last executing test programs: 57m26.12336779s ago: executing program 1 (id=175): openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async) r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) (async) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = eventfd2(0xffff10c0, 0x801) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0xf0b, 0x8080000, 0x8, r3}) syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000280)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x1}}], 0x28}, 0x0, 0x0) (async) r4 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000280)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x1}}], 0x28}, 0x0, 0x0) ioctl$KVM_CAP_PTP_KVM(r1, 0x4068aea3, &(0x7f0000000000)) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8}) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1a) syz_kvm_setup_cpu$arm64(r5, r4, &(0x7f0000bff000/0x400000)=nil, &(0x7f0000000800)=[{0x0, &(0x7f00000002c0)}], 0x44, 0x0, &(0x7f0000000840)=[@featur1={0x1, 0x33}], 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) 57m19.985528138s ago: executing program 1 (id=177): ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) (async) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000280)={0xffffffffffffffff, 0xc8}) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x181900, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000300)={0x4, 0xffffffffffffffff, 0x1}) r4 = ioctl$KVM_CREATE_VM(r3, 0x800454df, 0x110e22fffb) r5 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x25) (async) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_GET_ONE_REG(r7, 0x4010aeab, &(0x7f0000000380)=@arm64_sve_vls={0x606000000015ffff, &(0x7f0000000340)=0xffff}) (async) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000080)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000140)}) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f0000000180)=@attr_arm64={0x0, 0x8, 0x0, &(0x7f00000001c0)=0xfffffffffffffff5}) (async) mmap$KVM_VCPU(&(0x7f0000593000/0x1000)=nil, 0x0, 0x2, 0x80010, r9, 0x0) (async) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) (async) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x23) ioctl$KVM_HAS_DEVICE_ATTR_vm(r10, 0x4018aee3, &(0x7f0000000240)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000200)={0x10001, 0x1ff}}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000100)={0xffffffffffffffff, 0x200c8, 0x1}) (async) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r13, 0x4068aea3, &(0x7f00000006c0)={0xdf, 0x0, 0x80000}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r13, 0x4020ae46, &(0x7f0000000740)={0x5, 0x1, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r13, 0x4020ae46, &(0x7f0000000780)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r14 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000440)={0x4, 0xffffffffffffffff, 0x1}) (async) openat$kvm(0x0, &(0x7f0000000640), 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000480)=@x86={0x11, 0x2, 0xf, 0x0, 0x5, 0x4, 0x82, 0x46, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x3, 0xffc0000, 0x5, 0xff, 0xa, 0x8, '\x00', 0x1, 0x93}) 57m17.581281093s ago: executing program 0 (id=178): mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) munmap$KVM_VCPU(0x0, 0x1000000000) mmap$KVM_VCPU(0x0, 0x50000, 0x2000002, 0x10031, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r1 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x300) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, r0, 0xc, 0x20010, r3, 0x0) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000) munmap(&(0x7f0000482000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x24132, 0xffffffffffffffff, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r7, r8, &(0x7f0000bfe000/0x400000)=nil, &(0x7f0000000180)=[{0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1e0000000000000040000004000000005000008400000000980f000000000000ffffbfff0000000007000000000000000100008000000000fbffffffffffffff"], 0x40}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r8, 0x4010aeab, &(0x7f0000000200)=@arm64_core={0x6030000000100048, &(0x7f0000000240)=0x101}) syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 57m10.576942049s ago: executing program 1 (id=179): mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f00003af000/0x400000)=nil) munmap(&(0x7f0000011000/0xc00000)=nil, 0xc00000) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x6, 0x8032, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000000)={0x4, 0x0, [{0x1, 0x2, 0x1, 0x0, @adapter={0x7, 0x100000000, 0x8, 0x0, 0x7}}, {0x9, 0x2, 0x1, 0x0, @adapter={0xd4ff, 0x6d39, 0x2, 0x0, 0x7f}}, {0x3, 0x0, 0x1, 0x0, @sint={0x6, 0x8000}}, {0x0, 0x0, 0x0, 0x0, @adapter={0x8f9, 0xe808e8f, 0x3f, 0x7, 0x332ccd89}}]}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000380)={0xffffffffffffffff, 0xc8, 0x1}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x9b, 0xf, 0x0, 0x5, 0x8, 0x82, 0x46, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x900001, 0x0, 0x0, 0x3, 0xa, 0x8, '\x00', 0x1, 0x93}) write$eventfd(r2, &(0x7f0000000200)=0x3, 0xfdef) mmap$KVM_VCPU(&(0x7f0000005000/0xc00000)=nil, 0x930, 0x2000007, 0x30d2a4fbfbea96b8, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000a5a000/0x400000)=nil) ioctl$KVM_IRQ_LINE(r4, 0x4008ae61, &(0x7f00000002c0)={0x1da, 0x5}) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000300)={0x0, &(0x7f0000000340)}, &(0x7f0000000340)=[@featur2={0x1, 0x58}], 0x1) ioctl$KVM_RUN(r6, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x2000001, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) r7 = openat$kvm(0x0, &(0x7f00000003c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_ARM_VCPU_INIT(r9, 0x4020aeae, &(0x7f0000000440)={0x5}) ioctl$KVM_RUN(r9, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f000000c000/0x3000)=nil, 0x0, 0xe, 0x40010, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0xb, 0x23ac5f9b426ec4b2, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) 57m8.714593325s ago: executing program 0 (id=180): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = syz_kvm_setup_syzos_vm$arm64(r0, &(0x7f0000c00000/0x400000)=nil) r2 = syz_kvm_setup_syzos_vm$arm64(r0, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000b80)={0x0, 0x0}, &(0x7f0000000bc0)=[@featur1={0x1, 0x4}], 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x8c00, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) close(0x4) close(0x5) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000180)=@attr_arm64={0x0, 0x1, 0x1, &(0x7f00000001c0)=0x5}) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000000)=@arm64_fw={0x6030000000140000, &(0x7f0000000200)=0x10001}) r8 = syz_kvm_add_vcpu$arm64(r1, &(0x7f0000000b80)={0x0, &(0x7f0000000100)=[@smc={0x1e, 0x40, {0x8400000a, [0x3, 0x6e, 0x7f, 0x9, 0x9]}}], 0x40}, &(0x7f0000000040)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r8, 0xae80, 0x0) 57m2.39158814s ago: executing program 1 (id=181): openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) (async) r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=[@featur1={0x1, 0x81}], 0x1) r5 = syz_kvm_add_vcpu$arm64(r3, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@msr={0x14, 0x20, {0x603000000013c65d, 0x3}}], 0x20}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r2, 0x3, 0xa0) (async) syz_kvm_vgic_v3_setup(r2, 0x3, 0xa0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@mrs={0xbe, 0x18, {0x603000000013dcf0}}], 0x18}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) (async) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@mrs={0xbe, 0x18, {0x603000000013dcf0}}], 0x18}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r8, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) r9 = openat$kvm(0x0, &(0x7f0000000200), 0x80, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) (async) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000bfe000/0x400000)=nil) r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000240)={0x0, &(0x7f0000000280)=[@memwrite={0x6e, 0x30, @vgic_gicr={0x80a0000, 0xa4, 0x402, 0x8}}], 0x30}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r10, 0x4, 0x280) ioctl$KVM_RUN(r12, 0xae80, 0x0) (async) ioctl$KVM_RUN(r12, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) 57m1.633585212s ago: executing program 0 (id=182): r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r4 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000a5a000/0x400000)=nil) (async) r6 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f00000003c0)={0x0, &(0x7f0000000040)}, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r8 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r7, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f00000002c0)="fb0149dd833be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8faa767969d22627e700", 0x0, 0x48) (async) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r7, 0x0) (async) r9 = openat$kvm(0xffffff9c, &(0x7f0000000340), 0x1a17f2, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0) (async) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) (async) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000380)=@arm64_core={0x6030000000100028, 0x0}) r10 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CREATE_VM(r9, 0x401c5820, 0x20000007) (async) r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f00000007c0)={0x0, &(0x7f00000008c0)}, &(0x7f0000000800)=[@featur1={0x1, 0x4a}], 0x1) (async) r12 = openat$kvm(0x0, &(0x7f0000000180), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000c00000/0x400000)=nil) r15 = syz_kvm_add_vcpu$arm64(r14, &(0x7f0000000200)={0x0, &(0x7f0000000840)=[@hvc={0x32, 0x40, {0xc4000012, [0x80000000, 0x8, 0x3, 0x7f, 0x800]}}], 0x40}, &(0x7f0000000880)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r15, 0xae80, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000f7f000/0x3000)=nil, 0x0, 0x2000000, 0x4010, r11, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000001c0)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r16, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4}) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2) 56m51.622258893s ago: executing program 0 (id=183): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f00000006c0)={0x0, &(0x7f00000001c0)=[@irq_setup={0x46, 0x18, {0x2, 0x56}}, @msr={0x14, 0x20, {0x603000000013c021, 0x80000001}}, @uexit={0x0, 0x18, 0x9}, @its_setup={0x82, 0x28, {0x3, 0x0, 0x269}}, @mrs={0xbe, 0x18, {0x603000000013e6cc}}, @irq_setup={0x46, 0x18, {0x3, 0x21b}}, @irq_setup={0x46, 0x18, {0x0, 0x8e}}, @eret={0xe6, 0x18, 0x7}, @smc={0x1e, 0x40, {0x84000005, [0x8000000000000001, 0x6, 0x80000000, 0x6, 0x9]}}, @smc={0x1e, 0x40, {0xc4000010, [0x7, 0x9, 0x8001, 0xe829, 0x8]}}, @eret={0xe6, 0x18}, @its_setup={0x82, 0x28, {0x4, 0x1, 0x329}}, @code={0xa, 0x84, {"000028d5c0dc80d20080b0f2210180d2020180d2230180d2040080d2020000d4c00583d20080b8f2a10180d2a20180d2230180d2640180d2020000d4000028d500d18bd200a0b8f2410080d2220180d2e30180d2440180d2020000d4000020cb007008d5000008d50058284e002cc01a"}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xfff4, 0xcadc, 0x7}}, @irq_setup={0x46, 0x18, {0x3, 0x33e}}, @msr={0x14, 0x20, {0x603000000013df6a, 0x4}}, @eret={0xe6, 0x18, 0x4}, @eret={0xe6, 0x18}, @msr={0x14, 0x20, {0x603000000013c290, 0x6222}}, @hvc={0x32, 0x40, {0x8400000c, [0x6a872668, 0x6, 0x9, 0x6, 0x4b]}}, @msr={0x14, 0x20, {0x603000000013deef, 0x2}}, @hvc={0x32, 0x40, {0xc2000210, [0x412, 0x248, 0x1b89, 0x100000000, 0xab5]}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x100, 0xfd40}}, @eret={0xe6, 0x18, 0xfffffffffffffffb}, @mrs={0xbe, 0x18, {0x603000000013c649}}, @its_setup={0x82, 0x28, {0x3, 0x2, 0x29e}}, @hvc={0x32, 0x40, {0x84000050, [0x0, 0xf, 0x5, 0x8]}}, @svc={0x122, 0x40, {0x8400000d, [0x2, 0x1ff, 0xec, 0xf67, 0x6]}}, @its_send_cmd={0xaa, 0x28, {0xe, 0x1, 0x4, 0x4, 0x3, 0x0, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x0, 0x4, 0xf, 0x3, 0x5, 0x2}}, @uexit={0x0, 0x18, 0xf04}], 0x4e4}, &(0x7f0000000700)=[@featur1={0x1, 0x1}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) munmap(&(0x7f0000481000/0x1000)=nil, 0x1000) munmap(&(0x7f0000136000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) mmap$KVM_VCPU(&(0x7f0000f7e000/0x3000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r5 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r6, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)={0x16, 0x4, 0x1}}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r6, r7, &(0x7f0000bfe000/0x400000)=nil, &(0x7f0000000140)=[{0x0, &(0x7f0000000180)=[@smc={0x1e, 0x40, {0x84000050, [0xf98, 0xffbfffff, 0x7, 0x80000001, 0xfffffffffffffffb]}}], 0x40}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000e2a000/0x3000)=nil, r8, 0x9, 0x4010, r4, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 56m47.288696054s ago: executing program 1 (id=184): r0 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r1 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000040)={0x0, &(0x7f0000000080)=[@mrs={0xbe, 0x18, {0x603000000013df63}}], 0x18}, &(0x7f00000000c0)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r4, 0x4018aee1, &(0x7f0000000100)=@attr_pmu_init) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, r0, 0x0, 0x5c1fd1b6565d2f1, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000000, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) (async) openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) (async) syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000040)={0x0, &(0x7f0000000080)=[@mrs={0xbe, 0x18, {0x603000000013df63}}], 0x18}, &(0x7f00000000c0)=[@featur1={0x1, 0x8}], 0x1) (async) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r4, 0x4018aee1, &(0x7f0000000100)=@attr_pmu_init) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, r0, 0x0, 0x5c1fd1b6565d2f1, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000000, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) (async) 56m39.571603236s ago: executing program 0 (id=185): munmap(&(0x7f0000481000/0x1000)=nil, 0x1000) munmap(&(0x7f0000136000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) r0 = mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) munmap(&(0x7f0000eb2000/0x4000)=nil, 0x4000) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae03, 0xc3) munmap(&(0x7f0000e51000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x1000007, 0x28031, 0xffffffffffffffff, 0x9000000) munmap(&(0x7f0000f47000/0x2000)=nil, 0x2000) munmap(&(0x7f0000f2c000/0x4000)=nil, 0x4000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x17) munmap$KVM_VCPU(r0, 0x4) 56m37.671612997s ago: executing program 1 (id=186): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x28081, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000769000/0x400000)=nil) r3 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) eventfd2(0x80000001, 0x1) r4 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@mrs={0xbe, 0x18, {0x6030000000138056}}], 0x18}, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000200)=@x86={0xfd, 0x80, 0x7, 0x0, 0x0, 0x42, 0x6e, 0xf8, 0x46, 0x3, 0x8, 0xb9, 0x0, 0x8d2, 0xffffff80, 0x4, 0x5, 0xec, 0x9, '\x00', 0xff, 0x80000001}) ioctl$KVM_ARM_VCPU_INIT(0xffffffffffffffff, 0x4020aeae, &(0x7f0000000240)={0x5, 0x18}) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0) syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=[@featur2={0x1, 0x5}], 0x1) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x33) r8 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000380)={0x0, &(0x7f0000000100)=[@smc={0x1e, 0x40, {0x84000004, [0x3, 0x3, 0x2, 0x3f8b, 0xf7b0]}}], 0x40}, &(0x7f00000000c0)=[@featur2={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r8, 0xae80, 0x0) 56m30.641556157s ago: executing program 0 (id=187): r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async, rerun: 64) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000080)={0xffffffffffffffff, 0xc8}) (async, rerun: 64) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@arm64={0xa1, 0xf, 0x42, '\x00', 0xa}) (async) write$eventfd(r5, &(0x7f0000000200)=0x4, 0x4d) (async) syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)={0x1, 0x37d03030d7a92616}) close(r3) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0xeeee0000}) (async, rerun: 64) r6 = syz_kvm_add_vcpu$arm64(r0, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) (rerun: 64) ioctl$KVM_RUN(r6, 0xae80, 0x0) 55m50.884096598s ago: executing program 32 (id=186): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x28081, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000769000/0x400000)=nil) r3 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) eventfd2(0x80000001, 0x1) r4 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@mrs={0xbe, 0x18, {0x6030000000138056}}], 0x18}, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000200)=@x86={0xfd, 0x80, 0x7, 0x0, 0x0, 0x42, 0x6e, 0xf8, 0x46, 0x3, 0x8, 0xb9, 0x0, 0x8d2, 0xffffff80, 0x4, 0x5, 0xec, 0x9, '\x00', 0xff, 0x80000001}) ioctl$KVM_ARM_VCPU_INIT(0xffffffffffffffff, 0x4020aeae, &(0x7f0000000240)={0x5, 0x18}) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0) syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=[@featur2={0x1, 0x5}], 0x1) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x33) r8 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000380)={0x0, &(0x7f0000000100)=[@smc={0x1e, 0x40, {0x84000004, [0x3, 0x3, 0x2, 0x3f8b, 0xf7b0]}}], 0x40}, &(0x7f00000000c0)=[@featur2={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r8, 0xae80, 0x0) 55m41.54389162s ago: executing program 33 (id=187): r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async, rerun: 64) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000080)={0xffffffffffffffff, 0xc8}) (async, rerun: 64) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@arm64={0xa1, 0xf, 0x42, '\x00', 0xa}) (async) write$eventfd(r5, &(0x7f0000000200)=0x4, 0x4d) (async) syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)={0x1, 