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 1825.309536][ T26] INFO: task syz.2.38:3882 blocked for more than 430 seconds. [ 1825.313084][ T26] Not tainted syzkaller #0 [ 1825.339099][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1825.339921][ T26] task:syz.2.38 state:D stack:0 pid:3882 tgid:3882 ppid:3563 task_flags:0x400040 flags:0x00000011 [ 1825.341501][ T26] Call trace: [ 1825.341999][ T26] __switch_to+0x5e0/0xb70 (T) [ 1825.344240][ T26] __schedule+0x1e0c/0x38cc [ 1825.344760][ T26] schedule+0x1b4/0x274 [ 1825.345210][ T26] schedule_timeout+0x68/0x1e4 [ 1825.345669][ T26] wait_for_completion+0x1b8/0x414 [ 1825.346073][ T26] __synchronize_srcu+0x1c8/0x208 [ 1825.346563][ T26] synchronize_srcu+0x668/0x8dc [ 1825.346997][ T26] mmu_notifier_unregister+0x33c/0x444 [ 1825.467040][ T26] kvm_put_kvm+0x69c/0xbbc [ 1825.523415][ T26] kvm_vm_release+0x58/0x78 [ 1825.548680][ T26] __fput+0x4ac/0x978 [ 1825.549378][ T26] ____fput+0x20/0x30 [ 1825.549826][ T26] task_work_run+0x1b8/0x250 [ 1825.550353][ T26] exit_to_user_mode_loop+0x110/0x188 [ 1825.550861][ T26] el0_svc+0x18c/0x240 [ 1825.551327][ T26] el0t_64_sync_handler+0x84/0x12c [ 1825.551768][ T26] el0t_64_sync+0x198/0x19c [ 1825.553488][ T26] [ 1825.553488][ T26] Showing all locks held in the system: [ 1825.554440][ T26] 1 lock held by khungtaskd/26: [ 1825.554832][ T26] #0: ffff800087e43358 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x4c/0x188 [ 1825.557264][ T26] 3 locks held by kworker/u4:4/47: [ 1825.643438][ T26] #0: fff0000074ce64e0 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x364/0x38cc [ 1825.645586][ T26] #1: fff0000074cd1240 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x6c/0x6e8 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1825.647283][ T26] #2: fff0000074cd2c18 (&base->lock){-.-.}-{2:2}, at: devl_trylock+0x24/0x34 [ 1825.780292][ T26] 2 locks held by getty/3239: [ 1825.780664][ T26] #0: 6ef00000126d60a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 1825.782356][ T26] #1: 62ff80008cb8b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x314/0x11f8 [ 1825.783975][ T26] 2 locks held by syz-executor/3367: [ 1825.784315][ T26] 3 locks held by kworker/u4:3/3424: [ 1825.784678][ T26] 3 locks held by kworker/u4:11/3659: [ 1825.784991][ T26] 2 locks held by syz.3.36/3876: [ 1825.785344][ T26] 2 locks held by syz-executor/3904: [ 1825.785677][ T26] 3 locks held by kworker/u4:10/4010: [ 1825.785990][ T26] 3 locks held by kworker/u4:12/4058: [ 1825.786319][ T26] 4 locks held by syz-executor/4132: [ 1825.786756][ T26] [ 1825.909963][ T26] ============================================= [ 1825.909963][ T26] [ 1825.911308][ T26] Kernel panic - not syncing: hung_task: blocked tasks [ 1825.916344][ T26] CPU: 0 UID: 0 PID: 26 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT [ 1825.918179][ T26] Hardware name: linux,dummy-virt (DT) [ 1825.919355][ T26] Call trace: [ 1825.920286][ T26] show_stack+0x2c/0x3c (C) [ 1825.921502][ T26] __dump_stack+0x30/0x40 [ 1825.922614][ T26] dump_stack_lvl+0x30/0x12c [ 1825.923709][ T26] dump_stack+0x1c/0x28 [ 1825.924679][ T26] vpanic+0x4cc/0x844 [ 1825.925708][ T26] vpanic+0x0/0x844 [ 1825.926646][ T26] hung_task_panic+0x0/0x2c [ 1825.927677][ T26] kthread+0x4cc/0x514 [ 1825.928701][ T26] ret_from_fork+0x10/0x20 [ 1825.930702][ T26] Kernel Offset: disabled [ 1825.931603][ T26] CPU features: 0x00000000,0034600b,f7c647a1,057ffe1f [ 1825.932949][ T26] Memory Limit: none [ 1825.935370][ T26] Rebooting in 86400 seconds..