last executing test programs: 53m20.507955877s ago: executing program 0 (id=625): r0 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0xa8) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x23) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x46cc00, 0x0) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x3, 0x8003, 0x10000000004}}], 0x28}, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) 53m10.406189354s ago: executing program 0 (id=628): r0 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000040)={0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x100000c, 0x6832, 0xffffffffffffffff, 0x0) 53m0.999441367s ago: executing program 1 (id=629): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@mrs={0xbe, 0x18, {0x6030000000138010}}], 0x18}, 0x0, 0x0) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) ioctl$KVM_CAP_ARM_INJECT_SERROR_ESR(r1, 0x4068aea3, &(0x7f0000000100)) r5 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x8, 0x23ac5f9b426ec4b1, 0xffffffffffffffff, 0x0) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0xdc032, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$arm64(r3, r5, 0xffffffffffffffff) 53m0.562701971s ago: executing program 0 (id=630): munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0x80111500, 0x20000000) r0 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) r1 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000000)=[@uexit={0x0, 0x18, 0x4}], 0x18}, &(0x7f0000000140)=[@featur2={0x1, 0x23}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r1, 0x4018aee1, &(0x7f00000001c0)=@attr_irq_timer={0x0, 0x1, 0x2, &(0x7f0000000180)=0x1c}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32) r2 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000840)={0x0, &(0x7f00000002c0)=[@memwrite={0x6e, 0x30, @vgic_gicr={0x80a0000, 0x280, 0x10001, 0x6}}, @its_setup={0x82, 0x28, {0x0, 0x1, 0x8f}}, @code={0xa, 0x84, {"80cd95d200a0b0f2010080d2a20080d2630080d2240080d2020000d40088a10e007008d5000028d50028c01a000c83d20020b8f2410180d2a20180d2e30180d2a40080d2020000d420a396d200e0b8f2610180d2c20180d2a30180d2240180d2020000d40000389e00a0df0d007008d5"}}, @eret={0xe6, 0x18, 0x5}, @msr={0x14, 0x20, {0x603000000013806e, 0x5}}, @uexit={0x0, 0x18}, @msr={0x14, 0x20, {0x603000000013c4cf, 0x9}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x8100000, 0x380, 0x10a}}, @code={0xa, 0x84, {"0000399e007008d50004809a20799ad200c0b8f2010180d2420080d2c30180d2640080d2020000d400044038207b9ed200a0b0f2e10180d2a20180d2430080d2c40180d2020000d4008008d5003c200e000008d5e0a992d20080b0f2410180d2e20180d2430080d2c40080d2020000d4"}}, @uexit={0x0, 0x18, 0xb1a}, @irq_setup={0x46, 0x18, {0x4, 0x29a}}, @hvc={0x32, 0x40, {0x84000002, [0x8, 0x0, 0x8000, 0x8, 0x8]}}, @msr={0x14, 0x20, {0x603000000013e08e, 0x5}}, @smc={0x1e, 0x40, {0x1000, [0x7, 0x10000, 0x1ff, 0x72, 0x7ff]}}, @msr={0x14, 0x20, {0x603000000013c102, 0x3800000000}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x1400, 0x80000001, 0x3}}, @msr={0x14, 0x20, {0x603000000013de90, 0x6}}, @eret={0xe6, 0x18, 0x3ff}, @smc={0x1e, 0x40, {0xc4000007, [0x6, 0x7fff, 0x5b30, 0x3, 0xfffffffffffffffa]}}, @eret={0xe6, 0x18, 0x80000001}, @irq_setup={0x46, 0x18, {0x1, 0x1b2}}, @smc={0x1e, 0x40, {0xc4000012, [0x7fffffffffffffff, 0x73, 0x0, 0x4, 0x1]}}, @msr={0x14, 0x20, {0x6030000000138054, 0x14b9}}, @code={0xa, 0x84, {"000028d5000028d5402294d20080b0f2a10180d2e20080d2430180d2040180d2020000d4000028d5007008d500ec202ec06086d200c0b8f2410180d2020180d2230180d2640180d2020000d4e0a284d20020b0f2010180d2c20180d2e30180d2840180d2020000d40020800c0000031e"}}, @eret={0xe6, 0x18, 0x300000}, @irq_setup={0x46, 0x18, {0x1, 0xd1}}, @hvc={0x32, 0x40, {0xc400000d, [0x3, 0x7fff, 0x80, 0x5, 0x8]}}], 0x51c}, &(0x7f0000000880)=[@featur2={0x1, 0x81}], 0x1) r3 = mmap$KVM_VCPU(&(0x7f0000d70000/0x3000)=nil, 0x930, 0x1000002, 0xaf832, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f00000000c0)="d5f5f543d3445c015486580143220600003ad49139b8364e5f73ea2f000000000000001000", 0x0, 0x48) r4 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x29) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x5) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r6, 0x4018aee2, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0x4020940d, 0xfffffffffffff4c2) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r6, 0x4018aee2, &(0x7f0000000280)=@attr_pmu_init) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000d1b000/0x1000)=nil, 0x1000) 52m54.270724917s ago: executing program 1 (id=631): r0 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000000)=[@hvc={0x32, 0x40, {0x3f000000, [0x9, 0x7, 0x2, 0x100000000, 0x3]}}], 0x40}, &(0x7f0000000080)=[@featur1={0x1, 0x28}], 0x1) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f00000000c0)=0x3) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) eventfd2(0x3, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r6, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r6, 0x0) r8 = eventfd2(0x0, 0x0) close(r8) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) write$eventfd(r8, &(0x7f0000000180)=0x5, 0xfffffde3) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CHECK_EXTENSION(r9, 0x40086602, 0x110ca32000) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x8, 0xf, 0x0, 0x5, 0x6, 0x6, 0x6, 0x74, 0x86, 0xdd, 0x68, 0x0, 0x209, 0x0, 0x0, 0x3, 0x5, 0x5, '\x00', 0x1, 0x400000000002}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000140)={0x4, 0x0, [{0x1, 0x1, 0x1, 0x0, @irqchip={0xa, 0x9}}, {0x9, 0x3, 0x1, 0x0, @sint={0x7, 0x2}}, {0x0, 0x2, 0x0, 0x0, @msi={0x83, 0x4, 0x804, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, 0x0, @adapter={0x5, 0x5, 0x80000001, 0x7f, 0xc}}]}) mmap$KVM_VCPU(&(0x7f0000fb9000/0x3000)=nil, 0x930, 0x1000008, 0x1fffb, 0xffffffffffffffff, 0x0) write$eventfd(r3, &(0x7f00000001c0)=0x3, 0x50) 52m51.120201072s ago: executing program 0 (id=632): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x19b103, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000140)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r3, 0x4068aea3, &(0x7f0000000040)={0xdf, 0x0, 0x8000}) r5 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000bc5000/0x400000)=nil) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000040)={0x10000, 0x0, 0xa000, 0x2000, &(0x7f0000e29000/0x2000)=nil}) ioctl$KVM_SET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) r7 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000000)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r7, 0x4018aee1, &(0x7f0000000100)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f00000000c0)={0x2, 0x4, 0x1}}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat$kvm(0x0, &(0x7f0000000080), 0x19b103, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) (async) syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000140)={0x0, 0x0}, 0x0, 0x0) (async) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r3, 0x4068aea3, &(0x7f0000000040)={0xdf, 0x0, 0x8000}) (async) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000bc5000/0x400000)=nil) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x20) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000040)={0x10000, 0x0, 0xa000, 0x2000, &(0x7f0000e29000/0x2000)=nil}) (async) ioctl$KVM_SET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) (async) syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000000)={0x0, 0x0}, 0x0, 0x0) (async) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r7, 0x4018aee1, &(0x7f0000000100)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f00000000c0)={0x2, 0x4, 0x1}}) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) 52m44.246549119s ago: executing program 0 (id=633): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000000)={0x0, &(0x7f0000000040)=[@smc={0x1e, 0x40, {0xc400000e, [0x99b, 0x100000003, 0x5, 0x101, 0x10]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x28) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000100)={0x0, 0x0}, &(0x7f00000000c0)=[@featur2], 0x3a) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x29) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) r10 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r7, 0xae04) mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, r10, 0x2, 0x12, r9, 0x0) r11 = mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r11, 0x20, &(0x7f0000000240)="37e68986ad644f5dc57bbc1ff382863b67f3eee57a32ec911d95f88f3dd8ea716e4a29cefbd440b2ecf83f57baf33b0c97182970a47ef45c954e42f2055384921830f6e273d2eb30", 0x0, 0x2a2019ac5ed2a1ef) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x29) ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x1) r14 = syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000bfe000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r14, &(0x7f00000001c0)={0x0, 0x0, 0xfffffffffffffef3}, 0x0, 0x5) r15 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r16 = ioctl$KVM_CREATE_VM(r15, 0xae01, 0x0) r17 = syz_kvm_setup_syzos_vm$arm64(r16, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_DEVICE_ATTR_vm(r16, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)={0xef000000, 0x1000, 0x2}}) r18 = syz_kvm_add_vcpu$arm64(r17, &(0x7f0000000140)={0x0, &(0x7f0000000200)=[@hvc={0x32, 0x40, {0xc4000053, [0xfffffffffffffffc, 0x1, 0x1, 0x9d, 0x6]}}], 0x40}, 0x0, 0x0) ioctl$KVM_RUN(r18, 0xae80, 0x0) syz_kvm_vgic_v3_setup(r13, 0x4, 0x80) ioctl$KVM_IRQ_LINE(r13, 0x4008ae61, &(0x7f0000000040)={0x2000010, 0xbb28}) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x7f) 52m41.878592196s ago: executing program 1 (id=634): r0 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000040)={0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x100000c, 0x6832, 0xffffffffffffffff, 0x0) 52m35.560741151s ago: executing program 1 (id=635): openat$kvm(0x0, &(0x7f0000000000), 0x72483, 0x0) munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) eventfd2(0x3, 0x0) r2 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) ioctl$KVM_CHECK_EXTENSION(r3, 0x40086602, 0x110ca32020) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0) 52m30.018541589s ago: executing program 1 (id=636): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3a) r2 = eventfd2(0x10001, 0x80000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x9, 0x9000, 0x0, r2, 0x9}) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, r3, 0x2800002, 0x4010, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x1000)=nil, 0x930, 0x8, 0x23ac5f9b426ec4b1, 0xffffffffffffffff, 0x0) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0xdc032, 0xffffffffffffffff, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000040)={0x8080000, 0xd000}) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, r3, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000b9a000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, 0x0, &(0x7f0000000bc0)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_SET_ONE_REG(r7, 0x4010aeac, &(0x7f0000000000)=@arm64_fw={0x6030000000140000, &(0x7f0000000200)=0x10003}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil) r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000b80)={0x0, &(0x7f0000000080)=[@hvc={0x32, 0x40, {0x84000009, [0x9, 0x8, 0x8000, 0x603c8354, 0x200]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_IRQ_LINE(r9, 0x4008ae61, 0x0) syz_kvm_vgic_v3_setup(r9, 0x2, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) r12 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x9) ioctl$KVM_SET_DEVICE_ATTR_vm(r13, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x9, 0x7, 0x3}}) mmap$KVM_VCPU(&(0x7f0000d93000/0x1000)=nil, 0x930, 0x100000f, 0x110, 0xffffffffffffffff, 0x0) syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) (rerun: 64) 52m26.858996108s ago: executing program 0 (id=637): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x9) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x33) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r3, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x8, 0x5, 0x1}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xfffc, 0x1bd, 0x7}}], 0x60}, 0x0, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc9}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000140)={0x3, 0xffffffffffffffff, 0x25726e6f13432840}) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x40305839, &(0x7f0000000040)=@attr_other={0x0, 0x0, 0x3, &(0x7f0000000000)=0x2f7}) r9 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000180)={0x0, &(0x7f0000000380)=[@code={0xa, 0x84, {"000cc038007008d50024202e20d68ad200c0b0f2010080d2620180d2e30180d2e40180d2020000d4000008d5007008d5007008d5a0b580d200c0b8f2e10180d2420180d2e30080d2e40180d2020000d4600990d20060b0f2410180d2e20080d2630080d2c40080d2020000d4007008d5"}}, @msr={0x14, 0x20, {0x603000000013df61, 0x7}}], 0xa4}, &(0x7f0000000300)=[@featur2={0x1, 0x13}], 0x10000000000001ad) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r9, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000100)={0xffffffffffffffff, 0x9, 0x1}) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_GET_API_VERSION(r10, 0xae03, 0x42) r11 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000000)="a5920cde26834aa184e7c68682e19a3807d00f8b1a7c3e2dae4d8bf46a11d12093c2dd078e772ac86399a31ce1b22623f070b95932ccb50e492079aac2512f89406d6d6c6c066e5c", 0x0, 0x48) syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil) syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, &(0x7f0000000200)="c198a54e97ce40a62720224f77db7e5f6cd110b0d8ca3983", 0x0, 0x18) r13 = syz_kvm_vgic_v3_setup(0xffffffffffffffff, 0x3, 0x40) ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, 0x0) 52m18.897044833s ago: executing program 1 (id=638): r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000000000)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0x20e4586c}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x2, 0x0, &(0x7f0000000000)=0x1100000000000000}) openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) (async) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) (async) syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) (async) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000000000)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0x20e4586c}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x2, 0x0, &(0x7f0000000000)=0x1100000000000000}) (async) 51m40.758152007s ago: executing program 32 (id=637): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x9) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x33) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r3, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x8, 0x5, 0x1}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xfffc, 0x1bd, 0x7}}], 0x60}, 0x0, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc9}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000140)={0x3, 0xffffffffffffffff, 0x25726e6f13432840}) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x40305839, &(0x7f0000000040)=@attr_other={0x0, 0x0, 0x3, &(0x7f0000000000)=0x2f7}) r9 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000180)={0x0, &(0x7f0000000380)=[@code={0xa, 