0x37d03030d7a92616}) close(r3) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0xeeee0000}) (async, rerun: 64) r6 = syz_kvm_add_vcpu$arm64(r0, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) (rerun: 64) ioctl$KVM_RUN(r6, 0xae80, 0x0) 50m31.300689793s ago: executing program 2 (id=188): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x32) ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r0, 0x4068aea3, &(0x7f0000000000)={0xe4, 0x0, 0x4}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xafe6) r2 = syz_kvm_setup_syzos_vm$arm64(r0, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000740)={0x0, &(0x7f00000000c0)=[@its_send_cmd={0xaa, 0x28, {0xe, 0x0, 0x2, 0xf, 0x9, 0x9, 0x3}}, @hvc={0x32, 0x40, {0x8400000b, [0x9, 0x5, 0x8, 0x0, 0x35bde9cd]}}, @irq_setup={0x46, 0x18, {0x0, 0x2b3}}, @eret={0xe6, 0x18, 0xfffffffffffff000}, @its_setup={0x82, 0x28, {0x1, 0x4, 0x2ac}}, @msr={0x14, 0x20, {0x603000000013c230}}, @smc={0x1e, 0x40, {0x2, [0x3, 0x9, 0x0, 0x1, 0x1]}}, @smc={0x1e, 0x40, {0x50, [0xfffffffffffff536, 0xe7, 0x2, 0x0, 0x4]}}, @irq_setup={0x46, 0x18, {0x0, 0xab}}, @its_setup={0x82, 0x28, {0x4, 0x3, 0x3d8}}, @irq_setup={0x46, 0x18, {0x3, 0x363}}, @memwrite={0x6e, 0x30, @generic={0xeeee8000, 0xc95, 0x2, 0x8}}, @msr={0x14, 0x20, {0x603000000013e6d6, 0xf1e7}}, @uexit={0x0, 0x18, 0x8}, @svc={0x122, 0x40, {0x10, [0x9ae, 0x100000000, 0x964c, 0xfaa5, 0x7]}}, @code={0xa, 0x84, {"40eb97d20020b0f2810180d2420180d2e30180d2c40180d2020000d40000429e007008d5006a9ed20020b8f2610080d2220080d2030180d2640180d2020000d4008008d5007008d5008008d500a4df0da04292d200c0b0f2210080d2220180d2e30080d2240180d2020000d40008407a"}}, @smc={0x1e, 0x40, {0x10, [0x401, 0x6, 0xfffffffffffffff7, 0x100000000, 0xffffffff]}}, @hvc={0x32, 0x40, {0x40000000, [0x0, 0x2, 0x4, 0x38, 0x5]}}, @code={0xa, 0xe4, {"001b97d20020b8f2210080d2c20080d2630180d2840080d2020000d400f080d20080b0f2210180d2820080d2030180d2e40180d2020000d4605a95d200c0b0f2e10080d2e20080d2630180d2440080d2020000d400c0000f407393d20020b8f2210180d2c20180d2230080d2c40080d2020000d4007008d560ba9fd20040b8f2210180d2c20180d2830180d2840080d2020000d400a8312e004084d200a0b8f2210080d2e20180d2830180d2240080d2020000d4c0a887d200e0b8f2010080d2620180d2630180d2a40180d2020000d4"}}, @mrs={0xbe, 0x18, {0x603000000013dce0}}, @hvc={0x32, 0x40, {0x84000050, [0xf, 0xbe, 0x1e, 0xd, 0x2]}}, @uexit={0x0, 0x18, 0x8}, @irq_setup={0x46, 0x18, {0x4, 0x92}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x1, 0x2, 0xb, 0x1, 0x9}}, @irq_setup={0x46, 0x18, {0x0, 0x34b}}, @smc={0x1e, 0x40, {0x1, [0x6, 0x0, 0x10000, 0x5, 0x10]}}, @its_send_cmd={0xaa, 0x28, {0xa, 0x0, 0x0, 0x7, 0x3, 0x2, 0x1}}, @mrs={0xbe, 0x18, {0x603000000013e6d1}}, @code={0xa, 0x54, {"007008d500800048c01c8cd20020b8f2e10080d2020180d2c30180d2c40080d2020000d4007008d50068601e007008d500a0e00d007008d5007008d50008e038"}}, @msr={0x14, 0x20, {0x603000000013dee5, 0x6}}, @svc={0x122, 0x40, {0x4000000, [0xab6, 0x8, 0x2, 0xffff, 0x9]}}], 0x644}, &(0x7f0000000780)=[@featur1={0x1, 0x42}], 0x1) (async) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000740)={0x0, &(0x7f00000000c0)=[@its_send_cmd={0xaa, 0x28, {0xe, 0x0, 0x2, 0xf, 0x9, 0x9, 0x3}}, @hvc={0x32, 0x40, {0x8400000b, [0x9, 0x5, 0x8, 0x0, 0x35bde9cd]}}, @irq_setup={0x46, 0x18, {0x0, 0x2b3}}, @eret={0xe6, 0x18, 0xfffffffffffff000}, @its_setup={0x82, 0x28, {0x1, 0x4, 0x2ac}}, @msr={0x14, 0x20, {0x603000000013c230}}, @smc={0x1e, 0x40, {0x2, [0x3, 0x9, 0x0, 0x1, 0x1]}}, @smc={0x1e, 0x40, {0x50, [0xfffffffffffff536, 0xe7, 0x2, 0x0, 0x4]}}, @irq_setup={0x46, 0x18, {0x0, 0xab}}, @its_setup={0x82, 0x28, {0x4, 0x3, 0x3d8}}, @irq_setup={0x46, 0x18, {0x3, 0x363}}, @memwrite={0x6e, 0x30, @generic={0xeeee8000, 0xc95, 0x2, 0x8}}, @msr={0x14, 0x20, {0x603000000013e6d6, 0xf1e7}}, @uexit={0x0, 0x18, 0x8}, @svc={0x122, 0x40, {0x10, [0x9ae, 0x100000000, 0x964c, 0xfaa5, 0x7]}}, @code={0xa, 0x84, {"40eb97d20020b0f2810180d2420180d2e30180d2c40180d2020000d40000429e007008d5006a9ed20020b8f2610080d2220080d2030180d2640180d2020000d4008008d5007008d5008008d500a4df0da04292d200c0b0f2210080d2220180d2e30080d2240180d2020000d40008407a"}}, @smc={0x1e, 0x40, {0x10, [0x401, 0x6, 0xfffffffffffffff7, 0x100000000, 0xffffffff]}}, @hvc={0x32, 0x40, {0x40000000, [0x0, 0x2, 0x4, 0x38, 0x5]}}, @code={0xa, 0xe4, {"001b97d20020b8f2210080d2c20080d2630180d2840080d2020000d400f080d20080b0f2210180d2820080d2030180d2e40180d2020000d4605a95d200c0b0f2e10080d2e20080d2630180d2440080d2020000d400c0000f407393d20020b8f2210180d2c20180d2230080d2c40080d2020000d4007008d560ba9fd20040b8f2210180d2c20180d2830180d2840080d2020000d400a8312e004084d200a0b8f2210080d2e20180d2830180d2240080d2020000d4c0a887d200e0b8f2010080d2620180d2630180d2a40180d2020000d4"}}, @mrs={0xbe, 0x18, {0x603000000013dce0}}, @hvc={0x32, 0x40, {0x84000050, [0xf, 0xbe, 0x1e, 0xd, 0x2]}}, @uexit={0x0, 0x18, 0x8}, @irq_setup={0x46, 0x18, {0x4, 0x92}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x1, 0x2, 0xb, 0x1, 0x9}}, @irq_setup={0x46, 0x18, {0x0, 0x34b}}, @smc={0x1e, 0x40, {0x1, [0x6, 0x0, 0x10000, 0x5, 0x10]}}, @its_send_cmd={0xaa, 0x28, {0xa, 0x0, 0x0, 0x7, 0x3, 0x2, 0x1}}, @mrs={0xbe, 0x18, {0x603000000013e6d1}}, @code={0xa, 0x54, {"007008d500800048c01c8cd20020b8f2e10080d2020180d2c30180d2c40080d2020000d4007008d50068601e007008d500a0e00d007008d5007008d50008e038"}}, @msr={0x14, 0x20, {0x603000000013dee5, 0x6}}, @svc={0x122, 0x40, {0x4000000, [0xab6, 0x8, 0x2, 0xffff, 0x9]}}], 0x644}, &(0x7f0000000780)=[@featur1={0x1, 0x42}], 0x1) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x4) ioctl$KVM_CLEAR_DIRTY_LOG(r4, 0xc018aec0, &(0x7f0000000bc0)={0x4, 0x40, 0x340, &(0x7f00000007c0)=[0x2, 0x4, 0x3, 0x2, 0x7f, 0x1, 0x3, 0x4, 0x3, 0x8, 0x7, 0x200000000, 0x8, 0x3, 0xed, 0x3, 0x2, 0x6, 0x2, 0x7, 0x80, 0x2, 0x5, 0x6, 0x5, 0xa36, 0x6f, 0x2, 0xb, 0xfffffffffffffffe, 0x315, 0x5, 0x8, 0x10, 0x5, 0x0, 0x9, 0x3ff, 0x0, 0xfff, 0x100, 0x6, 0x9, 0x8, 0x7, 0x7, 0x9, 0x7, 0x3, 0x0, 0x4, 0x6, 0x1, 0x3, 0x7, 0x8, 0x8001, 0x3, 0xe3a, 0xc, 0x8ae, 0xa, 0x1763, 0x3ff, 0x7, 0x0, 0x6, 0x5, 0x9, 0xffff, 0x80, 0x4, 0x4, 0x2, 0x8, 0x80, 0x2, 0xffffc00000000000, 0x9, 0x0, 0x5, 0xbf1f, 0x3, 0x6, 0x400, 0x1, 0x8, 0x877, 0x1, 0x9, 0x7, 0x7fffffffffffffff, 0x7, 0xf, 0xa4, 0x5, 0x335, 0x8001, 0xfff, 0x1, 0x2, 0xd, 0xfffffffffffffff1, 0x6, 0x9, 0x10000, 0x8, 0x6, 0x7, 0x1, 0x5, 0x6, 0x8, 0x6, 0x8, 0xffffffff, 0x1, 0x3, 0xb, 0x480000000, 0x9, 0x4, 0x8001, 0x0, 0x5bdb, 0x7, 0x8, 0x100000000]}) syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000bff000/0x400000)=nil) (async) syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000bff000/0x400000)=nil) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x8) (async) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x8) eventfd2(0x80, 0x80000) (async) r6 = eventfd2(0x80, 0x80000) eventfd2(0x8, 0x80000) (async) r7 = eventfd2(0x8, 0x80000) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000c00)={r6, 0x0, 0x1, r7}) (async) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000c00)={r6, 0x0, 0x1, r7}) ioctl$KVM_GET_REG_LIST(r3, 0xc008aeb0, &(0x7f0000000c40)={0x4, [0x4, 0x1, 0x101, 0x6]}) r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) mmap$KVM_VCPU(&(0x7f0000e08000/0x2000)=nil, r8, 0x2000002, 0x10010, r3, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r0, 0x4018aee1, &(0x7f0000000cc0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000c80)={0x8, 0x3, 0x1}}) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x7) ioctl$KVM_CAP_ARM_MTE(r0, 0x4068aea3, &(0x7f0000000d00)) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000d80)={0x0, 0x1, 0x6000, 0x2000, &(0x7f0000c2c000/0x2000)=nil}) ioctl$KVM_ARM_SET_COUNTER_OFFSET(r4, 0x4010aeb5, &(0x7f0000000dc0)={0x8, 0x2}) (async) ioctl$KVM_ARM_SET_COUNTER_OFFSET(r4, 0x4010aeb5, &(0x7f0000000dc0)={0x8, 0x2}) ioctl$KVM_GET_STATS_FD_cpu(r3, 0xaece) (async) r9 = ioctl$KVM_GET_STATS_FD_cpu(r3, 0xaece) ioctl$KVM_IRQ_LINE_STATUS(r4, 0xc008ae67, &(0x7f0000000e00)={0x9, 0x200}) (async) ioctl$KVM_IRQ_LINE_STATUS(r4, 0xc008ae67, &(0x7f0000000e00)={0x9, 0x200}) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000e40)={r7, 0x2, 0x0, r9}) syz_kvm_setup_cpu$arm64(r9, r9, &(0x7f0000bfd000/0x400000)=nil, &(0x7f0000001280)=[{0x0, &(0x7f0000000e80)=[@memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x8, 0x4, 0xd}}, @mrs={0xbe, 0x18, {0x603000000013df05}}, @irq_setup={0x46, 0x18, {0x4, 0x1c4}}, @its_setup={0x82, 0x28, {0x4, 0x4, 0x1d6}}, @smc={0x1e, 0x40, {0x1000000, [0x7fffffff, 0xffffffffffffffff, 0x0, 0x0, 0x677]}}, @eret={0xe6, 0x18, 0x9baf}, @uexit={0x0, 0x18, 0x4}, @its_setup={0x82, 0x28, {0x2, 0x0, 0x1be}}, @mrs={0xbe, 0x18, {0x603000000013da17}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x58, 0x5, 0xa}}, @hvc={0x32, 0x40, {0x10, [0x101, 0x4000, 0x8e66, 0x7bbb, 0x1000]}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x1, 0x2, 0x1, 0x0, 0xf, 0x3}}, @msr={0x14, 0x20, {0x603000000013c608, 0x200}}, @hvc={0x32, 0x40, {0x8600ff01, [0x100, 0x8, 0xdb84, 0xfffffffffffffff7, 0xfffffffffffffff8]}}, @svc={0x122, 0x40, {0x80000000, [0x2, 0x3ccb, 0x0, 0x80000001, 0x2]}}, @uexit={0x0, 0x18, 0x6}, @hvc={0x32, 0x40, {0x84000003, [0xffffffffffff33e0, 0x393, 0x7fffffffffffffff, 0x8000000000000000, 0x4]}}, @its_send_cmd={0xaa, 0x28, {0x5, 0x0, 0x0, 0x7, 0x8000}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x0, 0x4, 0x7, 0xfffffffa, 0x1, 0x2}}, @its_setup={0x82, 0x28, {0x2, 0x1, 0x12c}}, @memwrite={0x6e, 0x30, @generic={0xeeee8000, 0xf23, 0xed, 0x2}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80e0000, 0xff60, 0xffff, 0xa}}, @eret={0xe6, 0x18}, @svc={0x122, 0x40, {0xc4000053, [0x101, 0x2, 0xfffffffffffffffc, 0x7, 0xfffffffffffffff7]}}], 0x3f8}], 0x1, 0x0, &(0x7f00000012c0)=[@featur2={0x1, 0xd3}], 0x1) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000001300)=@arm64={0x20, 0x8, 0x3}) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x16) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f0000001380)=@attr_riscv64=@attr_imsic={0x0, 0x1, 0x40, &(0x7f0000001340)=0x20f0}) openat$kvm(0xffffffffffffff9c, &(0x7f00000013c0), 0x40000, 0x0) 50m21.487043564s ago: executing program 3 (id=189): r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x9}}], 0x20}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r4, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_kvm_add_vcpu$arm64(r0, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x7}}], 0x20}, &(0x7f0000000000)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r5, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) ioctl$KVM_CAP_HALT_POLL(r2, 0x4068aea3, &(0x7f0000000040)={0xb6, 0x0, 0x40}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 50m21.221323044s ago: executing program 2 (id=190): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f0000000040)=[@mrs={0xbe, 0x18, {0x603000000013c4f2}}], 0x18}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) r4 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x20) r6 = eventfd2(0x7fffffff, 0x1) ioctl$KVM_IOEVENTFD(r5, 0xc0189436, &(0x7f0000000080)={0x5d09, 0xd000, 0x8, r6, 0x5}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 50m9.95412027s ago: executing program 3 (id=191): r0 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80c01, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x4f832, 0xffffffffffffffff, 0x1000000) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r5 = ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x2000003, 0x2013, r5, 0x200001fe0000) ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000000)={0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0xb, 0x23ac5f9b426ec4b2, 0xffffffffffffffff, 0x0) 50m8.218688807s ago: executing program 2 (id=192): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) (async) r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 64) r2 = eventfd2(0xfffffffa, 0x80001) (rerun: 64) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x80, 0x4, 0x0, r2}) r3 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x1, 0x37d03030d7a92616}) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x1ffc, 0x2000}) (async) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000140)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) 49m56.373216679s ago: executing program 3 (id=193): r0 = mmap$KVM_VCPU(&(0x7f0000df4000/0x2000)=nil, 0x930, 0xa, 0x16831, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000240)="37e68986ad644f5dc57bbc1ff382863b67f3eee57a32ec911d95f88f3dd8ea716e4a29cefbd440b2ecf83f57baf33b0c97182970a47ef45c954e42f2055384921830f6e273d2eb30", 0x0, 0x2a2019ac5ed2a1ef) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0xc8}) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r3, 0x400454d1, 0x40000110c230004) syz_kvm_setup_cpu$arm64(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil, &(0x7f0000000280)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) 49m53.516552142s ago: executing program 2 (id=194): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r3, 0x4020aeae, &(0x7f0000000140)={0x5, 0x8}) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000000240)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000280)={0x8001, 0x855e, 0x1}}) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x9000000) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000) munmap(&(0x7f0000e76000/0x12000)=nil, 0x12000) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) syz_kvm_add_vcpu$arm64(0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000100)={0x0, &(0x7f0000000000)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x3, 0x40000000, 0x2, 0x0, 0x105, 0x2}}], 0x50}, 0x0, 0x0) r7 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil) r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000300)={0x0, &(0x7f0000000340)=[@smc={0x1e, 0x40, {0x8400000a, [0x84000003, 0xa, 0x0, 0x6, 0xf]}}], 0x40}, &(0x7f0000000380)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee3, 0xffffffffffffffff) ioctl$KVM_RUN(r10, 0xae80, 0x0) syz_kvm_vgic_v3_setup(r4, 0x1, 0x100) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x8}) 49m41.209376362s ago: executing program 3 (id=195): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000000), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r4, 0x4020aeae, &(0x7f0000000080)={0x5, 0x18}) ioctl$KVM_ARM_VCPU_FINALIZE(r4, 0x4004aec2, &(0x7f00000000c0)=0x4) openat$kvm(0x0, 0x0, 0x0, 0x0) close(0x4) close(0x5) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r6 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r5, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000300)="fb4149dd033b8986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67525673312b01040000000000002627e7000000000000000200", 0x0, 0xfffffffffffffe73) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x12, r5, 0x0) r7 = eventfd2(0x70, 0x0) close(r7) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x0) write$eventfd(r7, &(0x7f0000000100)=0xfffffffffffffffe, 0x8) r8 = eventfd2(0x0, 0x0) close(r8) r9 = eventfd2(0x0, 0x0) close(r9) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xc0c82, 0x0) mmap$KVM_VCPU(&(0x7f0000008000/0x3000)=nil, 0x930, 0x2000004, 0x2011, r9, 0x4000) mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, 0x930, 0x200000e, 0x2011, r8, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 49m33.813220497s ago: executing program 2 (id=196): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f00000001c0)="f21bc75509bf71c9d70236fc044842dae3ffffffffffffff4c24501958da2e2c18b875c2357c6ed600", 0x0, 0x48) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r4, 0x40a0ae49, &(0x7f0000000240)={0x101ff, 0x4, 0x6000, 0x2000, &(0x7f0000ffc000/0x2000)=nil, 0x100000000000000}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000000c0)={0xffffffffffffffff, 0xc8, 0x3}) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r8, 0x400454c8, 0x40) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f0000000000)=0x1) write$eventfd(r2, &(0x7f00000001c0)=0xffffff7f, 0xff25) 49m25.250031923s ago: executing program 3 (id=197): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8a902, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r4, 0x4018aee3, &(0x7f0000000100)=@attr_other={0x0, 0x0, 0x80000000, 0x0}) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1000009, 0x16831, 0xffffffffffffffff, 0x0) r5 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000ab8000/0x400000)=nil) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_add_vcpu$arm64(r5, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000040)={0x10001, 0x10001}) 48m46.916938594s ago: executing program 34 (id=196): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f00000001c0)="f21bc75509bf71c9d70236fc044842dae3ffffffffffffff4c24501958da2e2c18b875c2357c6ed600", 0x0, 0x48) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r4, 0x40a0ae49, &(0x7f0000000240)={0x101ff, 0x4, 0x6000, 0x2000, &(0x7f0000ffc000/0x2000)=nil, 0x100000000000000}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000000c0)={0xffffffffffffffff, 0xc8, 0x3}) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r8, 0x400454c8, 0x40) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f0000000000)=0x1) write$eventfd(r2, &(0x7f00000001c0)=0xffffff7f, 0xff25) 48m36.659481951s ago: executing program 35 (id=197): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8a902, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r4, 0x4018aee3, &(0x7f0000000100)=@attr_other={0x0, 0x0, 0x80000000, 0x0}) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1000009, 0x16831, 0xffffffffffffffff, 0x0) r5 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000ab8000/0x400000)=nil) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_add_vcpu$arm64(r5, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000040)={0x10001, 0x10001}) 17m3.122486414s ago: executing program 5 (id=374): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x40000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) munmap$KVM_VCPU(0x0, 