last executing test programs: 1h4m17.087704367s ago: executing program 0 (id=27): r0 = openat$kvm(0x0, &(0x7f0000000000), 0xdd041, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000a9c000/0x400000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x2a) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, &(0x7f00000000c0)=@arm64_fw={0x6030000000160003, &(0x7f0000000100)=0x6}) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1b) r7 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000b80)={0x0, 0x0}, 0x0, 0x0) r8 = openat$kvm(0x0, &(0x7f0000000140), 0x40000, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) syz_kvm_vgic_v3_setup(r9, 0x1, 0x500) ioctl$KVM_SET_GSI_ROUTING(r9, 0x4008ae6a, &(0x7f0000000180)={0x1, 0x0, [{0x4, 0x2, 0x0, 0x0, @irqchip={0x6, 0x8}}]}) r10 = eventfd2(0x4, 0x80000) ioctl$KVM_IRQFD(r9, 0x4020ae76, &(0x7f00000001c0)={r10, 0x3, 0x0, r10}) ioctl$KVM_SET_ONE_REG(r7, 0x4010aeac, &(0x7f0000000300)=@arm64_extra={0x603000000013df02, &(0x7f00000002c0)=0x9}) 1h4m10.95342326s ago: executing program 1 (id=28): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x1fe, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000080)={0xa}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3) ioctl$KVM_GET_SREGS(r4, 0x8000ae83, 0x0) 1h4m9.922173617s ago: executing program 0 (id=29): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r5, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000100)={0x0, 0x0}, 0x0, 0x0) r7 = syz_kvm_vgic_v3_setup(r4, 0x3, 0x40) close(r6) close(0x4) close(r7) close(0x5) ioctl$KVM_CREATE_DEVICE(r2, 0xc018aec0, &(0x7f0000000040)={0x2, 0xffffffffffffffff, 0x1}) mmap$KVM_VCPU(&(0x7f0000c3d000/0x3000)=nil, 0x930, 0x6000006, 0x12, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 1h4m4.422921733s ago: executing program 1 (id=30): r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = syz_kvm_add_vcpu$arm64(r0, &(0x7f0000000380)={0x0, &(0x7f00000003c0)=[@hvc={0x32, 0x40, {0x8400000e, [0x0, 0x1, 0x0, 0x0, 0x2]}}], 0x40}, &(0x7f0000000400)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f0000000340)) munmap$KVM_VCPU(0x0, 0x1000000000) munmap(&(0x7f0000011000/0xc00000)=nil, 0xc00000) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) munmap(&(0x7f0000d8f000/0x4000)=nil, 0x4000) munmap(&(0x7f0000cee000/0x4000)=nil, 0x4000) r2 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000000, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000040)={0x0, &(0x7f0000000080)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x7ffe}}], 0x20}, &(0x7f00000000c0)=[@featur1={0x1, 0x8}], 0x1) r6 = openat$kvm(0x0, &(0x7f0000000180), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f00000001c0)={0x0, &(0x7f0000000200)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x2}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x1, 0x80003, 0x10000, 0x0, 0x2, 0x2}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r7, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000280)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f00000002c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000300)=0x8080000}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r5, 0x4018aee1, &(0x7f0000000100)=@attr_pmu_init) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000c58000/0x4000)=nil, 0x930, 0x3000009, 0x80031, r5, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x3000000, 0x4d832, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) 1h4m2.393027081s ago: executing program 0 (id=31): r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) mmap$KVM_VCPU(0x0, 0x50000, 0x2000002, 0x10031, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0x0, 0x0, 0x80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2e) syz_kvm_setup_cpu$arm64(r2, 0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000008c0)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) mmap$KVM_VCPU(0x0, 0x50000, 0x2000002, 0x10031, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x29) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r4, 0x4018aee2, &(0x7f00000001c0)=@attr_irq_timer={0x0, 0x1, 0x1, 0x0}) 1h3m58.709664481s ago: executing program 1 (id=32): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) (async) r1 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) (async) munmap$KVM_VCPU(0x0, 0x80000000000002) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000200)={0xffffffffffffffff, 0xc8}) (async) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000240)={0x4, 0xffffffffffffffff, 0x1}) (async) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000280)=@x86={0xd, 0x1, 0xb, 0x0, 0xb5c, 0x6, 0x6, 0x9, 0x8, 0x89, 0x2f, 0x2, 0x0, 0x6, 0x6, 0x9, 0x3, 0x27, 0x0, '\x00', 0x12, 0x6}) write$eventfd(r4, &(0x7f00000002c0)=0x9, 0x1d) (async) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000100)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r7, 0x4010aeab, &(0x7f0000000140)=@arm64_fp_extra={0x60200000001000d4, &(0x7f0000000180)=0x3cc}) syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000080)=[@mrs={0xbe, 0x18, {0x603000000013c800}}], 0x18}, 0x0, 0xfffffffffffffffb) (async) ioctl$KVM_CREATE_VM(r0, 0x40086602, 0x20000000) (async) r8 = openat$kvm(0x0, &(0x7f0000000300), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil) r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f00000004c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r11, 0x4004ae8b, &(0x7f0000000500)={0x8, '\x00\x00\x00\x00\x00\x00\x00\x00'}) (async) ioctl$KVM_RUN(r11, 0xae80, 0x0) r12 = openat$kvm(0x0, &(0x7f0000000340), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000c00000/0x400000)=nil) r15 = syz_kvm_add_vcpu$arm64(r14, &(0x7f0000000380)={0x0, &(0x7f00000003c0)=[@memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xffd0, 0x0, 0x4}}], 0x30}, 0x0, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000400)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r16, 0x4018aee1, &(0x7f0000000440)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000480)=0x8080000}) ioctl$KVM_RUN(r15, 0xae80, 0x0) 1h3m56.595159402s ago: executing program 0 (id=33): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000000)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0x3ee6522cfcf74e69) r4 = eventfd2(0x1, 0x1) r5 = openat$kvm(0x0, &(0x7f00000000c0), 0x40000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_vgic_v3_setup(r6, 0x1, 0x100) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000100)={r4, 0x3, 0x2, r4}) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x3, 0x2, 0x1, 0x0, @sint={0x9d, 0x800}}]}) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000180)={0x8}) write$eventfd(r4, &(0x7f00000001c0)=0x1000007, 0x8) mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r3, 0x0) r7 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r9, 0x4068aea3, &(0x7f0000000240)={0xef, 0x0, 0x7}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_ARM_VCPU_INIT(r10, 0x4020aeae, &(0x7f00000002c0)={0x5}) ioctl$KVM_SET_ONE_REG(r10, 0x4010aeac, &(0x7f0000000300)=@arm64_sys={0x603000000013c006, &(0x7f0000000340)=0x2}) mmap$KVM_VCPU(&(0x7f0000ffd000/0x1000)=nil, r7, 0x1, 0x11, r3, 0x0) r11 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, r11, 0x8, 0x13, r3, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x4000)=nil, r11, 0x0, 0x12, r3, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) 1h3m48.546101583s ago: executing program 1 (id=34): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x3}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000001c0)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000200)=@x86={0x11, 0x9b, 0xf, 0x0, 0x5, 0x8, 0x82, 0x46, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x100001, 0xffc0000, 0x0, 0x3, 0xa, 0x8, '\x00', 0x1, 0x93}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4000ae84, &(0x7f0000000240)={{0x0, 0x1000, 0x1, 0x3a, 0x0, 0x9, 0xba, 0xc, 0x2, 0x6, 0x0, 0x9}, {0xeeef0000, 0x0, 0xd, 0x1, 0xfc, 0x1, 0x5, 0xc, 0x7, 0x4, 0x6, 0x6}, {0x0, 0xeeee8000, 0x8, 0x9, 0x6, 0x7, 0x3, 0xdb, 0x8, 0x1, 0x1}, {0x2, 0xe000, 0x0, 0x55, 0x7f, 0x80, 0x4, 0x4, 0xa, 0x1, 0x8, 0x9}, {0x6000, 0x0, 0x0, 0x38, 0x0, 0x6, 0x8, 0x1, 0x81, 0x93, 0x7f, 0x8}, {0xdddd1000, 0x41000, 0xd, 0x5, 0x9, 0x5, 0x2, 0x8, 0x81, 0xf, 0x5, 0xfe}, {0xffff1000, 0xb000, 0x14, 0x1, 0x1, 0x7b, 0xfd, 0x9, 0x6a, 0xe, 0x8, 0xd1}, {0xeeef0000, 0x7000, 0x4, 0x3, 0x0, 0x0, 0x7, 0xfa, 0x10, 0x2, 0x2, 0x1}, {0x40000, 0x2}, {0x8000000, 0xc71}, 0x20000002, 0x0, 0x1000, 0x8, 0x8, 0x8000, 0x7000, [0x3, 0x8000000000000000, 0x89, 0x1]}) write$eventfd(r2, &(0x7f0000000380)=0x3, 0xfdef) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x82880, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$kvm(0x0, 0x0, 0x101282, 0x0) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) r6 = syz_kvm_vgic_v3_setup(r4, 0x2, 0xc0) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x1, 0x4, &(0x7f0000000100)=0xfff}) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x3}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000001c0)={0x4, 0xffffffffffffffff, 0x1}) (async) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000200)=@x86={0x11, 0x9b, 0xf, 0x0, 0x5, 0x8, 0x82, 0x46, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x100001, 0xffc0000, 0x0, 0x3, 0xa, 0x8, '\x00', 0x1, 0x93}) (async) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4000ae84, &(0x7f0000000240)={{0x0, 0x1000, 0x1, 0x3a, 0x0, 0x9, 0xba, 0xc, 0x2, 0x6, 0x0, 0x9}, {0xeeef0000, 0x0, 0xd, 0x1, 0xfc, 0x1, 0x5, 0xc, 0x7, 0x4, 0x6, 0x6}, {0x0, 0xeeee8000, 0x8, 0x9, 0x6, 0x7, 0x3, 0xdb, 0x8, 0x1, 0x1}, {0x2, 0xe000, 0x0, 0x55, 0x7f, 0x80, 0x4, 0x4, 0xa, 0x1, 0x8, 0x9}, {0x6000, 0x0, 0x0, 0x38, 0x0, 0x6, 0x8, 0x1, 0x81, 0x93, 0x7f, 0x8}, {0xdddd1000, 0x41000, 0xd, 0x5, 0x9, 0x5, 0x2, 0x8, 0x81, 0xf, 0x5, 0xfe}, {0xffff1000, 0xb000, 0x14, 0x1, 0x1, 0x7b, 0xfd, 0x9, 0x6a, 0xe, 0x8, 0xd1}, {0xeeef0000, 0x7000, 0x4, 0x3, 0x0, 0x0, 0x7, 0xfa, 0x10, 0x2, 0x2, 0x1}, {0x40000, 0x2}, {0x8000000, 0xc71}, 0x20000002, 0x0, 0x1000, 0x8, 0x8, 0x8000, 0x7000, [0x3, 0x8000000000000000, 0x89, 0x1]}) (async) write$eventfd(r2, &(0x7f0000000380)=0x3, 0xfdef) (async) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) (async) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x82880, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) openat$kvm(0x0, 0x0, 0x101282, 0x0) (async) syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) (async) syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) (async) syz_kvm_vgic_v3_setup(r4, 0x2, 0xc0) (async) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x1, 0x4, &(0x7f0000000100)=0xfff}) (async) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0) (async) 1h3m46.884233156s ago: executing program 0 (id=35): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f00000001c0)="f21bc75509bf71c9d70236fc044842da0700ffffffffffd24993f297e87fd62c18b875c2357c6ed6000000000000000000000000002000e4ff00", 0x0, 0x48) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(0xffffffffffffffff, &(0x7f00000001c0)=0xffffff7f, 0x8) 1h3m38.9381146s ago: executing program 0 (id=36): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000000c0)={0x8}) syz_kvm_setup_cpu$arm64(r1, 0xffffffffffffffff, &(0x7f0000e8a000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x0, 0x40) close(0x4) close(0x5) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f0000000000)={0x1ffc, 0x7000, 0x7f, 0x0, 0x2}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x27) syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CLEAR_DIRTY_LOG(r5, 0xc018aec0, &(0x7f0000000480)={0x2, 0x2c0, 0x200, &(0x7f00000004c0)=[0x9, 0x8, 0xffffffff80000001, 0x6, 0x21e2, 0x1000, 0x800, 0x5, 0x0, 0xa160, 0x8, 0x8, 0xb, 0x80000000, 0x7, 0x8, 0x9e, 0x3, 0x9, 0x0, 0x3, 0x7, 0x1, 0x0, 0x6, 0x0, 0xde0f, 0xc3, 0x80000000, 0x4, 0x4ba0, 0x10000, 0xffffffff, 0x0, 0x7, 0x9, 0x800, 0x5, 0x0, 0x2, 0x7f5, 0x5, 0x5, 0x2, 0xfffffffffffffff4, 0x3a7d, 0x3, 0x6, 0x8001, 0x1, 0x200, 0xffffffffffffa323, 0x5, 0x6, 0x100, 0x7f, 0x2, 0x1, 0x3, 0x9, 0x7, 0x100000001, 0x6, 0x2, 0x6, 0x196, 0x10001, 0x1, 0x9, 0x10000, 0x8, 0x81, 0x5, 0x9, 0x5, 0x8000, 0x2, 0x304d8a97, 0xff, 0x6, 0x5128, 0x34680000080, 0x7, 0x7d, 0x7, 0x6a7, 0x8001, 0x1c, 0xb, 0x200, 0x0, 0x1, 0xcd8, 0x40, 0x5, 0x4, 0x3, 0x100000000, 0xfffffffffffff006, 0x5, 0x6, 0x101, 0x5, 0xcf, 0x10000, 0xcb7, 0x3, 0x7, 0x8, 0x3, 0xffffffffffffffff, 0x8, 0xa, 0x8, 0x4, 0x7fff, 0x4, 0xfffffffffffffffa, 0x2, 0xfffffffffffffff7, 0x100, 0x9, 0x6, 0x26, 0x80000001, 0xc, 0x4, 0x5]}) r6 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000180)={0x0, &(0x7f0000000100)=[@smc={0x1e, 0x40, {0x84000013, [0x6, 0x5, 0x2, 0x5, 0x7fffffffffffffff]}}, @uexit={0x0, 0x18, 0x8}], 0x58}, &(0x7f00000001c0)=[@featur2], 0x1) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_GUEST_DEBUG_arm64(r7, 0x4208ae9b, &(0x7f0000000240)={0x659aa93486115af1, 0x0, {[0x1, 0x5, 0xffff, 0x8, 0x2, 0x7, 0xff, 0x641, 0x1, 0x53, 0x59, 0x3ff, 0x100000001, 0xcf3b, 0x8, 0x6], [0x8, 0x7, 0x4, 0x6, 0x7, 0x0, 0x4000000042, 0x2, 0x3, 0x1, 0xa, 0x8000000000000001, 0x8, 0x9, 0x8, 0x6], [0x31, 0x53, 0xe, 0x56b0, 0x4, 0x2, 0x4, 0x8, 0x1, 0x1, 0x400000000000009, 0xffffffffffffffff, 0x3, 0x9, 0x20000078], [0xd6ef, 0x9, 0x4, 0x5, 0x3ff, 0x0, 0x0, 0x9, 0x7, 0x80, 0xd, 0xabb, 0xffffffffffffffff, 0x623, 0x1, 0x2]}}) 1h3m34.886954294s ago: executing program 1 (id=37): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) eventfd2(0x9, 0x800) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xc0) 1h3m29.442088599s ago: executing program 1 (id=38): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x101900, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x26) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000b7b000/0x400000)=nil) r2 = openat$kvm(0x0, &(0x7f00000000c0), 0x121200, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000300), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000aba000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000340)={0x0, &(0x7f0000000380)=[@its_setup={0x82, 0x28, {0x1, 0x3, 0x121}}], 0x28}, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_GET_REG_LIST(r9, 0xc008aeb0, 0x0) r10 = syz_kvm_add_vcpu$arm64(r5, &(0x7f00000003c0)={0x0, &(0x7f0000000400)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x8000000000000f6}}], 0x28}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r4, 0xff7ffffffffffffd, 0x360) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000440)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f0000000480)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f00000004c0)=0x8080000}) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) close(r12) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0) 1h2m52.351324607s ago: executing program 32 (id=36): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000000c0)={0x8}) syz_kvm_setup_cpu$arm64(r1, 0xffffffffffffffff, &(0x7f0000e8a000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x0, 0x40) close(0x4) close(0x5) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f0000000000)={0x1ffc, 0x7000, 0x7f, 0x0, 0x2}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x27) syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CLEAR_DIRTY_LOG(r5, 0xc018aec0, &(0x7f0000000480)={0x2, 0x2c0, 0x200, &(0x7f00000004c0)=[0x9, 0x8, 0xffffffff80000001, 0x6, 0x21e2, 0x1000, 0x800, 0x5, 0x0, 0xa160, 0x8, 0x8, 0xb, 0x80000000, 0x7, 0x8, 0x9e, 0x3, 0x9, 0x0, 0x3, 0x7, 0x1, 0x0, 0x6, 0x0, 0xde0f, 0xc3, 0x80000000, 0x4, 0x4ba0, 0x10000, 0xffffffff, 0x0, 0x7, 0x9, 0x800, 0x5, 0x0, 0x2, 0x7f5, 0x5, 0x5, 0x2, 0xfffffffffffffff4, 0x3a7d, 0x3, 0x6, 0x8001, 0x1, 0x200, 0xffffffffffffa323, 0x5, 0x6, 0x100, 0x7f, 0x2, 0x1, 0x3, 0x9, 0x7, 0x100000001, 0x6, 0x2, 0x6, 0x196, 0x10001, 0x1, 0x9, 0x10000, 0x8, 0x81, 0x5, 0x9, 0x5, 0x8000, 0x2, 0x304d8a97, 0xff, 0x6, 0x5128, 0x34680000080, 0x7, 0x7d, 0x7, 0x6a7, 0x8001, 0x1c, 0xb, 0x200, 0x0, 0x1, 0xcd8, 0x40, 0x5, 0x4, 0x3, 0x100000000, 0xfffffffffffff006, 0x5, 0x6, 0x101, 0x5, 0xcf, 0x10000, 0xcb7, 0x3, 0x7, 0x8, 0x3, 0xffffffffffffffff, 0x8, 0xa, 0x8, 0x4, 0x7fff, 0x4, 0xfffffffffffffffa, 0x2, 0xfffffffffffffff7, 0x100, 0x9, 0x6, 0x26, 0x80000001, 0xc, 0x4, 0x5]}) r6 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000180)={0x0, &(0x7f0000000100)=[@smc={0x1e, 0x40, {0x84000013, [0x6, 0x5, 0x2, 0x5, 0x7fffffffffffffff]}}, @uexit={0x0, 0x18, 0x8}], 0x58}, &(0x7f00000001c0)=[@featur2], 0x1) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_GUEST_DEBUG_arm64(r7, 0x4208ae9b, &(0x7f0000000240)={0x659aa93486115af1, 0x0, {[0x1, 0x5, 0xffff, 0x8, 0x2, 0x7, 0xff, 0x641, 0x1, 0x53, 0x59, 0x3ff, 0x100000001, 0xcf3b, 0x8, 0x6], [0x8, 0x7, 0x4, 0x6, 0x7, 0x0, 0x4000000042, 0x2, 0x3, 0x1, 0xa, 0x8000000000000001, 0x8, 0x9, 0x8, 0x6], [0x31, 0x53, 0xe, 0x56b0, 0x4, 0x2, 0x4, 0x8, 0x1, 0x1, 0x400000000000009, 0xffffffffffffffff, 0x3, 0x9, 0x20000078], [0xd6ef, 0x9, 0x4, 0x5, 0x3ff, 0x0, 0x0, 0x9, 0x7, 0x80, 0xd, 0xabb, 0xffffffffffffffff, 0x623, 0x1, 0x2]}}) 1h2m42.359574794s ago: executing program 33 (id=38): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x101900, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x26) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000b7b000/0x400000)=nil) r2 = openat$kvm(0x0, &(0x7f00000000c0), 0x121200, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000300), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000aba000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000340)={0x0, &(0x7f0000000380)=[@its_setup={0x82, 0x28, {0x1, 0x3, 0x121}}], 0x28}, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_GET_REG_LIST(r9, 0xc008aeb0, 0x0) r10 = syz_kvm_add_vcpu$arm64(r5, &(0x7f00000003c0)={0x0, &(0x7f0000000400)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x8000000000000f6}}], 