0x84, {"000cc038007008d50024202e20d68ad200c0b0f2010080d2620180d2e30180d2e40180d2020000d4000008d5007008d5007008d5a0b580d200c0b8f2e10180d2420180d2e30080d2e40180d2020000d4600990d20060b0f2410180d2e20080d2630080d2c40080d2020000d4007008d5"}}, @msr={0x14, 0x20, {0x603000000013df61, 0x7}}], 0xa4}, &(0x7f0000000300)=[@featur2={0x1, 0x13}], 0x10000000000001ad) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r9, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000100)={0xffffffffffffffff, 0x9, 0x1}) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_GET_API_VERSION(r10, 0xae03, 0x42) r11 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000000)="a5920cde26834aa184e7c68682e19a3807d00f8b1a7c3e2dae4d8bf46a11d12093c2dd078e772ac86399a31ce1b22623f070b95932ccb50e492079aac2512f89406d6d6c6c066e5c", 0x0, 0x48) syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil) syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, &(0x7f0000000200)="c198a54e97ce40a62720224f77db7e5f6cd110b0d8ca3983", 0x0, 0x18) r13 = syz_kvm_vgic_v3_setup(0xffffffffffffffff, 0x3, 0x40) ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, 0x0) 51m34.077366536s ago: executing program 33 (id=638): r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000000000)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0x20e4586c}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x2, 0x0, &(0x7f0000000000)=0x1100000000000000}) openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) (async) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) (async) syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) (async) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000000000)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0x20e4586c}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x2, 0x0, &(0x7f0000000000)=0x1100000000000000}) (async) 35m41.195185112s ago: executing program 2 (id=742): r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x29) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r4 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, r3, 0x2, 0x12, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f00000002c0)="fb016bddfb405ee52cc6a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb207000000f500000000000000c20cecfa0a97ab7800", 0x0, 0x48) 35m34.077513648s ago: executing program 2 (id=743): mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x1000002, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, 0x0) r0 = openat$kvm(0x0, 0x0, 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3c) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x2, 0x4, 0x5b, 0x0, 0x4, 0x80, 0xf3, 0xdb, 0x10, 0x9, 0x9, 0x9, 0x0, 0x2af, 0x1, 0x2, 0x5, 0x80, 0x7, '\x00', 0x3, 0xc}) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x3a) r4 = eventfd2(0x10001, 0x80000) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000000c0)={0x9, 0x9000, 0x0, r4, 0x9}) r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) ioctl$KVM_GET_API_VERSION(r2, 0xae00, 0x0) mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, r5, 0x2800002, 0x4010, 0xffffffffffffffff, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x8, 0x23ac5f9b426ec4b1, 0xffffffffffffffff, 0x0) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0xdc032, 0xffffffffffffffff, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r7, 0x4010ae67, &(0x7f0000000040)={0x8080000, 0xd000}) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, r5, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000b9a000/0x400000)=nil) r9 = syz_kvm_add_vcpu$arm64(r8, 0x0, &(0x7f0000000bc0)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_SET_ONE_REG(r9, 0x4010aeac, &(0x7f0000000000)=@arm64_fw={0x6030000000140000, &(0x7f0000000200)=0x10003}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r10 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000b80)={0x0, &(0x7f0000000080)=[@hvc={0x32, 0x40, {0x84000009, [0x9, 0x8, 0x8000, 0x603c8354, 0x200]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_IRQ_LINE(r11, 0x4008ae61, 0x0) 35m30.131029683s ago: executing program 3 (id=744): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r2, 0x4018aee1, &(0x7f0000000000)=@attr_set_pmu={0x0, 0x0, 0x3, 0xfffffffffffffffe}) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000723000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) munmap(&(0x7f000046c000/0x4000)=nil, 0x4000) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) (async) ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) (async) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r2, 0x4018aee1, &(0x7f0000000000)=@attr_set_pmu={0x0, 0x0, 0x3, 0xfffffffffffffffe}) (async) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) (async) munmap(&(0x7f0000723000/0x2000)=nil, 0x2000) (async) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) (async) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) (async) munmap(&(0x7f000046c000/0x4000)=nil, 0x4000) (async) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) (async) 35m26.024754937s ago: executing program 2 (id=745): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2a) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x2b) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x5000, 0x136000, 0x1}) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f00000000c0)={0x6, 0xff}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000240)={0x1, 0xe000, 0x1}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = eventfd2(0xeffffffd, 0x801) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000140)={0x3, 0x0, 0x2, r6, 0xb}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000080)={0x3000, 0x122000, 0x1}) ioctl$KVM_SET_DEVICE_ATTR_vm(r5, 0x4018aee1, &(0x7f0000000180)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)={0x9, 0x60000, 0x1}}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000001480)={0xfdfd, 0x13000, 0x1}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r7, 0x4018aee2, &(0x7f00000008c0)=@attr_irq_timer={0x0, 0x1, 0x0, 0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2a) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x2b) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x5000, 0x136000, 0x1}) (async) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f00000000c0)={0x6, 0xff}) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000240)={0x1, 0xe000, 0x1}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) eventfd2(0xeffffffd, 0x801) (async) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000140)={0x3, 0x0, 0x2, r6, 0xb}) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000080)={0x3000, 0x122000, 0x1}) (async) ioctl$KVM_SET_DEVICE_ATTR_vm(r5, 0x4018aee1, &(0x7f0000000180)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)={0x9, 0x60000, 0x1}}) (async) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000001480)={0xfdfd, 0x13000, 0x1}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r7, 0x4018aee2, &(0x7f00000008c0)=@attr_irq_timer={0x0, 0x1, 0x0, 0xffffffffffffffff}) (async) 35m21.379260217s ago: executing program 3 (id=746): r0 = openat$kvm(0x0, 0x0, 0x8280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd2(0x3, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) r4 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) ioctl$KVM_CHECK_EXTENSION(r4, 0x40086602, 0x110ca32020) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0) 35m14.687607582s ago: executing program 3 (id=747): r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x29) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r4 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, r3, 0x2, 0x12, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f00000002c0)="fb016bddfb405ee52cc6a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb2070000000003000000000000c20cecfa0a97ab7800", 0x0, 0x48) 35m11.838065486s ago: executing program 2 (id=748): r0 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000040)={0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x2e) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r4, r5, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000100)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) r6 = eventfd2(0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000008000/0x3000)=nil, 0x930, 0x2000004, 0x2011, r6, 0x0) ioctl$KVM_SET_ONE_REG(r5, 0x4010aeac, &(0x7f0000000140)=@arm64_core={0x60300000001000d4, 0x0}) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x100000c, 0x6832, 0xffffffffffffffff, 0x0) 35m5.041160144s ago: executing program 3 (id=749): r0 = openat$kvm(0x0, &(0x7f0000000040), 0xc0083, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x94) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x0, 0x12, r0, 0x0) r1 = mmap$KVM_VCPU(&(0x7f0000ffd000/0x1000)=nil, 0x0, 0x3000001, 0x10, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x8c, 0x9}}], 0x30}, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000080)="7ad1e8c951d21d028e6fcdff58d667ed724ef0f8e4e2847d13d8d57ec7f4836249cbf904441666db8bc284a47e7894e0ad424b067d4b785f73807bddbb17cd0439813fbcf6128f59", 0x0, 0x48) 34m49.757031987s ago: executing program 2 (id=750): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000bfe000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000040)={0x0, &(0x7f00000003c0)=[@its_setup={0x82, 0x28, {0x4, 0x0, 0x179}}, @its_send_cmd={0xaa, 0x28, {0x4, 0x1, 0x1, 0x7, 0x9, 0x6}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) 34m49.420820067s ago: executing program 3 (id=751): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd2(0x3, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, 0x0, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) r4 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) ioctl$KVM_CHECK_EXTENSION(r4, 0x40086602, 0x110ca32020) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0) 34m41.099961111s ago: executing program 3 (id=752): mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0xf, 0x30, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) r0 = mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) (async) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) (async) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) munmap$KVM_VCPU(r0, 0x8000000000000001) (async) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x9000000) (async) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) (async) r1 = eventfd2(0x10001, 0x801) write$eventfd(r1, &(0x7f0000000000)=0xffffffffffffffff, 0x8) (async) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) (async) r2 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x29) syz_kvm_vgic_v3_setup(r3, 0x2, 0x100) ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f0000000000)={0x9, 0x5}) (async) munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000) (async) munmap(&(0x7f0000fa6000/0x2000)=nil, 0x2000) (async) munmap(&(0x7f0000e76000/0x12000)=nil, 0x12000) (async) mmap$KVM_VCPU(&(0x7f0000f1a000/0x4000)=nil, 0x930, 0x0, 0x9032, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4360ae82, 0x0) (async) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0x7, 0x2}) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000100)=@x86={0xe, 0x4c, 0xe, 0x0, 0x0, 0x7f, 0x0, 0x74, 0x92, 0x80, 0x35, 0xfa, 0x0, 0x0, 0x8, 0x3, 0x8, 0x8, 0x2, '\x00', 0xe9, 0x4}) (async) write$eventfd(r6, &(0x7f00000001c0)=0x4, 0x4d) mmap$KVM_VCPU(&(0x7f0000115000/0x1000)=nil, 0x0, 0x2000008, 0x100010, 0xffffffffffffffff, 0x0) (async) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) (async) munmap(&(0x7f0000011000/0xc00000)=nil, 0xc00000) 34m39.397612356s ago: executing program 2 (id=753): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x1008, 0x80800) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x48, 0xdddd1000, 0x0, r2}) (async) close(r2) (async) close(r1) (async) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) 33m54.187626136s ago: executing program 34 (id=752): mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0xf, 0x30, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) r0 = mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) (async) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) (async) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) munmap$KVM_VCPU(r0, 0x8000000000000001) (async) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x9000000) (async) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) (async) r1 = eventfd2(0x10001, 0x801) write$eventfd(r1, &(0x7f0000000000)=0xffffffffffffffff, 0x8) (async) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) (async) r2 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x29) syz_kvm_vgic_v3_setup(r3, 0x2, 0x100) ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f0000000000)={0x9, 0x5}) (async) munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000) (async) munmap(&(0x7f0000fa6000/0x2000)=nil, 0x2000) (async) munmap(&(0x7f0000e76000/0x12000)=nil, 0x12000) (async) mmap$KVM_VCPU(&(0x7f0000f1a000/0x4000)=nil, 0x930, 0x0, 0x9032, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4360ae82, 0x0) (async) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0x7, 0x2}) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000100)=@x86={0xe, 0x4c, 0xe, 0x0, 0x0, 0x7f, 0x0, 0x74, 0x92, 0x80, 0x35, 0xfa, 0x0, 0x0, 0x8, 0x3, 0x8, 0x8, 0x2, '\x00', 0xe9, 0x4}) (async) write$eventfd(r6, &(0x7f00000001c0)=0x4, 0x4d) mmap$KVM_VCPU(&(0x7f0000115000/0x1000)=nil, 0x0, 0x2000008, 0x100010, 0xffffffffffffffff, 0x0) (async) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) (async) munmap(&(0x7f0000011000/0xc00000)=nil, 0xc00000) 33m49.798012907s ago: executing program 35 (id=753): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x1008, 0x80800) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x48, 0xdddd1000, 0x0, r2}) (async) close(r2) (async) close(r1) (async) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) 12m27.419305565s ago: executing program 5 (id=862): r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) (async, rerun: 32) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) (async, rerun: 32) mmap$KVM_VCPU(&(0x7f0000027000/0x13000)=nil, 0x930, 0x3, 0x4102932, 0xffffffffffffffff, 0x0) (async, rerun: 32) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) r2 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) mmap$KVM_VCPU(&(0x7f0000c58000/0x1000)=nil, r2, 0x2000003, 0xaf832, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r4 = mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, r3, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000240)="fb4149dd033be3ac2cc4a22332fdaa8de0418df24200000000a6ab8031d1dfd92f0000000001ffffffff9610fbff77521ce10d8f6b69d22627e700", 0x0, 0xffffffffffffffca) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04) (async) r7 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000b80)={0x0, 0x0}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1) (async) r11 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r11, 0x4018aee1, 0x0) (async) r12 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@hvc={0x32, 0x40, {0x84000003, [0x6, 0x0, 0x4, 0x9, 0x4d]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r12, 0xae80, 0x0) (async, rerun: 64) mmap$KVM_VCPU(&(0x7f0000fed000/0x3000)=nil, r6, 0x3000002, 0x8a031, 0xffffffffffffffff, 0x0) (async, rerun: 64) r13 