0x80000000000002) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000040)={0xffffffffffffffff, 0xc8}) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f00000000c0)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000100)=@x86={0xd, 0x1, 0xb, 0x0, 0xb5c, 0x6, 0x6, 0x9, 0x8, 0x89, 0x2f, 0x2, 0x0, 0x6, 0x6, 0x9, 0x3, 0x27, 0x0, '\x00', 0x12, 0x7f}) write$eventfd(r4, &(0x7f0000000140)=0x9, 0x1d) mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x0, 0x40032, 0xffffffffffffffff, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, 0x0) 16m52.191694111s ago: executing program 4 (id=375): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x8) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, 0x0) write$eventfd(0xffffffffffffffff, &(0x7f0000000000)=0x81, 0x8) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x19, 0x9b, 0xf, 0x0, 0x5, 0x8, 0x82, 0x42, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x100001, 0x129, 0x0, 0x3, 0xa, 0x8, '\x00', 0x1, 0x80000000}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r3, &(0x7f00000001c0)=0x4000000001, 0x56) 16m50.853706028s ago: executing program 5 (id=376): openat$kvm(0x0, 0x0, 0x202000, 0x0) r0 = openat$kvm(0x0, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x8001, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, 0x0) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000100)={0x0, &(0x7f0000000140)=[@smc={0x1e, 0x40, {0xc4000004, [0x40000099a, 0x4, 0xe8, 0x89, 0xffffffffffffffff]}}], 0x40}, &(0x7f0000000180)=[@featur2={0x1, 0x27}], 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000200)={0xffffffffffffffff, 0xc8}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000240)=@x86={0x7f, 0x4, 0x3, 0x0, 0x800, 0x9, 0xd, 0x8b, 0x4, 0x0, 0xf, 0xfe, 0x0, 0x2, 0x6, 0x0, 0xd, 0xfe, 0xa, '\x00', 0x0, 0xb}) write$eventfd(0xffffffffffffffff, &(0x7f0000000300)=0x9, 0x1d) r7 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil) r11 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000600)=@arm64_sve_vls={0x606000000015ffff, &(0x7f0000000640)=0x2}) syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000b80)={0x0, 0x0}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1) syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1) r12 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000b80)={0x0, &(0x7f00000000c0)=[@memwrite={0x6e, 0x30, @generic={0xd000, 0x119, 0x0, 0x18}}], 0x30}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r12, 0xae80, 0x0) 16m41.78366301s ago: executing program 4 (id=377): mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x0, 0x3000000, 0x80010, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000dbc000/0x2000)=nil, 0x0, 0x100000c, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) mmap$KVM_VCPU(&(0x7f000048d000/0x2000)=nil, 0x930, 0x3000003, 0x4000010, 0xffffffffffffffff, 0x9000000) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) r0 = eventfd2(0x5, 0x800) write$eventfd(r0, 0x0, 0x0) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) munmap(&(0x7f0000e76000/0x12000)=nil, 0x12000) mmap$KVM_VCPU(&(0x7f0000f1a000/0x4000)=nil, 0x930, 0x0, 0x9032, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4360ae82, 0x0) ioctl$KVM_ARM_VCPU_INIT(0xffffffffffffffff, 0x4020aeae, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000200), 0x2000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000000000/0x400000)=nil) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000240)="37e68986adf3eee57a32ec911d95f88f1fd8ea716e0a0ccebbd470a47ef45c954e42f605698c921830f6e2eeffffff000000000000000200000000004000", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xc00000)=nil, 0x930, 0xf, 0x32, 0xffffffffffffffff, 0x0) close(r2) mmap$KVM_VCPU(&(0x7f0000fed000/0x3000)=nil, 0x930, 0x0, 0x4030031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) munmap(&(0x7f0000011000/0xc00000)=nil, 0xc00000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) 16m30.190479925s ago: executing program 5 (id=378): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x40300, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x24) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1, 0x16831, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x8, 0x23ac5f9b426ec4b1, 0xffffffffffffffff, 0x0) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0xdc032, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000100)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000180)}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x8, 0x100, &(0x7f0000000200)=0x8000000000000000}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000240)=@attr_other={0x0, 0x4, 0x1, 0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = syz_kvm_vgic_v3_setup(r1, 0x3, 0x40) ioctl$KVM_GET_DEVICE_ATTR(r6, 0x4018aee2, &(0x7f00000000c0)=@attr_other={0x0, 0x1000, 0x2, &(0x7f0000000000)=0x3}) 16m20.049535705s ago: executing program 4 (id=379): r0 = openat$kvm(0x0, &(0x7f0000000100), 0x80402, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ARM_VCPU_INIT(r4, 0x4020aeae, &(0x7f00000001c0)={0x5}) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000000200)={0x0, 0x1000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0xffffffffdffffffd) syz_kvm_setup_cpu$arm64(r5, r6, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SIGNAL_MSI(r5, 0x4020aea5, &(0x7f00000000c0)={0x2000, 0x1000, 0x1, 0x1, 0x7}) r7 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae03, 0xaa) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xb1) 16m12.255192498s ago: executing program 5 (id=380): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) r1 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000300)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32) r2 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000380), 0x2900, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x80000000035) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f00000003c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32) r4 = openat$kvm(0x0, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0xac) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) r6 = openat$kvm(0x0, &(0x7f0000000000), 0x103080, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x2a) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x27) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r9, 0x4010ae68, 0xfffffffffffffffe) r10 = syz_kvm_vgic_v3_setup(r7, 0x1, 0x40) ioctl$KVM_GET_DEVICE_ATTR(r10, 0x4018aee2, &(0x7f00000001c0)=@attr_other={0x0, 0x6, 0xb2, 0x0}) r11 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r12 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil) r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}, 0x0, 0x0) r14 = syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000100)={0x0, &(0x7f0000000140)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r11, 0x2, 0x100) r15 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r15, 0x3, 0x11, r13, 0x0) mmap$KVM_VCPU(&(0x7f000000a000/0x1000)=nil, r15, 0x3, 0x11, r14, 0x0) 16m4.451092533s ago: executing program 4 (id=381): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = syz_kvm_setup_syzos_vm$arm64(r0, &(0x7f0000c00000/0x400000)=nil) r2 = syz_kvm_add_vcpu$arm64(r1, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}, 0x0, 0x0) syz_kvm_add_vcpu$arm64(r1, &(0x7f0000000100)={0x0, &(0x7f0000000140)=[@mrs={0xbe, 0x18, {0x603000000013c647}}], 0x18}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r0, 0x2, 0x100) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x300, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x444040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x24) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000340)={0x0, &(0x7f0000000380)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x2}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x1, 0x80000, 0xfffe, 0x0, 0x200, 0x2}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r5, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000400)={0x2, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f0000000440)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000480)=0x8080000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r9 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x28) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r9, 0x4068aea3, &(0x7f0000000200)={0xdf, 0x0, 0x2000}) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r10 = mmap$KVM_VCPU(&(0x7f0000fd0000/0x1000)=nil, 0x930, 0x2000000, 0x10, r2, 0x40000) syz_memcpy_off$KVM_EXIT_HYPERCALL(r10, 0x20, &(0x7f0000000280)="f610f5b33c962b62c00d0914345792dd23a78cdac1300e5e167ce3c540e94f06530dc539e8c1d98289a14446bb8d486f0060cb76b4abc705083f72adeea32830e92b6c89e7b929ff", 0x0, 0x48) r11 = openat$kvm(0x0, &(0x7f00000004c0), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil) r14 = syz_kvm_add_vcpu$arm64(r13, &(0x7f0000000500)={0x0, &(0x7f0000000540)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x1}}, @its_send_cmd={0xaa, 0x28, {0xb, 0x3, 0x40000000, 0xfffe, 0x0, 0x105}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r12, 0x1, 0x100) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r14, 0x4018aee2, 0x0) ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, &(0x7f00000005c0)={0x8}) ioctl$KVM_ASSIGN_SET_MSIX_NR(r12, 0x4008ae73, 0x0) ioctl$KVM_RUN(r14, 0xae80, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r12, 0x4010ae74, 0x0) 15m50.928919613s ago: executing program 4 (id=382): r0 = openat$kvm(0x0, &(0x7f0000000240), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2e) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000280)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000380)=@arm64_core={0x6030000000100042, &(0x7f00000003c0)=0x100000000}) r3 = openat$kvm(0x0, &(0x7f0000000000), 0x80, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x2e) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r4, r5, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r5, 0x4010aeac, &(0x7f0000000080)=@arm64_core={0x6030000000100042, &(0x7f00000000c0)=0x100000000}) r6 = openat$kvm(0x0, &(0x7f0000000180), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0xc8, 0x0, 0x0}) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000200)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r8, 0x800454cf, 0x0) r9 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_ONE_REG(r11, 0x4010aeac, &(0x7f0000000140)=@riscv64_config={0x8030000000100000, &(0x7f0000000100)}) r12 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000300)={0x0, &(0x7f0000000340)=[@msr={0x14, 0x20, {0x1fad, 0x9}}], 0x20}, 0x0, 0x0) ioctl$KVM_RUN(r13, 0xae80, 0x0) 15m47.588257387s ago: executing program 5 (id=383): openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd2(0x0, 0x0) (async) r2 = eventfd2(0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0x4020940d, 0x3b) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000a65000/0x400000)=nil) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async) r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r7, 0x4018aee1, &(0x7f0000000180)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f00000001c0)={0x16, 0x4, 0x1}}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r7, r8, &(0x7f0000bfe000/0x400000)=nil, &(0x7f0000000200)=[{0x0, &(0x7f0000000240)=[@smc={0x1e, 0x40, {0x84000051, [0xf98, 0xffffffff, 0x7, 0x80000000, 0xfffffffffffffffb]}}], 0xffffffffffffff8a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r10 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r10, 0xae04) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0x400454da, 0x2f) syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r4, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) (async) r11 = syz_kvm_add_vcpu$arm64(r4, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r11, 0x4018aee1, &(0x7f0000000000)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0x8001}) (async) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r11, 0x4018aee1, &(0x7f0000000000)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0x8001}) 15m24.11258514s ago: executing program 4 (id=384): r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x33) ioctl$KVM_CAP_ARM_INJECT_SERROR_ESR(r2, 0x4068aea3, &(0x7f0000000300)) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r0, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@mrs={0xbe, 0x18, {0x6030000000138056}}], 0x18}, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000200)=@x86={0x1, 0x80, 0x7, 0x0, 0x0, 0x2, 0x6e, 0xf8, 0x46, 0x3, 0x8, 0xb9, 0x0, 0x8d0, 0xffffff80, 0x4, 0x5, 0xec, 0x9, '\x00', 0xff, 0x80000001}) syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000240)={0x0, &(0x7f0000000280)=[@hvc={0x32, 0x40, {0x40000000, [0x8000000000c, 0x1000000000000, 0x6, 0x800000006, 0x800]}}], 0x40}, 0x0, 0x18) ioctl$KVM_ARM_VCPU_INIT(0xffffffffffffffff, 0x4020aeae, &(0x7f00000002c0)={0x5, 0x18}) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x2b) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000aec000/0x400000)=nil) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000040)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f00000000c0)=@arm64={0x7, 0x0, 0xfc, '\x00', 0x4}) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000100)={0x9}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f0000000080)=@arm64={0xd, 0x8, 0x7, '\x00', 0x2d}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000080)={0x55555555555566d}) ioctl$KVM_RESET_DIRTY_RINGS(r6, 0xaec7) munmap(&(0x7f00005ed000/0x800000)=nil, 0x800000) 15m23.188181796s ago: executing program 5 (id=385): syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = eventfd2(0xfffffffb, 0x80801) r3 = eventfd2(0x5, 0x800) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000e80)={r2, 0x5, 0x0, r3}) (async) r4 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x1, 0x37d03030d7a92616}) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0xeeee0000}) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000ec0), 0x8002, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x2c) ioctl$KVM_SET_USER_MEMORY_REGION2(r6, 0x40a0ae49, &(0x7f0000000f00)={0x1fd, 0x4, 0x10000, 0x2000, &(0x7f0000ffe000/0x2000)=nil, 0xfffffffffffff000}) (async) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f00000001c0)={0x4, 0x0, [{0x1, 0x2, 0x1, 0x0, @adapter={0x7, 0x100000000, 0x8, 0x0, 0x7}}, {0x9, 0x2, 0x1, 0x0, @adapter={0xd4ff, 0x6d39, 0x2, 0x0, 0x7f}}, {0x3, 0x0, 0x1, 0x0, @sint={0x6, 0x8000}}, {0x0, 0x0, 0x0, 0x0, @adapter={0x8f9, 0xe808e8f, 0x3f, 0x7, 0x332ccd89}}]}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000002c0)={0xffffffffffffffff, 0xc8, 0x3}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000340)={0x4, 0xffffffffffffffff, 0x1}) r10 = openat$kvm(0x0, &(0x7f0000000080), 0x14402, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r11, 0xc018aec0, &(0x7f0000000e40)={0x283f9, 0x280, 0x300, &(0x7f0000000a40)=[0x5, 0xcd6, 0x4, 0x51, 0x21, 0xc1, 0x8, 0x800, 0x2, 0x4, 0x4a6, 0xe53f, 0xd2, 0x101, 0x7, 0x7, 0x6, 0x2, 0x200, 0x9, 0x7fffffffffffffff, 0x8, 0x0, 0xcb7, 0x9, 0x430, 0x3, 0x9, 0x8, 0x6, 0x9, 0x0, 0x81, 0x8000000000000000, 0x7, 0x200, 0xe4, 0xee, 0x5, 0x3c, 0x80000000, 0x8, 0x100, 0xffffffffffffffc5, 0x1ff, 0x100000001, 0x7, 0xfffffffffffffff9, 0x5, 0x1000, 0x8, 0x8, 0x1, 0xf7e3, 0x80, 0xebe7, 0x2, 0x3, 0x8c9, 0x8000000000000001, 0x2, 0x2, 0x8, 0x4, 0x9, 0x8000, 0x7, 0x7fff, 0x5b3e2d43, 0x6, 0x8000, 0xb, 0x1ffe, 0x28, 0x1, 0x9, 0xffffffffffffffff, 0x1, 0x1, 0x4, 0x2, 0x0, 0x71, 0x2, 0x180, 0x4, 0x2, 0x4, 0x1, 0x902d, 0x8, 0x0, 0x2, 0x41, 0x2, 0x3, 0x1, 0x2400, 0x2, 0x1ffc000000000000, 0x2, 0x400, 0x95, 0x7, 0x4, 0x0, 0x2, 0xedb, 0x1, 0x7fff, 0x8000000000000001, 0x6, 0xab, 0x670, 0xf, 0x469f, 0x2, 0x7fff, 0x4, 0xecb5, 0x9, 0x4, 0x3, 0x7, 0x972, 0x80000001, 0x5, 0x3]}) r12 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r14, 0x4020ae46, &(0x7f00000009c0)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r14, 0xc018aec0, &(0x7f0000000a00)={0x0, 0x1c0, 0x3d70000, 0x0}) syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=[@featur1={0x1, 0x8}], 0x1) syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000900)={0x0, &(0x7f0000000fc0)=[@its_setup={0x82, 0x28, {0x4, 0x1, 0x148}}, @its_setup={0x82, 0x28, {0x2, 0x4, 0x385}}, @its_send_cmd={0xaa, 0x28, {0x5, 0x1, 0x4, 0x7, 0x6, 0x8001, 0x3}}, @its_setup={0x82, 0x28, {0x3, 0x3, 0x32b}}, @svc={0x122, 0x40, {0xc400000e, [0x6, 0x3, 0x8, 0xbdf, 0xffffffffffffff7f]}}, @smc={0x1e, 0x40, {0xc4000007, [0xff, 0x0, 0xfff, 0x7e04, 0x5d]}}, @msr={0x14, 0x20, {0x603000000013c296, 0x2bb4aa40}}, @msr={0x14, 0x20, {0x603000000013805d, 0x7}}, @its_setup={0x82, 0x28, {0x1, 0x1, 0x22c}}, @hvc={0x32, 0x40, {0x31000000, [0xfd, 0x8, 0x8000000000000001, 0x5, 0x1]}}, @irq_setup={0x46, 0x18, {0x0, 0x38d}}, @eret={0xe6, 0x18, 0x1000}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80c0000, 0x0, 0x9, 0x2}}, @code={0xa, 0xb4, {"20629ed20060b8f2010080d2c20080d2630080d2440080d2020000d40000261e205c8dd20060b8f2410080d2220080d2c30180d2e40080d2020000d480d28dd20040b8f2810080d2420080d2030180d2e40080d2020000d460f48dd200a0b8f2410080d2020080d2630080d2840080d2020000d4e03294d20020b0f2610080d2620180d2c30180d2240080d2020000d4000008d5007008d500a4ff0d00dc202e"}}, @irq_setup={0x46, 0x18, {0x4, 0x1d8}}, @irq_setup={0x46, 0x18, {0x0, 0x321}}, @hvc={0x32, 0x40, {0xffff, [0x5, 0x80000000, 0x0, 0x3, 0x5]}}, @uexit={0x0, 0x18, 0x1}, @msr={0x14, 0x20, {0x603000000013c012, 0x8}}, @mrs={0xbe, 0x18, {0x6030000000138076}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0xc, 0x0, 0x9}}, @eret={0xe6, 0x18, 0x5}, @code={0xa, 0x84, {"403785d20040b0f2610080d2020180d2030180d2c40180d2020000d4000028d5601f8bd200e0b8f2e10180d2020080d2630180d2840180d2020000d4e0259ed200c0b0f2c10080d2620180d2e30080d2640080d2020000d4000008d51004601e000000f1008008d500000058000008d5"}}, @msr={0x14, 0x20, {0x603000000013f601, 0x81}}, @mrs={0xbe, 0x18, {0x6030000000138054}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x0, 0x3, 0xb, 0xd5, 0x4, 0x2}}, @msr={0x14, 