0x28}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r4, 0xff7ffffffffffffd, 0x360) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000440)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f0000000480)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f00000004c0)=0x8080000}) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) close(r12) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0) 29m12.482412107s ago: executing program 2 (id=313): r0 = mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000240)="37e68986ad644f5dc57bbc1ff382863b67f3eee57a32ec911d95f88f3dd8ea716e4a29cefbd440b2ecf83f57baf33b0c97182970a47ef45c954e42f2055384921830f6e273d2eb30", 0x0, 0x2a2019ac5ed2a1ef) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000200), 0x80, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1a) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x22) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x6) syz_kvm_setup_cpu$arm64(r5, r6, &(0x7f0000e8a000/0x18000)=nil, &(0x7f00000008c0)=[{0x0, 0x0, 0x30}], 0x1, 0x0, 0x0, 0x0) r7 = openat$kvm(0x0, &(0x7f0000000dc0), 0x8280, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CAP_HALT_POLL(r8, 0x4068aea3, &(0x7f0000000e00)={0xb6, 0x0, 0xffffffffffffffff}) ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, &(0x7f0000000900)=@arm64_sys={0x603000000013dcf0, &(0x7f0000000940)=0x2}) ioctl$KVM_HAS_DEVICE_ATTR_vm(r2, 0x4018aee3, &(0x7f00000001c0)=@attr_other={0x0, 0x5, 0x101, &(0x7f0000000180)=0x6}) r9 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000040)={0x0, &(0x7f00000000c0)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x1}}], 0x28}, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r6, 0x4004ae8b, &(0x7f0000000e80)={0x38, "2135d213b2f259aefc5ee547b5786a1e0f4437cdb13dbeb27b1c872cfdc9d218ef3b1d03c07687b27dfd6966abbe75b1d30f149440fa4a95"}) ioctl$KVM_CLEAR_DIRTY_LOG(r2, 0xc018aec0, &(0x7f0000000d80)={0x2, 0x340, 0x380, &(0x7f0000000980)=[0x8, 0x7, 0x8009, 0x7, 0x1, 0x8, 0x4, 0x8, 0x4, 0x8, 0x7, 0x8, 0x0, 0x7, 0x6, 0x6, 0x1ff, 0x5, 0x1, 0x4, 0x7ff, 0x40, 0x9, 0xffffffffffffffff, 0x7fff, 0x7fc0000000000, 0x8, 0x4, 0xfab, 0xfffffffffffff8e8, 0x316, 0x578, 0x3, 0x0, 0x2, 0x7fffffff, 0x7, 0x2, 0x6, 0xff, 0x8, 0x8001, 0x5, 0x1, 0x1, 0x7, 0x88c, 0x3, 0x1, 0x7, 0x1, 0x32d136db, 0x0, 0xe2, 0x1, 0x3, 0x6, 0x81, 0x80000001, 0x5, 0x0, 0xdef3, 0x4, 0x6, 0x101, 0xf4, 0x5, 0x3, 0x1186, 0xa08, 0x8, 0x571, 0x4, 0x4, 0x6, 0x1, 0x1, 0x3, 0x1, 0x9, 0x8, 0xffffffff, 0xfffffffffffffff9, 0x7fff, 0x2, 0x4, 0x800, 0x4, 0x4, 0x0, 0x7, 0x3, 0x8, 0x8, 0x4, 0xf22, 0x7fff, 0x8000000000000000, 0x7bc, 0x8, 0xc0bd, 0x3, 0x0, 0x401, 0x5, 0x6, 0x9, 0x80000000, 0x0, 0x6, 0x2, 0x6, 0x9, 0x1, 0x4, 0x40, 0x9, 0xe2a, 0x9, 0x8, 0x8, 0xffff, 0xffffffff, 0x80000000, 0x5, 0x1, 0x2, 0x2]}) syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000840)={0x0, &(0x7f00000002c0)=[@memwrite={0x6e, 0x30, @vgic_gicr={0x80e0000, 0xffe8, 0xd9}}, @msr={0x14, 0x20, {0x603000000013e65d, 0xb0}}, @eret={0xe6, 0x18, 0x7}, @irq_setup={0x46, 0x18, {0x2, 0x11b}}, @svc={0x122, 0x40, {0x200, [0x800, 0x9, 0x4, 0x7fffffff, 0x800000000]}}, @mrs={0xbe, 0x18, {0x603000000013df49}}, @hvc={0x32, 0x40, {0x2000, [0x0, 0xff, 0xfffffffffffffffe, 0x2, 0x3]}}, @mrs={0xbe, 0x18, {0x603000000013deff}}, @svc={0x122, 0x40, {0x8400000f, [0x7ef, 0x6, 0x800, 0x2, 0x5]}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x80, 0xd, 0x1}}, @irq_setup={0x46, 0x18, {0x2, 0xa2}}, @msr={0x14, 0x20, {0x603000000013ddfd, 0x2}}, @code={0xa, 0x84, {"0000008b00fca05e007008d5000020cbe06e86d200a0b8f2a10180d2c20080d2830080d2040080d2020000d4007008d5e0768bd20060b0f2810080d2420080d2c30080d2e40180d2020000d4206482d20020b8f2c10180d2e20080d2230080d2840080d2020000d4000028d5000028d5"}}, @msr={0x14, 0x20, {0x603000000013c082, 0x8}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x0, 0x3, 0x6, 0x5, 0x401, 0x3}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x0, 0x4, 0xd, 0x5, 0x1}}, @irq_setup={0x46, 0x18, {0x1, 0x179}}, @eret={0xe6, 0x18, 0xa}, @code={0xa, 0x54, {"000008d5008008d5007008d500c0241e404595d20080b8f2410080d2e20080d2430180d2a40180d2020000d4007008d5004c205e00a0800c0090800f000008d5"}}, @hvc={0x32, 0x40, {0xc400000c, [0xfffffffffffff077, 0x8, 0x1, 0x0, 0x9]}}, @code={0xa, 0xb4, {"a0bc89d200e0b8f2010080d2020180d2a30180d2240180d2020000d40040202ee05293d200c0b0f2610180d2c20080d2030080d2e40080d2020000d4405d80d20080b8f2e10080d2420080d2e30180d2840080d2020000d4205e97d200a0b0f2c10080d2620180d2830180d2a40180d2020000d40000005c008008d5e05f96d20040b0f2e10180d2220080d2e30180d2a40180d2020000d40008e038000028d5"}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x1, 0x2, 0x8, 0x35, 0xd, 0x3}}, @uexit={0x0, 0x18, 0x200}, @hvc={0x32, 0x40, {0x80000000, [0x2, 0x1, 0x7, 0x5, 0x1]}}, @msr={0x14, 0x20, {0x603000000013e660, 0xffffffffffffff28}}, @irq_setup={0x46, 0x18, {0x1, 0x347}}, @smc={0x1e, 0x40, {0x84000053, [0x8000000000000000, 0xfffffffffffffffb, 0x8001, 0x4, 0x1]}}, @its_setup={0x82, 0x28, {0x0, 0x4, 0x2c0}}], 0x564}, &(0x7f0000000880)=[@featur2={0x1, 0x21}], 0x1) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000100)="746abf250f7959c813e4adfb369b808022e69fe80cfadce4a1259e77bab54ac9749537b3d016bb7f745a6e22d2f9ff443f19467748a3fe02c239457600", 0x0, 0xfffffffffffffec5) 28m55.63232593s ago: executing program 3 (id=315): r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async) r1 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r4, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=[@featur1={0x1, 0x4}], 0x1) syz_kvm_add_vcpu$arm64(r1, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=[@featur1={0x1, 0x4}], 0x1) r5 = syz_kvm_add_vcpu$arm64(r0, &(0x7f00000001c0)={0x0, &(0x7f0000000200)=[@hvc={0x32, 0x40, {0x84000003, [0x7ab, 0x0, 0x4, 0x9, 0x4d]}}], 0x40}, &(0x7f0000000240)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) r6 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x2c) syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil) (async) r9 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000000)={0x0, &(0x7f0000000540)=[@memwrite={0x6e, 0x30, @generic={0x8000000, 0x100000004ab, 0x6, 0x1}}], 0xfffffefc}, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 28m53.447824462s ago: executing program 2 (id=316): mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000481000/0x1000)=nil, 0x1000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) (async) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f0000000000)={0x800, 0xffc}) (async) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f0000000000)={0x800, 0xffc}) munmap(&(0x7f0000136000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) (async) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) (async) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0) 28m46.544568659s ago: executing program 2 (id=317): openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x9) r1 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) eventfd2(0x80000001, 0x1) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$kvm(0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r1, &(0x7f0000000080)={0x0, &(0x7f0000000100)=[@mrs={0xbe, 0x18, {0x6030000000138056}}], 0x18}, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000140)=@x86={0xfd, 0x80, 0x7, 0x0, 0x0, 0x42, 0x6e, 0xf8, 0x46, 0x3, 0x8, 0xb9, 0x0, 0x8d2, 0xffffff80, 0x4, 0x5, 0xec, 0x9, '\x00', 0xff, 0x80000001}) ioctl$KVM_ARM_VCPU_INIT(0xffffffffffffffff, 0x4020aeae, &(0x7f0000000180)={0x5, 0x18}) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000000, 0x4d832, r6, 0x0) ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r5, 0x4068aea3, &(0x7f0000000200)={0xe4, 0x0, 0x8}) munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) r7 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffc000/0x3000)=nil, r7, 0x1, 0x110, r6, 0x0) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) mmap$KVM_VCPU(&(0x7f0000f2a000/0x4000)=nil, 0x930, 0xf, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r5, 0xc008ae67, &(0x7f00000001c0)={0x6ec, 0x4}) 28m45.58332313s ago: executing program 3 (id=318): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) munmap(&(0x7f0000481000/0x1000)=nil, 0x1000) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_arm64(r4, 0x4208ae9b, &(0x7f0000000100)={0x3, 0x0, {[0x800, 0xff, 0xe07d, 0x7, 0x7, 0x867, 0x0, 0x8, 0xe7, 0x2, 0x5, 0x4000000080000000, 0x27b, 0xc, 0x3, 0xffffffffffffffff], [0xb63, 0xff, 0x62d0, 0x80000000, 0x1, 0x7fff, 0x3, 0x87, 0x594, 0xda, 0x8, 0x1, 0x5, 0x0, 0x2, 0xfffffffffffffffc], [0x9, 0xb0a7, 0x1, 0xa7, 0xae, 0x9, 0x4, 0xfffffffffffffffb, 0x1, 0x5, 0x80000001, 0x1, 0xf, 0x80, 0x8, 0x1433], [0xffffffffffffffff, 0x4, 0x5, 0x7, 0xffff, 0x46, 0xf, 0x7, 0x3, 0x4, 0xb, 0x0, 0x3, 0xb, 0xc, 0x5]}}) syz_kvm_vgic_v3_setup(r2, 0x1, 0x100) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x9000000) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000) r5 = openat$kvm(0x0, &(0x7f0000000480), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1, 0x16831, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_IRQ_LINE(r6, 0x4008ae61, &(0x7f00000004c0)={0x0, 0x1ff}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000340)={0x3, 0x6, 0xffff1000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x26) ioctl$KVM_GET_DIRTY_LOG(r7, 0x4010ae42, &(0x7f0000000000)={0x101ff, 0x0, &(0x7f0000f1d000/0x4000)=nil}) r8 = openat$kvm(0x0, &(0x7f0000000380), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) 28m34.662881873s ago: executing program 2 (id=319): eventfd2(0x6, 0x800) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000003c0)={0x2, 0x2, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r2, 0x4018aee1, &(0x7f0000000400)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0x20e4586c}) r3 = openat$kvm(0x0, &(0x7f0000000000), 0x28000, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000140), 0xc00, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013c65d, 0xa19f}}], 0x20}, 0x0, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4000ae84, &(0x7f0000000200)={{0x41000, 0xeeee8000, 0xb, 0x3, 0x9, 0xf, 0x5, 0xc0, 0x6e, 0x6, 0x7, 0x4}, {0x8009002, 0x9000, 0xe, 0x8, 0x0, 0x6, 0x0, 0x9d, 0xba, 0x6, 0x8, 0x3}, {0x58000, 0x0, 0x0, 0x9, 0x9, 0xf8, 0xe, 0x4, 0x1, 0x9, 0xa0, 0x7f}, {0x30000, 0x30000, 0xe, 0x5, 0x4, 0x68, 0x4, 0x3, 0x40, 0x9, 0x4, 0x7}, {0xeeee0000, 0x70000, 0xc, 0xa, 0x6, 0x9, 0x81, 0xce, 0x3, 0x42, 0x4, 0x8}, {0x50000, 0x58000, 0x9, 0x0, 0xff, 0x4, 0xdb, 0x1, 0xd0, 0x7f, 0xd0, 0x4}, {0xffc, 0x6000, 0xa, 0x1, 0x28, 0x2, 0x2, 0x10, 0x1, 0x3, 0x6, 0x2}, {0x7000, 0x80a0000, 0x0, 0x7b, 0x18, 0x6, 0x8, 0xed, 0x6, 0xd, 0x4, 0x7}, {0x80a0000, 0x73ef}, {0x4, 0xcfb2}, 0xa, 0x0, 0x3ff8, 0x400, 0xc, 0x800, 0x8080000, [0x5, 0x9965, 0x3, 0x3]}) syz_kvm_vgic_v3_setup(r5, 0x3, 0xa0) ioctl$KVM_RUN(r7, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x9000000) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) munmap(&(0x7f0000482000/0x2000)=nil, 0x2000) munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000c3f000/0x4000)=nil, 0x0, 0x7, 0x4000010, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000fed000/0x3000)=nil, 0x930, 0x0, 0x4030031, r7, 0x0) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r8, 0xae04) 28m31.219837112s ago: executing program 3 (id=320): r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f00008f5000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000880)={0x0, &(0x7f0000000280)=[@its_setup={0x82, 0x28, {0x0, 0x2, 0x9d}}, @uexit={0x0, 0x18, 0x1fc}, @eret={0xe6, 0x18, 0x13b0}, @smc={0x1e, 0x40, {0xc5000020, [0x9, 0x1000, 0x8000000000000001, 0x4, 0x8]}}, @uexit={0x0, 0x18, 0xc}, @its_setup={0x82, 0x28, {0x1, 0x0, 0x312}}, @uexit={0x0, 0x18, 0x2}, @mrs={0xbe, 0x18}, @mrs={0xbe, 0x18, {0x603000000013def2}}, @mrs={0xbe, 0x18, {0x603000000013c024}}, @mrs={0xbe, 0x18, {0x603000000013c02d}}], 0x150}, &(0x7f00000008c0)=[@featur1={0x1, 0x2}], 0x1) mmap$KVM_VCPU(&(0x7f0000cf3000/0x3000)=nil, 0x930, 0x8, 0x100010, 0xffffffffffffffff, 0x1000000) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x7, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x3, &(0x7f0000000140)}) eventfd2(0xae, 0x1) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) openat$kvm(0x0, 0x0, 0x0, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000180), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f00000001c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r7, 0xc040aed5, &(0x7f0000000200)={0x9000, 0x110000}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) r8 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, &(0x7f00000009c0)={0x0, 0x4, 0x6000, 0x2000, &(0x7f0000ffd000/0x2000)=nil, 0x100000000000000, r8}) close(0xffffffffffffffff) close(r8) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x4f832, 0xffffffffffffffff, 0x1000000) mmap$KVM_VCPU(&(0x7f0000f87000/0x4000)=nil, 0x0, 0xc, 0x5c1fd1b65647af1, r7, 0x20000000) munmap$KVM_VCPU(0x0, 0x1000000000) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) munmap(&(0x7f0000584000/0x800000)=nil, 0x800000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 28m18.19993698s ago: executing program 2 (id=321): r0 = mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x110, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x40000000, 0x80000) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x2, r3, 0x1}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000080)={0x5, 0x0, 0x0, 0xffffffffffffffff, 0xb}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000240)="37e68986ad644f5dc57bbc1ff382863b67f3eee57a32ec911d95f88f3dd8ea716e4a29cefbd440b2ecf83f57baf30600000000000000f45c954e42f2055384921830f6e273d2eb30", 0x0, 0x48) openat$kvm(0x0, &(0x7f00000000c0), 0x8280, 0x0) r4 = mmap$KVM_VCPU(&(0x7f0000dd4000/0x3000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000180)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x4) openat$kvm(0x0, &(0x7f0000000200), 0x2002, 0x0) eventfd2(0x0, 0xc01) eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f00000002c0)={0x5, 0x8000000, 0x8, 0xffffffffffffffff, 0x7}) r6 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r5, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000300)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000380)={0x0, &(0x7f00000003c0)=[@eret={0xe6, 0x18, 0x7ff}], 0x18}, 0x0, 0x0) r10 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) syz_kvm_add_vcpu$arm64(0x0, 0x0, 0x0, 0x0) r12 = syz_kvm_vgic_v3_setup(r11, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f0000000140)={0x8}) ioctl$KVM_GET_DEVICE_ATTR(r12, 0x4018aee2, &(0x7f0000000480)=@attr_arm64={0x0, 0x0, 0x5, &(0x7f00000004c0)=0xd}) ioctl$KVM_RUN(r9, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r5, 0x0) eventfd2(0x0, 0x0) 28m17.649282364s ago: executing program 3 (id=322): mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x4f832, 0xffffffffffffffff, 0x1000000) (async, rerun: 32) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) (async, rerun: 32) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f0000000040)={0x200001fe0000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r4, 0x40a0ae49, &(0x7f0000000180)={0x1fe, 0x4, 0xeeee8000, 0x2000, &(0x7f0000000000/0x2000)=nil, 0x0, r5}) ioctl$KVM_SET_USER_MEMORY_REGION2(r4, 0x40a0ae49, &(0x7f0000000240)={0x2710, 0x4, 0x100000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil, 0x100000, r5}) (async, rerun: 64) mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, 0xffffffffffffffff, 0x0) (rerun: 64) mmap$KVM_VCPU(0x0, 0x50000, 0x3, 0x102031, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0x800454dd, 0x16) 28m6.891246972s ago: executing program 3 (id=323): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r3 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_vgic_v3_setup(r1, 0x1, 0x20) close(r2) syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x9e) close(0x4) syz_kvm_vgic_v3_setup(r1, 0x2, 0x20) close(r0) 28m5.315294755s ago: executing program 2 (id=324): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_GET_SREGS(r0, 0x8000ae83, &(0x7f0000000000)) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x4) ioctl$KVM_CAP_ARM_SYSTEM_SUSPEND(r1, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r0, 0x4004ae8b, &(0x7f00000001c0)={0xac, "91db2e14ef6065cfd183a5058b1084067509e8e3d016e8730c161d0f0ecacb738103f764a2b33c38ad37b132e8ebed7769527097cb6c864f430a399773152f3023be8afe31462552e8abab9dc22d6951450beaa4cb57cef64407050da905717069a182012ce624b17b3597317be1d68afc6ff93b0c66ca09e408892e2a12d4807e9db44ff61ce11e469bde8a4a91cbd6fb30899163e14226fcf533ac0d2d63a2f38dcec004a1bc7ed5b817c8"}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000280)={0xa, 0x0, [{0x0, 0x1, 0x1, 0x0, @sint={0x9, 0x6}}, {0x7, 0x2, 0x0, 0x0, @sint={0x6, 0x4}}, {0x0, 0x2, 0x1, 0x0, @irqchip={0x80000001, 0x9}}, {0x7ff, 0x4, 0x0, 0x0, @msi={0x2, 0x4, 0x3dcd, 0x7fff}}, {0xffffffff, 0x1, 0x1, 0x0, @irqchip={0x4, 0x1ff}}, {0xfffffff7, 0x4, 0x1, 0x0, @msi={0x8, 0x8001, 0x5c3, 0x7}}, {0x1, 0x2, 0x1, 0x0, @adapter={0x4, 0x8, 0x0, 0x9, 0x8}}, {0x6, 0x5, 0x0, 0x0, @sint={0x6, 0xc2}}, {0xffff, 0x3, 0x1, 0x0, @sint={0x200, 0xc}}, {0xcb9, 0x4, 0x1, 0x0, @irqchip={0x4, 0xead}}]}) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x5) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000480)={0xc0, 0x0, 0xc3000}) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f0000000540)=@arm64_bitmap={0x6030000000160002, &(0x7f0000000500)=0x5563}) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1f) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0xc004aea7, &(0x7f0000000580)=0x6) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x10) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f00000005c0)={0x2, 