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x2) r15 = syz_kvm_setup_syzos_vm$arm64(r14, &(0x7f0000c00000/0x400000)=nil) r16 = syz_kvm_add_vcpu$arm64(r15, &(0x7f0000000100)={0x0, &(0x7f0000000240)=[@its_setup={0x82, 0x28, {0x3, 0x0, 0x16f}}, @its_send_cmd={0xaa, 0x28, {0xe, 0x0, 0x2, 0x8, 0x8, 0x100}}], 0x50}, 0x0, 0x0) (async, rerun: 32) syz_kvm_vgic_v3_setup(r14, 0x2, 0x40) (async, rerun: 32) ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r17, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f00000001c0)=0x1}) (async) ioctl$KVM_RUN(r16, 0xae80, 0x0) 12m25.824694045s ago: executing program 4 (id=863): r0 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000040)={0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x100000c, 0x6832, 0xffffffffffffffff, 0x40000) 12m19.026795214s ago: executing program 5 (id=864): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r1, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) eventfd2(0x3ff, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r4, 0x400454d0, 0x1) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x400) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0x80111500, 0xc) r8 = ioctl$KVM_CREATE_VM(r7, 0x5760, 0x2000001c) r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil) r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000b80)={0x0, &(0x7f0000000040)=[@smc={0x1e, 0x40, {0x84000012, [0xffffffff, 0x100080001, 0x5, 0x101, 0x13]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r10, 0xae80, 0x0) 12m14.606160807s ago: executing program 4 (id=865): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x7a) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x0, 0x0}) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) r4 = ioctl$KVM_CREATE_VM(r3, 0x800454cf, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000240)={0x6, 0x0, [{0x27, 0x0, 0x0, 0x0, @sint={0x80000001, 0x6}}, {0x8, 0x4, 0x0, 0x0, @msi={0x9452, 0xffff, 0x5, 0x9cf3}}, {0xc5f, 0x4, 0x1, 0x0, @msi={0x8, 0xfffffe0f, 0x7c5, 0x4}}, {0xa, 0x1, 0x1, 0x0, @adapter={0x101, 0x1, 0xfffffffffffffff7, 0xfffffeff, 0xffffffff}}, {0xeea, 0x1, 0x0, 0x0, @msi={0x0, 0x8, 0x1, 0x7}}, {0x400, 0x2, 0x1, 0x0, @irqchip={0xfffffffb, 0x5}}]}) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000b69000/0x400000)=nil) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x3, 0x1, 0x1}}], 0x28}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r6, 0x1, 0x240) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 12m8.518386687s ago: executing program 5 (id=866): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3e) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000100)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x2a) ioctl$KVM_CHECK_EXTENSION_VM(r4, 0xae03, 0xfa) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)=@arm64_core={0x60300000001000d7, 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) munmap$KVM_VCPU(0x0, 0x1000000000) r5 = mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000e, 0x24132, 0xffffffffffffffff, 0x0) r6 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) r9 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r8, 0x0) r10 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_DEVICE_ATTR_vm(r11, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)={0xef000000, 0x1000, 0x2}}) r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000140)={0x0, &(0x7f0000000200)=[@smc={0x1e, 0x40, {0x86000000, [0x10000, 0xfff, 0x7e8, 0x7, 0x4000004]}}], 0x40}, 0x0, 0x0) ioctl$KVM_RUN(r13, 0xae80, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r9, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r8, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x4000, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000000000)="caf9d6ac7953c5a4571996b36c0135c684c5c0d4fad93b80dd7cb2b66d542f6173f233a6e1606154cf719c2550e01ad56fce42d3686e6f9b00a64f3728849edd28e62dda6398ff0f", 0x0, 0x48) r14 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0) r16 = syz_kvm_setup_syzos_vm$arm64(r15, &(0x7f0000bc2000/0x400000)=nil) r17 = syz_kvm_add_vcpu$arm64(r16, &(0x7f0000000540)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_arm64(r17, 0x4208ae9b, 0x0) 11m58.587732328s ago: executing program 4 (id=867): r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[@msr={0x14, 0x20, {0x603000000013df7f, 0x8000}}], 0x20}, &(0x7f0000000280)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f00000002c0)=@attr_pmu_init) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_STATS_FD_cpu(r3, 0xaece) 11m53.276771832s ago: executing program 5 (id=868): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) (async) r2 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, r2, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000027000/0x13000)=nil, 0x930, 0x3, 0x4102932, 0xffffffffffffffff, 0x0) (async) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000100)="746abf250f7959c813e4adfb369b808022e69fe80cfadce4a1259e77bab54ac9749537b3d016bb7f745a6e22d2f9ff443f19467748a3fe02c239457600", 0x0, 0xfffffffffffffec5) 11m46.786061963s ago: executing program 4 (id=869): r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = syz_kvm_add_vcpu$arm64(r0, &(0x7f0000000480)={0x0, &(0x7f0000000000)=[@code={0xa, 0x9c, {"805d80d200e0b0f2210080d2620180d2630080d2e40180d2020000d4606a87d20020b8f2810080d2a20080d2630180d2440180d2020000d40000629e008008d5000c403c1f0000ab809b82d20000b0f2010180d2420180d2a30180d2240180d2020000d4008008d5007008d5a04a8bd200a0b8f2810080d2c20080d2630180d2240180d2020000d4"}}, @mrs={0xbe, 0x18, {0x603000000013ddca}}, @hvc={0x32, 0x40, {0x84000009, [0x5, 0x1000, 0x6, 0x5, 0x100000001]}}, @smc={0x1e, 0x40, {0x10, [0x7, 0x7, 0x6, 0x0, 0x1]}}, @its_setup={0x82, 0x28, {0x2, 0x1, 0x21e}}, @irq_setup={0x46, 0x18, {0x1, 0x1e9}}, @hvc={0x32, 0x40, {0x8600ff01, [0x0, 0x9, 0x4, 0x7e, 0x3]}}, @code={0xa, 0x54, {"0000803c007008d5007008d500682038007008d500209f0d000008d5a02e85d20000b8f2e10080d2820180d2030180d2e40080d2020000d4000008d500d0005f"}}, @irq_setup={0x46, 0x18, {0x4, 0x318}}, @irq_setup={0x46, 0x18, {0x3, 0x2d7}}, @uexit={0x0, 0x18, 0x8}, @code={0xa, 0x54, {"000000880000649e008008d5000008d5007008d5007008d5008040c8a09f9cd20000b0f2c10180d2a20180d2830180d2640180d2020000d4000c40f80000007d"}}, @irq_setup={0x46, 0x18, {0x3, 0x1e0}}, @uexit={0x0, 0x18, 0x8}, @msr={0x14, 0x20, {0x603000000013e600, 0xe}}, @svc={0x122, 0x40, {0x84000000, [0x5, 0x2, 0x800, 0x1ff, 0x1]}}, @hvc={0x32, 0x40, {0x31000000, [0x676eb394, 0x2, 0xffffffffffffffff, 0x5, 0x9]}}, @its_send_cmd={0xaa, 0x28, {0x5, 0x0, 0x3, 0x8, 0x3, 0x2, 0x3}}, @irq_setup={0x46, 0x18, {0x2, 0x1ad}}, @svc={0x122, 0x40, {0x6000000, [0x8, 0x606, 0x2, 0x8e, 0x1]}}, @its_setup={0x82, 0x28, {0x3, 0x2, 0x2d2}}, @mrs={0xbe, 0x18}, @uexit={0x0, 0x18, 0x1}, @its_setup={0x82, 0x28, {0x2, 0x1, 0x28b}}], 0x474}, &(0x7f00000004c0)=[@featur2={0x1, 0x27}], 0x1) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x10) r3 = eventfd2(0x1, 0x0) r4 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000500)={r3, 0x1f, 0x1, r4}) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000540)={0x2, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000580)={0x2, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000005c0)={0x3, 0x6, 0x4, 0x2000, &(0x7f0000e8f000/0x2000)=nil}) r5 = eventfd2(0x7fff, 0x800) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$arm64(r2, r6, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000700)=[{0x0, &(0x7f0000000600)=[@its_setup={0x82, 0x28, {0x2, 0x1, 0x22f}}, @code={0xa, 0x84, {"00008012007008d5a09985d20060b8f2a10180d2c20080d2630180d2e40080d2020000d4007008d5000028d5000c00fc008060c860d484d20000b0f2a10180d2020080d2e30080d2a40180d2020000d40000021ee0718dd200a0b8f2410180d2620180d2030180d2440180d2020000d4"}}, @mrs={0xbe, 0x18, {0x6030000000130205}}], 0xc4}], 0x1, 0x0, &(0x7f0000000740)=[@featur2={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_ARM_VCPU_FINALIZE(r1, 0x4004aec2, &(0x7f0000000780)=0x3) ioctl$KVM_IRQ_LINE_STATUS(r4, 0xc008ae67, &(0x7f00000007c0)={0x2, 0x8}) r7 = ioctl$KVM_GET_STATS_FD_vm(r2, 0xaece) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000800)={0x6, 0x0, [{0x4080000, 0x4, 0x1, 0x0, @msi={0xbf5, 0x5, 0x9, 0x6}}, {0x8000, 0x5, 0x1, 0x0, @irqchip={0xfffffffa, 0x4}}, {0xe577, 0x4, 0x1, 0x0, @msi={0x2, 0x9e, 0x10, 0xff}}, {0x1, 0x5, 0x1, 0x0, @irqchip={0x8, 0x81d}}, {0x1, 0x2, 0x1, 0x0, @irqchip={0x1, 0xa}}, {0x2, 0x3, 0x1, 0x0, @adapter={0x11, 0x0, 0x7, 0x3, 0x1}}]}) close(r4) r8 = mmap$KVM_VCPU(&(0x7f0000d93000/0x3000)=nil, 0x0, 0x6, 0x10, r6, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f0000000940)="82e1d12ec0bb2f3101c080e5db159ac740f5981f454a8e07e68b32329c4c32af921de6fbdde0cf01fc7030eb5c4182dbda8ccb4bd03365d3b69fe566f980d06b0b3c95bc28892546", 0x0, 0x48) ioctl$KVM_SIGNAL_MSI(r4, 0x4020aea5, &(0x7f00000009c0)={0xffff1000, 0x60000, 0x6}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r7, 0x4010ae68, &(0x7f0000000a00)={0x6000}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x4b2800, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x28) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r6, 0x4010ae74, &(0x7f0000000a80)={0x9, 0x1490, 0x7}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000ac0), 0x80, 0x0) r10 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0xc) ioctl$KVM_REGISTER_COALESCED_MMIO(r10, 0x4010ae67, &(0x7f0000000b00)={0x100000, 0x4000, 0x1}) write$eventfd(r5, &(0x7f0000000b40)=0x4, 0x8) ioctl$KVM_SET_GSI_ROUTING(r7, 0x4008ae6a, &(0x7f0000000b80)={0x9, 0x0, [{0x0, 0x1, 0x0, 0x0, @irqchip={0x3, 0x80}}, {0x8, 0x3, 0x0, 0x0, @adapter={0x0, 0x1, 0x4, 0xc6a, 0xff}}, {0xffffffc7, 0x5, 0x1, 0x0, @irqchip={0x1000, 0x8000}}, {0x5, 0x3, 0x1, 0x0, @irqchip={0x461b3e40, 0x101}}, {0x6, 0x1, 0x0, 0x0, @adapter={0x7ff, 0xfb, 0x6fc, 0x1c7b, 0x9}}, {0x7, 0x3, 0x0, 0x0, @sint={0xf, 0x4}}, {0x5, 0x2, 0x0, 0x0, @sint={0x79ed21d8, 0x8d36}}, {0x390, 0x5, 0x0, 0x0, @sint={0x8, 0xf8}}, {0x7ff, 0x5, 0x1, 0x0, @irqchip={0x3, 0x4}}]}) 11m42.397571791s ago: executing program 5 (id=870): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000300)="fb4149dd033b8986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67525673312b01040000000000002627e7000000000000000200", 0x0, 0xfffffffffffffe73) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x12, r2, 0x0) r4 = eventfd2(0x70, 0x0) close(r4) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x0) write$eventfd(r4, &(0x7f0000000100)=0xfffffffffffffffe, 0x8) r5 = eventfd2(0x0, 0x0) close(r5) close(0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xc0c82, 0x0) mmap$KVM_VCPU(&(0x7f0000008000/0x3000)=nil, 0x930, 0x2000004, 0x2011, 0xffffffffffffffff, 0x4000) mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, 0x930, 0x200000e, 0x2011, r5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0) 11m37.749094851s ago: executing program 4 (id=871): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000aba000/0x400000)=nil) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x15) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x1, 0x3000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000040)={0x2, 0xffffffffffffffff}) ioctl$KVM_CREATE_VM(r8, 0x400454ca, 0x100002f) syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000300)={0x0, &(0x7f0000000140)=[@uexit={0x0, 0xcd51ea8d0cc14277, 0x3}], 0x28}, 0x0, 0x63) r9 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000000)={0x0, &(0x7f0000000780)}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r3, 0xff7ffffffffffffd, 0x360) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) r11 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r12 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0xd, 0x9, 0xb, 0x0, 0x5, 0x6, 0x6, 0x6, 0x48, 0x88, 0x64, 0x9, 0x0, 0x9, 0x40006, 0xe, 0x3, 0x7, 0x0, '\x00', 0x10, 0x6}) ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r13, &(0x7f00000001c0)=0xffffff7f, 0xff25) ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x40, 0x100000000, &(0x7f0000000200)=0x1a0}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r9, 0x4018aee1, &(0x7f0000000240)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000100)={0x1, 0x5}}) 11m29.080976814s ago: executing program 5 (id=872): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f0000000200)=@riscv64_core={0x803000000020001c, &(0x7f0000000140)=0x3}) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x161681, 0x0) (async) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x6) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r5, 0x4010aeab, &(0x7f0000000100)=@arm64_fw={0x6030000000160003, &(0x7f0000000180)=0x1}) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x33) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x28) (async, rerun: 32) r9 = eventfd2(0xffff, 0x80001) (async, rerun: 32) r10 = openat$kvm(0x0, &(0x7f0000000280), 0x103080, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x1) r12 = syz_kvm_vgic_v3_setup(r11, 0x5, 0x40) ioctl$KVM_GET_DEVICE_ATTR(r12, 0x4018aee2, &(0x7f0000000100)=@attr_other={0x0, 0x5, 0x8, &(0x7f0000000140)=0x200a8a}) (async, rerun: 32) ioctl$KVM_IRQFD(r8, 0x4020ae76, &(0x7f00000000c0)={r9, 0x2, 0x1}) (async, rerun: 32) r13 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r6, r13, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x20}], 0xaaaab85, 0x0, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r13, 0x4010aeab, &(0x7f0000000100)=@arm64_core={0x6030000000100040, &(0x7f0000000000)=0x3bd}) 11m22.324616298s ago: executing program 4 (id=873): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd2(0x3, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x28) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r4, 0x4068aea3, &(0x7f0000000280)={0xdf, 0x0, 0x2000}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000540)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_RESET_DIRTY_RINGS(r4, 0xaec7) r6 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) r7 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) ioctl$KVM_CHECK_EXTENSION(r7, 0x40086602, 0x110ca32020) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0) 10m42.395090082s ago: executing program 36 (id=872): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f0000000200)=@riscv64_core={0x803000000020001c, &(0x7f0000000140)=0x3}) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x161681, 0x0) (async) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x6) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r5, 0x4010aeab, &(0x7f0000000100)=@arm64_fw={0x6030000000160003, &(0x7f0000000180)=0x1}) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x33) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x28) (async, rerun: 32) r9 = eventfd2(0xffff, 0x80001) (async, rerun: 32) r10 = openat$kvm(0x0, &(0x7f0000000280), 0x103080, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x1) r12 = syz_kvm_vgic_v3_setup(r11, 0x5, 0x40) ioctl$KVM_GET_DEVICE_ATTR(r12, 0x4018aee2, &(0x7f0000000100)=@attr_other={0x0, 0x5, 0x8, &(0x7f0000000140)=0x200a8a}) (async, rerun: 32) ioctl$KVM_IRQFD(r8, 0x4020ae76, &(0x7f00000000c0)={r9, 0x2, 0x1}) (async, rerun: 32) r13 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r6, r13, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x20}], 0xaaaab85, 