0x20, {0x603000000013c4d1, 0x8}}, @svc={0x122, 0x40, {0xc400000e, [0x7, 0x9, 0x40, 0x8, 0x7ff]}}], 0x528}, &(0x7f0000000940)=[@featur2], 0x1) (async) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000380)=@x86={0x11, 0x9b, 0xf, 0x0, 0x5, 0x8, 0x82, 0x46, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x900001, 0x0, 0x0, 0x3, 0xa, 0x8, '\x00', 0x1, 0x93}) write$eventfd(r9, &(0x7f00000003c0)=0x3, 0xfdef) 14m37.048205742s ago: executing program 36 (id=385): syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = eventfd2(0xfffffffb, 0x80801) r3 = eventfd2(0x5, 0x800) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000e80)={r2, 0x5, 0x0, r3}) (async) r4 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x1, 0x37d03030d7a92616}) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0xeeee0000}) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000ec0), 0x8002, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x2c) ioctl$KVM_SET_USER_MEMORY_REGION2(r6, 0x40a0ae49, &(0x7f0000000f00)={0x1fd, 0x4, 0x10000, 0x2000, &(0x7f0000ffe000/0x2000)=nil, 0xfffffffffffff000}) (async) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f00000001c0)={0x4, 0x0, [{0x1, 0x2, 0x1, 0x0, @adapter={0x7, 0x100000000, 0x8, 0x0, 0x7}}, {0x9, 0x2, 0x1, 0x0, @adapter={0xd4ff, 0x6d39, 0x2, 0x0, 0x7f}}, {0x3, 0x0, 0x1, 0x0, @sint={0x6, 0x8000}}, {0x0, 0x0, 0x0, 0x0, @adapter={0x8f9, 0xe808e8f, 0x3f, 0x7, 0x332ccd89}}]}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000002c0)={0xffffffffffffffff, 0xc8, 0x3}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000340)={0x4, 0xffffffffffffffff, 0x1}) r10 = openat$kvm(0x0, &(0x7f0000000080), 0x14402, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r11, 0xc018aec0, &(0x7f0000000e40)={0x283f9, 0x280, 0x300, &(0x7f0000000a40)=[0x5, 0xcd6, 0x4, 0x51, 0x21, 0xc1, 0x8, 0x800, 0x2, 0x4, 0x4a6, 0xe53f, 0xd2, 0x101, 0x7, 0x7, 0x6, 0x2, 0x200, 0x9, 0x7fffffffffffffff, 0x8, 0x0, 0xcb7, 0x9, 0x430, 0x3, 0x9, 0x8, 0x6, 0x9, 0x0, 0x81, 0x8000000000000000, 0x7, 0x200, 0xe4, 0xee, 0x5, 0x3c, 0x80000000, 0x8, 0x100, 0xffffffffffffffc5, 0x1ff, 0x100000001, 0x7, 0xfffffffffffffff9, 0x5, 0x1000, 0x8, 0x8, 0x1, 0xf7e3, 0x80, 0xebe7, 0x2, 0x3, 0x8c9, 0x8000000000000001, 0x2, 0x2, 0x8, 0x4, 0x9, 0x8000, 0x7, 0x7fff, 0x5b3e2d43, 0x6, 0x8000, 0xb, 0x1ffe, 0x28, 0x1, 0x9, 0xffffffffffffffff, 0x1, 0x1, 0x4, 0x2, 0x0, 0x71, 0x2, 0x180, 0x4, 0x2, 0x4, 0x1, 0x902d, 0x8, 0x0, 0x2, 0x41, 0x2, 0x3, 0x1, 0x2400, 0x2, 0x1ffc000000000000, 0x2, 0x400, 0x95, 0x7, 0x4, 0x0, 0x2, 0xedb, 0x1, 0x7fff, 0x8000000000000001, 0x6, 0xab, 0x670, 0xf, 0x469f, 0x2, 0x7fff, 0x4, 0xecb5, 0x9, 0x4, 0x3, 0x7, 0x972, 0x80000001, 0x5, 0x3]}) r12 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r14, 0x4020ae46, &(0x7f00000009c0)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r14, 0xc018aec0, &(0x7f0000000a00)={0x0, 0x1c0, 0x3d70000, 0x0}) syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=[@featur1={0x1, 0x8}], 0x1) syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000900)={0x0, &(0x7f0000000fc0)=[@its_setup={0x82, 0x28, {0x4, 0x1, 0x148}}, @its_setup={0x82, 0x28, {0x2, 0x4, 0x385}}, @its_send_cmd={0xaa, 0x28, {0x5, 0x1, 0x4, 0x7, 0x6, 0x8001, 0x3}}, @its_setup={0x82, 0x28, {0x3, 0x3, 0x32b}}, @svc={0x122, 0x40, {0xc400000e, [0x6, 0x3, 0x8, 0xbdf, 0xffffffffffffff7f]}}, @smc={0x1e, 0x40, {0xc4000007, [0xff, 0x0, 0xfff, 0x7e04, 0x5d]}}, @msr={0x14, 0x20, {0x603000000013c296, 0x2bb4aa40}}, @msr={0x14, 0x20, {0x603000000013805d, 0x7}}, @its_setup={0x82, 0x28, {0x1, 0x1, 0x22c}}, @hvc={0x32, 0x40, {0x31000000, [0xfd, 0x8, 0x8000000000000001, 0x5, 0x1]}}, @irq_setup={0x46, 0x18, {0x0, 0x38d}}, @eret={0xe6, 0x18, 0x1000}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80c0000, 0x0, 0x9, 0x2}}, @code={0xa, 0xb4, {"20629ed20060b8f2010080d2c20080d2630080d2440080d2020000d40000261e205c8dd20060b8f2410080d2220080d2c30180d2e40080d2020000d480d28dd20040b8f2810080d2420080d2030180d2e40080d2020000d460f48dd200a0b8f2410080d2020080d2630080d2840080d2020000d4e03294d20020b0f2610080d2620180d2c30180d2240080d2020000d4000008d5007008d500a4ff0d00dc202e"}}, @irq_setup={0x46, 0x18, {0x4, 0x1d8}}, @irq_setup={0x46, 0x18, {0x0, 0x321}}, @hvc={0x32, 0x40, {0xffff, [0x5, 0x80000000, 0x0, 0x3, 0x5]}}, @uexit={0x0, 0x18, 0x1}, @msr={0x14, 0x20, {0x603000000013c012, 0x8}}, @mrs={0xbe, 0x18, {0x6030000000138076}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0xc, 0x0, 0x9}}, @eret={0xe6, 0x18, 0x5}, @code={0xa, 0x84, {"403785d20040b0f2610080d2020180d2030180d2c40180d2020000d4000028d5601f8bd200e0b8f2e10180d2020080d2630180d2840180d2020000d4e0259ed200c0b0f2c10080d2620180d2e30080d2640080d2020000d4000008d51004601e000000f1008008d500000058000008d5"}}, @msr={0x14, 0x20, {0x603000000013f601, 0x81}}, @mrs={0xbe, 0x18, {0x6030000000138054}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x0, 0x3, 0xb, 0xd5, 0x4, 0x2}}, @msr={0x14, 0x20, {0x603000000013c4d1, 0x8}}, @svc={0x122, 0x40, {0xc400000e, [0x7, 0x9, 0x40, 0x8, 0x7ff]}}], 0x528}, &(0x7f0000000940)=[@featur2], 0x1) (async) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000380)=@x86={0x11, 0x9b, 0xf, 0x0, 0x5, 0x8, 0x82, 0x46, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x900001, 0x0, 0x0, 0x3, 0xa, 0x8, '\x00', 0x1, 0x93}) write$eventfd(r9, &(0x7f00000003c0)=0x3, 0xfdef) 14m32.519497212s ago: executing program 37 (id=384): r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x33) ioctl$KVM_CAP_ARM_INJECT_SERROR_ESR(r2, 0x4068aea3, &(0x7f0000000300)) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r0, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@mrs={0xbe, 0x18, {0x6030000000138056}}], 0x18}, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000200)=@x86={0x1, 0x80, 0x7, 0x0, 0x0, 0x2, 0x6e, 0xf8, 0x46, 0x3, 0x8, 0xb9, 0x0, 0x8d0, 0xffffff80, 0x4, 0x5, 0xec, 0x9, '\x00', 0xff, 0x80000001}) syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000240)={0x0, &(0x7f0000000280)=[@hvc={0x32, 0x40, {0x40000000, [0x8000000000c, 0x1000000000000, 0x6, 0x800000006, 0x800]}}], 0x40}, 0x0, 0x18) ioctl$KVM_ARM_VCPU_INIT(0xffffffffffffffff, 0x4020aeae, &(0x7f00000002c0)={0x5, 0x18}) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x2b) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000aec000/0x400000)=nil) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000040)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f00000000c0)=@arm64={0x7, 0x0, 0xfc, '\x00', 0x4}) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000100)={0x9}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f0000000080)=@arm64={0xd, 0x8, 0x7, '\x00', 0x2d}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000080)={0x55555555555566d}) ioctl$KVM_RESET_DIRTY_RINGS(r6, 0xaec7) munmap(&(0x7f00005ed000/0x800000)=nil, 0x800000) 2m46.527136286s ago: executing program 7 (id=403): r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2a) syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r0, &(0x7f0000000b80)={0x0, &(0x7f0000000100)=[@hvc={0x32, 0x40, {0x84000004, [0x100000001, 0xb0, 0xffffffffffffffff, 0xee26, 0xfffffffffffeffff]}}], 0x40}, &(0x7f0000000040)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m45.208252081s ago: executing program 6 (id=404): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1a) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x22) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000100)={0xffffffffffffffff, 0xc8}) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000140)="f21bc75509bf71ba470236fc044800fff7ffffffd249f297e87fd600000000000000002000e4ff000000f500", 0x0, 0x48) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f00000001c0)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r5, &(0x7f0000000200)=0xffffff7f, 0xff25) syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x30}], 0x1, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0xb) ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r6, 0x4068aea3, &(0x7f0000000240)={0xe4, 0x0, 0xe4db}) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f00000002c0)=@arm64_sys={0x603000000013dcf0, &(0x7f0000000000)=0x2}) 2m30.261900092s ago: executing program 7 (id=405): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000040)={0xfffffff8, 0x7f}) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000aba000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000300)={0x0, &(0x7f00000007c0)=[@its_send_cmd={0xaa, 0x28, {0xe, 0x0, 0x2, 0x3, 0x3, 0x3ff, 0x2}}], 0x28}, 0x0, 0x0) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000000)={0x0, &(0x7f0000000780)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x8000000000000f6}}], 0x28}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0xff7ffffffffffffd, 0x360) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000040)={0xfffffff8, 0x7f}) (async) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000aba000/0x400000)=nil) (async) syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000300)={0x0, &(0x7f00000007c0)=[@its_send_cmd={0xaa, 0x28, {0xe, 0x0, 0x2, 0x3, 0x3, 0x3ff, 0x2}}], 0x28}, 0x0, 0x0) (async) syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000000)={0x0, &(0x7f0000000780)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x8000000000000f6}}], 0x28}, 0x0, 0x0) (async) syz_kvm_vgic_v3_setup(r1, 0xff7ffffffffffffd, 0x360) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8}) (async) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) 2m26.190498294s ago: executing program 6 (id=406): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000300)="fb4149dd033b8986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67525673312b01040000000000002627e7000000000000000200", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x12, r2, 0x0) r4 = eventfd2(0x70, 0x0) close(r4) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x0) write$eventfd(r4, &(0x7f0000000100)=0xfffffffffffffffe, 0x8) r5 = eventfd2(0x0, 0x0) close(r5) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xc0c82, 0x0) mmap$KVM_VCPU(&(0x7f0000008000/0x3000)=nil, 0x930, 0x2000004, 0x2011, r5, 0x4000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0) 2m6.972068697s ago: executing program 6 (id=407): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1, 0x4000010, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1, 0x4000010, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xc1af809bd64bc692, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0x80111500, 0x20000004) close(0xffffffffffffffff) ioctl$KVM_GET_STATS_FD_vm(r3, 0xaece) (async) ioctl$KVM_GET_STATS_FD_vm(r3, 0xaece) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0x80111500, 0x20000000) ioctl$KVM_CREATE_VM(r6, 0x541b, 0x20) r7 = openat$kvm(0x0, &(0x7f00000001c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) r10 = openat$kvm(0x0, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r10, 0xae04) (async) r11 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r10, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r11, 0x3, 0x11, r9, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r11, 0x3, 0x11, r9, 0x0) syz_kvm_add_vcpu$arm64(0x0, &(0x7f00000005c0)={0x0, &(0x7f0000000380)=[@mrs={0xbe, 0x18}, @msr={0x14, 0x20, {0x603000000013c684, 0x2a7}}, @uexit={0x0, 0x18, 0x800000008}, @eret={0xe6, 0x18, 0xfffffffffffffffe}, @mrs={0xbe, 0x18, {0x603000000013c00f}}, @code={0xa, 0xb4, {"0060000e80c182d200e0b0f2e10180d2c20180d2030180d2240180d2020000d40020800d80ba8cd200c0b8f2410080d2220180d2030180d2640080d2020000d4c00395d200e0b0f2c10180d2e20180d2a30080d2a40080d2020000d4008008d5000008d5404980d20040b0f2c10080d2420180d2230080d2040180d2020000d40058602ee04b87d200a0b8f2410180d2420180d2630180d2640080d2020000d4"}}, @eret={0xe6, 0x18, 0x4c6e}, @uexit={0x0, 0x18, 0x1}, @smc={0x1e, 0x40, {0x31000000, [0x0, 0x5, 0x8379, 0x36e, 0x4]}}, @svc={0x122, 0x40, {0x84000010, [0x8, 0x3, 0x0, 0x6, 0x3]}}, @irq_setup={0x46, 0x18, {0x4, 0x2d5}}, @uexit={0x0, 0x18, 0x100}], 0x214}, &(0x7f0000000600)=[@featur1={0x1, 0x20}], 0x1) mmap$KVM_VCPU(&(0x7f0000ffc000/0x3000)=nil, r11, 0x2000000, 0x8010, r9, 0x0) ioctl$KVM_ARM_VCPU_INIT(0xffffffffffffffff, 0x4020aeae, 0x0) r12 = openat$kvm(0x0, &(0x7f0000000340), 0x80, 0x0) ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) (async) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000bfe000/0x400000)=nil) syz_kvm_vgic_v3_setup(r13, 0x4, 0x100) (async) syz_kvm_vgic_v3_setup(r13, 0x4, 0x100) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x800000) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x800000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x10002, 0x5, 0x934affb, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 2m4.471674707s ago: executing program 7 (id=408): mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80c01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async, rerun: 64) r3 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async, rerun: 64) r4 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) (async) r6 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000040)={0x0, 0x0}, 0x0, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x2400, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000440)={0x1, 0x0, 0xf000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000480)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r5, 0xc018aec0, &(0x7f0000000180)={0x8}) (async) ioctl$KVM_GET_ONE_REG(r6, 0x4010aeab, &(0x7f0000000080)=@arm64_sys={0x603000000013d801, &(0x7f00000000c0)=0x1}) (async) mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r2, 0x0) (async) r9 = openat$kvm(0x0, &(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x80000001d) r10 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000bfe000/0x400000)=nil) (async) r11 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil) r14 = syz_kvm_add_vcpu$arm64(r13, &(0x7f0000000280)={0x0, &(0x7f00000002c0)=[@code={0xa, 0x18, {"7f2003d5"}}], 0x18}, 0x0, 0x0) ioctl$KVM_RUN(r14, 0xae80, 0x0) (async) ioctl$KVM_IRQ_LINE_STATUS(r12, 0xc008ae67, &(0x7f0000000300)={0x0, 0x81}) (async) r15 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000340)={0x0, &(0x7f0000000380)=[@mrs={0xbe, 0x18, {0x603000000013c017}}], 0x18}, 0x0, 0x0) ioctl$KVM_RUN(r15, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r15, 0x4040aea0, &(0x7f00000003c0)=@x86={0xfb, 0x55, 0x2, 0x0, 0xfffffffd, 0x4, 0xff, 0x5, 0x1, 0xf8, 0xf3, 0x0, 0x0, 0x400001, 0xb4, 0x81, 0x2, 0x2, 0xff, '\x00', 0x4, 0x7}) (async) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x9, 0x12, r2, 0x0) (async) openat$kvm(0x0, &(0x7f0000000140), 0x40000, 0x0) 1m39.64055918s ago: executing program 7 (id=409): munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) mmap$KVM_VCPU(&(0x7f0000011000/0x3000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r6 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r5, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000140)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0xffffffffffffffa7) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r5, 0x0) r7 = eventfd2(0xd, 0x1) close(r7) openat$kvm(0xffffff9c, &(0x7f00000001c0), 0xa00f2, 0x0) write$eventfd(r7, 0x0, 0x500) r8 = eventfd2(0x0, 0x0) close(r8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000008000/0x3000)=nil, 0x930, 0x2000004, 0x2011, r8, 0x0) r9 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r9, 0x20, &(0x7f0000000040)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r2, 0x0) r10 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0x5460, 0xf8ffffffffff0000) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) 1m39.420609973s ago: executing program 6 (id=410): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$kvm(0x0, &(0x7f00000003c0), 0x8280, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r6, 0x4018aee1, &(0x7f0000000400)=@attr_irq_timer={0x0, 0x1, 0x1, 0x0}) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000040)={0x1f9, 0x3, 0x100000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x0, 0x3c2a1c3178cda732, 0xffffffffffffffff, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r7, 0x4010ae74, &(0x7f0000000200)={0x800, 0x9, 0x80}) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0xeeee8000, 0x1000, &(0x7f0000f15000/0x1000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_DIRTY_TLB(r8, 0x4010aeaa, &(0x7f0000000240)={0x5, 0x4}) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000140)={0x1fd, 0x0, 0x5000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) r10 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2) ioctl$KVM_SET_DEVICE_ATTR(r12, 0x4018aee1, &(0x7f00000002c0)=@attr_arm64={0x0, 0x2, 0x0, &(0x7f0000000300)=0x1100000000000004}) syz_kvm_setup_cpu$arm64(r7, r9, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000180)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r9, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f00000001c0)={0x10201, 0x7, 0x1ffe, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r13 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000100)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r13, 0x4010aeac, &(0x7f0000000340)=@arm64_sys={0x603000000013d801, &(0x7f0000000380)=0xfffffffffffffffd}) close(r0) 1m15.416327964s ago: executing program 7 (id=411): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0xffffffffffffffff) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000600)=[{0x0, &(0x7f0000000180)=[@msr={0x14, 0x20, {0x603000000013deab, 0xfffffffffffffff4}}, @its_setup={0x82, 0x28, {0x4, 0x3, 0x248}}, @hvc={0x32, 0x40, {0x4000, [0x6, 0x6, 0x9, 0x7, 0x8001]}}, @uexit={0x0, 0x18, 0x2800000000}, @its_setup={0x82, 0x28, {0x2, 0x3, 0xbe}}, @uexit={0x0, 0x18, 0x7ff}, @uexit={0x0, 0x18, 0xe98c}, @mrs={0xbe, 0x18, {0x603000000013f100}}, @hvc={0x32, 0x40, {0xbed3d8d33d7f78cf, [0x0, 0x3, 0x3, 0x8, 0x6]}}, @smc={0x1e, 0x40, {0x4000, [0xc2, 0xb7b7, 0x5, 0x5876000d, 0x1]}}, @mrs={0xbe, 0x18, {0x603000000013c648}}, @hvc={0x32, 0x40, {0x84000005, [0x7f, 0xfb8, 0x8000000000000000, 0x9, 