0x0, &(0x7f0000ffc000/0x2000)=nil}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x101000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x6) ioctl$KVM_CAP_DIRTY_LOG_RING(r2, 0x4068aea3, &(0x7f0000000640)={0xc0, 0x0, 0x2000}) r6 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x0, 0x100000d, 0x40010, r0, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f00000006c0)="d1f8742aeb4c25d908c09c6a3394e522b517710150e4024591a1ed81bd80e55d965c272dd380376845e8831a5aea60ddc354450686730e9725ca60ea665a236a25cacde0fa3c7e54", 0x0, 0x48) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xbbc1) r7 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, r7, 0x1000002, 0x20010, 0xffffffffffffffff, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_REGS(r8, 0x8360ae81, &(0x7f0000000740)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000800), 0x4000, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r5, 0x4010ae68, &(0x7f0000000840)={0x4000, 0x10000, 0x1}) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, &(0x7f0000000880)={0x3}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000008c0), 0x2001, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x34) 27m59.291790295s ago: executing program 3 (id=325): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000c0c000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, &(0x7f00000000c0)={0x3765, 0x3}) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f0000000040)=[@hvc={0x32, 0x40, {0x8400000f, [0x479, 0x2, 0x7, 0x5, 0x6]}}], 0x40}, &(0x7f0000000080)=[@featur2={0x1, 0xa}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000bff000/0x400000)=nil) ioctl$KVM_RUN(r3, 0xae80, 0x0) 27m18.670406785s ago: executing program 34 (id=324): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_GET_SREGS(r0, 0x8000ae83, &(0x7f0000000000)) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x4) ioctl$KVM_CAP_ARM_SYSTEM_SUSPEND(r1, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r0, 0x4004ae8b, &(0x7f00000001c0)={0xac, "91db2e14ef6065cfd183a5058b1084067509e8e3d016e8730c161d0f0ecacb738103f764a2b33c38ad37b132e8ebed7769527097cb6c864f430a399773152f3023be8afe31462552e8abab9dc22d6951450beaa4cb57cef64407050da905717069a182012ce624b17b3597317be1d68afc6ff93b0c66ca09e408892e2a12d4807e9db44ff61ce11e469bde8a4a91cbd6fb30899163e14226fcf533ac0d2d63a2f38dcec004a1bc7ed5b817c8"}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000280)={0xa, 0x0, [{0x0, 0x1, 0x1, 0x0, @sint={0x9, 0x6}}, {0x7, 0x2, 0x0, 0x0, @sint={0x6, 0x4}}, {0x0, 0x2, 0x1, 0x0, @irqchip={0x80000001, 0x9}}, {0x7ff, 0x4, 0x0, 0x0, @msi={0x2, 0x4, 0x3dcd, 0x7fff}}, {0xffffffff, 0x1, 0x1, 0x0, @irqchip={0x4, 0x1ff}}, {0xfffffff7, 0x4, 0x1, 0x0, @msi={0x8, 0x8001, 0x5c3, 0x7}}, {0x1, 0x2, 0x1, 0x0, @adapter={0x4, 0x8, 0x0, 0x9, 0x8}}, {0x6, 0x5, 0x0, 0x0, @sint={0x6, 0xc2}}, {0xffff, 0x3, 0x1, 0x0, @sint={0x200, 0xc}}, {0xcb9, 0x4, 0x1, 0x0, @irqchip={0x4, 0xead}}]}) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x5) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000480)={0xc0, 0x0, 0xc3000}) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f0000000540)=@arm64_bitmap={0x6030000000160002, &(0x7f0000000500)=0x5563}) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1f) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0xc004aea7, &(0x7f0000000580)=0x6) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x10) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f00000005c0)={0x2, 0x0, &(0x7f0000ffc000/0x2000)=nil}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x101000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x6) ioctl$KVM_CAP_DIRTY_LOG_RING(r2, 0x4068aea3, &(0x7f0000000640)={0xc0, 0x0, 0x2000}) r6 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x0, 0x100000d, 0x40010, r0, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f00000006c0)="d1f8742aeb4c25d908c09c6a3394e522b517710150e4024591a1ed81bd80e55d965c272dd380376845e8831a5aea60ddc354450686730e9725ca60ea665a236a25cacde0fa3c7e54", 0x0, 0x48) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xbbc1) r7 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, r7, 0x1000002, 0x20010, 0xffffffffffffffff, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_REGS(r8, 0x8360ae81, &(0x7f0000000740)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000800), 0x4000, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r5, 0x4010ae68, &(0x7f0000000840)={0x4000, 0x10000, 0x1}) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, &(0x7f0000000880)={0x3}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000008c0), 0x2001, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x34) 27m11.952721609s ago: executing program 35 (id=325): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000c0c000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, &(0x7f00000000c0)={0x3765, 0x3}) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f0000000040)=[@hvc={0x32, 0x40, {0x8400000f, [0x479, 0x2, 0x7, 0x5, 0x6]}}], 0x40}, &(0x7f0000000080)=[@featur2={0x1, 0xa}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000bff000/0x400000)=nil) ioctl$KVM_RUN(r3, 0xae80, 0x0) 13m8.702517972s ago: executing program 5 (id=377): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) eventfd2(0xfffff800, 0x80000) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000002c0)={0x3000, 0x0, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000300)={0x2, 0x25000, 0x1}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f0000000340)={0xffff1000, 0xa000}) r5 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x0, 0x1, 0x4}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000004}}], 0x50}, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000003c0)={0xffffffffffffffff, 0xc8, 0x5}) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x161642, 0x0) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000400)={0x8, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r8, 0x400454dc, 0x23) r9 = openat$kvm(0x0, &(0x7f0000000000), 0x101e40, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x28) r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000b75000/0x400000)=nil) r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000040)={0x0, &(0x7f0000000240)=[@hvc={0x32, 0x40, {0x84000051, [0x84000053, 0xa, 0x4009, 0x4b, 0x7fff]}}], 0x40}, 0x0, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 12m53.025865032s ago: executing program 4 (id=378): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(0x0, 0x50000, 0x2000002, 0x10031, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000080)={0xffffffffffffffff, 0xc8, 0x3}) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000000c0)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r3, 0x400454e2, 0x12) ioctl$KVM_CHECK_EXTENSION(r0, 0x40086602, 0x8000000400000004) 12m47.389502564s ago: executing program 5 (id=379): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x7, 0xffffffffffffffff}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x35) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000180)=@attr_other={0x0, 0x5, 0x2, &(0x7f0000000300)=0x1}) 12m41.642504309s ago: executing program 4 (id=380): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x8) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000040)={0xa8, 0x0, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000100)) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000e96000/0x1000)=nil}) r2 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000200)={0x1f9, 0x3, 0x100000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0xeeee8000, 0x1000, &(0x7f0000f15000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000280)={0x1fd, 0x0, 0x5000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_kvm_setup_cpu$arm64(r4, r5, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000002c0)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000300)={0x10201, 0x7, 0x1ffe, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) mmap$KVM_VCPU(0x0, r2, 0x7, 0x30, 0xffffffffffffffff, 0x0) munmap$KVM_VCPU(0x0, 0x1000000000) 12m35.542001613s ago: executing program 5 (id=381): syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000200)="f30138ddf77f2b380b7bb71c04010003e600020000000003f4ff00061000bb000010090000000000000015051d000000000000000000003f00", 0x0, 0x48) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x3}) (async) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x3}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) r2 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x2a) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000500)=[@featur2={0x1, 0x4}], 0x1) (async) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000500)=[@featur2={0x1, 0x4}], 0x1) ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, &(0x7f0000000540)=@arm64_fw={0x6030000000140000, &(0x7f0000000580)=0x80002}) syz_kvm_add_vcpu$arm64(r2, &(0x7f00000005c0)={0x0, &(0x7f0000000600)=[@svc={0x122, 0x40, {0x32000000, [0x100000000, 0x1e, 0x1, 0x5e1, 0x2]}}], 0x40}, &(0x7f0000000640)=[@featur1={0x1, 0x4}], 0x1) (async) r7 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000005c0)={0x0, &(0x7f0000000600)=[@svc={0x122, 0x40, {0x32000000, [0x100000000, 0x1e, 0x1, 0x5e1, 0x2]}}], 0x40}, &(0x7f0000000640)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r9 = openat$kvm(0x0, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) (async) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) (async) r12 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000002c0)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_SET_ONE_REG(r13, 0x4010aeac, &(0x7f0000000300)=@arm64_fw={0x6030000000140000, &(0x7f0000000340)=0x10001}) (async) ioctl$KVM_SET_ONE_REG(r13, 0x4010aeac, &(0x7f0000000300)=@arm64_fw={0x6030000000140000, &(0x7f0000000340)=0x10001}) r14 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000380)={0x0, &(0x7f00000003c0)=[@hvc={0x32, 0x40, {0xc4000010, [0x80000000, 0x0, 0x2, 0x1, 0xff]}}], 0x40}, &(0x7f0000000400)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r14, 0xae80, 0x0) r15 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x28) r16 = openat$kvm(0x0, &(0x7f0000000440), 0x0, 0x0) r17 = ioctl$KVM_CREATE_VM(r16, 0xae01, 0x0) ioctl$KVM_CAP_HALT_POLL(r17, 0x4068aea3, &(0x7f0000000480)={0xdf, 0x0, 0x8}) (async) ioctl$KVM_CAP_HALT_POLL(r17, 0x4068aea3, &(0x7f0000000480)={0xdf, 0x0, 0x8}) r18 = ioctl$KVM_CREATE_VCPU(r15, 0xae41, 0x1) mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r18, 0x0) (async) mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r18, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r18, 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x1a17f2, 0x1f01) (async) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x1a17f2, 0x1f01) 12m26.260161706s ago: executing program 4 (id=382): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1d) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000200)={0xa8, 0x0, 0x3}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$kvm(0x0, &(0x7f00000003c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, &(0x7f0000000480)=@arm64_fw={0x6030000000140000, &(0x7f00000004c0)=0x1}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000000c0)={0xffffffffffffffff, 0xc8}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x5) ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f00000002c0)={0x4, 0xffffffffffffffff, 0x1}) r12 = ioctl$KVM_CREATE_VM(r11, 0x894c, 0x0) ioctl$KVM_CREATE_VCPU(r12, 0xb701, 0x0) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000340)={0xffffffffffffffff, 0x6}) ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000380)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_DEVICE_ATTR(r15, 0xb702, 0x0) ioctl$KVM_CAP_HALT_POLL(r8, 0x4068aea3, 0x0) ioctl$KVM_CAP_HALT_POLL(r8, 0x4068aea3, &(0x7f0000000180)={0xe1, 0x0, 0x3}) r16 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r2, r16, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x20}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r16, 0x4010aeab, &(0x7f0000000100)=@arm64_core={0x6030000000100050, &(0x7f0000000140)=0x5}) 12m12.097696533s ago: executing program 5 (id=383): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f00000001c0)={0xdf, 0x0, 0x80000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x5, 0x1, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000bc2000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000440)={0x0, &(0x7f00000000c0)=[@svc={0x122, 0x40, {0xc5000020, [0x6, 0x3, 0x1, 0x711ec83f, 0x8000]}}], 0x40}, &(0x7f0000000480)=[@featur1={0x1, 0x43}], 0x1000000000000066) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=[@featur2={0x1, 0x2}], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 12m5.4601225s ago: executing program 4 (id=384): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CAP_HALT_POLL(r3, 0x4068aea3, &(0x7f0000000240)) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f00000002c0)={0x0, &(0x7f0000000300)=[@code={0xa, 0x18, {"7f2003d5"}}], 0x18}, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f0000000340)={0x0, 0x81}) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r6, 0xae04) r7 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x1}}, @its_send_cmd={0xaa, 0x28, {0xe, 0x0, 0x2, 0x6}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f0000000380)=@attr_other={0x0, 0x7fffffbf, 0x1f, &(0x7f0000000200)=0xfffffffffffffff7}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 12m0.391933055s ago: executing program 5 (id=385): openat$kvm(0x0, 0x0, 0x0, 0x0) r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$kvm(0x0, &(0x7f0000000540), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x29) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r2 = syz_kvm_add_vcpu$arm64(r0, &(0x7f0000000580)={0x0, &(0x7f00000005c0)=[@msr={0x14, 0x20, {0x603000000013dce9, 0x8000}}], 0x20}, &(0x7f0000000600)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r2, 0x4018aee1, &(0x7f0000000640)=@attr_pmu_init) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000480)={0x8, 0xffffffffffffffff, 0x1}) ioctl$KVM_HAS_DEVICE_ATTR(r4, 0x4018aee3, &(0x7f00000004c0)=@attr_riscv64=@attr_addr={0x0, 0x1, @imsic=0x4, &(0x7f00000003c0)=0x800000000000d2}) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f00000001c0)="f30138ddf77f2b380b7bb71c04010003e600020000000003f4ff00061000bb000010090000000000000015051d000000000000000000003f00", 0x0, 0x48) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000240)={0xffffffffffffffff, 0xc8, 0x3}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000002c0)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000300)=@arm64={0x0, 0x1, 0x0, '\x00', 0x7fffffff}) write$eventfd(r2, &(0x7f0000000040)=0x3, 0x8) r5 = mmap$KVM_VCPU(&(0x7f0000e1d000/0x3000)=nil, 0x930, 0x2, 0x404c111, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0x48) r6 = openat$kvm(0x0, &(0x7f0000000400), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r8 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r8, 0x4010aeac, &(0x7f0000000140)=@arm64_fw={0x6030020000140000, &(0x7f0000000180)=0x10001}) close(0xffffffffffffffff) openat$kvm(0x0, &(0x7f0000000380), 0x0, 0x0) 11m49.194197044s ago: executing program 4 (id=386): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x40400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_SET_ONE_REG(r5, 0x4010aeac, &(0x7f0000000240)=@arm64_fw={0x6030000000140000, &(0x7f0000000280)=0x1}) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) r7 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r8 = openat$kvm(0x0, &(0x7f00000002c0), 0x80, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) (async) r10 = ioctl$KVM_GET_STATS_FD_cpu(r6, 0xaece) ioctl$KVM_GET_REGS(r10, 0x8360ae81, &(0x7f0000000500)) (async) ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r9, 0x4068aea3, 0x0) (async) syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil) (async) r11 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000300)={0x0, &(0x7f0000000340)=[@mrs={0xbe, 0x18, {0x603000000013c038}}], 0x18}, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) (async) r12 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r13 = mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, r12, 0xe, 0xbae7c8efa16ae15d, r11, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r5, 0x4004ae8b, &(0x7f0000000480)={0x5c, "be53068f6c682046d3f5c6b26ce767268d69cc7e27d228fc305d3c68d42573605a4d9c417a737ec6099e2094860ef60c923a5c8643d26b09265d0f653336c93069434c54fe4d0c84aec5d69d6c3de74f176f6d2323774a8f217cbc05"}) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(r13, 0x20, &(0x7f0000000380)="37e68986ad644f5dc57bbc1ff382863b67f3eee57a32ec911d95f88f3dd8ea716e4a29cefbd440b2ecf83f57baf33b0c97182970a47ef45c954e42f2055384921830f6e273d2eb30", 0x0, 0x2a2019ac5ed2a1ef) syz_memcpy_off$KVM_EXIT_HYPERCALL(r13, 0x20, &(0x7f0000000400)="746abf250f7959c813e4adfb369b808022e69fe80cfadce4a1259e77bab54ac9749537b3d016bb7f745a6e22d2f9ff443f19467748a3fe02c239457600", 0x0, 0xfffffffffffffec5) r14 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f00000001c0)) (async) r15 = syz_kvm_add_vcpu$arm64(r14, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x18, {"7f2003d5"}}], 0x18}, 0x0, 0x0) ioctl$KVM_RUN(r15, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000100)={0x0, 0x81}) 11m46.012470633s ago: executing program 5 (id=387): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000340)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r4, 0x4010aeab, &(0x7f0000000380)=@riscv64_csr={0x8030000000300000, 0x0}) ioctl$KVM_GET_ONE_REG(r4, 0x4010aeab, &(0x7f0000000400)=@riscv64_core={0x8030000000200012, &(0x7f00000003c0)=0xd7}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r6, 0x4068aea3, &(0x7f00000000c0)={0xdf, 0x0, 