0x0, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r13, 0x4010aeab, &(0x7f0000000100)=@arm64_core={0x6030000000100040, &(0x7f0000000000)=0x3bd}) 10m34.31807473s ago: executing program 37 (id=873): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd2(0x3, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x28) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r4, 0x4068aea3, &(0x7f0000000280)={0xdf, 0x0, 0x2000}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000540)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_RESET_DIRTY_RINGS(r4, 0xaec7) r6 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) r7 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) ioctl$KVM_CHECK_EXTENSION(r7, 0x40086602, 0x110ca32020) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0) 3m6.084871767s ago: executing program 6 (id=876): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xfffffffffffffffc) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x12) r2 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_ARM_VCPU_INIT(r8, 0x4020aeae, &(0x7f0000000080)={0x5, 0x1}) ioctl$KVM_SET_ONE_REG(r8, 0x4010aeac, &(0x7f00000001c0)=@arm64_sys={0x603000000013d801, &(0x7f00000000c0)=0x7fff}) ioctl$KVM_ARM_VCPU_INIT(r5, 0x4020aeae, 0x0) r9 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) r10 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r10, 0x4018aee1, &(0x7f0000000040)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000280)={0x14, 0xff}}) r11 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x1) r14 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r13, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r14, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0xffffffffffffffa7) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r13, 0x0) r15 = eventfd2(0xd, 0x1) close(r15) openat$kvm(0xffffff9c, &(0x7f0000000040), 0xa00f2, 0x0) write$eventfd(r15, 0x0, 0x500) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0) 2m41.780116947s ago: executing program 6 (id=878): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) r5 = ioctl$KVM_CREATE_VM(r4, 0x894c, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xb701, 0x0) close(r6) r7 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@its_setup={0x82, 0x28, {0x3, 0x4004, 0x2}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x0, 0x40000000, 0x10000, 0x10000, 0x0, 0x1}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) r10 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xd) ioctl$KVM_ASSIGN_SET_MSIX_NR(r12, 0x4008ae73, &(0x7f0000000080)={0x2, 0x6}) r13 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r14 = syz_kvm_add_vcpu$arm64(r13, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) syz_kvm_vgic_v3_setup(r11, 0x3, 0x320) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r14, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) ioctl$KVM_RUN(r8, 0xae80, 0x0) 2m12.195966063s ago: executing program 6 (id=880): munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000) (async) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) (async) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0xaf832, 0xffffffffffffffff, 0x0) (async) munmap(&(0x7f0000e7e000/0x2000)=nil, 0x2000) (async) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) (async) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3021) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x29) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_vgic_v3_setup(r1, 0x4, 0x80) (async) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000040)={0x2000000, 0x8000bb28}) (async) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x2) (async) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async) openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4}) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_vgic_v3_setup(r5, 0x4, 0x19edc75233277a35) (async) syz_kvm_vgic_v3_setup(r5, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000100)={0x8}) ioctl$KVM_SIGNAL_MSI(r5, 0x4020aea5, &(0x7f0000000200)={0x8090040, 0x0, 0x0, 0x1}) (async) r6 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r7, 0x4018aee1, &(0x7f0000000000)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0x20e4586c}) (async) syz_kvm_vgic_v3_setup(r3, 0x2, 0x100) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2m11.881006262s ago: executing program 7 (id=881): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0x80111500, 0x20000000) write$eventfd(r0, 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x1}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x5, 0x5, &(0x7f0000000200)=0x6}) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x20200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r5 = syz_kvm_vgic_v3_setup(r3, 0x3, 0x40) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000000)=@attr_other={0x0, 0x6, 0x382bc664, &(0x7f0000000100)=0x5}) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x1}) ioctl$KVM_GET_API_VERSION(r2, 0xae00, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x8, 0xf, 0x0, 0x5, 0x6, 0x6, 0x6, 0x54, 0x86, 0xdd, 0x68, 0x0, 0x20e, 0x0, 0x0, 0x3, 0x5, 0x6, '\x00', 0xfd, 0x3}) write$eventfd(r8, &(0x7f00000001c0)=0x3, 0x50) 1m55.284795003s ago: executing program 6 (id=882): r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x8900, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x24) syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r0, &(0x7f0000000000)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000100)=@arm64_sys={0x603000000013c801, &(0x7f0000000080)=0x800000000000}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x15) r6 = eventfd2(0x70, 0x0) close(r6) write$eventfd(r6, &(0x7f0000000100)=0xfffffffffffffffe, 0x8) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000040)={r6, 0x3}) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0xffffffffffffffff) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) mmap$KVM_VCPU(0x0, 0x50000, 0x3, 0x11, r8, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r11 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0xd, 0x9, 0xb, 0x0, 0x5, 0x6, 0x6, 0x6, 0x48, 0x88, 0x64, 0x9, 0x0, 0x9, 0x40006, 0xe, 0x3, 0x7, 0x0, '\x00', 0x10, 0x6}) ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) r13 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) syz_kvm_vgic_v3_setup(r14, 0x0, 0x40) r15 = syz_kvm_setup_syzos_vm$arm64(r14, &(0x7f0000c00000/0x400000)=nil) r16 = syz_kvm_add_vcpu$arm64(r15, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r16, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) write$eventfd(r12, &(0x7f00000001c0)=0xffffff7f, 0xff25) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) 1m49.559104995s ago: executing program 7 (id=883): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@mrs={0xbe, 0x18, {0x6030000000138010}}], 0x18}, 0x0, 0x0) (async) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r5 = mmap$KVM_VCPU(&(0x7f0000c81000/0x1000)=nil, r4, 0x2000009, 0x10, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) syz_kvm_assert_syzos_uexit$arm64(r3, r5, 0xffffffffffffffff) 1m34.180453545s ago: executing program 7 (id=884): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x2}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x4, 0x80003, 0xa, 0x0, 0x2, 0x2}}], 0x50}, 0x0, 0x0) (async) syz_kvm_vgic_v3_setup(r3, 0x1, 0x100) (async) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0xa8200, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x27) syz_kvm_vgic_v3_setup(r8, 0x4, 0x1a0) (async) r9 = eventfd2(0x2, 0x80000) (async) r10 = eventfd2(0xf, 0x80001) ioctl$KVM_IRQFD(r8, 0x4020ae76, &(0x7f0000000100)={r10, 0x0, 0x2, r9}) ioctl$KVM_IRQFD(r8, 0x4020ae76, &(0x7f0000000000)={r9, 0x8, 0x2, r9}) (async) ioctl$KVM_IRQFD(r8, 0x4020ae76, &(0x7f0000000040)={r10, 0xffffffff, 0x1}) (async) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async, rerun: 64) r11 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000a9c000/0x400000)=nil) (rerun: 64) syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000b80)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r5, 0x4010aeac, &(0x7f0000000300)=@riscv64_csr={0x8030000000300000, &(0x7f00000000c0)=0x20000000001000}) 1m31.424461367s ago: executing program 6 (id=885): r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 64) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (rerun: 64) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) (async) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x7, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x2, &(0x7f0000000200)=0x400a000000}) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000240)=@attr_arm64={0x0, 0x0, 0x5, &(0x7f0000000280)=0x40400000080a0000}) (async) syz_kvm_add_vcpu$arm64(r0, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0) (async, rerun: 64) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x4f832, 0xffffffffffffffff, 0x1000000) (rerun: 64) r5 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000440)={0x0, &(0x7f00000002c0)=[@eret={0xe6, 0x18, 0xfff}, @hvc={0x32, 0x40, {0xc5000020, [0x9, 0x7f, 0x4, 0x401, 0x1000]}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x1, 0x3, 0x10, 0x3, 0x3}}, @eret={0xe6, 0x18, 0x6}, @mrs={0xbe, 0x18, {0x603000000013c030}}, @its_send_cmd={0xaa, 0x28, {0x7, 0x1, 0x3, 0x4, 0xfffffff7, 0x9}}, @its_setup={0x82, 0x28, {0x1, 0x2, 0x8d}}, @svc={0x122, 0x40, {0x400, [0x101, 0x80000001, 0xcdba, 0x1fd, 0x7fffffffffffffff]}}, @eret={0xe6, 0x18, 0x4f3a}, @irq_setup={0x46, 0x18, {0x2, 0x141}}], 0x170}, &(0x7f0000000480)=[@featur1={0x1, 0x49}], 0x1) (async) r9 = mmap$KVM_VCPU(0x0, 0x50000, 0x3, 0x11, r8, 0x0) munmap$KVM_VCPU(r9, 0x6) r10 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) openat$kvm(0x0, 0x0, 0x0, 0x0) r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r12, 0x4010aeab, &(0x7f0000000100)=@arm64_fw={0x6030000000140000, &(0x7f0000000180)=0x1}) 1m17.445253863s ago: executing program 7 (id=886): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x2000003, 0x2013, r3, 0x0) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) munmap(&(0x7f0000000000/0x4000)=nil, 0x4000) mmap$KVM_VCPU(&(0x7f0000007000/0x2000)=nil, r4, 0x3000003, 0x2011, r3, 0x0) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) ioctl$KVM_RESET_DIRTY_RINGS(r2, 0xaec7) 1m16.491375662s ago: executing program 6 (id=887): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r3, 0x0, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r4, 0x4018aee1, 0x0) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x2e) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r7, r8, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000140)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r8, 0x4010aeac, &(0x7f00000000c0)=@arm64_core={0x603000000010000c, &(0x7f0000000000)=0x10000}) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r8, 0x4018aee1, &(0x7f0000000180)=@attr_set_pmu={0x0, 0x0, 0x3, &(0x7f0000000100)=0x401}) syz_kvm_setup_cpu$arm64(r5, r4, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000480)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) r9 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r9, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) r10 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) r13 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r12, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r13, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r12, 0x0) r14 = eventfd2(0x0, 0x0) close(r14) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) ioctl$KVM_GET_VCPU_MMAP_SIZE(r10, 0xae04) 1m1.067124937s ago: executing program 7 (id=888): openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, &(0x7f0000000000)) 48.086774429s ago: executing program 7 (id=889): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x39) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000bff000/0x400000)=nil) ioctl$KVM_SET_DEVICE_ATTR_vm(r5, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)={0xef000000, 0x1000, 0x2}}) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000140)={0x0, &(0x7f0000000200)=[@smc={0x1e, 0x40, {0x86000000, [0x10000, 0xfff, 0x7e8, 0x7, 0x4000004]}}], 0x40}, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = mmap$KVM_VCPU(&(0x7f0000c41000/0x2000)=nil, 0x930, 0x280000a, 0x11, r3, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f0000000180)="f30149dd033be3ac2cc4a29ea6abf4e74507000000000000003ff7fbc51869be2e2e0000000080000f000000000000000001000000000000000000000000000e00", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x0, 0x0, 0x11, r3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x64c542, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x6) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r1, 0x4068aea3, &(0x7f0000000240)={0xe4, 0x0, 0x7f7c}) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) r11 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r10, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r11, 0x20, &(0x7f0000000300)="fb4149dd033b8986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67525673312b01040000000000002627e7000000000000000200", 0x0, 0xfffffffffffffe73) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x12, r10, 0x0) r12 = eventfd2(0x70, 0x0) close(r12) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x0) ioctl$KVM_IOEVENTFD(r12, 0x4040ae79, &(0x7f0000000000)={0x3, 0x41000, 0x4, r12, 0x6}) write$eventfd(r12, &(0x7f0000000100)=0xf91, 0x8) eventfd2(0x0, 0x0) 27.62693013s ago: executing program 38 (id=887): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r3, 0x0, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r4, 0x4018aee1, 0x0) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x2e) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r7, r8, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000140)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r8, 0x4010aeac, &(0x7f00000000c0)=@arm64_core={0x603000000010000c, &(0x7f0000000000)=0x10000}) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r8, 0x4018aee1, &(0x7f0000000180)=@attr_set_pmu={0x0, 0x0, 0x3, &(0x7f0000000100)=0x401}) syz_kvm_setup_cpu$arm64(r5, r4, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000480)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) r9 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r9, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) r10 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) r13 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r12, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r13, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r12, 0x0) r14 = eventfd2(0x0, 0x0) close(r14) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) ioctl$KVM_GET_VCPU_MMAP_SIZE(r10, 0xae04) 0s ago: executing program 39 (id=889): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x39) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000bff000/0x400000)=nil) ioctl$KVM_SET_DEVICE_ATTR_vm(r5, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)={0xef000000, 0x1000, 0x2}}) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000140)={0x0, &(0x7f0000000200)=[@smc={0x1e, 0x40, {0x86000000, [0x10000, 0xfff, 0x7e8, 0x7, 0x4000004]}}], 