0x5]}}, @irq_setup={0x46, 0x18, {0x1, 0x132}}, @hvc={0x32, 0x40, {0x100, [0x9, 0xbf1d, 0xc, 0x3fe, 0x293]}}, @hvc={0x32, 0x40, {0x3000000, [0x3, 0xffffffffffffe20e, 0xa, 0x0, 0x6]}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80a0000, 0x78, 0x8, 0x1}}, @eret={0xe6, 0x18, 0xfffffffffffffffe}, @smc={0x1e, 0x40, {0xc000000c, [0xf69a, 0x2, 0x6, 0x8000000000000000, 0x1]}}, @irq_setup={0x46, 0x18, {0x4, 0x3a5}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80c0000, 0x0, 0x0, 0xc}}, @code={0xa, 0x84, {"0058202e007008d520d293d200e0b0f2810180d2020080d2a30080d2a40080d2020000d4010000d4007008d5a0a09fd200c0b8f2610080d2620180d2e30080d2e40180d2020000d4008008d5007008d5e0d180d200c0b0f2610180d2620180d2e30180d2440180d2020000d4007008d5"}}, @memwrite={0x6e, 0x30, @generic={0x0, 0x611, 0x8, 0x5}}, @its_send_cmd={0xaa, 0x28, {0xa, 0x1, 0x4, 0xb, 0x2, 0x82c, 0x1}}, @irq_setup={0x46, 0x18, {0x2, 0x2c4}}], 0x444}], 0x1, 0x0, &(0x7f0000000640)=[@featur2={0x1, 0x41}], 0x1) 1m12.030326144s ago: executing program 6 (id=412): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1f) (async) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1f) r1 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r2, 0x4068aea3, &(0x7f00000000c0)={0xe4, 0x0, 0x1000}) mmap$KVM_VCPU(&(0x7f0000002000/0x4000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0xfffffdef) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0x80111500, 0x20000000) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0x80111500, 0x20000000) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_REG_LIST(r6, 0xc008aeb0, &(0x7f0000000200)={0x8, [0xffffffffffffff57, 0x3, 0x80000000, 0xf, 0x70000000, 0xa, 0xffffffffffff0912, 0x2]}) ioctl$KVM_CREATE_VM(r4, 0x541b, 0x2004001f) syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000a89000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000140)={0x10200, 0x3, 0x0, 0x2000, &(0x7f000000a000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000140)={0x10200, 0x3, 0x0, 0x2000, &(0x7f000000a000/0x2000)=nil}) syz_kvm_vgic_v3_setup(r0, 0xff7ffffffffffffd, 0x360) 56.552940674s ago: executing program 7 (id=413): r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_ARM_VCPU_INIT(r4, 0x4020aeae, &(0x7f00000004c0)={0x5, 0x1}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x3f) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x8040ae9f, 0xfffffffffffffffe) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000000500)={0x60000, 0x1000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r5 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r5, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2d) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000080)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000140)}) r8 = openat$kvm(0x0, &(0x7f0000000300), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000340)={0x7}) r10 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r9, 0x4040ae79, &(0x7f0000000380)={0x0, 0x6000, 0x0, r10}) ioctl$KVM_REGISTER_COALESCED_MMIO(r9, 0x4010ae67, &(0x7f00000003c0)={0x0, 0x10000}) ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000400)={0x8}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r11 = openat$kvm(0x0, &(0x7f0000000440), 0x8280, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r13, 0x0) ioctl$KVM_SIGNAL_MSI(r9, 0x4020aea5, &(0x7f0000000480)={0x6000}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x5, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) 50.479000172s ago: executing program 6 (id=414): openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_GET_API_VERSION(r2, 0xae03, 0x42) (async) ioctl$KVM_GET_API_VERSION(r2, 0xae03, 0x42) ioctl$KVM_CREATE_VM(r1, 0xae03, 0xc3) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x26) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80400, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80400, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34) (async) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, 0x0) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f0000000100)={0xfffffffffffffdfd, 0x13000, 0xffffffff}) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000300)={0x7, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000002c0)=@attr_arm64={0x0, 0x4, 0x0, 0x0}) r6 = eventfd2(0x8801, 0x800) r7 = eventfd2(0x83ff, 0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000180)={r6, 0x3fb6, 0x0, r7}) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000000)={r7, 0x5, 0x2, r6}) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000140)={r7, 0x5, 0x1, r6}) 8.469077307s ago: executing program 38 (id=413): r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_ARM_VCPU_INIT(r4, 0x4020aeae, &(0x7f00000004c0)={0x5, 0x1}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x3f) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x8040ae9f, 0xfffffffffffffffe) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000000500)={0x60000, 0x1000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r5 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r5, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2d) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000080)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000140)}) r8 = openat$kvm(0x0, &(0x7f0000000300), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000340)={0x7}) r10 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r9, 0x4040ae79, &(0x7f0000000380)={0x0, 0x6000, 0x0, r10}) ioctl$KVM_REGISTER_COALESCED_MMIO(r9, 0x4010ae67, &(0x7f00000003c0)={0x0, 0x10000}) ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000400)={0x8}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r11 = openat$kvm(0x0, &(0x7f0000000440), 0x8280, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r13, 0x0) ioctl$KVM_SIGNAL_MSI(r9, 0x4020aea5, &(0x7f0000000480)={0x6000}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x5, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) 0s ago: executing program 39 (id=414): openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_GET_API_VERSION(r2, 0xae03, 0x42) (async) ioctl$KVM_GET_API_VERSION(r2, 0xae03, 0x42) ioctl$KVM_CREATE_VM(r1, 0xae03, 0xc3) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x26) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80400, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80400, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34) (async) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, 0x0) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f0000000100)={0xfffffffffffffdfd, 0x13000, 0xffffffff}) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000300)={0x7, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000002c0)=@attr_arm64={0x0, 0x4, 0x0, 0x0}) r6 = eventfd2(0x8801, 0x800) r7 = eventfd2(0x83ff, 0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000180)={r6, 0x3fb6, 0x0, r7}) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000000)={r7, 0x5, 0x2, r6}) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000140)={r7, 0x5, 0x1, r6}) kernel console output (not intermixed with test programs): [ 375.251361][ T24] audit: type=1400 audit(374.390:74): avc: denied { read write } for pid=3268 comm="scp" name="null" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 375.252174][ T24] audit: type=1400 audit(374.420:75): avc: denied { open } for pid=3268 comm="scp" path="/dev/null" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 388.064839][ T24] audit: type=1400 audit(387.240:76): avc: denied { read } for pid=3218 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 394.983303][ T24] audit: type=1400 audit(394.160:77): avc: denied { write } for pid=3273 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 399.876830][ T24] audit: type=1400 audit(399.050:78): avc: denied { write } for pid=3276 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 403.292484][ T3218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.312160][ T24] audit: type=1400 audit(410.470:79): avc: denied { write } for pid=3281 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 414.948968][ T24] audit: type=1400 audit(414.120:80): avc: denied { write } for pid=3284 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 426.176968][ T24] audit: type=1400 audit(425.290:81): avc: denied { write } for pid=3289 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 429.832120][ T24] audit: type=1400 audit(428.970:82): avc: denied { write } for pid=3292 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 441.504616][ T24] audit: type=1400 audit(440.640:83): avc: denied { write } for pid=3298 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 445.046258][ T24] audit: type=1400 audit(444.220:84): avc: denied { write } for pid=3301 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 447.488477][ T3218] eql: remember to turn off Van-Jacobson compression on your slave devices [ 457.803765][ T24] audit: type=1400 audit(456.940:85): avc: denied { write } for pid=3307 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 462.759053][ T24] audit: type=1400 audit(461.930:86): avc: denied { write } for pid=3310 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 473.702177][ T24] audit: type=1400 audit(472.850:87): avc: denied { write } for pid=3314 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 477.370833][ T24] audit: type=1400 audit(476.530:88): avc: denied { write } for pid=3317 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 482.791145][ T24] audit: type=1400 audit(481.960:89): avc: denied { write } for pid=3319 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 486.441176][ T24] audit: type=1400 audit(485.610:90): avc: denied { write } for pid=3322 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 496.474471][ T24] audit: type=1400 audit(495.650:91): avc: denied { write } for pid=3327 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 500.270824][ T24] audit: type=1400 audit(499.400:92): avc: denied { write } for pid=3330 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 505.204399][ T24] audit: type=1400 audit(504.380:93): avc: denied { write } for pid=3332 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 508.871133][ T24] audit: type=1400 audit(508.020:94): avc: denied { write } for pid=3335 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 527.435280][ T24] audit: type=1400 audit(526.610:95): avc: denied { write } for pid=3343 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 531.912310][ T24] audit: type=1400 audit(531.070:96): avc: denied { write } for pid=3346 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 543.674375][ T24] audit: type=1400 audit(542.850:97): avc: denied { write } for pid=3352 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 547.320987][ T24] audit: type=1400 audit(546.490:98): avc: denied { write } for pid=3355 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 556.884578][ T24] audit: type=1400 audit(556.060:99): avc: denied { write } for pid=3359 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 560.491209][ T24] audit: type=1400 audit(559.620:100): avc: denied { write } for pid=3362 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:17057' (ED25519) to the list of known hosts. [ 576.743388][ T24] audit: type=1400 audit(575.890:101): avc: denied { name_bind } for pid=3370 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 577.275971][ T24] audit: type=1400 audit(576.450:102): avc: denied { write } for pid=3369 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 580.385546][ T24] audit: type=1400 audit(579.560:103): avc: denied { execute } for pid=3372 comm="sh" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 580.426066][ T24] audit: type=1400 audit(579.600:104): avc: denied { execute_no_trans } for pid=3372 comm="sh" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 582.245254][ T24] audit: type=1400 audit(581.420:105): avc: denied { write } for pid=3374 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 620.684077][ T24] audit: type=1400 audit(619.860:106): avc: denied { mounton } for pid=3372 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 620.724440][ T24] audit: type=1400 audit(619.900:107): avc: denied { mount } for pid=3372 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 620.803808][ T3372] cgroup: Unknown subsys name 'net' [ 620.858757][ T24] audit: type=1400 audit(620.030:108): avc: denied { unmount } for pid=3372 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 621.260546][ T3372] cgroup: Unknown subsys name 'cpuset' [ 621.376340][ T3372] cgroup: Unknown subsys name 'rlimit' [ 622.185788][ T24] audit: type=1400 audit(621.360:109): avc: denied { setattr } for pid=3372 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 622.212433][ T24] audit: type=1400 audit(621.380:110): avc: denied { mounton } for pid=3372 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 622.219114][ T24] audit: type=1400 audit(621.390:111): avc: denied { mount } for pid=3372 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 623.209117][ T3379] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 623.232731][ T24] audit: type=1400 audit(622.400:112): avc: denied { relabelto } for pid=3379 comm="mkswap" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 623.257460][ T24] audit: type=1400 audit(622.410:113): avc: denied { write } for pid=3379 comm="mkswap" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 623.443570][ T24] audit: type=1400 audit(622.610:114): avc: denied { read } for pid=3372 comm="syz-executor" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 623.471831][ T24] audit: type=1400 audit(622.620:115): avc: denied { open } for pid=3372 comm="syz-executor" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 623.518445][ T3372] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 677.782192][ T24] audit: type=1400 audit(676.950:116): avc: denied { execmem } for pid=3380 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 681.342770][ T24] audit: type=1400 audit(680.490:117): avc: denied { read } for pid=3383 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 681.343545][ T24] audit: type=1400 audit(680.510:118): avc: denied { open } for pid=3383 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 681.424157][ T24] audit: type=1400 audit(680.580:119): avc: denied { mounton } for pid=3383 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 681.647506][ T24] audit: type=1400 audit(680.820:120): avc: denied { module_request } for pid=3383 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 681.683797][ T24] audit: type=1400 audit(680.820:121): avc: denied { module_request } for pid=3382 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 682.618991][ T24] audit: type=1400 audit(681.790:122): avc: denied { sys_module } for pid=3383 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 689.092471][ T24] audit: type=1400 audit(688.250:123): avc: denied { create } for pid=3382 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 689.772241][ T24] audit: type=1400 audit(688.940:124): avc: denied { write } for pid=3382 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 689.856362][ T3383] rdma_rxe: Failed to create IPv4 UDP tunnel [ 689.899353][ T24] audit: type=1400 audit(689.030:125): avc: denied { read } for pid=3383 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 690.025722][ T3382] rxe_eth0 speed is unknown, defaulting to 1000 [ 690.097719][ T3382] rxe_eth0 speed is unknown, defaulting to 1000 [ 690.199320][ T3382] rxe_eth0 speed is unknown, defaulting to 1000 [ 698.477480][ T3382] infiniband rxe0: set active [ 698.492179][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 698.524490][ T3382] infiniband rxe0: added rxe_eth0 [ 699.793163][ T3382] RDS/IB: rxe0: added [ 699.796844][ T3382] smc: adding ib device rxe0 with port count 1 [ 699.798132][ T3382] smc: ib device rxe0 port 1 has no pnetid [ 699.812394][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 699.902805][ T3382] rxe_eth0 speed is unknown, defaulting to 1000 [ 709.776186][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 712.372216][ T24] audit: type=1400 audit(711.530:126): avc: denied { write } for pid=3422 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 713.418260][ T3382] rxe_eth0 speed is unknown, defaulting to 1000 [ 717.228479][ T24] audit: type=1400 audit(716.400:127): avc: denied { write } for pid=3429 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 719.972385][ T3383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 720.085267][ T3383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 731.023479][ T3383] hsr_slave_0: entered promiscuous mode [ 731.049352][ T3383] hsr_slave_1: entered promiscuous mode [ 737.717386][ T3382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 737.978639][ T3382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 739.303301][ T24] audit: type=1400 audit(738.440:128): avc: denied { create } for pid=3383 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 739.304217][ T24] audit: type=1400 audit(738.470:129): avc: denied { write } for pid=3383 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 739.364697][ T24] audit: type=1400 audit(738.530:130): avc: denied { read } for pid=3383 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 739.454609][ T3383] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 739.637330][ T3383] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 739.695125][ T3383] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 739.803554][ T3383] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 739.868107][ T3383] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 740.002463][ T3383] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 740.048805][ T3383] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 740.162894][ T3383] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 751.222594][ T3382] hsr_slave_0: entered