0x20000}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r7 = openat$kvm(0x0, &(0x7f0000000200), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x29) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_IRQFD(r8, 0x4020ae76, &(0x7f00000002c0)={0xffffffffffffffff, 0x2, 0x3}) r9 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x4) ioctl$KVM_ARM_VCPU_INIT(r9, 0x4020aeae, &(0x7f0000000140)={0x5, 0x8}) ioctl$KVM_SET_ONE_REG(r9, 0x4010aeac, &(0x7f0000000180)=@arm64_sys={0x603000000013c4f6, &(0x7f00000001c0)}) write$eventfd(0xffffffffffffffff, &(0x7f0000000240)=0xffffff7f, 0xffffffffffffffae) close(0x4) close(0x5) r10 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) syz_kvm_vgic_v3_setup(r11, 0x2, 0x100) close(r11) r12 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r12) syz_kvm_vgic_v3_setup(r6, 0x3, 0x200) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x30) 11m37.991306356s ago: executing program 4 (id=388): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) (async) ioctl$KVM_ARM_VCPU_FINALIZE(r0, 0x4004aec2, &(0x7f0000000000)=0x7) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x22) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000bfe000/0x400000)=nil) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x8000, 0x1}) (async) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000440)={0x0, &(0x7f0000000080)=[@code={0xa, 0x9c, {"000000b2806d95d200a0b0f2410180d2220080d2230180d2840180d2020000d4406382d200e0b0f2c10180d2420080d2230180d2040080d2020000d4000028d5206b9dd20080b8f2610180d2820180d2630080d2640080d2020000d400b8a17e00ca93d200c0b8f2610080d2c20180d2e30080d2640080d2020000d400a0000c008008d50004002f"}}, @mrs={0xbe, 0x18, {0x603000000013c110}}, @smc={0x1e, 0x40, {0x4000000, [0x35, 0x3, 0x6, 0x23, 0xfffffffffffffffe]}}, @hvc={0x32, 0x40, {0x84000053, [0x7ff, 0x684, 0x8000000000000000, 0x1, 0x4]}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x98, 0x200, 0x1}}, @hvc={0x32, 0x40, {0x80, [0x1, 0x5, 0x100, 0x1, 0x2]}}, @its_setup={0x82, 0x28, {0x1, 0x1, 0x29a}}, @code={0xa, 0x6c, {"000008d50010204e000008d5007008d500ca88d200a0b0f2410080d2220080d2430180d2c40180d2020000d400a0df0d0020ff0d007008d5c0cf99d20020b8f2a10080d2620180d2a30080d2640080d2020000d4000008d5"}}, @code={0xa, 0xcc, {"60328cd20080b8f2210080d2820180d2030080d2840080d2020000d40000619e604691d20000b8f2410080d2420080d2430180d2640080d2020000d40080ff0d406c9bd20060b0f2410180d2020180d2e30180d2a40180d2020000d4e08292d200c0b0f2610180d2420080d2e30180d2040180d2020000d4008089d20000b0f2010180d2820180d2830180d2640180d2020000d4000028d5000008d5203f9cd20020b8f2a10080d2e20080d2630080d2640080d2020000d4"}}, @mrs={0xbe, 0x18, {0x603000000013c4f1}}, @svc={0x122, 0x40, {0xc4000007, [0xfffffffffffffffc, 0x8, 0x1, 0x6000000000000000, 0x401]}}, @memwrite={0x6e, 0x30, @generic={0x3000, 0x8f9, 0xffff, 0x1}}], 0x38c}, &(0x7f0000000480)=[@featur1={0x1, 0x2}], 0x1) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f00000004c0)={0x1ff, 0x0, &(0x7f0000ffe000/0x1000)=nil}) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000540)=@riscv64_f={0x8020000005000012, &(0x7f0000000500)}) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f0000000580)={0x1, 0x8000000, 0x6}) (async) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000005c0)={0x3, 0x0, [{0x8, 0x4, 0x0, 0x0, @adapter={0x6, 0xc, 0x1000, 0x7fffffff, 0x1ff}}, {0xe, 0x4, 0x1, 0x0, @adapter={0x3, 0x9, 0x81, 0x4, 0x8001}}, {0x4c8, 0x1, 0x1, 0x0, @irqchip={0xe4, 0x1}}]}) (async) r4 = ioctl$KVM_GET_STATS_FD_cpu(r3, 0xaece) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000680)={0xa, 0xffffffffffffffff, 0x1}) (async) ioctl$KVM_CAP_ARM_INJECT_SERROR_ESR(r4, 0x4068aea3, &(0x7f00000006c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000740)={0x10004, 0x6, 0x30000, 0x1000, &(0x7f0000ce7000/0x1000)=nil}) (async) close(r1) syz_kvm_vgic_v3_setup(r1, 0x2, 0x20) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0), 0x10800, 0x0) syz_kvm_vgic_v3_setup(r1, 0x1, 0x2e0) ioctl$KVM_ARM_SET_COUNTER_OFFSET(r1, 0x4010aeb5, &(0x7f0000000800)={0xfffffffffffffffb, 0x10000}) (async) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x18) ioctl$KVM_IRQ_LINE_STATUS(r6, 0xc008ae67, &(0x7f0000000840)={0x8, 0x100}) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x33) ioctl$KVM_CAP_ARM_MTE(r7, 0x4068aea3, &(0x7f0000000880)) (async) ioctl$KVM_CAP_HALT_POLL(r3, 0x4068aea3, &(0x7f0000000900)={0xb6, 0x0, 0x8001}) ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f0000000980)={0xb6, 0x0, 0x6}) (async) ioctl$KVM_RESET_DIRTY_RINGS(r5, 0xaec7) (async) close(r0) (async) ioctl$KVM_GET_SREGS(r0, 0x8000ae83, &(0x7f0000000a00)) 10m59.002003459s ago: executing program 36 (id=387): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000340)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r4, 0x4010aeab, &(0x7f0000000380)=@riscv64_csr={0x8030000000300000, 0x0}) ioctl$KVM_GET_ONE_REG(r4, 0x4010aeab, &(0x7f0000000400)=@riscv64_core={0x8030000000200012, &(0x7f00000003c0)=0xd7}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r6, 0x4068aea3, &(0x7f00000000c0)={0xdf, 0x0, 0x20000}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r7 = openat$kvm(0x0, &(0x7f0000000200), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x29) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_IRQFD(r8, 0x4020ae76, &(0x7f00000002c0)={0xffffffffffffffff, 0x2, 0x3}) r9 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x4) ioctl$KVM_ARM_VCPU_INIT(r9, 0x4020aeae, &(0x7f0000000140)={0x5, 0x8}) ioctl$KVM_SET_ONE_REG(r9, 0x4010aeac, &(0x7f0000000180)=@arm64_sys={0x603000000013c4f6, &(0x7f00000001c0)}) write$eventfd(0xffffffffffffffff, &(0x7f0000000240)=0xffffff7f, 0xffffffffffffffae) close(0x4) close(0x5) r10 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) syz_kvm_vgic_v3_setup(r11, 0x2, 0x100) close(r11) r12 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r12) syz_kvm_vgic_v3_setup(r6, 0x3, 0x200) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x30) 10m49.611166739s ago: executing program 37 (id=388): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) (async) ioctl$KVM_ARM_VCPU_FINALIZE(r0, 0x4004aec2, &(0x7f0000000000)=0x7) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x22) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000bfe000/0x400000)=nil) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x8000, 0x1}) (async) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000440)={0x0, &(0x7f0000000080)=[@code={0xa, 0x9c, {"000000b2806d95d200a0b0f2410180d2220080d2230180d2840180d2020000d4406382d200e0b0f2c10180d2420080d2230180d2040080d2020000d4000028d5206b9dd20080b8f2610180d2820180d2630080d2640080d2020000d400b8a17e00ca93d200c0b8f2610080d2c20180d2e30080d2640080d2020000d400a0000c008008d50004002f"}}, @mrs={0xbe, 0x18, {0x603000000013c110}}, @smc={0x1e, 0x40, {0x4000000, [0x35, 0x3, 0x6, 0x23, 0xfffffffffffffffe]}}, @hvc={0x32, 0x40, {0x84000053, [0x7ff, 0x684, 0x8000000000000000, 0x1, 0x4]}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x98, 0x200, 0x1}}, @hvc={0x32, 0x40, {0x80, [0x1, 0x5, 0x100, 0x1, 0x2]}}, @its_setup={0x82, 0x28, {0x1, 0x1, 0x29a}}, @code={0xa, 0x6c, {"000008d50010204e000008d5007008d500ca88d200a0b0f2410080d2220080d2430180d2c40180d2020000d400a0df0d0020ff0d007008d5c0cf99d20020b8f2a10080d2620180d2a30080d2640080d2020000d4000008d5"}}, @code={0xa, 0xcc, {"60328cd20080b8f2210080d2820180d2030080d2840080d2020000d40000619e604691d20000b8f2410080d2420080d2430180d2640080d2020000d40080ff0d406c9bd20060b0f2410180d2020180d2e30180d2a40180d2020000d4e08292d200c0b0f2610180d2420080d2e30180d2040180d2020000d4008089d20000b0f2010180d2820180d2830180d2640180d2020000d4000028d5000008d5203f9cd20020b8f2a10080d2e20080d2630080d2640080d2020000d4"}}, @mrs={0xbe, 0x18, {0x603000000013c4f1}}, @svc={0x122, 0x40, {0xc4000007, [0xfffffffffffffffc, 0x8, 0x1, 0x6000000000000000, 0x401]}}, @memwrite={0x6e, 0x30, @generic={0x3000, 0x8f9, 0xffff, 0x1}}], 0x38c}, &(0x7f0000000480)=[@featur1={0x1, 0x2}], 0x1) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f00000004c0)={0x1ff, 0x0, &(0x7f0000ffe000/0x1000)=nil}) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000540)=@riscv64_f={0x8020000005000012, &(0x7f0000000500)}) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f0000000580)={0x1, 0x8000000, 0x6}) (async) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000005c0)={0x3, 0x0, [{0x8, 0x4, 0x0, 0x0, @adapter={0x6, 0xc, 0x1000, 0x7fffffff, 0x1ff}}, {0xe, 0x4, 0x1, 0x0, @adapter={0x3, 0x9, 0x81, 0x4, 0x8001}}, {0x4c8, 0x1, 0x1, 0x0, @irqchip={0xe4, 0x1}}]}) (async) r4 = ioctl$KVM_GET_STATS_FD_cpu(r3, 0xaece) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000680)={0xa, 0xffffffffffffffff, 0x1}) (async) ioctl$KVM_CAP_ARM_INJECT_SERROR_ESR(r4, 0x4068aea3, &(0x7f00000006c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000740)={0x10004, 0x6, 0x30000, 0x1000, &(0x7f0000ce7000/0x1000)=nil}) (async) close(r1) syz_kvm_vgic_v3_setup(r1, 0x2, 0x20) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0), 0x10800, 0x0) syz_kvm_vgic_v3_setup(r1, 0x1, 0x2e0) ioctl$KVM_ARM_SET_COUNTER_OFFSET(r1, 0x4010aeb5, &(0x7f0000000800)={0xfffffffffffffffb, 0x10000}) (async) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x18) ioctl$KVM_IRQ_LINE_STATUS(r6, 0xc008ae67, &(0x7f0000000840)={0x8, 0x100}) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x33) ioctl$KVM_CAP_ARM_MTE(r7, 0x4068aea3, &(0x7f0000000880)) (async) ioctl$KVM_CAP_HALT_POLL(r3, 0x4068aea3, &(0x7f0000000900)={0xb6, 0x0, 0x8001}) ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f0000000980)={0xb6, 0x0, 0x6}) (async) ioctl$KVM_RESET_DIRTY_RINGS(r5, 0xaec7) (async) close(r0) (async) ioctl$KVM_GET_SREGS(r0, 0x8000ae83, &(0x7f0000000a00)) 2m43.797615257s ago: executing program 6 (id=391): r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000240)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000280)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f00000002c0)=0x8080000}) ioctl$KVM_GET_DEVICE_ATTR(r4, 0x4018aee2, &(0x7f0000000380)=@attr_arm64={0x0, 0x8, 0x4, 0x0}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0xc8}) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000200)={0x2710, 0x1, 0x1ff8, 0x1000, &(0x7f0000000000/0x1000)=nil}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_IRQ_LINE(r5, 0x4008ae61, &(0x7f0000000100)={0x8, 0x5}) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f00000000c0)={0x7, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r8, 0x400454ca, 0x100002f) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, 0x0) r9 = openat$kvm(0x0, &(0x7f00000003c0), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_ARM_VCPU_INIT(0xffffffffffffffff, 0x4020aeae, 0x0) ioctl$KVM_ARM_SET_COUNTER_OFFSET(r10, 0x4010aeb5, &(0x7f0000000400)={0x1}) r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000bff000/0x400000)=nil) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4000ae84, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee1, &(0x7f00000004c0)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000480)={0x7fff, 0xd, 0x1}}) syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000440)={0x0, 0x0}, 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil) r13 = syz_kvm_add_vcpu$arm64(r0, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@mrs={0xbe, 0x18, {0x603000000013dce5}}], 0x18}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r13, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) ioctl$KVM_RUN(r13, 0xae80, 0x0) 2m15.031781434s ago: executing program 6 (id=392): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0xfffa7000, 0x200000, &(0x7f0000200000/0x200000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0xfffa7000, 0x200000, &(0x7f0000200000/0x200000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x10004, 0x3, 0x6000, 0x1000, &(0x7f0000d3f000/0x1000)=nil}) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) 2m14.814580939s ago: executing program 7 (id=393): mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1, 0x16831, 0xffffffffffffffff, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000100), 0x6819ed28d58b2b5d, 0x0) (async) openat$kvm(0xffffff9c, &(0x7f0000000100), 0x6819ed28d58b2b5d, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000040)={0x0, &(0x7f00000000c0)=[@mrs={0xbe, 0x18, {0x603000000013c006}}], 0x18}, 0x0, 0x0) (async) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000040)={0x0, &(0x7f00000000c0)=[@mrs={0xbe, 0x18, {0x603000000013c006}}], 0x18}, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(r1, 0x4010aeab, 0x0) 2m1.265918593s ago: executing program 6 (id=394): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$arm64(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000bfe000/0x400000)=nil, &(0x7f00000000c0)=[{0x0, &(0x7f0000000100)=[@hvc={0x32, 0x40, {0x8600ff01, [0x7, 0x9, 0x8, 0xfffffffffffffff8, 0x100]}}], 0x40}], 0x1, 0x0, 0x0, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000bfe000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x2}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x1, 0x80000, 0x10000, 0x20, 0x0, 0x2}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000200)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000240)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000280)=0x8080000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000300)={0x4, 0x1, 0x0, 0x1000, &(0x7f0000ee6000/0x1000)=nil}) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000340)={0x0, &(0x7f0000000380)=[@msr={0x14, 0x20, {0x603000000013d801, 0x81}}], 0x20}, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0x4b49, 0x0) r10 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae03, 0xaa) 2m0.762063611s ago: executing program 7 (id=395): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x8280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3) openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_ARM_VCPU_INIT(r4, 0x4020aeae, &(0x7f0000000300)={0x5, 0x18}) ioctl$KVM_ARM_VCPU_FINALIZE(r4, 0x4004aec2, &(0x7f0000000980)=0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_ARM_VCPU_INIT(r4, 0x4020aeae, &(0x7f00000009c0)={0x5, 0x18}) (async) syz_kvm_vgic_v3_setup(r3, 0x3, 0x180) mmap$KVM_VCPU(&(0x7f0000c12000/0x3000)=nil, 0x930, 0x2000000, 0xaf832, 0xffffffffffffffff, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r5, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000040)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r5, 0x0) r7 = eventfd2(0x0, 0x80803) close(r7) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x1a17f2, 0x1f01) write$eventfd(r7, &(0x7f0000000100)=0x5, 0xfffffde3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x8200, 0x0) mmap$KVM_VCPU(&(0x7f0000eba000/0x4000)=nil, 0x0, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0) ioctl$KVM_CAP_HALT_POLL(0xffffffffffffffff, 0x4068aea3, 0x0) openat$kvm(0x0, 0x0, 0x400000, 0x0) openat$kvm(0x0, 0x0, 0x210ac3, 0x0) r8 = openat$kvm(0x0, &(0x7f0000000180), 0x40a200, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r10, &(0x7f00000001c0)={0x0, &(0x7f0000000200)=[@its_setup={0x82, 0x28, {0x0, 0x4, 0x2}}], 0x28}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r9, 0x1, 0x100) 1m38.681169138s ago: executing program 7 (id=396): r0 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000006, 0x10, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32) (async, rerun: 64) r1 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) (rerun: 64) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32) 1m37.598177104s ago: executing program 6 (id=397): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x24) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0xfffffffffffffffe}}, @msr={0x14, 0x20, {0x603000000013dce1, 0x7}}], 0x40}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r6, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) ioctl$KVM_ARM_VCPU_INIT(0xffffffffffffffff, 0x4020aeae, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r7, 0x4018aee1, &(0x7f00000011c0)=@attr_set_pmu={0x0, 0x0, 0x3, &(0x7f00000000c0)=0x8}) 1m23.542921579s ago: executing program 7 (id=398): r0 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@svc={0x122, 0x40, {0x8000, [0x6, 0x0, 0x6, 0x100000001, 0x8]}}, @its_setup={0x82, 0x28, {0x0, 0x1, 0x7d}}, @irq_setup={0x46, 0x18, {0x1, 0x103}}, @its_setup={0x82, 0x28, {0x0, 0x1, 0x2be}}, @irq_setup={0x46, 0x18, {0x2, 0x116}}], 0xc0}, &(0x7f0000000100)=[@featur2={0x1, 0x80}], 0x1) ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead) ioctl$KVM_GET_MP_STATE(r0, 0x8004ae98, &(0x7f0000000140)) r1 = ioctl$KVM_GET_STATS_FD_cpu(r0, 0xaece) ioctl$KVM_ARM_PREFERRED_TARGET(r0, 0x8020aeaf, &(0x7f0000000180)) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f0000000200)=@riscv64_aia_csr={0x8030000003010005, &(0x7f00000001c0)=0x8}) ioctl$KVM_ARM_VCPU_INIT(r0, 0x4020aeae, &(0x7f0000000240)={0x2, 0x80}) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000280)) ioctl$KVM_GET_MP_STATE(r0, 0x8004ae98, &(0x7f00000002c0)) ioctl$KVM_ARM_VCPU_FINALIZE(r0, 0x4004aec2, &(0x7f0000000300)=0x5) r2 = eventfd2(0x9, 0x80000) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8000ae83, &(0x7f0000000340)) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000480)={0x0, 0x1000, 0x2, r2, 0x2}) r3 = eventfd2(0x81, 0x800) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000004c0)={r2, 0xffff8001, 0x4, r3}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) r6 = mmap$KVM_VCPU(&(0x7f0000000000/0xb000)=nil, r5, 0x4, 0x810, r4, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000500)={0xc8, 0x5}) ioctl$KVM_KVMCLOCK_CTRL(r4, 0xaead) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x26) ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r1, 0x4068aea3, &(0x7f0000000540)={0xe4, 0x0, 0x6}) munmap$KVM_VCPU(r6, 