0x40}, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = mmap$KVM_VCPU(&(0x7f0000c41000/0x2000)=nil, 0x930, 0x280000a, 0x11, r3, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f0000000180)="f30149dd033be3ac2cc4a29ea6abf4e74507000000000000003ff7fbc51869be2e2e0000000080000f000000000000000001000000000000000000000000000e00", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x0, 0x0, 0x11, r3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x64c542, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x6) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r1, 0x4068aea3, &(0x7f0000000240)={0xe4, 0x0, 0x7f7c}) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) r11 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r10, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r11, 0x20, &(0x7f0000000300)="fb4149dd033b8986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67525673312b01040000000000002627e7000000000000000200", 0x0, 0xfffffffffffffe73) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x12, r10, 0x0) r12 = eventfd2(0x70, 0x0) close(r12) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x0) ioctl$KVM_IOEVENTFD(r12, 0x4040ae79, &(0x7f0000000000)={0x3, 0x41000, 0x4, r12, 0x6}) write$eventfd(r12, &(0x7f0000000100)=0xf91, 0x8) eventfd2(0x0, 0x0) kernel console output (not intermixed with test programs): [ 371.586883][ T24] audit: type=1400 audit(370.810:75): avc: denied { write } for pid=3261 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 382.389290][ T24] audit: type=1400 audit(381.600:76): avc: denied { read } for pid=3211 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 390.600866][ T24] audit: type=1400 audit(389.830:77): avc: denied { write } for pid=3271 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 395.891529][ T24] audit: type=1400 audit(395.120:78): avc: denied { write } for pid=3274 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 399.478050][ T3211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.210774][ T24] audit: type=1400 audit(406.440:79): avc: denied { write } for pid=3278 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 411.209558][ T24] audit: type=1400 audit(410.440:80): avc: denied { write } for pid=3281 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 420.709862][ T24] audit: type=1400 audit(419.910:81): avc: denied { write } for pid=3285 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 424.491948][ T24] audit: type=1400 audit(423.720:82): avc: denied { write } for pid=3288 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 436.324977][ T24] audit: type=1400 audit(435.550:83): avc: denied { write } for pid=3293 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 439.954411][ T24] audit: type=1400 audit(439.170:84): avc: denied { write } for pid=3296 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 442.599817][ T3211] eql: remember to turn off Van-Jacobson compression on your slave devices [ 452.885743][ T24] audit: type=1400 audit(452.100:85): avc: denied { write } for pid=3302 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 457.886162][ T24] audit: type=1400 audit(457.100:86): avc: denied { write } for pid=3305 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 473.294779][ T24] audit: type=1400 audit(472.480:87): avc: denied { write } for pid=3312 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 477.135591][ T24] audit: type=1400 audit(476.350:88): avc: denied { write } for pid=3315 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 482.474137][ T24] audit: type=1400 audit(481.700:89): avc: denied { write } for pid=3317 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 486.385869][ T24] audit: type=1400 audit(485.610:90): avc: denied { write } for pid=3320 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 496.835144][ T24] audit: type=1400 audit(496.060:91): avc: denied { write } for pid=3325 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 500.525084][ T24] audit: type=1400 audit(499.750:92): avc: denied { write } for pid=3328 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 505.765741][ T24] audit: type=1400 audit(504.990:93): avc: denied { write } for pid=3330 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 509.464958][ T24] audit: type=1400 audit(508.690:94): avc: denied { write } for pid=3333 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 535.852766][ T24] audit: type=1400 audit(535.080:95): avc: denied { write } for pid=3345 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 539.574316][ T24] audit: type=1400 audit(538.770:96): avc: denied { write } for pid=3348 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 549.545713][ T24] audit: type=1400 audit(548.770:97): avc: denied { write } for pid=3352 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 553.334485][ T24] audit: type=1400 audit(552.560:98): avc: denied { write } for pid=3355 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 564.714561][ T24] audit: type=1400 audit(563.930:99): avc: denied { write } for pid=3359 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 568.754577][ T24] audit: type=1400 audit(567.960:100): avc: denied { write } for pid=3362 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:41168' (ED25519) to the list of known hosts. [ 591.226887][ T24] audit: type=1400 audit(590.450:101): avc: denied { name_bind } for pid=3367 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 593.244712][ T24] audit: type=1400 audit(592.470:102): avc: denied { execute } for pid=3368 comm="sh" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 593.282548][ T24] audit: type=1400 audit(592.510:103): avc: denied { execute_no_trans } for pid=3368 comm="sh" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 624.438280][ T24] audit: type=1400 audit(623.670:104): avc: denied { mounton } for pid=3368 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 624.478318][ T24] audit: type=1400 audit(623.710:105): avc: denied { mount } for pid=3368 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 624.557013][ T3368] cgroup: Unknown subsys name 'net' [ 624.609770][ T24] audit: type=1400 audit(623.840:106): avc: denied { unmount } for pid=3368 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 625.000954][ T3368] cgroup: Unknown subsys name 'cpuset' [ 625.118496][ T3368] cgroup: Unknown subsys name 'rlimit' [ 625.907364][ T24] audit: type=1400 audit(625.140:107): avc: denied { setattr } for pid=3368 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 625.935073][ T24] audit: type=1400 audit(625.150:108): avc: denied { mounton } for pid=3368 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 625.956409][ T24] audit: type=1400 audit(625.180:109): avc: denied { mount } for pid=3368 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 626.927486][ T3371] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 626.945679][ T24] audit: type=1400 audit(626.170:110): avc: denied { relabelto } for pid=3371 comm="mkswap" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 626.984987][ T24] audit: type=1400 audit(626.200:111): avc: denied { write } for pid=3371 comm="mkswap" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 627.150147][ T24] audit: type=1400 audit(626.380:112): avc: denied { read } for pid=3368 comm="syz-executor" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 627.188010][ T24] audit: type=1400 audit(626.390:113): avc: denied { open } for pid=3368 comm="syz-executor" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 627.229866][ T3368] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 685.978509][ T24] audit: type=1400 audit(685.210:114): avc: denied { execmem } for pid=3372 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 689.557529][ T24] audit: type=1400 audit(688.770:115): avc: denied { read } for pid=3374 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 689.580756][ T24] audit: type=1400 audit(688.780:116): avc: denied { open } for pid=3375 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 689.650183][ T24] audit: type=1400 audit(688.850:117): avc: denied { mounton } for pid=3374 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 689.905568][ T24] audit: type=1400 audit(689.090:118): avc: denied { module_request } for pid=3374 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 690.840719][ T24] audit: type=1400 audit(690.070:119): avc: denied { sys_module } for pid=3374 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 715.707748][ T3375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 715.820132][ T3375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 716.800270][ T3374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 716.928726][ T3374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 727.870939][ T3375] hsr_slave_0: entered promiscuous mode [ 727.920359][ T3375] hsr_slave_1: entered promiscuous mode [ 729.019313][ T3374] hsr_slave_0: entered promiscuous mode [ 729.053033][ T3374] hsr_slave_1: entered promiscuous mode [ 729.096532][ T3374] debugfs: 'hsr0' already exists in 'hsr' [ 729.100703][ T3374] Cannot create hsr debugfs directory [ 734.505890][ T24] audit: type=1400 audit(733.730:120): avc: denied { create } for pid=3375 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 734.547127][ T24] audit: type=1400 audit(733.770:121): avc: denied { write } for pid=3375 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 734.600282][ T24] audit: type=1400 audit(733.830:122): avc: denied { read } for pid=3375 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 734.774583][ T3375] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 735.097807][ T3375] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 735.270696][ T3375] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 735.478942][ T3375] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 735.607149][ T3375] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 735.717505][ T3375] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 735.769271][ T3375] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 735.829481][ T3375] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 737.621892][ T3374] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 737.900151][ T3374] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 738.048127][ T3374] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 738.231649][ T3374] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 738.305576][ T3374] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 738.438179][ T3374] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 738.489113][ T3374] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 738.649397][ T3374] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 749.459566][ T3375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 752.409322][ T3374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 802.696481][ T3375] veth0_vlan: entered promiscuous mode [ 803.260792][ T3375] veth1_vlan: entered promiscuous mode [ 805.068687][ T3375] veth0_macvtap: entered promiscuous mode [ 805.469469][ T3375] veth1_macvtap: entered promiscuous mode [ 806.060305][ T3374] veth0_vlan: entered promiscuous mode [ 806.882162][ T3374] veth1_vlan: entered promiscuous mode [ 808.242072][ T3455] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.269131][ T3455] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.317089][ T3455] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.334732][ T3455] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.506916][ T3374] veth0_macvtap: entered promiscuous mode [ 810.711637][ T24] audit: type=1400 audit(809.890:123): avc: denied { mount } for pid=3375 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 810.810160][ T3374] veth1_macvtap: entered promiscuous mode [ 810.865212][ T24] audit: type=1400 audit(810.060:124): avc: denied { mounton } for pid=3375 comm="syz-executor" path="/syzkaller.rZkLrt/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 811.029943][ T24] audit: type=1400 audit(810.250:125): avc: denied { mount } for pid=3375 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 811.406252][ T24] audit: type=1400 audit(810.630:126): avc: denied { mounton } for pid=3375 comm="syz-executor" path="/syzkaller.rZkLrt/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 811.590652][ T24] audit: type=1400 audit(810.810:127): avc: denied { mounton } for pid=3375 comm="syz-executor" path="/syzkaller.rZkLrt/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 812.208329][ T24] audit: type=1400 audit(811.430:128): avc: denied { unmount } for pid=3375 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 812.465935][ T24] audit: type=1400 audit(811.690:129): avc: denied { mounton } for pid=3375 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1548 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 812.569522][ T24] audit: type=1400 audit(811.800:130): avc: denied { mount } for pid=3375 comm="syz-executor" name="/" dev="gadgetfs" ino=3749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 813.237254][ T24] audit: type=1400 audit(812.470:131): avc: denied { mount } for pid=3375 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 813.325710][ T24] audit: type=1400 audit(812.540:132): avc: denied { mounton } for pid=3375 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 813.515578][ T3392] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.520224][ T3392] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.607038][ T3392] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.610893][ T3392] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.868877][ T3375] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 816.128205][ T24] kauditd_printk_skb: 2 callbacks suppressed [ 816.138816][ T24] audit: type=1400 audit(815.350:135): avc: denied { read write } for pid=3375 comm="syz-executor" name="loop0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 816.166956][ T24] audit: type=1400 audit(815.390:136): avc: denied { open } for pid=3375 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 816.180640][ T24] audit: type=1400 audit(815.390:137): avc: denied { ioctl } for pid=3375 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=638 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 829.735278][ T24] audit: type=1400 audit(828.960:138): avc: denied { read } for pid=3526 comm="syz.0.1" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 829.804638][ T24] audit: type=1400 audit(829.020:139): avc: denied { open } for pid=3526 comm="syz.0.1" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 829.988127][ T24] audit: type=1400 audit(829.190:140): avc: denied { ioctl } for pid=3526 comm="syz.0.1" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 836.525638][ T24] audit: type=1400 audit(835.750:141): avc: denied { write } for pid=3533 comm="syz.0.3" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 867.507560][ T24] audit: type=1400 audit(866.720:142): avc: denied { append } for pid=3558 comm="syz.1.10" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 868.525815][ T24] audit: type=1400 audit(867.750:143): avc: denied { write } for pid=3557 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 876.304368][ T24] audit: type=1400 audit(875.520:144): avc: denied { write } for pid=3566 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 907.650227][ T3581] kvm [3581]: Failed to find VMA for hva 0x20d8d000 [ 941.580495][ T24] audit: type=1400 audit(940.800:145): avc: denied { read open } for pid=3600 comm="syz.0.23" path="net:[4026532627]" dev="nsfs" ino=4026532627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 941.680079][ T24] audit: type=1400 audit(940.910:146): avc: denied { ioctl } for pid=3600 comm="syz.0.23" path="net:[4026532627]" dev="nsfs" ino=4026532627 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 950.714920][ T24] audit: type=1400 audit(949.920:147): avc: denied { execute } for pid=3608 comm="syz.0.25" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=5036 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1041.470708][ T24] audit: type=1400 audit(1040.700:148): avc: denied { create } for pid=3649 comm="syz.1.39" anonclass=[kvm-gmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1149.636463][ T24] audit: type=1400 audit(1148.860:149): avc: denied { setattr } for pid=3720 comm="syz.0.60" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1157.652669][ T24] audit: type=1400 audit(1156.870:150): avc: denied { mmap_zero } for pid=3723 comm="syz.1.