promiscuous mode [ 751.254990][ T3382] hsr_slave_1: entered promiscuous mode [ 751.302553][ T3382] debugfs: 'hsr0' already exists in 'hsr' [ 751.303996][ T3382] Cannot create hsr debugfs directory [ 752.065433][ T3383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 759.979124][ T3382] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 760.152266][ T3382] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 760.237478][ T3382] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 760.422445][ T3382] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 760.486125][ T3382] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 760.644558][ T3382] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 760.737544][ T3382] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 760.913609][ T3382] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 779.737416][ T3382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 805.888783][ T3383] veth0_vlan: entered promiscuous mode [ 806.364202][ T3383] veth1_vlan: entered promiscuous mode [ 808.292820][ T3383] veth0_macvtap: entered promiscuous mode [ 808.683875][ T3383] veth1_macvtap: entered promiscuous mode [ 810.762318][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.825577][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.133502][ T3480] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.341471][ T3480] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.078429][ T24] audit: type=1400 audit(812.250:131): avc: denied { mount } for pid=3383 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 813.211766][ T24] audit: type=1400 audit(812.380:132): avc: denied { mounton } for pid=3383 comm="syz-executor" path="/syzkaller.eyuAZo/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 813.283691][ T24] audit: type=1400 audit(812.450:133): avc: denied { mount } for pid=3383 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 813.500829][ T24] audit: type=1400 audit(812.640:134): avc: denied { mounton } for pid=3383 comm="syz-executor" path="/syzkaller.eyuAZo/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 813.545467][ T24] audit: type=1400 audit(812.720:135): avc: denied { mounton } for pid=3383 comm="syz-executor" path="/syzkaller.eyuAZo/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 813.881146][ T24] audit: type=1400 audit(813.030:136): avc: denied { unmount } for pid=3383 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 814.052269][ T24] audit: type=1400 audit(813.220:137): avc: denied { mounton } for pid=3383 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1548 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 814.178143][ T24] audit: type=1400 audit(813.350:138): avc: denied { mount } for pid=3383 comm="syz-executor" name="/" dev="gadgetfs" ino=3756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 817.192837][ T24] audit: type=1400 audit(816.360:139): avc: denied { mounton } for pid=3383 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 817.243465][ T24] audit: type=1400 audit(816.400:140): avc: denied { mount } for pid=3383 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 818.171679][ T3383] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 819.171871][ T24] audit: type=1400 audit(818.300:141): avc: denied { read } for pid=3383 comm="syz-executor" name="loop1" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 819.172689][ T24] audit: type=1400 audit(818.310:142): avc: denied { open } for pid=3383 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 819.214156][ T24] audit: type=1400 audit(818.390:143): avc: denied { ioctl } for pid=3383 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=637 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 828.232318][ T24] audit: type=1400 audit(827.260:144): avc: denied { read } for pid=3550 comm="syz.1.2" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 828.233093][ T24] audit: type=1400 audit(827.400:145): avc: denied { open } for pid=3550 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 828.792246][ T24] audit: type=1400 audit(827.880:146): avc: denied { ioctl } for pid=3550 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 833.761684][ T3382] veth0_vlan: entered promiscuous mode [ 834.643542][ T3382] veth1_vlan: entered promiscuous mode [ 834.878452][ T24] audit: type=1400 audit(834.050:147): avc: denied { append } for pid=3550 comm="syz.1.2" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 837.922772][ T3382] veth0_macvtap: entered promiscuous mode [ 838.495370][ T3382] veth1_macvtap: entered promiscuous mode [ 841.295980][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.553918][ T3475] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.567773][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.652045][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.726265][ T24] audit: type=1400 audit(859.900:148): avc: denied { write } for pid=3571 comm="syz.1.5" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 862.148441][ T24] audit: type=1400 audit(861.320:149): avc: denied { mmap_zero } for pid=3571 comm="syz.1.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 868.137574][ T24] audit: type=1400 audit(867.310:150): avc: denied { map } for pid=3576 comm="syz.1.7" path="pipe:[2768]" dev="pipefs" ino=2768 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 871.255306][ T24] audit: type=1400 audit(870.340:151): avc: denied { create } for pid=3574 comm="syz.0.6" anonclass=[kvm-gmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 929.883824][ T24] audit: type=1400 audit(929.040:152): avc: denied { execute } for pid=3609 comm="syz.1.17" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=4871 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 977.824994][ T3631] KVM: debugfs: duplicate directory 3631-6 [ 978.096963][ T3631] KVM: debugfs: duplicate directory 3631-6 [ 1038.361854][ T24] audit: type=1400 audit(1037.520:153): avc: denied { map } for pid=3663 comm="syz.0.34" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=6029 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1038.366682][ T24] audit: type=1400 audit(1037.530:154): avc: denied { read } for pid=3663 comm="syz.0.34" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=6029 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1052.300640][ T24] audit: type=1400 audit(1051.460:155): avc: denied { write } for pid=3674 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1059.661858][ T24] audit: type=1400 audit(1058.830:156): avc: denied { write } for pid=3683 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1063.846452][ T24] audit: type=1400 audit(1062.970:157): avc: denied { map } for pid=3687 comm="syz.1.39" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1063.874511][ T24] audit: type=1400 audit(1063.040:158): avc: denied { execute } for pid=3687 comm="syz.1.39" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1205.760660][ T24] audit: type=1400 audit(1204.930:159): avc: denied { write } for pid=3781 comm="syz.1.70" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=8075 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1360.432006][ T24] audit: type=1400 audit(1359.550:160): avc: denied { execute } for pid=3887 comm="syz.1.103" path=2F35312F10FBFF67525673312B0104 dev="tmpfs" ino=273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1406.972554][ T24] audit: type=1400 audit(1406.140:161): avc: denied { write } for pid=3930 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1413.223918][ T24] audit: type=1400 audit(1412.370:162): avc: denied { write } for pid=3937 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1780.369250][ T24] audit: type=1400 audit(1779.540:163): avc: denied { write } for pid=4184 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1783.772375][ T24] audit: type=1400 audit(1782.920:164): avc: denied { write } for pid=4187 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1816.463860][ T3494] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1818.507548][ T3494] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1819.613570][ T3494] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1820.537729][ T3494] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1831.713266][ T3494] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1831.857687][ T3494] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1831.974371][ T3494] bond0 (unregistering): Released all slaves [ 1840.725223][ T4192] rxe_eth0 speed is unknown, defaulting to 1000 [ 1846.320867][ T24] audit: type=1400 audit(1845.480:165): avc: denied { write } for pid=4218 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1847.688925][ T3494] hsr_slave_0: left promiscuous mode [ 1847.821314][ T3494] hsr_slave_1: left promiscuous mode [ 1848.173623][ T3494] veth1_macvtap: left promiscuous mode [ 1848.174825][ T3494] veth0_macvtap: left promiscuous mode [ 1848.194515][ T3494] veth1_vlan: left promiscuous mode [ 1848.196465][ T3494] veth0_vlan: left promiscuous mode [ 1851.803528][ T24] audit: type=1400 audit(1850.940:166): avc: denied { write } for pid=4221 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1867.118492][ T3218] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1867.700668][ T4197] rxe_eth0 speed is unknown, defaulting to 1000 [ 1872.614514][ T3494] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1873.809382][ T3494] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1875.058654][ T3494] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1876.096928][ T3494] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1878.795522][ T24] audit: type=1400 audit(1877.970:167): avc: denied { write } for pid=4225 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1884.741996][ T24] audit: type=1400 audit(1883.840:168): avc: denied { write } for pid=4233 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1889.488613][ T3494] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1889.564669][ T3494] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1889.616328][ T3494] bond0 (unregistering): Released all slaves [ 1891.105454][ T3218] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1903.191722][ T3494] hsr_slave_0: left promiscuous mode [ 1903.235000][ T3494] hsr_slave_1: left promiscuous mode [ 1903.543229][ T3494] veth1_macvtap: left promiscuous mode [ 1903.544040][ T3494] veth0_macvtap: left promiscuous mode [ 1903.546468][ T3494] veth1_vlan: left promiscuous mode [ 1903.547706][ T3494] veth0_vlan: left promiscuous mode [ 1906.772911][ T24] audit: type=1400 audit(1905.940:169): avc: denied { write } for pid=4245 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1910.297140][ T24] audit: type=1400 audit(1909.470:170): avc: denied { write } for pid=4248 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1918.312568][ T3218] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1931.645588][ T24] audit: type=1400 audit(1930.820:171): avc: denied { write } for pid=4264 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1933.506798][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1934.418457][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1936.422032][ T24] audit: type=1400 audit(1935.550:172): avc: denied { write } for pid=4271 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1939.528106][ T3218] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1942.529400][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1942.782730][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1950.652072][ T24] audit: type=1400 audit(1949.820:173): avc: denied { write } for pid=4287 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1954.442374][ T4192] hsr_slave_0: entered promiscuous mode [ 1954.484919][ T4192] hsr_slave_1: entered promiscuous mode [ 1955.162491][ T24] audit: type=1400 audit(1954.320:174): avc: denied { write } for pid=4295 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1958.521997][ T3218] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1962.465570][ T4197] hsr_slave_0: entered promiscuous mode [ 1962.524776][ T4197] hsr_slave_1: entered promiscuous mode [ 1962.573377][ T4197] debugfs: 'hsr0' already exists in 'hsr' [ 1962.573769][ T4197] Cannot create hsr debugfs directory [ 1967.117462][ T24] audit: type=1400 audit(1966.290:175): avc: denied { write } for pid=4304 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1968.670937][ T4192] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1968.927066][ T4192] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1969.761913][ T4192] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1969.914988][ T4192] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1970.791236][ T4192] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1970.996115][ T4192] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1971.338781][ T24] audit: type=1400 audit(1970.510:176): avc: denied { write } for pid=4309 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1971.483502][ T4192] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1971.657518][ T4192] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1974.938805][ T3218] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1977.992043][ T4197] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1978.332126][ T4197] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1978.413818][ T4197] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1978.694007][ T4197] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1978.749362][ T4197] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1979.045541][ T4197] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1979.113625][ T4197] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1979.354596][ T4197] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1990.318808][ T24] audit: type=1400 audit(1989.490:177): avc: denied { write } for pid=4332 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1998.488314][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1999.022096][ T24] audit: type=1400 audit(1998.130:178): avc: denied { write } for pid=4341 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2005.282002][ T3218] 8021q: adding VLAN 0 to HW filter on device eth7 [ 2007.262622][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2011.967555][ T24] audit: type=1400 audit(2011.140:179): avc: denied { write } for pid=4347 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2018.302567][ T24] audit: type=1400 audit(2017.470:180): avc: denied { write } for pid=4357 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2039.232287][ T24] audit: type=1400 audit(2038.390:181): avc: denied { write } for pid=4371 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2047.399101][ T24] audit: type=1400 audit(2046.570:182): avc: denied { write } for pid=4381 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2052.996519][ T3218] 8021q: adding VLAN 0 to HW filter on device eth8 [ 2065.650896][ T24] audit: type=1400 audit(2064.760:183): avc: denied { write } for pid=4394 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2072.459233][ T24] audit: type=1400 audit(2071.630:184): avc: denied { write } for pid=4404 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2089.182928][ T4192] veth0_vlan: entered promiscuous mode [ 2090.012290][ T4192] veth1_vlan: entered promiscuous mode [ 2093.102804][ T4192] veth0_macvtap: entered promiscuous mode [ 2093.534274][ T4192] veth1_macvtap: entered promiscuous mode [ 2096.933382][ T42] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2097.084128][ T4342] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2097.213266][ T42] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2097.214070][ T42] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2098.245765][ T4197] veth0_vlan: entered promiscuous mode [ 2100.063242][ T4197] veth1_vlan: entered promiscuous mode [ 2103.586353][ T24] audit: type=1400 audit(2102.740:185): avc: denied { unmount } for pid=4192 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 2105.092852][ T4197] veth0_macvtap: entered promiscuous mode [ 2105.833589][ T4197] veth1_macvtap: entered promiscuous mode [ 2109.588210][ T4206] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2109.633072][ T4206] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2109.638524][ T4206] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2109.741690][ T42] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2117.043843][ T24] audit: type=1400 audit(2116.180:186): avc: denied { write } for pid=4433 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2126.501528][ T24] audit: type=1400 audit(2125.640:187): avc: denied { write } for pid=4442 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2154.484479][ T24] audit: type=1400 audit(2153.640:188): avc: denied { write } for pid=4465 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2164.236731][ T24] audit: type=1400 audit(2163.340:189): avc: denied { write } for pid=4476 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2189.353156][ T24] audit: type=1400 audit(2188.510:190): avc: denied { write } for pid=4489 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2197.477058][ T24] audit: type=1400 audit(2196.570:191): avc: denied { write } for pid=4495 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2206.030767][ T24] audit: type=1400 audit(2205.190:192): avc: denied { write } for pid=4498 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2210.425273][ T24] audit: type=1400 audit(2209.590:193): avc: denied { write } for pid=4501 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2224.567584][ T24] audit: type=1400 audit(2223.720:194): avc: denied { write } for pid=4506 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2233.353771][ T24] audit: type=1400 audit(2232.490:195): avc: denied { write } for pid=4510 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2252.501175][ T24] audit: type=1400 