0x81) ioctl$KVM_ARM_SET_DEVICE_ADDR(r4, 0x4010aeab, &(0x7f00000005c0)={0x7, 0xeeee8000}) r7 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$KVM_ARM_VCPU_INIT(r0, 0x4020aeae, &(0x7f0000000600)={0x2, 0x14}) syz_kvm_vgic_v3_setup(r7, 0x0, 0x1a0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r1, 0x4018aee1, &(0x7f0000000680)=@attr_set_pmu={0x0, 0x0, 0x3, &(0x7f0000000640)=0x4}) ioctl$KVM_SET_ONE_REG(r7, 0x4010aeac, &(0x7f0000000700)=@riscv64_sbi_sta={0x803000000a000001, &(0x7f00000006c0)=0x3ff}) 1m18.921272797s ago: executing program 6 (id=399): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x0, 0x0}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) r3 = ioctl$KVM_CREATE_VM(r2, 0x894c, 0x0) close(r3) ioctl$KVM_CREATE_VCPU(r3, 0xb704, 0x0) 1m8.843212011s ago: executing program 7 (id=400): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x1fe, 0x3, 0xdddd0000, 0x1000, &(0x7f0000007000/0x1000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x1fe, 0x3, 0xdddd0000, 0x1000, &(0x7f0000007000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1f9, 0x3, 0x100000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1f9, 0x3, 0x100000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xeeee8000, 0x1000, &(0x7f0000f15000/0x1000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xeeee8000, 0x1000, &(0x7f0000f15000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x1fd, 0x0, 0x5000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000700)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0xfffffffffffffe60) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x101ff, 0x7, 0x1000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 1m2.687678208s ago: executing program 6 (id=401): openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0) (async) r0 = openat$kvm(0x0, &(0x7f00000001c0), 0x0, 0x0) (async) r1 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000200)={0x0, &(0x7f0000000240)=[@hvc={0x32, 0x40, {0xc5000021, [0x8001, 0xffffffffffff449b, 0xffffffffffffffff, 0x2, 0xfffffffffffffff9]}}], 0x40}, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x401c5820, 0x20000000) (async, rerun: 64) r2 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x33) (async, rerun: 32) r5 = mmap$KVM_VCPU(&(0x7f0000dd4000/0x3000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) (rerun: 32) syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, 0x0, 0x0, 0x0) (async) r6 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x0, 0x40032, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_SET_DEVICE_ATTR_vm(r7, 0x8040aeb6, 0x0) (async, rerun: 64) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (rerun: 64) r9 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r8, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r9, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29) (async) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x0, 0x300000e, 0x11, r1, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b6565d2f1, 0xffffffffffffffff, 0x0) (async, rerun: 64) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000000, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) (rerun: 64) ioctl$KVM_GET_DIRTY_LOG(r7, 0x4010ae42, &(0x7f0000000280)={0x101ff, 0x0, &(0x7f0000007000/0x2000)=nil}) r10 = eventfd2(0x0, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x302, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) (async, rerun: 64) r13 = eventfd2(0x8, 0x80800) (rerun: 64) ioctl$KVM_IOEVENTFD(r12, 0x4040ae79, &(0x7f0000000300)={0x8000000000000000, 0xeeef0000, 0x0, r13}) (async, rerun: 64) ioctl$KVM_IOEVENTFD(r12, 0x4040ae79, &(0x7f0000000340)={0x6, 0x0, 0x0, r13, 0x4}) (async, rerun: 64) close(r10) (async, rerun: 32) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) (rerun: 32) 50.751024679s ago: executing program 7 (id=402): r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0x0, &(0x7f0000000000), 0x12000, 0x0) (async) r2 = openat$kvm(0x0, &(0x7f0000000000), 0x12000, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) r8 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r7, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f00000001c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0xffffffffffffffa7) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r7, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r7, 0x0) eventfd2(0xd, 0x1) (async) r9 = eventfd2(0xd, 0x1) close(r9) openat$kvm(0xffffff9c, &(0x7f0000000280), 0xa00f2, 0x0) (async) openat$kvm(0xffffff9c, &(0x7f0000000280), 0xa00f2, 0x0) write$eventfd(r9, 0x0, 0x500) r10 = eventfd2(0x0, 0x0) close(r10) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000008000/0x3000)=nil, 0x930, 0x2000004, 0x2011, r10, 0x0) syz_kvm_setup_cpu$arm64(r3, r4, &(0x7f0000b74000/0x400000)=nil, &(0x7f0000000040)=[{0x0, &(0x7f0000000100)=[@memwrite={0x6e, 0x30, @generic={0xeeee8000, 0xc10, 0xfffffffffffffffd, 0x3}}, @smc={0x1e, 0x40, {0x3f000000, [0xffffffff, 0x5, 0x8000000000000000, 0x9, 0x6]}}, @mrs={0xbe, 0x18, {0x603000000013e703}}], 0x88}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$arm64(r3, r4, &(0x7f0000b74000/0x400000)=nil, &(0x7f0000000040)=[{0x0, &(0x7f0000000100)=[@memwrite={0x6e, 0x30, @generic={0xeeee8000, 0xc10, 0xfffffffffffffffd, 0x3}}, @smc={0x1e, 0x40, {0x3f000000, [0xffffffff, 0x5, 0x8000000000000000, 0x9, 0x6]}}, @mrs={0xbe, 0x18, {0x603000000013e703}}], 0x88}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1, 0x16831, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) 14.150653748s ago: executing program 38 (id=401): openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0) (async) r0 = openat$kvm(0x0, &(0x7f00000001c0), 0x0, 0x0) (async) r1 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000200)={0x0, &(0x7f0000000240)=[@hvc={0x32, 0x40, {0xc5000021, [0x8001, 0xffffffffffff449b, 0xffffffffffffffff, 0x2, 0xfffffffffffffff9]}}], 0x40}, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x401c5820, 0x20000000) (async, rerun: 64) r2 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x33) (async, rerun: 32) r5 = mmap$KVM_VCPU(&(0x7f0000dd4000/0x3000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) (rerun: 32) syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, 0x0, 0x0, 0x0) (async) r6 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x0, 0x40032, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_SET_DEVICE_ATTR_vm(r7, 0x8040aeb6, 0x0) (async, rerun: 64) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (rerun: 64) r9 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r8, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r9, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29) (async) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x0, 0x300000e, 0x11, r1, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b6565d2f1, 0xffffffffffffffff, 0x0) (async, rerun: 64) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000000, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) (rerun: 64) ioctl$KVM_GET_DIRTY_LOG(r7, 0x4010ae42, &(0x7f0000000280)={0x101ff, 0x0, &(0x7f0000007000/0x2000)=nil}) r10 = eventfd2(0x0, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x302, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) (async, rerun: 64) r13 = eventfd2(0x8, 0x80800) (rerun: 64) ioctl$KVM_IOEVENTFD(r12, 0x4040ae79, &(0x7f0000000300)={0x8000000000000000, 0xeeef0000, 0x0, r13}) (async, rerun: 64) ioctl$KVM_IOEVENTFD(r12, 0x4040ae79, &(0x7f0000000340)={0x6, 0x0, 0x0, r13, 0x4}) (async, rerun: 64) close(r10) (async, rerun: 32) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) (rerun: 32) 0s ago: executing program 39 (id=402): r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0x0, &(0x7f0000000000), 0x12000, 0x0) (async) r2 = openat$kvm(0x0, &(0x7f0000000000), 0x12000, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) r8 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r7, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f00000001c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0xffffffffffffffa7) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r7, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r7, 0x0) eventfd2(0xd, 0x1) (async) r9 = eventfd2(0xd, 0x1) close(r9) openat$kvm(0xffffff9c, &(0x7f0000000280), 0xa00f2, 0x0) (async) openat$kvm(0xffffff9c, &(0x7f0000000280), 0xa00f2, 0x0) write$eventfd(r9, 0x0, 0x500) r10 = eventfd2(0x0, 0x0) close(r10) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000008000/0x3000)=nil, 0x930, 0x2000004, 0x2011, r10, 0x0) syz_kvm_setup_cpu$arm64(r3, r4, &(0x7f0000b74000/0x400000)=nil, &(0x7f0000000040)=[{0x0, &(0x7f0000000100)=[@memwrite={0x6e, 0x30, @generic={0xeeee8000, 0xc10, 0xfffffffffffffffd, 0x3}}, @smc={0x1e, 0x40, {0x3f000000, [0xffffffff, 0x5, 0x8000000000000000, 0x9, 0x6]}}, @mrs={0xbe, 0x18, {0x603000000013e703}}], 0x88}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$arm64(r3, r4, &(0x7f0000b74000/0x400000)=nil, &(0x7f0000000040)=[{0x0, &(0x7f0000000100)=[@memwrite={0x6e, 0x30, @generic={0xeeee8000, 0xc10, 0xfffffffffffffffd, 0x3}}, @smc={0x1e, 0x40, {0x3f000000, [0xffffffff, 0x5, 0x8000000000000000, 0x9, 0x6]}}, @mrs={0xbe, 0x18, {0x603000000013e703}}], 0x88}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1, 0x16831, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) kernel console output (not intermixed with test programs): [ 376.272350][ T24] audit: type=1400 audit(375.440:74): avc: denied { read } for pid=3218 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 382.876383][ T24] audit: type=1400 audit(382.060:75): avc: denied { write } for pid=3275 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 386.796317][ T24] audit: type=1400 audit(385.980:76): avc: denied { write } for pid=3278 comm="rm" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 389.865265][ T3218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.723612][ T24] audit: type=1400 audit(397.900:77): avc: denied { write } for pid=3282 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 403.283950][ T24] audit: type=1400 audit(402.430:78): avc: denied { write } for pid=3285 comm="rm" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 414.423555][ T24] audit: type=1400 audit(413.580:79): avc: denied { write } for pid=3291 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 417.988690][ T24] audit: type=1400 audit(417.170:80): avc: denied { write } for pid=3294 comm="rm" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 427.613729][ T24] audit: type=1400 audit(426.790:81): avc: denied { write } for pid=3299 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 431.192269][ T24] audit: type=1400 audit(430.360:82): avc: denied { write } for pid=3302 comm="rm" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 433.480346][ T3218] eql: remember to turn off Van-Jacobson compression on your slave devices [ 442.662288][ T24] audit: type=1400 audit(441.840:83): avc: denied { write } for pid=3308 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 446.232420][ T24] audit: type=1400 audit(445.380:84): avc: denied { write } for pid=3311 comm="rm" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 454.479296][ T24] audit: type=1400 audit(453.660:85): avc: denied { write } for pid=3314 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 459.199373][ T24] audit: type=1400 audit(458.380:86): avc: denied { write } for pid=3317 comm="rm" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 466.215547][ T24] audit: type=1400 audit(465.390:87): avc: denied { write } for pid=3320 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 469.722290][ T24] audit: type=1400 audit(468.900:88): avc: denied { write } for pid=3323 comm="rm" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 478.766415][ T24] audit: type=1400 audit(477.910:89): avc: denied { write } for pid=3327 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 482.543416][ T24] audit: type=1400 audit(481.720:90): avc: denied { write } for pid=3330 comm="rm" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 489.402647][ T24] audit: type=1400 audit(488.540:91): avc: denied { write } for pid=3333 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 492.962346][ T24] audit: type=1400 audit(492.130:92): avc: denied { write } for pid=3336 comm="rm" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 507.092269][ T24] audit: type=1400 audit(506.270:93): avc: denied { write } for pid=3343 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 510.873952][ T24] audit: type=1400 audit(510.040:94): avc: denied { write } for pid=3346 comm="rm" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 527.254012][ T24] audit: type=1400 audit(526.400:95): avc: denied { write } for pid=3352 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 530.873546][ T24] audit: type=1400 audit(530.030:96): avc: denied { write } for pid=3355 comm="rm" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 549.975059][ T24] audit: type=1400 audit(549.160:97): avc: denied { write } for pid=3363 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 555.084306][ T24] audit: type=1400 audit(554.230:98): avc: denied { write } for pid=3366 comm="rm" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 561.596433][ T24] audit: type=1400 audit(560.780:99): avc: denied { write } for pid=3370 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:10434' (ED25519) to the list of known hosts. [ 565.503659][ T24] audit: type=1400 audit(564.680:100): avc: denied { write } for pid=3374 comm="rm" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 566.852308][ T24] audit: type=1400 audit(566.020:101): avc: denied { name_bind } for pid=3375 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 569.463895][ T24] audit: type=1400 audit(568.630:102): avc: denied { execute } for pid=3377 comm="sh" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 569.466840][ T24] audit: type=1400 audit(568.640:103): avc: denied { execute_no_trans } for pid=3377 comm="sh" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 606.256788][ T24] audit: type=1400 audit(605.440:104): avc: denied { mounton } for pid=3377 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 606.295394][ T24] audit: type=1400 audit(605.480:105): avc: denied { mount } for pid=3377 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 606.374362][ T3377] cgroup: Unknown subsys name 'net' [ 606.429896][ T24] audit: type=1400 audit(605.610:106): avc: denied { unmount } for pid=3377 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 606.816412][ T3377] cgroup: Unknown subsys name 'cpuset' [ 606.929483][ T3377] cgroup: Unknown subsys name 'rlimit' [ 607.717177][ T24] audit: type=1400 audit(606.900:107): avc: denied { setattr } for pid=3377 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 607.738242][ T24] audit: type=1400 audit(606.920:108): avc: denied { mounton } for pid=3377 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 607.764325][ T24] audit: type=1400 audit(606.940:109): avc: denied { mount } for pid=3377 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 608.736779][ T3381] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 608.755566][ T24] audit: type=1400 audit(607.920:110): avc: denied { relabelto } for pid=3381 comm="mkswap" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 608.777604][ T24] audit: type=1400 audit(607.960:111): avc: denied { write } for pid=3381 comm="mkswap" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 608.963798][ T24] audit: type=1400 audit(608.140:112): avc: denied { read } for pid=3377 comm="syz-executor" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 608.969674][ T24] audit: type=1400 audit(608.150:113): avc: denied { open } for pid=3377 comm="syz-executor" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 609.037482][ T3377] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 662.813617][ T24] audit: type=1400 audit(661.990:114): avc: denied { execmem } for pid=3382 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 666.228400][ T24] audit: type=1400 audit(665.410:116): avc: denied { open } for pid=3385 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 666.245966][ T24] audit: type=1400 audit(665.390:115): avc: denied { read } for pid=3384 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 666.316092][ T24] audit: type=1400 audit(665.480:117): avc: denied { mounton } for pid=3385 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 666.519438][ T24] audit: type=1400 audit(665.700:118): avc: denied { module_request } for pid=3385 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 666.575001][ T24] audit: type=1400 audit(665.750:119): avc: denied { module_request } for pid=3384 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 667.469381][ T24] audit: type=1400 audit(666.640:120): avc: denied { sys_module } for pid=3385 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 673.818430][ T24] audit: type=1400 audit(672.990:121): avc: denied { create } for pid=3385 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 674.409672][ T24] audit: type=1400 audit(673.590:122): avc: denied { write } for pid=3384 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 674.568420][ T3384] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 674.595998][ T3385] rxe_eth0 speed is unknown, defaulting to 1000 [ 674.647587][ T24] audit: type=1400 audit(673.820:123): avc: denied { read } for pid=3384 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 674.699487][ T3385] rxe_eth0 speed is unknown, defaulting to 1000 [ 674.814850][ T3385] rxe_eth0 speed is unknown, defaulting to 1000 [ 682.814673][ T3287] rxe_eth0 speed is unknown, defaulting to 1000 [ 682.832324][ T3385] infiniband rxe0: set active [ 