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 1231.007268][ T24] audit: type=1400 audit(1230.220:151): avc: denied { write } for pid=3770 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1237.872237][ T24] audit: type=1400 audit(1237.100:152): avc: denied { write } for pid=3777 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1412.129346][ T24] audit: type=1400 audit(1411.360:153): avc: denied { map } for pid=3883 comm="syz.1.109" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1412.276423][ T24] audit: type=1400 audit(1411.480:154): avc: denied { execute } for pid=3883 comm="syz.1.109" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1469.662252][ T3920] kvm [3919]: Unsupported guest access at: eeef0000 [ 1469.662252][ T3920] { Op0( 2), Op1( 3), CRn(15), CRm( 5), Op2( 5), func_write }, [ 1510.892429][ T24] audit: type=1400 audit(1510.120:155): avc: denied { write } for pid=3940 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1518.916157][ T24] audit: type=1400 audit(1518.120:156): avc: denied { write } for pid=3950 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1538.097805][ T24] audit: type=1400 audit(1537.280:157): avc: denied { execute } for pid=3959 comm="syz.0.136" path=2F36372F10FBFF67525673312B0104 dev="tmpfs" ino=357 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1748.814435][ T24] audit: type=1400 audit(1748.040:158): avc: denied { write } for pid=4079 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1757.585702][ T24] audit: type=1400 audit(1756.800:159): avc: denied { write } for pid=4087 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1763.502713][ T24] audit: type=1400 audit(1762.730:160): avc: denied { map } for pid=4093 comm="syz.0.178" path="pipe:[2750]" dev="pipefs" ino=2750 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1779.016459][ T24] audit: type=1400 audit(1778.200:161): avc: denied { map } for pid=4100 comm="syz.1.181" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=13710 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1779.074634][ T24] audit: type=1400 audit(1778.300:162): avc: denied { read } for pid=4100 comm="syz.1.181" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=13710 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2061.565349][ T24] audit: type=1400 audit(2060.770:163): avc: denied { write } for pid=4284 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2070.826128][ T24] audit: type=1400 audit(2069.890:164): avc: denied { write } for pid=4291 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2082.271260][ T4304] debugfs: 'vgic-its-state@8080000' already exists in '4304-9' [ 2323.392193][ T24] audit: type=1400 audit(2322.620:165): avc: denied { map } for pid=4455 comm="syz.1.291" path="/" dev="tmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2438.694468][ T24] audit: type=1400 audit(2437.920:166): avc: denied { write } for pid=4526 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2447.178544][ T24] audit: type=1400 audit(2446.410:167): avc: denied { write } for pid=4533 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2616.697665][ T4631] kvm [4631]: Failed to find VMA for hva 0x20c01000 [ 2616.732004][ T4632] kvm [4632]: Failed to find VMA for hva 0x20c01000 [ 2844.065571][ T24] audit: type=1400 audit(2843.280:168): avc: denied { write } for pid=4780 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2852.017070][ T24] audit: type=1400 audit(2851.220:169): avc: denied { write } for pid=4788 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2954.355444][ T4842] kvm [4841]: Unsupported guest access at: eeef0000 [ 2954.355444][ T4842] { Op0( 2), Op1( 0), CRn( 0), CRm( 6), Op2( 2), func_read }, [ 3336.541325][ T24] audit: type=1400 audit(3335.770:170): avc: denied { write } for pid=5085 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3343.784379][ T24] audit: type=1400 audit(3343.000:171): avc: denied { write } for pid=5096 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3487.138570][ T24] audit: type=1400 audit(3486.370:172): avc: denied { execute } for pid=5178 comm="syz.0.517" path="/sys/kernel/debug/kcov" dev="debugfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=file permissive=1 [ 3553.392568][ T5216] kvm [5216]: Failed to find VMA for hva 0x21016000 [ 3553.627307][ T5216] kvm [5216]: Failed to find VMA for hva 0x21016000 [ 3595.662818][ T5235] kvm [5235]: Failed to find VMA for hva 0x20d8d000 [ 3617.217452][ T5253] kvm [5253]: Failed to find VMA for hva 0x20dd0000 [ 3633.267984][ T24] audit: type=1400 audit(3632.490:173): avc: denied { write } for pid=5268 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3641.216954][ T24] audit: type=1400 audit(3640.390:174): avc: denied { write } for pid=5278 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3766.405670][ T24] audit: type=1400 audit(3765.630:175): avc: denied { write } for pid=5354 comm="syz.0.574" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=35010 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 4096.707277][ T24] audit: type=1400 audit(4095.920:176): avc: denied { write } for pid=5555 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4100.275166][ T24] audit: type=1400 audit(4099.500:177): avc: denied { write } for pid=5558 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4147.550671][ T3476] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4149.089293][ T3476] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4150.628016][ T3476] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4152.276905][ T3476] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4164.305956][ T3476] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 4164.465464][ T3476] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 4164.559825][ T3476] bond0 (unregistering): Released all slaves [ 4165.405966][ T3476] hsr_slave_0: left promiscuous mode [ 4165.430316][ T3476] hsr_slave_1: left promiscuous mode [ 4165.561621][ T3476] veth1_macvtap: left promiscuous mode [ 4165.595382][ T3476] veth0_macvtap: left promiscuous mode [ 4165.599941][ T3476] veth1_vlan: left promiscuous mode [ 4165.617454][ T3476] veth0_vlan: left promiscuous mode [ 4181.980195][ T3476] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4183.086919][ T3476] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4183.879300][ T3476] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4184.942850][ T3476] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4188.395382][ T24] audit: type=1400 audit(4187.590:178): avc: denied { write } for pid=5594 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4193.457499][ T24] audit: type=1400 audit(4192.680:179): avc: denied { write } for pid=5603 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4197.358055][ T3476] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 4197.486241][ T3476] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 4197.562796][ T3476] bond0 (unregistering): Released all slaves [ 4199.161386][ T3211] 8021q: adding VLAN 0 to HW filter on device eth1 [ 4199.938367][ T3476] hsr_slave_0: left promiscuous mode [ 4200.285502][ T3476] hsr_slave_1: left promiscuous mode [ 4200.652776][ T3476] veth1_macvtap: left promiscuous mode [ 4200.685978][ T3476] veth0_macvtap: left promiscuous mode [ 4200.690852][ T3476] veth1_vlan: left promiscuous mode [ 4200.725399][ T3476] veth0_vlan: left promiscuous mode [ 4222.877671][ T24] audit: type=1400 audit(4222.100:180): avc: denied { write } for pid=5620 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4224.682087][ T5561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4224.901348][ T5561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4227.272014][ T24] audit: type=1400 audit(4226.500:181): avc: denied { write } for pid=5629 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4230.129603][ T3211] 8021q: adding VLAN 0 to HW filter on device eth2 [ 4231.529007][ T5568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4231.756477][ T5568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4239.798986][ T24] audit: type=1400 audit(4239.030:182): avc: denied { write } for pid=5644 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4243.492573][ T5561] hsr_slave_0: entered promiscuous mode [ 4243.559928][ T5561] hsr_slave_1: entered promiscuous mode [ 4244.188622][ T24] audit: type=1400 audit(4243.420:183): avc: denied { write } for pid=5651 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4247.328897][ T3211] 8021q: adding VLAN 0 to HW filter on device eth3 [ 4251.107280][ T5568] hsr_slave_0: entered promiscuous mode [ 4251.169559][ T5568] hsr_slave_1: entered promiscuous mode [ 4251.226504][ T5568] debugfs: 'hsr0' already exists in 'hsr' [ 4251.230561][ T5568] Cannot create hsr debugfs directory [ 4255.358255][ T24] audit: type=1400 audit(4254.570:184): avc: denied { write } for pid=5660 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4257.045634][ T5561] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 4257.249277][ T5561] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 4257.700252][ T5561] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 4257.868614][ T5561] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 4257.948038][ T5561] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 4258.126013][ T5561] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 4258.457330][ T5561] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 4258.648413][ T5561] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 4260.126497][ T24] audit: type=1400 audit(4259.330:185): avc: denied { write } for pid=5665 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4264.568956][ T3211] 8021q: adding VLAN 0 to HW filter on device eth4 [ 4268.279340][ T5568] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 4268.696953][ T5568] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 4268.741947][ T5568] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 4269.082403][ T5568] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 4269.181978][ T5568] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 4269.570391][ T5568] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 4269.642477][ T5568] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 4270.028310][ T5568] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 4280.372089][ T24] audit: type=1400 audit(4279.600:186): avc: denied { write } for pid=5689 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4286.356420][ T5561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4286.995648][ T24] audit: type=1400 audit(4286.210:187): avc: denied { write } for pid=5699 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4291.717953][ T3211] 8021q: adding VLAN 0 to HW filter on device eth5 [ 4293.492221][ T5568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4304.562475][ T24] audit: type=1400 audit(4303.770:188): avc: denied { write } for pid=5712 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4312.011623][ T24] audit: type=1400 audit(4311.210:189): avc: denied { write } for pid=5720 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4317.471175][ T3211] 8021q: adding VLAN 0 to HW filter on device eth6 [ 4333.008152][ T24] audit: type=1400 audit(4332.230:190): avc: denied { write } for pid=5733 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4341.177372][ T24] audit: type=1400 audit(4340.330:191): avc: denied { write } for pid=5743 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4346.018820][ T3211] 8021q: adding VLAN 0 to HW filter on device eth7 [ 4362.857820][ T24] audit: type=1400 audit(4362.090:192): avc: denied { write } for pid=5763 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4369.585433][ T24] audit: type=1400 audit(4368.800:193): avc: denied { write } for pid=5772 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4373.911062][ T5561] veth0_vlan: entered promiscuous mode [ 4374.149349][ T3211] 8021q: adding VLAN 0 to HW filter on device eth8 [ 4374.999286][ T5561] veth1_vlan: entered promiscuous mode [ 4377.810231][ T5561] veth0_macvtap: entered promiscuous mode [ 4378.266548][ T5561] veth1_macvtap: entered promiscuous mode [ 4382.684340][ T5694] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 4382.702584][ T5694] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 4382.715297][ T5694] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 4382.737863][ T5694] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 4384.055248][ T5568] veth0_vlan: entered promiscuous mode [ 4385.877086][ T5568] veth1_vlan: entered promiscuous mode [ 4390.736249][ T24] audit: type=1400 audit(4389.960:194): avc: denied { mount } for pid=5561 comm="syz-executor" name="/" dev="gadgetfs" ino=39358 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 4391.336014][ T5568] veth0_macvtap: entered promiscuous mode [ 4392.298237][ T5568] veth1_macvtap: entered promiscuous mode [ 4395.696937][ T4001] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 4395.706492][ T4001] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 4395.802403][ T4001] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 4395.806472][ T4001] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 4415.175309][ T24] audit: type=1400 audit(4414.360:195): avc: denied { write } for pid=5796 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4424.784492][ T24] audit: type=1400 audit(4424.000:196): avc: denied { write } for pid=5809 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4453.130241][ T24] audit: type=1400 audit(4452.290:197): avc: denied { write } for pid=5830 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4464.594340][ T24] audit: type=1400 audit(4463.710:198): avc: denied { write } for pid=5841 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4485.264426][ T24] audit: type=1400 audit(4484.480:199): avc: denied { write } for pid=5858 