audit(2251.650:196): avc: denied { write } for pid=4518 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2260.824225][ T24] audit: type=1400 audit(2259.910:197): avc: denied { write } for pid=4529 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2267.325899][ T4513] rxe_eth0 speed is unknown, defaulting to 1000 [ 2279.136850][ T24] audit: type=1400 audit(2278.310:198): avc: denied { write } for pid=4540 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2284.733835][ T4520] rxe_eth0 speed is unknown, defaulting to 1000 [ 2286.692669][ T24] audit: type=1400 audit(2285.820:199): avc: denied { write } for pid=4543 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2334.459036][ T4513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2335.052881][ T4513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2354.578377][ T4520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2355.105995][ T4520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2363.486242][ T24] audit: type=1400 audit(2362.570:200): avc: denied { write } for pid=4578 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2371.466004][ T4513] hsr_slave_0: entered promiscuous mode [ 2371.548534][ T4513] hsr_slave_1: entered promiscuous mode [ 2371.663061][ T4513] debugfs: 'hsr0' already exists in 'hsr' [ 2371.663447][ T4513] Cannot create hsr debugfs directory [ 2372.721300][ T24] audit: type=1400 audit(2371.870:201): avc: denied { write } for pid=4586 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2392.077456][ T4520] hsr_slave_0: entered promiscuous mode [ 2392.128436][ T4520] hsr_slave_1: entered promiscuous mode [ 2392.252188][ T4520] debugfs: 'hsr0' already exists in 'hsr' [ 2392.252571][ T4520] Cannot create hsr debugfs directory [ 2392.416104][ T4513] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2392.822808][ T4513] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2392.973652][ T4513] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2393.172211][ T4513] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2393.923834][ T4513] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2394.261602][ T4513] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2394.309405][ T4513] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2394.626734][ T4513] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2417.624497][ T4520] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2418.349316][ T4520] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2418.563684][ T4520] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2418.974258][ T4520] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2419.085973][ T4520] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2419.615087][ T4520] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2419.669043][ T4520] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2420.247903][ T4520] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2433.023813][ T4619] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2434.932838][ T4619] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2436.831507][ T4619] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2438.308566][ T4619] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2439.746502][ T4513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2456.684121][ T4619] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2456.853802][ T4619] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2456.978503][ T4619] bond0 (unregistering): Released all slaves [ 2466.545306][ T4520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2483.713997][ T4619] hsr_slave_0: left promiscuous mode [ 2483.812325][ T4619] hsr_slave_1: left promiscuous mode [ 2484.482628][ T4619] veth1_macvtap: left promiscuous mode [ 2484.483405][ T4619] veth0_macvtap: left promiscuous mode [ 2484.536436][ T4619] veth1_vlan: left promiscuous mode [ 2484.537774][ T4619] veth0_vlan: left promiscuous mode [ 2484.566292][ T24] audit: type=1400 audit(2483.740:202): avc: denied { write } for pid=4640 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2493.213522][ T24] audit: type=1400 audit(2492.380:203): avc: denied { write } for pid=4646 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2510.563301][ T3218] 8021q: adding VLAN 0 to HW filter on device eth9 [ 2517.275730][ T4619] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2519.265502][ T4619] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2520.907219][ T4619] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2522.775127][ T4619] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2535.452776][ T24] audit: type=1400 audit(2534.610:204): avc: denied { write } for pid=4656 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2544.408965][ T24] audit: type=1400 audit(2543.580:205): avc: denied { write } for pid=4663 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2548.344965][ T4619] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2548.763492][ T4619] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2549.102973][ T4619] bond0 (unregistering): Released all slaves [ 2551.336503][ T3218] 8021q: adding VLAN 0 to HW filter on device eth10 [ 2570.754546][ T4619] hsr_slave_0: left promiscuous mode [ 2570.871110][ T4619] hsr_slave_1: left promiscuous mode [ 2571.472302][ T4619] veth1_macvtap: left promiscuous mode [ 2571.473063][ T4619] veth0_macvtap: left promiscuous mode [ 2571.474798][ T4619] veth1_vlan: left promiscuous mode [ 2571.476050][ T4619] veth0_vlan: left promiscuous mode [ 2574.289140][ T24] audit: type=1400 audit(2573.450:206): avc: denied { write } for pid=4675 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2581.002235][ T24] audit: type=1400 audit(2580.160:207): avc: denied { write } for pid=4682 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2601.436961][ T3218] 8021q: adding VLAN 0 to HW filter on device eth12 [ 2618.365840][ T24] audit: type=1400 audit(2617.540:208): avc: denied { write } for pid=4694 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2625.265130][ T24] audit: type=1400 audit(2624.430:209): avc: denied { write } for pid=4705 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2629.963049][ T3218] 8021q: adding VLAN 0 to HW filter on device eth11 [ 2650.702537][ T24] audit: type=1400 audit(2649.810:210): avc: denied { write } for pid=4724 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2658.648508][ T4513] veth0_vlan: entered promiscuous mode [ 2659.847532][ T4513] veth1_vlan: entered promiscuous mode [ 2660.541321][ T24] audit: type=1400 audit(2659.700:211): avc: denied { write } for pid=4733 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2663.628552][ T4513] veth0_macvtap: entered promiscuous mode [ 2664.533481][ T4513] veth1_macvtap: entered promiscuous mode [ 2668.308323][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2668.495524][ T3218] 8021q: adding VLAN 0 to HW filter on device eth13 [ 2668.522370][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2668.548961][ T4206] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2668.836702][ T42] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2676.665030][ T4520] veth0_vlan: entered promiscuous mode [ 2677.914602][ T4520] veth1_vlan: entered promiscuous mode [ 2681.226304][ T4520] veth0_macvtap: entered promiscuous mode [ 2681.838708][ T4520] veth1_macvtap: entered promiscuous mode [ 2685.564290][ T4342] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2685.581676][ T4342] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2685.582453][ T4342] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2685.583055][ T4342] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2694.174025][ T24] audit: type=1400 audit(2693.280:212): avc: denied { write } for pid=4744 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2703.327046][ T24] audit: type=1400 audit(2702.500:213): avc: denied { write } for pid=4755 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2711.792366][ T3218] 8021q: adding VLAN 0 to HW filter on device eth14 [ 2737.418348][ T24] audit: type=1400 audit(2736.560:214): avc: denied { write } for pid=4766 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2747.933581][ T24] audit: type=1400 audit(2747.100:215): avc: denied { write } for pid=4778 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2755.523971][ T3218] 8021q: adding VLAN 0 to HW filter on device eth15 [ 2781.654719][ T24] audit: type=1400 audit(2780.820:216): avc: denied { write } for pid=4796 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2794.501673][ T24] audit: type=1400 audit(2793.560:217): avc: denied { write } for pid=4808 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2802.558300][ T3218] 8021q: adding VLAN 0 to HW filter on device eth16 [ 2814.685519][ T24] audit: type=1400 audit(2813.780:218): avc: denied { write } for pid=4816 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2825.323716][ T24] audit: type=1400 audit(2824.410:219): avc: denied { write } for pid=4825 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2845.186379][ T24] audit: type=1400 audit(2844.350:220): avc: denied { write } for pid=4833 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2858.852922][ T24] audit: type=1400 audit(2858.010:221): avc: denied { write } for pid=4844 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2950.298150][ T24] audit: type=1400 audit(2949.460:222): avc: denied { write } for pid=4898 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2963.852944][ T24] audit: type=1400 audit(2962.990:223): avc: denied { write } for pid=4908 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2993.042688][ T24] audit: type=1400 audit(2992.180:224): avc: denied { write } for pid=4921 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3004.178829][ T24] audit: type=1400 audit(3003.320:225): avc: denied { write } for pid=4934 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3029.301884][ T24] audit: type=1400 audit(3028.460:226): avc: denied { write } for pid=4944 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3042.067800][ T24] audit: type=1400 audit(3041.230:227): avc: denied { write } for pid=4956 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3075.033669][ T24] audit: type=1400 audit(3074.190:228): avc: denied { write } for pid=4971 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3087.322441][ T24] audit: type=1400 audit(3086.440:229): avc: denied { write } for pid=4984 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3112.086101][ T24] audit: type=1400 audit(3111.240:230): avc: denied { write } for pid=4998 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3122.278918][ T24] audit: type=1400 audit(3121.440:231): avc: denied { write } for pid=5009 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3143.874037][ T24] audit: type=1400 audit(3142.990:232): avc: denied { write } for pid=5020 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3156.623329][ T24] audit: type=1400 audit(3155.770:233): avc: denied { write } for pid=5031 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3184.573595][ T24] audit: type=1400 audit(3183.710:234): avc: denied { write } for pid=5043 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3197.298297][ T24] audit: type=1400 audit(3196.470:235): avc: denied { write } for pid=5057 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3383.035894][ T24] audit: type=1400 audit(3382.210:236): avc: denied { write } for pid=5156 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3394.811708][ T24] audit: type=1400 audit(3393.980:237): avc: denied { write } for pid=5166 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3843.485900][ T24] audit: type=1400 audit(3842.650:238): avc: denied { write } for pid=5403 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3855.541732][ T24] audit: type=1400 audit(3854.700:239): avc: denied { write } for pid=5412 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3956.465718][ T24] audit: type=1400 audit(3955.580:240): avc: denied { setattr } for pid=5472 comm="syz.4.355" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 4150.931387][ T24] audit: type=1400 audit(4150.100:241): avc: denied { write } for pid=5562 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4163.762531][ T24] audit: type=1400 audit(4162.900:242): avc: denied { write } for pid=5571 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4319.568643][ T5609] rxe_eth0 speed is unknown, defaulting to 1000 [ 4338.831535][ T5611] rxe_eth0 speed is unknown, defaulting to 1000 [ 4346.565504][ T5614] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4349.258667][ T5614] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4351.457635][ T5614] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4353.874649][ T5614] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4372.038397][ T5614] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 4372.444247][ T5614] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 4372.766079][ T5614] bond0 (unregistering): Released all slaves [ 4393.548018][ T5614] hsr_slave_0: left promiscuous mode [ 4393.653706][ T5614] hsr_slave_1: left promiscuous mode [ 4394.384912][ T5614] veth1_macvtap: left promiscuous mode [ 4394.385656][ T5614] veth0_macvtap: left promiscuous mode [ 4394.387229][ T5614] veth1_vlan: left promiscuous mode [ 4394.388428][ T5614] veth0_vlan: left promiscuous mode [ 4400.601935][ T24] audit: type=1400 audit(4399.730:243): avc: denied { write } for pid=5645 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4408.021038][ T24] audit: type=1400 audit(4407.180:244): avc: denied { write } for pid=5649 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4423.912232][ T3218] 8021q: adding VLAN 0 to HW filter on device eth17 [ 4430.051980][ T5614] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4431.758058][ T5614] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4433.202683][ T5614] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4435.041259][ T5614] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4446.717928][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4447.186900][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4447.911515][ T24] audit: type=1400 audit(4447.070:245): avc: denied { write } for pid=5666 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4458.294804][ T24] audit: type=1400 audit(4457.370:246): avc: denied { write } for pid=5676 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4466.882316][ T5614] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 4467.075040][ T5614] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 4467.213162][ T5614] bond0 (unregistering): Released all slaves [ 4470.196450][ T3218] 8021q: adding VLAN 0 to HW filter on device eth18 [ 4473.509020][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4474.018766][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4489.236021][ T5614] hsr_slave_0: left promiscuous mode [ 4489.403403][ T5614] hsr_slave_1: left promiscuous mode [ 4489.922147][ T5614] veth1_macvtap: left promiscuous mode [ 4489.922905][ T5614] veth0_macvtap: left promiscuous mode [ 4489.924508][ T5614] veth1_vlan: left promiscuous mode [ 4489.925718][ T5614] veth0_vlan: left promiscuous mode [ 4495.036351][ T24] audit: type=1400 audit(4494.190:247): avc: denied { write } for pid=5689 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4500.344330][ T24] audit: type=1400 audit(4499.440:248): avc: denied { write } for pid=5693 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4515.176205][ T3218] 8021q: adding VLAN 0 to HW filter on device eth19 [ 4525.406771][ T5609] hsr_slave_0: entered promiscuous mode [ 4525.475370][ T5609] hsr_slave_1: entered promiscuous mode [ 4536.104028][ T5611] hsr_slave_0: entered promiscuous mode [ 4536.165509][ T5611] hsr_slave_1: entered promiscuous mode [ 4536.247335][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 4536.247737][ T5611] Cannot create hsr debugfs directory [ 4540.513977][ T24] audit: type=1400 audit(4539.620:249): avc: denied { write } for pid=5705 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4546.313541][ T24] audit: type=1400 audit(4545.480:250): avc: denied { write } for pid=5710 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4550.229222][ T3218] 8021q: adding VLAN 0 to HW filter on device eth20 [ 4552.061076][ T5609] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 4552.405271][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 4552.661716][ T5609] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 4553.255345][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 4553.487623][ T5609] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 4553.984169][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 4554.715389][ T5609] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 4554.994971][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 4559.887098][ T5611] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 4560.368877][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 4560.572427][ T5611] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 4561.045745][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 4561.178343][ T5611] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 4561.725586][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 4561.961893][ T5611] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 4562.324766][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 4573.187832][ T24] audit: type=1400 audit(4572.330:251): avc: denied { write } for pid=5732 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4583.831354][ T24] audit: type=1400 audit(4582.970:252): avc: denied { write } for pid=5744 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4591.254969][ T3218] 8021q: adding VLAN 0 to HW filter on device eth21 [ 4591.702091][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4600.103786][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4619.027198][ T24] audit: type=1400 audit(4618.200:253): avc: denied { write } for pid=5759 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4630.605571][ T24] audit: type=1400 audit(4629.760:254): avc: denied { write } for pid=5767 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4639.017427][ T3218] 8021q: adding VLAN 0 to HW filter on device eth23 [ 4663.611878][ T24] audit: type=1400 audit(4662.780:255): avc: denied { write } for pid=5782 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4673.971440][ T24] audit: type=1400 audit(4673.130:256): avc: denied { write } for pid=5792 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4680.578447][ T3218] 8021q: adding VLAN 0 to HW filter on device eth22 [ 4690.154904][ T24] audit: type=1400 audit(4689.320:257): avc: denied { write } for pid=5802 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4701.111387][ T24] audit: type=1400 audit(4700.270:258): avc: denied { write } for pid=5812 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4725.641488][ T24] audit: type=1400 audit(4724.800:259): avc: denied { write } for pid=5824 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4736.203538][ T24] audit: type=1400 audit(4735.360:260): avc: denied { write } for pid=5834 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4749.375549][ T5609] veth0_vlan: entered promiscuous mode [ 4750.818334][ T5609] veth1_vlan: entered promiscuous mode [ 4756.836524][ T5609] veth0_macvtap: entered promiscuous mode [ 4757.717878][ T5611] veth0_vlan: entered promiscuous mode [ 4758.354700][ T5609] veth1_macvtap: entered promiscuous mode [ 4760.379170][ T5611] veth1_vlan: entered promiscuous mode [ 4766.894975][ T4620] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 4766.895841][ T4620] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 4766.896484][ T4620] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 4766.897090][ T4620] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 4767.113265][ T24] audit: type=1400 audit(4766.170:261): avc: denied { write } for pid=5846 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4769.137639][ T5611] veth0_macvtap: entered promiscuous mode [ 4771.032520][ T5611] veth1_macvtap: entered promiscuous mode [ 4778.511726][ T4195] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 4778.575218][ T5478] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 4778.744868][ T4644] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 4778.767491][ T49] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 4779.602431][ T24] audit: type=1400 audit(4778.770:262): avc: denied { write } for pid=5851 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4788.756910][ T3218] 8021q: adding VLAN 0 to HW filter on device eth24 [ 4867.282547][ T24] audit: type=1400 audit(4866.420:263): avc: denied { write } for pid=5895 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4881.526474][ T24] audit: type=1400 audit(4880.680:264): avc: denied { write } for pid=5906 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4907.954546][ T24] audit: type=1400 audit(4907.130:265): avc: denied { write } for pid=5915 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4922.460750][ T24] audit: type=1400 audit(4921.630:266): avc: denied { write } for pid=5927 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4979.845979][ T24] audit: type=1400 audit(4979.000:267): avc: denied { write } for pid=5956 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4992.044337][ T24] audit: type=1400 audit(4991.220:268): avc: denied { write } for pid=5963 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5019.716186][ T24] audit: type=1400 audit(5018.870:269): avc: denied { write } for pid=5973 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5033.142108][ T24] audit: type=1400 audit(5032.280:270): avc: denied { write } for pid=5986 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5084.881743][ T24] audit: type=1400 audit(5083.990:271): avc: denied { write } for pid=6010 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5100.498397][ T24] audit: type=1400 audit(5099.650:272): avc: denied { write } for pid=6022 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5129.604896][ T24] audit: type=1400 audit(5128.780:273): avc: denied { write } for pid=6036 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5140.125005][ T24] audit: type=1400 audit(5139.270:274): avc: denied { write } for pid=6039 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5165.302278][ T24] audit: type=1400 audit(5164.410:275): avc: denied { write } for pid=6045 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5177.473782][ T24] audit: type=1400 audit(5176.640:276): avc: denied { write } for pid=6053 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5207.998898][ T6047] rxe_eth0 speed is unknown, defaulting to 1000 [ 5226.991851][ T6050] rxe_eth0 speed is unknown, defaulting to 1000 [ 5237.811977][ T24] audit: type=1400 audit(5236.970:277): avc: denied { write } for pid=6069 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5249.560652][ T24] audit: type=1400 audit(5248.630:278): avc: denied { write } for pid=6072 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5314.605445][ T6047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 5316.495061][ T6047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 5339.289332][ T6050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 5340.898563][ T6050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 5365.345470][ T6047] hsr_slave_0: entered promiscuous mode [ 5365.456621][ T6047] hsr_slave_1: entered promiscuous mode [ 5365.652305][ T6047] debugfs: 'hsr0' already exists in 'hsr' [ 5365.652688][ T6047] Cannot create hsr debugfs directory [ 5395.935235][ T6050] hsr_slave_0: entered promiscuous mode [ 5396.056149][ T6050] hsr_slave_1: entered promiscuous mode [ 5396.162282][ T6050] debugfs: 'hsr0' already exists in 'hsr' [ 5396.162664][ T6050] Cannot create hsr debugfs directory [ 5401.626427][ T6047] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 5402.233965][ T6047] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 5403.932555][ T6047] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 5404.408002][ T6047] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 5405.301977][ T6047] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 5405.663691][ T6047] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 5407.492967][ T6047] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 5407.966085][ T6047] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 5429.022039][ T6050] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 5429.712703][ T6050] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 5429.875628][ T6050] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 5430.518018][ T6050] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 5430.772371][ T6050] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 5431.435586][ T6050] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 5431.597347][ T6050] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 5432.295283][ T6050] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 5468.573318][ T6047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 5485.638033][ T49] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5488.923119][ T49] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5492.446429][ T49] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5495.225706][ T49] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5499.428484][ T6050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 5533.692589][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 5534.526535][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 5535.093962][ T49] bond0 (unregistering): Released all slaves [ 5573.862606][ T49] hsr_slave_0: left promiscuous mode [ 5574.021462][ T49] hsr_slave_1: left promiscuous mode [ 5575.076739][ T49] veth1_macvtap: left promiscuous mode [ 5575.077505][ T49] veth0_macvtap: left promiscuous mode [ 5575.079078][ T49] veth1_vlan: left promiscuous mode [ 5575.242930][ T49] veth0_vlan: left promiscuous mode [ 5580.553409][ T24] audit: type=1400 audit(5579.720:279): avc: denied { write } for pid=6173 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5594.661581][ T24] audit: type=1400 audit(5593.780:280): avc: denied { write } for pid=6178 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5634.515957][ T3218] 8021q: adding VLAN 0 to HW filter on device eth25 [ 5655.455318][ T24] audit: type=1400 audit(5654.590:281): avc: denied { write } for pid=6182 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5671.224991][ T24] audit: type=1400 audit(5670.260:282): avc: denied { write } for pid=6192 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5715.082171][ T24] audit: type=1400 audit(5714.210:283): avc: denied { write } for pid=6208 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5730.361708][ T24] audit: type=1400 audit(5729.520:284): avc: denied { write } for pid=6219 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5741.268475][ T3218] 8021q: adding VLAN 0 to HW filter on device eth26 [ 5778.297931][ T24] audit: type=1400 audit(5777.470:285): avc: denied { write } for pid=6234 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5792.660640][ T24] audit: type=1400 audit(5791.730:286): avc: denied { write } for pid=6237 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5801.887883][ T3218] 8021q: adding VLAN 0 to HW filter on device eth27 [ 5824.997524][ T24] audit: type=1400 audit(5824.170:287): avc: denied { write } for pid=6240 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5841.555300][ T24] audit: type=1400 audit(5840.710:288): avc: denied { write } for pid=6247 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5883.934020][ T5478] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 5885.042021][ T5478] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 5885.319211][ T5478] bond0 (unregistering): Released all slaves [ 5905.187915][ T6241] rxe_eth0 speed is unknown, defaulting to 1000 [ 5913.261326][ T24] audit: type=1400 audit(5912.430:289): avc: denied { write } for pid=6268 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5924.548579][ T26] INFO: task syz.7.413:6023 blocked for more than 430 seconds. [ 5924.620683][ T26] Not tainted syzkaller #0 [ 5924.621092][ T26] Blocked by coredump. [ 5924.621219][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 5924.621519][ T26] task:syz.7.413 state:D stack:0 pid:6023 tgid:6023 ppid:5611 task_flags:0x40044c flags:0x00000019 [ 5924.624242][ T26] Call trace: [ 5924.624580][ T26] __switch_to+0x5e4/0xb74 (T) [ 5924.625923][ T26] __schedule+0x1e0c/0x38a4 [ 5924.626304][ T26] schedule+0x1b4/0x274 [ 5924.626598][ T26] schedule_timeout+0x68/0x1e4 [ 5924.626967][ T26] wait_for_completion+0x1bc/0x418 [ 5924.627275][ T26] __synchronize_srcu+0x1cc/0x20c [ 5924.627555][ T26] synchronize_srcu+0x668/0x8dc [ 5924.627889][ T26] mmu_notifier_unregister+0x33c/0x444 [ 5924.628177][ T26] kvm_put_kvm+0x69c/0xbbc [ 5924.628529][ T26] kvm_vm_release+0x58/0x78 [ 5924.628832][ T26] __fput+0x4b0/0x97c [ 5924.629168][ T26] ____fput+0x20/0x30 [ 5924.851044][ T26] task_work_run+0x1b8/0x254 [ 5924.851537][ T26] do_exit+0x890/0x23d8 [ 5924.851957][ T26] do_group_exit+0x1d4/0x2ac [ 5924.852313][ T26] get_signal+0x13fc/0x1508 [ 5924.852563][ T26] arch_do_signal_or_restart+0x23c/0x4b50 [ 5924.852945][ T26] exit_to_user_mode_loop+0x88/0x188 [ 5924.853285][ T26] el0_svc+0x18c/0x240 [ 5924.853611][ T26] el0t_64_sync_handler+0x68/0xdc [ 5924.853962][ T26] el0t_64_sync+0x198/0x19c [ 5924.855509][ T26] [ 5924.855509][ T26] Showing all locks held in the system: [ 5924.855903][ T26] locks held by khungtaskd/26: 1, last CPU#0: [ 5924.856157][ T26] #0: ffff800088a7e858 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x4c/0x188 [ 5924.857607][ T26] locks held by kworker/u4:4/49: 3, last CPU#0: [ 5924.857835][ T26] #0: eef000000dc34140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b8 [ 5924.858637][ T26] #1: ffff80008dca7ce8 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b8 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 5925.077141][ T26] #2: 27f000001f876a58 (&devlink->lock_key#3){+.+.}-{4:4}, at: devl_trylock+0x24/0x34 [ 5925.078572][ T26] locks held by getty/3246: 2, on CPU#0: [ 5925.078795][ T26] #0: 70f000001342e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x40/0x50 [ 5925.131639][ T26] #1: 18ff80008d7db2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x314/0x11f8 [ 5925.132707][ T26] locks held by syz-executor/3372: 2, last CPU#0: [ 5925.132947][ T26] #0: aef00000165222f8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0xf4/0xb64 [ 5925.133677][ T26] #1: ffff800088a7e858 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x50/0x22c [ 5925.134502][ T26] locks held by kworker/u4:1/3822: 3, last CPU#0: [ 5925.134697][ T26] #0: eef000000dc34140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b8 [ 5925.135477][ T26] #1: ffff8000a9eb7ce8 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b8 [ 5925.136318][ T26] #2: 4bf000001f879a58 (&devlink->lock_key#6){+.+.}-{4:4}, at: devl_trylock+0x24/0x34 [ 5925.137228][ T26] locks held by kworker/u4:9/4342: 3, last CPU#0: [ 5925.137416][ T26] #0: eef000000dc34140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b8 [ 5925.138170][ T26] #1: ffff80008f5e7ce8 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b8 [ 5925.138939][ T26] #2: cff0000029223258 (&devlink->lock_key#10){+.+.}-{4:4}, at: __mod_timer+0x5cc/0xe90 [ 5925.351983][ T26] locks held by kworker/u4:11/4620: 3, last CPU#0: [ 5925.352218][ T26] #0: eef000000dc34140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b8 [ 5925.353025][ T26] #1: ffff80008fa57ce8 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b8 [ 5925.353797][ T26] #2: 18f000001ff1d258 (&devlink->lock_key#2){+.+.}-{4:4}, at: devl_trylock+0x24/0x34 [ 5925.354703][ T26] locks held by kworker/u4:3/5478: 5, last CPU#0: [ 5925.354922][ T26] #0: 82f000000e2ca540 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b8 [ 5925.355681][ T26] #1: ffff8000a0d07ce8 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b8 [ 5925.356497][ T26] #2: ffff800088d6ee58 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x84/0x830 [ 5925.357259][ T26] #3: c2f000000e2c9aa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x48/0x164 [ 5925.358057][ T26] #4: c2f000000e2c9980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x50/0x164 [ 5925.358896][ T26] locks held by syz.6.414/6027: 2, last CPU#0: [ 5925.359092][ T26] #0: ffff800088acc330 (srcu){.+.+}-{0:0}, at: mmu_notifier_unregister+0xdc/0x444 [ 5925.595838][ T26] #1: 08f000001a175518 (&kvm->srcu){.+.+}-{0:0}, at: kvm_mmu_notifier_release+0x50/0xc4 [ 5925.596726][ T26] locks held by kworker/u4:0/6097: 2, last CPU#0: [ 5925.596967][ T26] #0: bef000000dc33d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b8 [ 5925.597712][ T26] #1: ffff8000a0dc7ce8 ((gc_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b8 [ 5925.598531][ T26] locks held by kworker/u4:16/6159: 3, last CPU#0: [ 5925.598721][ T26] #0: eef000000dc34140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b8 [ 5925.711036][ T26] #1: ffff80008f137ce8 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b8 [ 5925.712103][ T26] #2: cff0000029223258 (&devlink->lock_key#10){+.+.}-{4:4}, at: devl_trylock+0x24/0x34 [ 5925.713032][ T26] locks held by syz-executor/6241: 5, last CPU#0: [ 5925.713231][ T26] #0: ffff800088d6ee58 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x614/0x754 [ 5925.714083][ T26] #1: ffff800088cc40a8 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x194/0x268 [ 5925.714918][ T26] #2: ffff800088cc41d8 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x1d0/0x268 [ 5925.715788][ T26] #3: 07f000001a26f030 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xf4/0x5bc [ 5925.716636][ T26] #4: c2f000000e2c9980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x48/0x70c [ 5925.717424][ T26] locks held by syz-executor/6246: 4, on CPU#0: [ 5925.717610][ T26] #0: ffff800088d6ee58 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x614/0x754 [ 5925.718467][ T26] #1: ffff800088cc40a8 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x194/0x268 [ 5925.719306][ T26] #2: ffff800088cc41d8 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x1d0/0x268 [ 5925.902285][ T26] #3: 07f000001a26f030 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xf4/0x5bc [ 5925.903193][ T26] locks held by rm/6273: 3, last CPU#0: [ 5925.903388][ T26] #0: c8f000001373b460 (sb_writers#4){.+.+}-{0:0}, at: pick_link+0x9a0/0x1014 [ 5925.904307][ T26] #1: 6ff00000136a4938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1ccc/0x1ee0 [ 5925.905180][ T26] #2: ffff800088a7e858 (rcu_read_lock){....}-{1:3}, at: ext4_get_group_desc+0x134/0x528 [ 5925.906248][ T26] [ 5925.906371][ T26] ============================================= [ 5925.906371][ T26] [ 5925.910781][ T26] Kernel panic - not syncing: hung_task: blocked tasks [ 5925.922879][ T26] CPU: 0 UID: 0 PID: 26 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 5925.924549][ T26] Hardware name: linux,dummy-virt (DT) [ 5925.925594][ T26] Call trace: [ 5925.926458][ T26] show_stack+0x2c/0x3c (C) [ 5925.927525][ T26] __dump_stack+0x30/0x40 [ 5925.928599][ T26] dump_stack_lvl+0x30/0x12c [ 5925.929658][ T26] dump_stack+0x1c/0x28 [ 5925.930616][ T26] vpanic+0x4cc/0x844 [ 5925.931518][ T26] vpanic+0x0/0x844 [ 5925.932406][ T26] hung_task_panic+0x0/0x2c [ 5925.933354][ T26] kthread+0x4cc/0x514 [ 5925.934333][ T26] ret_from_fork+0x10/0x20 [ 5925.936195][ T26] Kernel Offset: disabled [ 5925.937004][ T26] CPU features: 0x0,00000000,00d1802f,df188f42,0afff61f [ 5925.938244][ T26] Memory Limit: none [ 5925.940495][ T26] Rebooting in 86400 seconds..