682.832783][ T3385] infiniband rxe0: added rxe_eth0 [ 684.159009][ T3385] RDS/IB: rxe0: added [ 684.177935][ T3385] smc: adding ib device rxe0 with port count 1 [ 684.179353][ T3385] smc: ib device rxe0 port 1 has no pnetid [ 684.183844][ T3287] rxe_eth0 speed is unknown, defaulting to 1000 [ 684.286272][ T3385] rxe_eth0 speed is unknown, defaulting to 1000 [ 691.479909][ T3385] rxe_eth0 speed is unknown, defaulting to 1000 [ 693.355889][ T3287] rxe_eth0 speed is unknown, defaulting to 1000 [ 696.537315][ T24] audit: type=1400 audit(695.720:124): avc: denied { write } for pid=3426 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 701.213376][ T24] audit: type=1400 audit(700.380:125): avc: denied { write } for pid=3432 comm="rm" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 701.320388][ T3384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 701.763223][ T3384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 716.158052][ T3384] hsr_slave_0: entered promiscuous mode [ 716.198539][ T3384] hsr_slave_1: entered promiscuous mode [ 720.513501][ T3385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 720.685635][ T3385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 723.433974][ T24] audit: type=1400 audit(722.580:126): avc: denied { create } for pid=3384 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 723.434901][ T24] audit: type=1400 audit(722.610:127): avc: denied { write } for pid=3384 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 723.486055][ T24] audit: type=1400 audit(722.660:128): avc: denied { read } for pid=3384 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 723.593533][ T3384] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 723.766428][ T3384] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 723.807234][ T3384] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 723.914091][ T3384] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 723.975928][ T3384] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 724.086863][ T3384] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 724.120524][ T3384] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 724.247520][ T3384] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 733.747316][ T3385] hsr_slave_0: entered promiscuous mode [ 733.768261][ T3385] hsr_slave_1: entered promiscuous mode [ 733.787992][ T3385] debugfs: 'hsr0' already exists in 'hsr' [ 733.789411][ T3385] Cannot create hsr debugfs directory [ 735.920378][ T3384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 741.697995][ T3385] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 741.863905][ T3385] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 741.890422][ T3385] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 742.026528][ T3385] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 742.077542][ T3385] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 742.219388][ T3385] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 742.304325][ T3385] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 742.419742][ T3385] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 755.755382][ T3385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 789.325652][ T3384] veth0_vlan: entered promiscuous mode [ 789.974880][ T3384] veth1_vlan: entered promiscuous mode [ 791.786218][ T3384] veth0_macvtap: entered promiscuous mode [ 792.016849][ T3384] veth1_macvtap: entered promiscuous mode [ 793.919432][ T3496] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.052952][ T3469] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.053674][ T3469] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.054198][ T3469] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.064564][ T24] audit: type=1400 audit(795.240:129): avc: denied { mount } for pid=3384 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 796.178796][ T24] audit: type=1400 audit(795.320:130): avc: denied { mounton } for pid=3384 comm="syz-executor" path="/syzkaller.8nOKuH/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 796.298924][ T24] audit: type=1400 audit(795.480:131): avc: denied { mount } for pid=3384 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 796.463644][ T24] audit: type=1400 audit(795.640:132): avc: denied { mounton } for pid=3384 comm="syz-executor" path="/syzkaller.8nOKuH/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 796.599907][ T24] audit: type=1400 audit(795.780:133): avc: denied { mounton } for pid=3384 comm="syz-executor" path="/syzkaller.8nOKuH/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3770 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 797.085670][ T24] audit: type=1400 audit(796.250:134): avc: denied { unmount } for pid=3384 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 797.225395][ T24] audit: type=1400 audit(796.410:135): avc: denied { mounton } for pid=3384 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1548 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 797.322359][ T24] audit: type=1400 audit(796.480:136): avc: denied { mount } for pid=3384 comm="syz-executor" name="/" dev="gadgetfs" ino=3771 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 800.675778][ T24] audit: type=1400 audit(799.830:137): avc: denied { mounton } for pid=3384 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 800.725705][ T24] audit: type=1400 audit(799.860:138): avc: denied { mount } for pid=3384 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 801.766578][ T3384] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 802.684006][ T24] audit: type=1400 audit(801.850:139): avc: denied { read } for pid=3384 comm="syz-executor" name="loop1" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 802.684785][ T24] audit: type=1400 audit(801.850:140): avc: denied { open } for pid=3384 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 802.689067][ T24] audit: type=1400 audit(801.870:141): avc: denied { ioctl } for pid=3384 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=637 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 809.249180][ T3385] veth0_vlan: entered promiscuous mode [ 809.814496][ T3385] veth1_vlan: entered promiscuous mode [ 810.010824][ T24] audit: type=1400 audit(809.190:142): avc: denied { read } for pid=3554 comm="syz.1.2" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 810.109092][ T24] audit: type=1400 audit(809.290:143): avc: denied { open } for pid=3554 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 810.657099][ T24] audit: type=1400 audit(809.830:144): avc: denied { ioctl } for pid=3554 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 812.154645][ T3385] veth0_macvtap: entered promiscuous mode [ 812.253972][ T24] audit: type=1400 audit(811.340:145): avc: denied { write } for pid=3554 comm="syz.1.2" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 812.707166][ T3385] veth1_macvtap: entered promiscuous mode [ 815.896637][ T3506] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.923319][ T3506] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.923971][ T3506] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.924500][ T3506] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.918721][ T24] audit: type=1400 audit(818.050:146): avc: denied { write } for pid=3559 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 824.100269][ T24] audit: type=1400 audit(823.250:147): avc: denied { execute } for pid=3566 comm="syz.1.3" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=3927 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 826.830385][ T24] audit: type=1400 audit(825.960:148): avc: denied { write } for pid=3568 comm="rm" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 841.984393][ T24] audit: type=1400 audit(841.160:149): avc: denied { append } for pid=3578 comm="syz.0.1" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 848.789256][ T24] audit: type=1400 audit(847.960:150): avc: denied { create } for pid=3585 comm="syz.1.5" anonclass=[kvm-gmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 881.892144][ T24] audit: type=1400 audit(881.010:151): avc: denied { mmap_zero } for pid=3605 comm="syz.1.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 994.057143][ T24] audit: type=1400 audit(993.220:152): avc: denied { setattr } for pid=3676 comm="syz.1.32" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1082.986437][ T3702] rxe_eth0 speed is unknown, defaulting to 1000 [ 1094.047886][ T3710] rxe_eth0 speed is unknown, defaulting to 1000 [ 1135.755218][ T3702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1137.140376][ T3702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1138.650276][ T3496] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1140.018213][ T3496] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.080306][ T3496] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.454533][ T3496] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1146.845053][ T3710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1147.447079][ T3710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1152.985889][ T3496] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1153.140876][ T3496] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1153.193126][ T3496] bond0 (unregistering): Released all slaves [ 1167.484731][ T3496] hsr_slave_0: left promiscuous mode [ 1167.528695][ T3496] hsr_slave_1: left promiscuous mode [ 1167.988537][ T3496] veth1_macvtap: left promiscuous mode [ 1167.989713][ T3496] veth0_macvtap: left promiscuous mode [ 1168.035045][ T3496] veth1_vlan: left promiscuous mode [ 1168.036971][ T3496] veth0_vlan: left promiscuous mode [ 1169.909120][ T24] audit: type=1400 audit(1169.090:153): avc: denied { write } for pid=3767 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1173.522844][ T24] audit: type=1400 audit(1172.680:154): avc: denied { write } for pid=3770 comm="rm" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1184.160460][ T3218] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1186.667985][ T3702] hsr_slave_0: entered promiscuous mode [ 1186.746578][ T3702] hsr_slave_1: entered promiscuous mode [ 1186.843316][ T3702] debugfs: 'hsr0' already exists in 'hsr' [ 1186.843725][ T3702] Cannot create hsr debugfs directory [ 1190.606557][ T3496] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1192.553990][ T3496] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1194.367254][ T3496] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1195.846522][ T3496] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1199.366620][ T3710] hsr_slave_0: entered promiscuous mode [ 1199.429120][ T3710] hsr_slave_1: entered promiscuous mode [ 1199.467379][ T3710] debugfs: 'hsr0' already exists in 'hsr' [ 1199.467753][ T3710] Cannot create hsr debugfs directory [ 1201.907547][ T24] audit: type=1400 audit(1201.090:155): avc: denied { write } for pid=3781 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1207.756359][ T24] audit: type=1400 audit(1206.920:156): avc: denied { write } for pid=3788 comm="rm" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1211.570713][ T3496] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1211.707056][ T3496] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1211.758562][ T3496] bond0 (unregistering): Released all slaves [ 1213.198101][ T3218] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1218.590417][ T3702] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1219.067380][ T3702] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1219.950168][ T24] audit: type=1400 audit(1219.130:157): avc: denied { write } for pid=3792 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1221.248398][ T3702] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1221.459110][ T3702] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1221.608677][ T3702] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1221.966427][ T3702] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1223.304003][ T3702] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1223.536577][ T3702] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1225.332023][ T3496] hsr_slave_0: left promiscuous mode [ 1225.362115][ T3496] hsr_slave_1: left promiscuous mode [ 1225.633313][ T3496] veth1_macvtap: left promiscuous mode [ 1225.634044][ T3496] veth0_macvtap: left promiscuous mode [ 1225.635644][ T3496] veth1_vlan: left promiscuous mode [ 1225.636811][ T3496] veth0_vlan: left promiscuous mode [ 1225.820099][ T24] audit: type=1400 audit(1225.000:158): avc: denied { write } for pid=3796 comm="rm" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1244.096869][ T3710] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1244.464169][ T3710] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1244.530350][ T3710] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1244.880445][ T3710] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1245.059112][ T3710] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1245.396100][ T3710] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1245.516941][ T3710] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1246.049641][ T3710] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1253.464587][ T24] audit: type=1400 audit(1252.630:159): avc: denied { write } for pid=3818 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1260.797519][ T24] audit: type=1400 audit(1259.890:160): avc: denied { write } for pid=3827 comm="rm" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1263.426607][ T3702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1266.480775][ T3218] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1270.350600][ T3710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1280.372784][ T24] audit: type=1400 audit(1279.540:161): avc: denied { write } for pid=3843 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1288.063356][ T24] audit: type=1400 audit(1287.240:162): avc: denied { write } for pid=3851 comm="rm" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1292.899662][ T3218] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1305.400131][ T24] audit: type=1400 audit(1304.580:163): avc: denied { write } for pid=3865 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1312.930347][ T24] audit: type=1400 audit(1312.110:164): avc: denied { write } for pid=3875 comm="rm" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1318.167836][ T3218] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1332.216367][ T24] audit: type=1400 audit(1331.360:165): avc: denied { write } for pid=3891 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1338.494266][ T24] audit: type=1400 audit(1337.670:166): avc: denied { write } for pid=3900 comm="rm" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1342.636874][ T3218] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1345.273674][ T3702] veth0_vlan: entered promiscuous mode [ 1345.958067][ T3702] veth1_vlan: entered promiscuous mode [ 1348.664608][ T3702] veth0_macvtap: entered promiscuous mode [ 1349.206030][ T3702] veth1_macvtap: entered promiscuous mode [ 1349.346457][ T24] audit: type=1400 audit(1348.490:167): avc: denied { write } for pid=3908 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1352.228999][ T3739] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1352.229801][ T3739] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1352.230413][ T3739] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1352.250596][ T3506] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1354.496294][ T3710] veth0_vlan: entered promiscuous mode [ 1356.394227][ T3710] veth1_vlan: entered promiscuous mode [ 1356.559004][ T24] audit: type=1400 audit(1355.710:168): avc: denied { write } for pid=3913 comm="rm" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1359.417711][ T3710] veth0_macvtap: entered promiscuous mode [ 1359.866116][ T3710] veth1_macvtap: entered promiscuous mode [ 1362.826633][ T3469] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1362.850608][ T3506] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1362.993969][ T3469] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1362.995009][ T3469] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1382.594120][ T24] audit: type=1400 audit(1381.770:169): avc: denied { write } for pid=3927 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1391.223089][ T24] audit: type=1400 audit(1390.250:170): avc: denied { map } for pid=3934 comm="syz.2.41" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1391.343764][ T24] audit: type=1400 audit(1390.440:171): avc: denied { execute } for pid=3934 comm="syz.2.41" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1393.628283][ T24] audit: type=1400 audit(1392.750:172): avc: denied { write } for pid=3937 comm="rm" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1398.900668][ T3218] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1415.318723][ T24] audit: type=1400 audit(1414.500:173): avc: denied { write } for pid=3951 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1423.740332][ T24] audit: type=1400 audit(1422.900:174): avc: denied { write } for pid=3962 comm="rm" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1431.039398][ T3218] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1495.138312][ T24] audit: type=1400 audit(1494.230:175): avc: denied { write } for pid=4019 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1504.794000][ T24] audit: type=1400 audit(1503.960:176): avc: denied { write } for pid=4029 comm="rm" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1525.265541][ T24] audit: type=1400 audit(1524.440:177): avc: denied { write } for pid=4044 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1532.595734][ T24] audit: type=1400 audit(1531.780:178): avc: denied { write } for pid=4048 comm="rm" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1551.076773][ T24] audit: type=1400 audit(1550.240:179): avc: denied { write } for pid=4057 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1562.430228][ T24] audit: type=1400 audit(1561.590:180): avc: denied { write } for pid=4066 comm="rm" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1569.558251][ T24] audit: type=1400 audit(1568.740:181): avc: denied { map } for pid=4068 comm="syz.3.64" path="/" dev="tmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1582.098253][ T24] audit: type=1400 audit(1581.210:182): avc: denied { write } for pid=4078 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1590.913661][ T24] audit: type=1400 audit(1590.090:183): avc: denied { write } for pid=4088 comm="rm" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1604.742572][ T24] audit: type=1400 audit(1603.890:184): avc: denied { write } for pid=4097 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1614.874828][ T24] audit: type=1400 audit(1614.060:185): avc: denied { write } for pid=4103 comm="rm" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1633.490789][ T24] audit: type=1400 audit(1632.670:186): avc: denied { write } for pid=4113 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1642.389187][ T24] audit: type=1400 audit(1641.570:187): avc: denied { write } for pid=4126 comm="rm" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1657.786573][ T24] audit: type=1400 audit(1656.940:188): avc: denied { write } for pid=4135 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1667.242494][ T24] audit: type=1400 audit(1666.370:189): avc: denied { write } for pid=4145 comm="rm" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1702.766952][ T24] audit: type=1400 audit(1701.940:190): avc: denied { write } for pid=4171 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1711.270632][ T24] audit: type=1400 audit(1710.430:191): avc: denied { write } for pid=4184 comm="rm" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1719.796656][ T4188] kvm [4186]: Unsupported guest access at: eeef0100 [ 1719.796656][ T4188] { Op0( 2), Op1( 0), CRn( 0), CRm( 6), Op2( 2), func_read }, [ 1777.733148][ T24] audit: type=1400 audit(1776.840:192): avc: denied { map } for pid=4226 comm="syz.2.97" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=10926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1777.734057][ T24] audit: type=1400 audit(1776.910:193): avc: denied { read } for pid=4226 comm="syz.2.97" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=10926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1778.036674][ T24] audit: type=1400 audit(1777.220:194): avc: denied { write } for pid=4226 comm="syz.2.97" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=10926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2052.712896][ T24] audit: type=1400 audit(2051.880:195): avc: denied { execute } for pid=4386 comm="syz.2.145" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=13672 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2106.222526][ T24] audit: type=1400 audit(2105.400:196): avc: denied { write } for pid=4414 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2115.666533][ T24] audit: type=1400 audit(2114.750:197): avc: denied { write } for pid=4424 comm="rm" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2582.259308][ T24] audit: type=1400 audit(2581.440:198): avc: denied { write } for pid=4728 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2593.360724][ T24] audit: type=1400 audit(2592.540:199): avc: denied { write } for pid=4735 comm="rm" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2804.776181][ T4871] KVM: debugfs: duplicate directory 4871-15 [ 2970.102380][ T24] audit: type=1400 audit(2969.260:200): avc: denied { write } for pid=4958 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2978.767925][ T24] audit: type=1400 audit(2977.940:201): avc: denied { write } for pid=4967 comm="rm" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3219.517414][ T5081] rxe_eth0 speed is unknown, defaulting to 1000 [ 3231.905175][ T5087] rxe_eth0 speed is unknown, defaulting to 1000 [ 3278.987171][ T5081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3279.585730][ T5081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3295.335767][ T5087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3297.159482][ T5087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3312.870058][ T4740] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3314.810554][ T4740] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3316.610062][ T4740] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3317.959967][ T5081] hsr_slave_0: entered promiscuous mode [ 3318.026467][ T5081] hsr_slave_1: entered promiscuous mode [ 3318.399469][ T4740] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3332.547273][ T4740] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3332.637865][ T4740] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3332.713112][ T4740] bond0 (unregistering): Released all slaves [ 3342.359243][ T5087] hsr_slave_0: entered promiscuous mode [ 3342.514378][ T5087] hsr_slave_1: entered promiscuous mode [ 3342.555940][ T5087] debugfs: 'hsr0' already exists in 'hsr' [ 3342.556344][ T5087] Cannot create hsr debugfs directory [ 3346.048038][ T4740] hsr_slave_0: left promiscuous mode [ 3346.142900][ T4740] hsr_slave_1: left promiscuous mode [ 3346.576069][ T4740] veth1_macvtap: left promiscuous mode [ 3346.576807][ T4740] veth0_macvtap: left promiscuous mode [ 3346.578360][ T4740] veth1_vlan: left promiscuous mode [ 3346.579607][ T4740] veth0_vlan: left promiscuous mode [ 3373.799939][ T4740] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3374.875926][ T24] audit: type=1400 audit(3374.060:202): avc: denied { write } for pid=5155 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3375.639783][ T4740] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3377.303535][ T4740] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3378.224016][ T5081] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 3378.490611][ T5081] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 3379.018612][ T5081] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 3379.185584][ T5081] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3379.465530][ T4740] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3380.133777][ T24] audit: type=1400 audit(3379.260:203): avc: denied { write } for pid=5159 comm="rm" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3380.184959][ T5081] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 3380.615680][ T5081] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 3380.750442][ T5081] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 3381.264861][ T5081] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 3385.410403][ T3218] 8021q: adding VLAN 0 to HW filter on device eth9 [ 3395.543989][ T4740] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3395.718628][ T4740] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3395.895884][ T4740] bond0 (unregistering): Released all slaves [ 3397.969244][ T5087] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 3398.486357][ T5087] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 3398.637389][ T5087] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 3399.207010][ T5087] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3399.290776][ T5087] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 3399.840700][ T5087] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 3400.033707][ T5087] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 3400.518679][ T5087] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 3417.035211][ T4740] hsr_slave_0: left promiscuous mode [ 3417.167321][ T4740] hsr_slave_1: left promiscuous mode [ 3417.679081][ T4740] veth1_macvtap: left promiscuous mode [ 3417.679846][ T4740] veth0_macvtap: left promiscuous mode [ 3417.759206][ T4740] veth1_vlan: left promiscuous mode [ 3417.786821][ T4740] veth0_vlan: left promiscuous mode [ 3419.114146][ T24] audit: type=1400 audit(3418.280:204): avc: denied { write } for pid=5187 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3426.065099][ T24] audit: type=1400 audit(3425.220:205): avc: denied { write } for pid=5192 comm="rm" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3442.799933][ T3218] 8021q: adding VLAN 0 to HW filter on device eth10 [ 3447.668112][ T5081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3455.047993][ T5087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3460.418822][ T24] audit: type=1400 audit(3459.600:206): avc: denied { write } for pid=5200 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3467.859056][ T24] audit: type=1400 audit(3467.030:207): avc: denied { write } for pid=5211 comm="rm" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3474.186811][ T3218] 8021q: adding VLAN 0 to HW filter on device eth11 [ 3495.332202][ T24] audit: type=1400 audit(3494.510:208): avc: denied { write } for pid=5224 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3503.920569][ T24] audit: type=1400 audit(3503.100:209): avc: denied { write } for pid=5235 comm="rm" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3508.679238][ T3218] 8021q: adding VLAN 0 to HW filter on device eth12 [ 3527.563230][ T24] audit: type=1400 audit(3526.730:210): avc: denied { write } for pid=5255 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3534.755039][ T24] audit: type=1400 audit(3533.920:211): avc: denied { write } for pid=5265 comm="rm" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3540.850422][ T3218] 8021q: adding VLAN 0 to HW filter on device eth13 [ 3563.392245][ T24] audit: type=1400 audit(3562.560:212): avc: denied { write } for pid=5284 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3566.764492][ T5081] veth0_vlan: entered promiscuous mode [ 3567.807370][ T5081] veth1_vlan: entered promiscuous mode [ 3571.055610][ T5081] veth0_macvtap: entered promiscuous mode [ 3571.505315][ T5081] veth1_macvtap: entered promiscuous mode [ 3572.244733][ T24] audit: type=1400 audit(3571.380:213): avc: denied { write } for pid=5292 comm="rm" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3575.743411][ T4740] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3575.893420][ T5218] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3575.904155][ T4740] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3575.904886][ T4740] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3576.406596][ T5087] veth0_vlan: entered promiscuous mode [ 3578.097091][ T3218] 8021q: adding VLAN 0 to HW filter on device eth14 [ 3578.845207][ T5087] veth1_vlan: entered promiscuous mode [ 3583.861919][ T5087] veth0_macvtap: entered promiscuous mode [ 3584.397277][ T5087] veth1_macvtap: entered promiscuous mode [ 3588.246951][ T5218] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3588.249602][ T5218] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3588.413029][ T4944] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3588.428955][ T41] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3588.867929][ T24] audit: type=1400 audit(3588.030:214): avc: denied { write } for pid=5297 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3598.946160][ T24] audit: type=1400 audit(3598.130:215): avc: denied { write } for pid=5303 comm="rm" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3631.167762][ T24] audit: type=1400 audit(3630.280:216): avc: denied { write } for pid=5320 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3641.244806][ T24] audit: type=1400 audit(3640.400:217): avc: denied { write } for pid=5329 comm="rm" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3648.809410][ T3218] 8021q: adding VLAN 0 to HW filter on device eth15 [ 3675.289882][ T24] audit: type=1400 audit(3674.470:218): avc: denied { write } for pid=5349 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3687.433769][ T24] audit: type=1400 audit(3686.500:219): avc: denied { write } for pid=5359 comm="rm" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3695.537805][ T3218] 8021q: adding VLAN 0 to HW filter on device eth16 [ 3712.669408][ T24] audit: type=1400 audit(3711.850:220): avc: denied { write } for pid=5371 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3724.826451][ T24] audit: type=1400 audit(3723.980:221): avc: denied { write } for pid=5379 comm="rm" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3780.948938][ T24] audit: type=1400 audit(3780.110:222): avc: denied { write } for pid=5407 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3792.966169][ T24] audit: type=1400 audit(3792.130:223): avc: denied { write } for pid=5422 comm="rm" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3825.108480][ T24] audit: type=1400 audit(3824.290:224): avc: denied { write } for pid=5438 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3835.809237][ T24] audit: type=1400 audit(3834.950:225): avc: denied { write } for pid=5447 comm="rm" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3867.279144][ T24] audit: type=1400 audit(3866.350:226): avc: denied { write } for pid=5464 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3878.948146][ T24] audit: type=1400 audit(3878.130:227): avc: denied { write } for pid=5475 comm="rm" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3897.944672][ T24] audit: type=1400 audit(3897.130:228): avc: denied { write } for pid=5484 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3909.834319][ T24] audit: type=1400 audit(3908.990:229): avc: denied { write } for pid=5490 comm="rm" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3942.055780][ T24] audit: type=1400 audit(3941.230:230): avc: denied { write } for pid=5509 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3952.694554][ T24] audit: type=1400 audit(3951.790:231): avc: denied { write } for pid=5514 comm="rm" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3964.558397][ T24] audit: type=1400 audit(3963.700:232): avc: denied { execute } for pid=5521 comm="syz.5.366" path=2F32302F23313138202864656C6574656429 dev="tmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 3993.733697][ T24] audit: type=1400 audit(3992.780:233): avc: denied { write } for pid=5539 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4004.668694][ T24] audit: type=1400 audit(4003.850:234): avc: denied { write } for pid=5549 comm="rm" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4029.523082][ T24] audit: type=1400 audit(4028.670:235): avc: denied { write } for pid=5558 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4040.755428][ T24] audit: type=1400 audit(4039.800:236): avc: denied { write } for pid=5571 comm="rm" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4063.955255][ T24] audit: type=1400 audit(4063.130:237): avc: denied { write } for pid=5583 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4074.197581][ T24] audit: type=1400 audit(4073.370:238): avc: denied { write } for pid=5593 comm="rm" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4207.780790][ T5632] rxe_eth0 speed is unknown, defaulting to 1000 [ 4227.188896][ T5639] rxe_eth0 speed is unknown, defaulting to 1000 [ 4251.112714][ T5641] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4253.708932][ T5641] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4255.739879][ T5641] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4258.020776][ T5641] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4280.900894][ T5641] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 4281.299910][ T5641] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 4281.493825][ T5641] bond0 (unregistering): Released all slaves [ 4299.003715][ T5641] hsr_slave_0: left promiscuous mode [ 4299.117013][ T5641] hsr_slave_1: left promiscuous mode [ 4299.873174][ T5641] veth1_macvtap: left promiscuous mode [ 4299.873972][ T5641] veth0_macvtap: left promiscuous mode [ 4299.903528][ T5641] veth1_vlan: left promiscuous mode [ 4299.904839][ T5641] veth0_vlan: left promiscuous mode [ 4308.196591][ T24] audit: type=1400 audit(4307.370:239): avc: denied { write } for pid=5679 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4314.047158][ T24] audit: type=1400 audit(4313.220:240): avc: denied { write } for pid=5682 comm="rm" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4329.870053][ T3218] 8021q: adding VLAN 0 to HW filter on device eth17 [ 4331.877769][ T5632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4332.388700][ T5632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4339.344904][ T5641] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4341.514271][ T5641] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4342.928230][ T24] audit: type=1400 audit(4342.010:241): avc: denied { write } for pid=5686 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4343.329352][ T5641] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4345.009054][ T5641] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4352.774707][ T24] audit: type=1400 audit(4351.880:242): avc: denied { write } for pid=5698 comm="rm" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4364.189285][ T5641] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 4364.316763][ T5641] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 4364.440209][ T5641] bond0 (unregistering): Released all slaves [ 4368.546917][ T5639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4369.180622][ T5639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4383.554884][ T5632] hsr_slave_0: entered promiscuous mode [ 4383.673927][ T5632] hsr_slave_1: entered promiscuous mode [ 4386.376210][ T5641] hsr_slave_0: left promiscuous mode [ 4386.544059][ T5641] hsr_slave_1: left promiscuous mode [ 4387.393779][ T5641] veth1_macvtap: left promiscuous mode [ 4387.394567][ T5641] veth0_macvtap: left promiscuous mode [ 4387.396176][ T5641] veth1_vlan: left promiscuous mode [ 4387.397391][ T5641] veth0_vlan: left promiscuous mode [ 4390.742223][ T24] audit: type=1400 audit(4389.910:243): avc: denied { write } for pid=5713 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4397.807772][ T24] audit: type=1400 audit(4396.990:244): avc: denied { write } for pid=5720 comm="rm" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4412.730326][ T3218] 8021q: adding VLAN 0 to HW filter on device eth18 [ 4424.855797][ T5632] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 4425.227878][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 4425.813044][ T5632] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 4426.000006][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 4426.120297][ T5632] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 4426.334614][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 4426.407306][ T5632] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 4426.652707][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 4429.848090][ T5639] hsr_slave_0: entered promiscuous mode [ 4430.003884][ T5639] hsr_slave_1: entered promiscuous mode [ 4430.034943][ T5639] debugfs: 'hsr0' already exists in 'hsr' [ 4430.035360][ T5639] Cannot create hsr debugfs directory [ 4431.720258][ T24] audit: type=1400 audit(4430.810:245): avc: denied { write } for pid=5729 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4439.482742][ T24] audit: type=1400 audit(4438.640:246): avc: denied { write } for pid=5741 comm="rm" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4445.977899][ T3218] 8021q: adding VLAN 0 to HW filter on device eth19 [ 4451.199156][ T5639] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 4451.774070][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 4451.840652][ T5639] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 4452.338968][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 4452.579150][ T5639] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 4453.046252][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 4453.176995][ T5639] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 4453.520516][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 4464.086145][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4476.799666][ T24] audit: type=1400 audit(4475.980:247): avc: denied { write } for pid=5762 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4485.489071][ T5639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4486.365230][ T24] audit: type=1400 audit(4485.530:248): avc: denied { write } for pid=5772 comm="rm" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4494.299552][ T3218] 8021q: adding VLAN 0 to HW filter on device eth20 [ 4523.960008][ T24] audit: type=1400 audit(4523.140:249): avc: denied { write } for pid=5789 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4533.823528][ T24] audit: type=1400 audit(4533.000:250): avc: denied { write } for pid=5799 comm="rm" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4539.887681][ T3218] 8021q: adding VLAN 0 to HW filter on device eth21 [ 4561.162148][ T24] audit: type=1400 audit(4560.340:251): avc: denied { write } for pid=5816 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4571.767765][ T24] audit: type=1400 audit(4570.870:252): avc: denied { write } for pid=5827 comm="rm" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4578.987478][ T3218] 8021q: adding VLAN 0 to HW filter on device eth22 [ 4603.442734][ T24] audit: type=1400 audit(4602.620:253): avc: denied { write } for pid=5845 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4609.149437][ T5632] veth0_vlan: entered promiscuous mode [ 4610.517176][ T5632] veth1_vlan: entered promiscuous mode [ 4613.903641][ T24] audit: type=1400 audit(4612.980:254): avc: denied { write } for pid=5854 comm="rm" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4614.105356][ T5632] veth0_macvtap: entered promiscuous mode [ 4614.767301][ T5632] veth1_macvtap: entered promiscuous mode [ 4619.343127][ T5641] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 4619.377484][ T31] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 4619.505009][ T41] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 4619.556666][ T4944] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 4622.707272][ T3218] 8021q: adding VLAN 0 to HW filter on device eth23 [ 4634.462224][ T24] audit: type=1400 audit(4633.490:255): avc: denied { write } for pid=5861 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4637.384665][ T5639] veth0_vlan: entered promiscuous mode [ 4638.695841][ T5639] veth1_vlan: entered promiscuous mode [ 4643.315494][ T5639] veth0_macvtap: entered promiscuous mode [ 4644.179704][ T5639] veth1_macvtap: entered promiscuous mode [ 4648.063661][ T24] audit: type=1400 audit(4647.230:256): avc: denied { write } for pid=5868 comm="rm" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4649.136638][ T3518] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 4649.137437][ T3518] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 4649.138026][ T3518] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 4649.138614][ T3518] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 4693.393085][ T24] audit: type=1400 audit(4692.560:257): avc: denied { write } for pid=5888 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4707.805922][ T24] audit: type=1400 audit(4706.950:258): avc: denied { write } for pid=5899 comm="rm" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4716.920143][ T3218] 8021q: adding VLAN 0 to HW filter on device eth24 [ 4731.189745][ T24] audit: type=1400 audit(4730.240:259): avc: denied { write } for pid=5910 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4743.450620][ T24] audit: type=1400 audit(4742.630:260): avc: denied { write } for pid=5919 comm="rm" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4836.822743][ T24] audit: type=1400 audit(4835.990:261): avc: denied { write } for pid=5961 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4847.609113][ T24] audit: type=1400 audit(4846.790:262): avc: denied { write } for pid=5968 comm="rm" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4869.852870][ T24] audit: type=1400 audit(4869.000:263): avc: denied { write } for pid=5977 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4878.740708][ T5964] rxe_eth0 speed is unknown, defaulting to 1000 [ 4883.349367][ T24] audit: type=1400 audit(4882.430:264): avc: denied { write } for pid=5987 comm="rm" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4905.594374][ T5971] rxe_eth0 speed is unknown, defaulting to 1000 [ 4922.052142][ T24] audit: type=1400 audit(4921.200:265): avc: denied { write } for pid=5996 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4934.864309][ T24] audit: type=1400 audit(4934.050:266): avc: denied { write } for pid=6000 comm="rm" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4964.933977][ T24] audit: type=1400 audit(4964.100:267): avc: denied { write } for pid=6009 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4976.287025][ T24] audit: type=1400 audit(4975.440:268): avc: denied { write } for pid=6021 comm="rm" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4996.154785][ T5964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4997.715636][ T5964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 5005.223418][ T24] audit: type=1400 audit(5004.300:269): avc: denied { write } for pid=6030 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5018.284762][ T24] audit: type=1400 audit(5017.430:270): avc: denied { write } for pid=6039 comm="rm" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5029.690429][ T5971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 5030.348529][ T5971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 5046.686754][ T24] audit: type=1400 audit(5045.870:271): avc: denied { write } for pid=6050 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5057.538348][ T5964] hsr_slave_0: entered promiscuous mode [ 5057.659765][ T5964] hsr_slave_1: entered promiscuous mode [ 5057.777687][ T5964] debugfs: 'hsr0' already exists in 'hsr' [ 5057.778073][ T5964] Cannot create hsr debugfs directory [ 5059.239606][ T24] audit: type=1400 audit(5058.420:272): avc: denied { write } for pid=6058 comm="rm" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5083.608960][ T24] audit: type=1400 audit(5082.770:273): avc: denied { write } for pid=6065 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5090.090840][ T5971] hsr_slave_0: entered promiscuous mode [ 5090.249040][ T5971] hsr_slave_1: entered promiscuous mode [ 5090.429937][ T5971] debugfs: 'hsr0' already exists in 'hsr' [ 5090.430340][ T5971] Cannot create hsr debugfs directory [ 5094.244136][ T24] audit: type=1400 audit(5093.360:274): avc: denied { write } for pid=6070 comm="rm" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5102.434960][ T5964] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 5103.204337][ T5964] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 5104.448990][ T5964] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 5105.087980][ T5964] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 5106.456811][ T5964] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 5106.953188][ T5964] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 5108.248618][ T5964] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 5108.890520][ T5964] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 5125.446940][ T24] audit: type=1400 audit(5124.590:275): avc: denied { write } for pid=6079 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5133.160086][ T5971] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 5133.973978][ T5971] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 5134.275739][ T5971] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 5135.010012][ T5971] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 5135.230893][ T5971] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 5136.065879][ T5971] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 5136.397120][ T5971] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 5137.107435][ T5971] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 5142.592895][ T24] audit: type=1400 audit(5141.760:276): avc: denied { write } for pid=6089 comm="rm" name="hook-state" dev="tmpfs" ino=46 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5170.488610][ T5964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 5186.467923][ T5971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 5233.957703][ T26] INFO: task syz.7.402:5945 blocked for more than 430 seconds. [ 5233.958564][ T26] Not tainted syzkaller #0 [ 5233.958849][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 5233.959158][ T26] task:syz.7.402 state:D stack:0 pid:5945 tgid:5945 ppid:5639 task_flags:0x400040 flags:0x00000011 [ 5234.083310][ T26] Call trace: [ 5234.083737][ T26] __switch_to+0x5e4/0xb74 (T) [ 5234.085063][ T26] __schedule+0x1e0c/0x38a4 [ 5234.085463][ T26] schedule+0x1b4/0x274 [ 5234.085761][ T26] schedule_timeout+0x68/0x1e4 [ 5234.086083][ T26] wait_for_completion+0x1bc/0x418 [ 5234.086422][ T26] __synchronize_srcu+0x1cc/0x20c [ 5234.086793][ T26] synchronize_srcu+0x668/0x8dc [ 5234.087094][ T26] mmu_notifier_unregister+0x33c/0x444 [ 5234.087394][ T26] kvm_put_kvm+0x69c/0xbbc [ 5234.087756][ T26] kvm_vm_release+0x58/0x78 [ 5234.088049][ T26] __fput+0x4b0/0x97c [ 5234.088388][ T26] ____fput+0x20/0x30 [ 5234.088703][ T26] task_work_run+0x1b8/0x254 [ 5234.089000][ T26] exit_to_user_mode_loop+0x110/0x188 [ 5234.089346][ T26] el0_svc+0x18c/0x240 [ 5234.089659][ T26] el0t_64_sync_handler+0x68/0xdc [ 5234.089978][ T26] el0t_64_sync+0x198/0x19c [ 5234.299107][ T26] [ 5234.299107][ T26] Showing all locks held in the system: [ 5234.299579][ T26] locks held by khungtaskd/26: 1, last CPU#0: [ 5234.299846][ T26] #0: ffff800088a7e858 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x4c/0x188 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 5234.416795][ T26] locks held by kworker/u4:2/31: 2, last CPU#0: [ 5234.417105][ T26] #0: b1f000000dc33d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b8 [ 5234.418022][ T26] #1: ffff80008db37ce8 ((gc_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b8 [ 5234.418874][ T26] locks held by kworker/u4:3/41: 3, last CPU#0: [ 5234.419067][ T26] #0: abf000000dc34140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b8 [ 5234.419849][ T26] #1: ffff80008dbd7ce8 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b8 [ 5234.420630][ T26] #2: 71f000001fef1258 (&devlink->lock_key#2){+.+.}-{4:4}, at: __mod_timer+0x5cc/0xe90 [ 5234.693352][ T26] locks held by dhcpcd/3218: 1, last CPU#0: [ 5234.693705][ T26] #0: ffff800088a7e858 (rcu_read_lock){....}-{1:3}, at: sock_def_readable+0xd4/0x7f0 [ 5234.694706][ T26] locks held by getty/3246: 2, on CPU#0: [ 5234.694915][ T26] #0: 72f00000134320a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x40/0x50 [ 5234.695782][ T26] #1: 4eff80008d7db2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x314/0x11f8 [ 5234.696618][ T26] locks held by syz-executor/3377: 2, last CPU#0: [ 5234.696812][ T26] #0: 57f0000017d14278 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0xf4/0xb64 [ 5234.697566][ T26] #1: ffff800088a7e858 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x50/0x22c [ 5234.698399][ T26] locks held by kworker/u4:9/3837: 2, on CPU#0: [ 5234.698598][ T26] #0: abf000000dc34140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b8 [ 5234.699428][ T26] #1: ffff80008f487ce8 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b8 [ 5234.700206][ T26] locks held by kworker/u4:0/4944: 2, on CPU#0: [ 5234.700429][ T26] #0: abf000000dc34140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b8 [ 5234.947688][ T26] #1: ffff80008f6c7ce8 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b8 [ 5234.948523][ T26] locks held by kworker/u4:6/5118: 3, last CPU#0: [ 5234.948724][ T26] #0: abf000000dc34140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b8 [ 5234.949484][ T26] #1: ffff8000a0117ce8 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b8 [ 5234.950232][ T26] #2: 8bf000001f77e258 (&devlink->lock_key#6){+.+.}-{4:4}, at: devl_trylock+0x24/0x34 [ 5235.083745][ T26] locks held by kworker/u4:5/5641: 3, last CPU#0: [ 5235.084041][ T26] #0: abf000000dc34140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b8 [ 5235.084944][ T26] #1: ffff80008fc47ce8 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b8 [ 5235.085748][ T26] #2: b2f000002695d258 (&devlink->lock_key#10){+.+.}-{4:4}, at: devl_trylock+0x24/0x34 [ 5235.086727][ T26] locks held by kworker/u4:12/5718: 3, last CPU#0: [ 5235.086940][ T26] #0: abf000000dc34140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b8 [ 5235.087745][ T26] #1: ffff80008f817ce8 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b8 [ 5235.088514][ T26] #2: 04f0000026f3a258 (&devlink->lock_key#5){+.+.}-{4:4}, at: devl_trylock+0x24/0x34 [ 5235.089414][ T26] locks held by kworker/u4:13/5839: 3, last CPU#0: [ 5235.089603][ T26] #0: abf000000dc34140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b8 [ 5235.090353][ T26] #1: ffff80008fd37ce8 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b8 [ 5235.272071][ T26] #2: fff0000074c0dcd8 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x5cc/0xe90 [ 5235.273131][ T26] locks held by syz.6.401/5939: 2, last CPU#0: [ 5235.273363][ T26] #0: ffff800088acc330 (srcu){.+.+}-{0:0}, at: __mmu_notifier_release+0x4e8/0x87c [ 5235.274180][ T26] #1: b9f00000209f7518 (&kvm->srcu){.+.+}-{0:0}, at: kvm_mmu_notifier_release+0x50/0xc4 [ 5235.275112][ T26] locks held by kworker/u4:14/6108: 3, last CPU#0: [ 5235.275349][ T26] #0: b1f000000dc33d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b8 [ 5235.276106][ T26] #1: ffff8000a09d7ce8 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b8 [ 5235.276866][ T26] #2: ffff800088a7e858 (rcu_read_lock){....}-{1:3}, at: gc_worker+0x234/0x14c4 [ 5235.277701][ T26] locks held by modprobe/6124: 1, last CPU#0: [ 5235.277886][ T26] #0: 5af00000136bb460 (sb_writers#4){.+.+}-{0:0}, at: filemap_read+0xec4/0x106c [ 5235.278763][ T26] locks held by modprobe/6125: 1, last CPU#0: [ 5235.278952][ T26] #0: 79f0000026cead78 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x40/0x358 [ 5235.492528][ T26] [ 5235.492771][ T26] ============================================= [ 5235.492771][ T26] [ 5235.493699][ T26] Kernel panic - not syncing: hung_task: blocked tasks [ 5235.498793][ T26] CPU: 0 UID: 0 PID: 26 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 5235.500501][ T26] Hardware name: linux,dummy-virt (DT) [ 5235.501528][ T26] Call trace: [ 5235.502385][ T26] show_stack+0x2c/0x3c (C) [ 5235.503356][ T26] __dump_stack+0x30/0x40 [ 5235.504360][ T26] dump_stack_lvl+0x30/0x12c [ 5235.505326][ T26] dump_stack+0x1c/0x28 [ 5235.506322][ T26] vpanic+0x4cc/0x844 [ 5235.507184][ T26] vpanic+0x0/0x844 [ 5235.508025][ T26] hung_task_panic+0x0/0x2c [ 5235.508972][ T26] kthread+0x4cc/0x514 [ 5235.509915][ T26] ret_from_fork+0x10/0x20 [ 5235.511758][ T26] Kernel Offset: disabled [ 5235.512526][ T26] CPU features: 0x0,00000000,00d1802f,df188f42,0afff61f [ 5235.513730][ T26] Memory Limit: none [ 5235.516020][ T26] Rebooting in 86400 seconds..