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4494.696047][ T24] audit: type=1400 audit(4493.910:200): avc: denied { write } for pid=5869 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4511.062149][ T24] audit: type=1400 audit(4510.290:201): avc: denied { write } for pid=5876 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4522.357701][ T24] audit: type=1400 audit(4521.530:202): avc: denied { write } for pid=5885 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4543.444667][ T24] audit: type=1400 audit(4542.650:203): avc: denied { write } for pid=5896 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4553.354440][ T24] audit: type=1400 audit(4552.580:204): avc: denied { write } for pid=5906 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4589.157314][ T24] audit: type=1400 audit(4588.370:205): avc: denied { write } for pid=5928 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4599.369333][ T24] audit: type=1400 audit(4598.540:206): avc: denied { write } for pid=5938 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4634.470469][ T24] audit: type=1400 audit(4633.600:207): avc: denied { write } for pid=5959 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4645.921272][ T24] audit: type=1400 audit(4645.150:208): avc: denied { write } for pid=5968 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4662.878754][ T24] audit: type=1400 audit(4662.090:209): avc: denied { write } for pid=5977 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4672.615952][ T24] audit: type=1400 audit(4671.790:210): avc: denied { write } for pid=5988 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4696.749791][ T24] audit: type=1400 audit(4695.940:211): avc: denied { write } for pid=5999 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4707.656814][ T24] audit: type=1400 audit(4706.810:212): avc: denied { write } for pid=6012 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4725.825732][ T24] audit: type=1400 audit(4725.040:213): avc: denied { write } for pid=6024 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4735.431916][ T24] audit: type=1400 audit(4734.660:214): avc: denied { write } for pid=6035 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4870.905364][ T24] audit: type=1400 audit(4870.130:215): avc: denied { ioctl } for pid=6109 comm="syz.2.709" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=43353 ioctlcmd=0xae49 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 5023.345775][ T24] audit: type=1400 audit(5022.520:216): avc: denied { write } for pid=6189 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5031.977240][ T24] audit: type=1400 audit(5031.210:217): avc: denied { write } for pid=6196 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5196.501329][ T6141] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5198.208222][ T6141] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5199.489015][ T6141] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5200.856259][ T6141] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5218.509539][ T6141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 5218.698060][ T6141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 5219.189721][ T6141] bond0 (unregistering): Released all slaves [ 5221.374362][ T6141] hsr_slave_0: left promiscuous mode [ 5221.526410][ T6141] hsr_slave_1: left promiscuous mode [ 5222.315402][ T6141] veth1_macvtap: left promiscuous mode [ 5222.326258][ T6141] veth0_macvtap: left promiscuous mode [ 5222.335810][ T6141] veth1_vlan: left promiscuous mode [ 5222.366019][ T6141] veth0_vlan: left promiscuous mode [ 5264.320732][ T24] audit: type=1400 audit(5263.550:218): avc: denied { write } for pid=6290 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5269.828554][ T24] audit: type=1400 audit(5269.060:219): avc: denied { write } for pid=6295 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5274.119808][ T3211] 8021q: adding VLAN 0 to HW filter on device eth9 [ 5292.661941][ T24] audit: type=1400 audit(5291.890:220): avc: denied { write } for pid=6307 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5300.896930][ T24] audit: type=1400 audit(5300.090:221): avc: denied { write } for pid=6315 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5306.617500][ T3211] 8021q: adding VLAN 0 to HW filter on device eth10 [ 5319.029874][ T6267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 5319.459536][ T6267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 5324.197336][ T6270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 5324.501295][ T6270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 5328.110186][ T24] audit: type=1400 audit(5327.340:222): avc: denied { write } for pid=6334 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5336.484212][ T24] audit: type=1400 audit(5335.710:223): avc: denied { write } for pid=6342 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5342.672089][ T3211] 8021q: adding VLAN 0 to HW filter on device eth11 [ 5348.549409][ T4001] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5350.646560][ T4001] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5352.142893][ T4001] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5354.158217][ T4001] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5357.778098][ T6267] hsr_slave_0: entered promiscuous mode [ 5357.878115][ T6267] hsr_slave_1: entered promiscuous mode [ 5357.940446][ T6267] debugfs: 'hsr0' already exists in 'hsr' [ 5357.945794][ T6267] Cannot create hsr debugfs directory [ 5364.351231][ T24] audit: type=1400 audit(5363.520:224): avc: denied { write } for pid=6359 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5365.118802][ T6270] hsr_slave_0: entered promiscuous mode [ 5365.227505][ T6270] hsr_slave_1: entered promiscuous mode [ 5365.345927][ T6270] debugfs: 'hsr0' already exists in 'hsr' [ 5365.349607][ T6270] Cannot create hsr debugfs directory [ 5371.611732][ T24] audit: type=1400 audit(5370.840:225): avc: denied { write } for pid=6366 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5377.679767][ T4001] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 5377.838210][ T4001] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 5377.948411][ T4001] bond0 (unregistering): Released all slaves [ 5378.870637][ T3211] 8021q: adding VLAN 0 to HW filter on device eth12 [ 5379.159677][ T4001] hsr_slave_0: left promiscuous mode [ 5379.236193][ T4001] hsr_slave_1: left promiscuous mode [ 5379.639490][ T4001] veth1_macvtap: left promiscuous mode [ 5379.656395][ T4001] veth0_macvtap: left promiscuous mode [ 5379.669492][ T4001] veth1_vlan: left promiscuous mode [ 5379.681962][ T4001] veth0_vlan: left promiscuous mode [ 5400.859580][ T6267] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 5401.276382][ T6267] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 5401.469933][ T6267] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 5402.072845][ T6267] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 5402.196544][ T6267] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 5402.427965][ T6267] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 5402.658504][ T6267] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 5403.226966][ T6267] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 5409.108432][ T6270] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 5409.530828][ T6270] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 5409.632601][ T6270] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 5410.062178][ T6270] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 5410.282393][ T6270] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 5410.858842][ T24] audit: type=1400 audit(5410.080:226): avc: denied { write } for pid=6375 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5411.018430][ T6270] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 5411.196629][ T6270] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 5411.512572][ T6270] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 5420.675251][ T24] audit: type=1400 audit(5419.890:227): avc: denied { write } for pid=6395 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5426.732302][ T3211] 8021q: adding VLAN 0 to HW filter on device eth13 [ 5435.955498][ T6267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 5441.919770][ T6270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 5445.357436][ T24] audit: type=1400 audit(5444.540:228): avc: denied { write } for pid=6408 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5452.502968][ T24] audit: type=1400 audit(5451.730:229): avc: denied { write } for pid=6417 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5458.041044][ T3211] 8021q: adding VLAN 0 to HW filter on device eth14 [ 5486.926874][ T24] audit: type=1400 audit(5486.130:230): avc: denied { write } for pid=6434 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5496.116447][ T24] audit: type=1400 audit(5495.240:231): avc: denied { write } for pid=6444 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5501.122043][ T3211] 8021q: adding VLAN 0 to HW filter on device eth15 [ 5508.475294][ T24] audit: type=1400 audit(5507.700:232): avc: denied { write } for pid=6452 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5515.988575][ T24] audit: type=1400 audit(5515.190:233): avc: denied { write } for pid=6462 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5534.661903][ T24] audit: type=1400 audit(5533.870:234): avc: denied { write } for pid=6474 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5544.537287][ T24] audit: type=1400 audit(5543.710:235): avc: denied { write } for pid=6484 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5564.846140][ T6267] veth0_vlan: entered promiscuous mode [ 5565.746088][ T6267] veth1_vlan: entered promiscuous mode [ 5567.446152][ T24] audit: type=1400 audit(5566.660:236): avc: denied { write } for pid=6500 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5569.010045][ T6267] veth0_macvtap: entered promiscuous mode [ 5569.969862][ T6267] veth1_macvtap: entered promiscuous mode [ 5572.236540][ T6270] veth0_vlan: entered promiscuous mode [ 5573.741962][ T6270] veth1_vlan: entered promiscuous mode [ 5575.639612][ T5460] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 5575.670714][ T5460] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 5575.738819][ T5460] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 5575.748676][ T5460] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 5575.865090][ T24] audit: type=1400 audit(5575.090:237): avc: denied { write } for pid=6505 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5580.158328][ T6270] veth0_macvtap: entered promiscuous mode [ 5580.896457][ T6270] veth1_macvtap: entered promiscuous mode [ 5581.771059][ T3211] 8021q: adding VLAN 0 to HW filter on device eth16 [ 5585.814325][ T3707] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 5585.842665][ T5460] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 5585.931420][ T6279] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 5585.952696][ T6141] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 5619.344858][ T24] audit: type=1400 audit(5618.500:238): avc: denied { write } for pid=6522 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5631.504446][ T24] audit: type=1400 audit(5630.640:239): avc: denied { write } for pid=6534 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5684.054329][ T24] audit: type=1400 audit(5683.260:240): avc: denied { write } for pid=6561 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5695.775127][ T24] audit: type=1400 audit(5694.990:241): avc: denied { write } for pid=6573 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5724.776136][ T24] audit: type=1400 audit(5724.000:242): avc: denied { write } for pid=6585 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5738.236513][ T24] audit: type=1400 audit(5737.430:243): avc: denied { write } for pid=6595 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5772.464425][ T24] audit: type=1400 audit(5771.670:244): avc: denied { write } for pid=6614 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5785.754676][ T24] audit: type=1400 audit(5784.960:245): avc: denied { write } for pid=6623 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5818.426119][ T24] audit: type=1400 audit(5817.640:246): avc: denied { write } for pid=6642 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5828.596843][ T24] audit: type=1400 audit(5827.800:247): avc: denied { write } for pid=6651 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5863.429903][ T24] audit: type=1400 audit(5862.540:248): avc: denied { write } for pid=6667 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5875.055328][ T24] audit: type=1400 audit(5874.250:249): avc: denied { write } for pid=6677 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5899.194875][ T24] audit: type=1400 audit(5898.310:250): avc: denied { write } for pid=6683 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5913.115632][ T24] audit: type=1400 audit(5912.250:251): avc: denied { write } for pid=6692 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6023.914885][ T24] audit: type=1400 audit(6023.010:252): avc: denied { write } for pid=6744 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6037.004344][ T24] audit: type=1400 audit(6036.190:253): avc: denied { write } for pid=6754 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6397.016970][ T24] audit: type=1400 audit(6396.210:254): avc: denied { write } for pid=6917 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6408.966122][ T24] audit: type=1400 audit(6408.180:255): avc: denied { write } for pid=6929 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6667.408360][ T5677] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6671.300366][ T5677] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6672.021870][ T7011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 6672.552250][ T5677] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6673.388795][ T7011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 6675.416825][ T5677] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6683.468286][ T7017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 6684.619954][ T7017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 6700.650579][ T5677] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 6700.821910][ T5677] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 6700.974842][ T5677] bond0 (unregistering): Released all slaves [ 6702.795471][ T5677] hsr_slave_0: left promiscuous mode [ 6702.891357][ T5677] hsr_slave_1: left promiscuous mode [ 6703.300663][ T5677] veth1_macvtap: left promiscuous mode [ 6703.309913][ T5677] veth0_macvtap: left promiscuous mode [ 6703.336234][ T5677] veth1_vlan: left promiscuous mode [ 6703.340195][ T5677] veth0_vlan: left promiscuous mode [ 6726.907638][ T6279] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6728.732706][ T6279] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6730.521895][ T6279] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6732.481343][ T6279] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6744.196734][ T24] audit: type=1400 audit(6743.420:256): avc: denied { write } for pid=7083 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6752.597625][ T24] audit: type=1400 audit(6751.800:257): avc: denied { write } for pid=7091 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6756.720875][ T6279] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 6757.329237][ T6279] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 6757.489481][ T6279] bond0 (unregistering): Released all slaves [ 6759.122615][ T3211] 8021q: adding VLAN 0 to HW filter on device eth17 [ 6759.425750][ T6279] hsr_slave_0: left promiscuous mode [ 6759.477164][ T6279] hsr_slave_1: left promiscuous mode [ 6759.797887][ T6279] veth1_macvtap: left promiscuous mode [ 6759.804811][ T6279] veth0_macvtap: left promiscuous mode [ 6759.809625][ T6279] veth1_vlan: left promiscuous mode [ 6759.821633][ T6279] veth0_vlan: left promiscuous mode [ 6775.720956][ T7011] hsr_slave_0: entered promiscuous mode [ 6775.798988][ T7011] hsr_slave_1: entered promiscuous mode [ 6777.189125][ T7017] hsr_slave_0: entered promiscuous mode [ 6777.214869][ T7017] hsr_slave_1: entered promiscuous mode [ 6777.232820][ T7017] debugfs: 'hsr0' already exists in 'hsr' [ 6777.257398][ T7017] Cannot create hsr debugfs directory [ 6788.944854][ T24] audit: type=1400 audit(6788.170:258): avc: denied { write } for pid=7097 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6795.945437][ T24] audit: type=1400 audit(6795.130:259): avc: denied { write } for pid=7101 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6796.679198][ T7011] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 6797.340403][ T7011] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 6797.562493][ T7011] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 6798.261453][ T7011] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 6798.491902][ T7011] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 6799.184800][ T7011] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 6799.991500][ T7011] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 6800.459148][ T7011] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 6801.979288][ T3211] 8021q: adding VLAN 0 to HW filter on device eth18 [ 6805.486252][ T7017] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 6805.956636][ T7017] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 6806.115505][ T7017] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 6806.449711][ T7017] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 6806.675442][ T7017] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 6807.096841][ T7017] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 6807.258384][ T7017] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 6807.654996][ T7017] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 6824.578017][ T24] audit: type=1400 audit(6823.790:260): avc: denied { write } for pid=7124 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6833.310744][ T24] audit: type=1400 audit(6832.530:261): avc: denied { write } for pid=7134 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6834.356733][ T7011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 6839.420134][ T3211] 8021q: adding VLAN 0 to HW filter on device eth19 [ 6840.422211][ T7017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 6862.736927][ T24] audit: type=1400 audit(6861.960:262): avc: denied { write } for pid=7147 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6875.010983][ T24] audit: type=1400 audit(6874.190:263): avc: denied { write } for pid=7155 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6882.730864][ T3211] 8021q: adding VLAN 0 to HW filter on device eth20 [ 6902.538728][ T24] audit: type=1400 audit(6901.770:264): avc: denied { write } for pid=7169 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6911.645202][ T24] audit: type=1400 audit(6910.830:265): avc: denied { write } for pid=7180 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6918.591469][ T3211] 8021q: adding VLAN 0 to HW filter on device eth21 [ 6931.636173][ T24] audit: type=1400 audit(6930.850:266): avc: denied { write } for pid=7189 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6942.577597][ T24] audit: type=1400 audit(6941.770:267): avc: denied { write } for pid=7200 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6968.015600][ T24] audit: type=1400 audit(6967.190:268): avc: denied { write } for pid=7215 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6978.255489][ T24] audit: type=1400 audit(6977.450:269): avc: denied { write } for pid=7225 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6983.782791][ T7011] veth0_vlan: entered promiscuous mode [ 6984.981832][ T7011] veth1_vlan: entered promiscuous mode [ 6986.136369][ T3211] 8021q: adding VLAN 0 to HW filter on device eth22 [ 6990.519944][ T7011] veth0_macvtap: entered promiscuous mode [ 6992.230121][ T7011] veth1_macvtap: entered promiscuous mode [ 6992.688246][ T7017] veth0_vlan: entered promiscuous mode [ 6995.218751][ T7017] veth1_vlan: entered promiscuous mode [ 6999.985460][ T5100] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 6999.998311][ T5100] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 7000.007193][ T6141] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 7000.008083][ T6141] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 7003.101351][ T7017] veth0_macvtap: entered promiscuous mode [ 7005.037161][ T7017] veth1_macvtap: entered promiscuous mode [ 7011.186397][ T5694] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 7011.200814][ T5694] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 7011.296899][ T7055] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 7011.454480][ T5100] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 7014.539754][ T24] audit: type=1400 audit(7013.750:270): avc: denied { write } for pid=7233 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7027.916415][ T24] audit: type=1400 audit(7027.030:271): avc: denied { write } for pid=7242 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7038.112595][ T3211] 8021q: adding VLAN 0 to HW filter on device eth23 [ 7079.855081][ T24] audit: type=1400 audit(7079.080:272): avc: denied { write } for pid=7263 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7091.952464][ T24] audit: type=1400 audit(7091.160:273): avc: denied { write } for pid=7271 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7102.512572][ T3211] 8021q: adding VLAN 0 to HW filter on device eth24 [ 7150.218512][ T24] audit: type=1400 audit(7149.290:274): avc: denied { write } for pid=7304 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7165.647168][ T24] audit: type=1400 audit(7164.860:275): avc: denied { write } for pid=7314 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7198.208642][ T24] audit: type=1400 audit(7197.370:276): avc: denied { write } for pid=7326 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7208.264967][ T24] audit: type=1400 audit(7207.470:277): avc: denied { write } for pid=7330 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7244.024311][ T24] audit: type=1400 audit(7243.230:278): avc: denied { write } for pid=7342 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7258.114293][ T24] audit: type=1400 audit(7257.240:279): avc: denied { write } for pid=7353 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7288.610572][ T24] audit: type=1400 audit(7287.700:280): avc: denied { write } for pid=7366 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7301.127746][ T24] audit: type=1400 audit(7300.330:281): avc: denied { write } for pid=7371 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7329.391560][ T7331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 7329.831473][ T7331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 7363.299568][ T24] audit: type=1400 audit(7362.520:282): avc: denied { write } for pid=7400 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7373.391391][ T7344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 7373.861411][ T7344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 7376.594994][ T24] audit: type=1400 audit(7375.810:283): avc: denied { write } for pid=7409 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7388.170205][ T7331] hsr_slave_0: entered promiscuous mode [ 7388.268932][ T7331] hsr_slave_1: entered promiscuous mode [ 7388.477818][ T7331] debugfs: 'hsr0' already exists in 'hsr' [ 7388.514709][ T7331] Cannot create hsr debugfs directory [ 7427.940644][ T24] audit: type=1400 audit(7427.130:284): avc: denied { write } for pid=7427 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7430.884970][ T7331] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 7431.402219][ T7331] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 7433.572216][ T7331] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 7434.160134][ T7331] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 7435.351404][ T7344] hsr_slave_0: entered promiscuous mode [ 7435.509076][ T7344] hsr_slave_1: entered promiscuous mode [ 7435.605318][ T7344] debugfs: 'hsr0' already exists in 'hsr' [ 7435.608303][ T7344] Cannot create hsr debugfs directory [ 7435.675562][ T7331] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 7436.198708][ T7331] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 7436.342308][ T7331] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 7436.936928][ T7331] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 7441.605539][ T24] audit: type=1400 audit(7440.660:285): avc: denied { write } for pid=7434 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7469.325040][ T24] audit: type=1400 audit(7468.550:286): avc: denied { write } for pid=7447 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7473.698225][ T7344] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 7474.302061][ T7344] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 7474.518134][ T7344] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 7475.248124][ T7344] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 7475.499082][ T7344] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 7476.161971][ T7344] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 7476.438816][ T7344] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 7477.142236][ T7344] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 7487.514852][ T24] audit: type=1400 audit(7486.680:287): avc: denied { write } for pid=7461 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7492.798015][ T7331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 7528.335658][ T24] audit: type=1400 audit(7527.390:288): avc: denied { write } for pid=7474 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7533.710269][ T7344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 7545.870267][ T24] audit: type=1400 audit(7545.090:289): avc: denied { write } for pid=7482 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7581.225060][ T24] audit: type=1400 audit(7580.420:290): avc: denied { write } for pid=7492 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7599.995377][ T24] audit: type=1400 audit(7599.180:291): avc: denied { write } for pid=7502 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7628.128601][ T26] INFO: task syz.7.889:7319 blocked for more than 430 seconds. [ 7628.206250][ T26] Not tainted syzkaller #0 [ 7628.230833][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 7628.231543][ T26] task:syz.7.889 state:D stack:0 pid:7319 tgid:7319 ppid:7017 task_flags:0x400040 flags:0x00000011 [ 7628.304944][ T26] Call trace: [ 7628.305813][ T26] __switch_to+0x5e0/0xb70 (T) [ 7628.308104][ T26] __schedule+0x1e0c/0x38cc [ 7628.308634][ T26] schedule+0x1b4/0x274 [ 7628.309104][ T26] schedule_timeout+0x68/0x1e4 [ 7628.309590][ T26] wait_for_completion+0x1b8/0x414 [ 7628.310029][ T26] __synchronize_srcu+0x1c8/0x208 [ 7628.310480][ T26] synchronize_srcu+0x668/0x8dc [ 7628.310957][ T26] mmu_notifier_unregister+0x33c/0x444 [ 7628.311464][ T26] kvm_put_kvm+0x69c/0xbbc [ 7628.311997][ T26] kvm_vm_release+0x58/0x78 [ 7628.312428][ T26] __fput+0x4ac/0x978 [ 7628.312874][ T26] ____fput+0x20/0x30 SYZFAIL: failed to recv rpc [ 7628.497553][ T26] task_work_run+0x1b8/0x250 [ 7628.498265][ T26] exit_to_user_mode_loop+0x110/0x188 [ 7628.498820][ T26] el0_svc+0x18c/0x240 [ 7628.499275][ T26] el0t_64_sync_handler+0x84/0x12c [ 7628.499738][ T26] el0t_64_sync+0x198/0x19c [ 7628.610832][ T26] [ 7628.610832][ T26] Showing all locks held in the system: fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 7628.642358][ T26] 1 lock held by khungtaskd/26: [ 7628.676869][ T26] #0: ffff800087e43358 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x4c/0x188 [ 7628.690347][ T26] 2 locks held by getty/3239: [ 7628.690779][ T26] #0: 00f00000126d60a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 7628.692478][ T26] #1: 76ff80008cb8b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x314/0x11f8 [ 7628.807898][ T26] 2 locks held by syz-executor/3368: [ 7628.808255][ T26] 2 locks held by kworker/u4:1/3707: [ 7628.808591][ T26] #0: 4bf000000d036140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x958/0x154c [ 7628.810372][ T26] #1: ffff80008e607ce8 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x978/0x154c [ 7628.812049][ T26] 3 locks held by kworker/u4:9/5694: [ 7628.812388][ T26] 3 locks held by kworker/u4:10/6279: [ 7628.812794][ T26] 3 locks held by kworker/u4:2/6802: [ 7628.954251][ T26] 3 locks held by kworker/u4:3/7024: [ 7628.954982][ T26] 3 locks held by kworker/u4:8/7055: [ 7628.955343][ T26] 2 locks held by kworker/u4:13/7154: [ 7628.955663][ T26] #0: 4bf000000d036140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x958/0x154c [ 7628.957446][ T26] #1: ffff80008f0e7ce8 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x978/0x154c [ 7628.959131][ T26] 4 locks held by kworker/0:2/7234: [ 7628.959445][ T26] 2 locks held by kworker/0:3/7235: [ 7628.959789][ T26] 2 locks held by syz.6.887/7307: [ 7628.960159][ T26] 3 locks held by kworker/u4:14/7464: [ 7628.960467][ T26] 1 lock held by modprobe/7513: [ 7628.960799][ T26] 4 locks held by modprobe/7514: [ 7628.961276][ T26] [ 7628.961567][ T26] ============================================= [ 7628.961567][ T26] [ 7628.962553][ T26] Kernel panic - not syncing: hung_task: blocked tasks [ 7628.977006][ T26] CPU: 0 UID: 0 PID: 26 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT [ 7628.978608][ T26] Hardware name: linux,dummy-virt (DT) [ 7628.979663][ T26] Call trace: [ 7628.980546][ T26] show_stack+0x2c/0x3c (C) [ 7628.981661][ T26] __dump_stack+0x30/0x40 [ 7628.982712][ T26] dump_stack_lvl+0x30/0x12c [ 7628.983767][ T26] dump_stack+0x1c/0x28 [ 7628.984791][ T26] vpanic+0x4cc/0x844 [ 7628.985679][ T26] vpanic+0x0/0x844 [ 7628.986619][ T26] hung_task_panic+0x0/0x2c [ 7628.987551][ T26] kthread+0x4cc/0x514 [ 7628.988461][ T26] ret_from_fork+0x10/0x20 [ 7628.990383][ T26] Kernel Offset: disabled [ 7628.991233][ T26] CPU features: 0x00000000,0034600b,f7c647a1,057ffe1f [ 7628.992492][ T26] Memory Limit: none [ 7628.994840][ T26] Rebooting in 86400 seconds..