last executing test programs: 1h11m28.921399443s ago: executing program 1 (id=228): r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async) r1 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000000)={0x0, &(0x7f0000000040)=[@smc={0x1e, 0x40, {0x84000008, [0x99b, 0x100000003, 0x5, 0x101, 0x10]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_kvm_add_vcpu$arm64(r1, &(0x7f0000000b80)={0x0, &(0x7f00000002c0)=[@hvc={0x32, 0x40, {0x84000003, [0xa00000000, 0x4, 0x4, 0x9, 0x4d]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = syz_kvm_add_vcpu$arm64(r0, &(0x7f0000000b80)={0x0, &(0x7f00000002c0)=[@hvc={0x32, 0x40, {0x84000003, [0xa00000000, 0x4, 0x4, 0x9, 0x4d]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1h11m20.401746526s ago: executing program 1 (id=230): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20800, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_DEVICE_ATTR_vm(r1, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)={0xef000000, 0x1000, 0x2}}) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000140)={0x0, &(0x7f0000000200)=[@hvc={0x32, 0x40, {0xc4000053, [0xfffffffffffffffc, 0x1, 0x1, 0x9d, 0x6]}}], 0x40}, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1h11m13.276160606s ago: executing program 1 (id=232): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = mmap$KVM_VCPU(&(0x7f0000e9f000/0x1000)=nil, 0x0, 0x0, 0x11, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000300)="fb4149dd033b8986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67525673312b01040000000000002627e7000000000000000200", 0x0, 0xfffffffffffffe73) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x12, r2, 0x0) r4 = eventfd2(0x70, 0x0) close(r4) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x0) write$eventfd(r4, &(0x7f0000000100)=0xfffffffffffffffe, 0x8) r5 = eventfd2(0x0, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x4}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x80, 0x0, 0x2, 0x0, 0x0, 0x40000004}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r7, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x8, 0x0, &(0x7f0000000000)=0x10}) close(r5) r11 = eventfd2(0x0, 0x0) close(r11) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xc0c82, 0x0) mmap$KVM_VCPU(&(0x7f0000008000/0x3000)=nil, 0x930, 0x2000004, 0x2011, r11, 0x0) mmap$KVM_VCPU(&(0x7f0000008000/0x3000)=nil, 0x930, 0x2000004, 0x2011, r5, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x2000001, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x0) 1h11m6.066707297s ago: executing program 1 (id=234): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x101e40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1c) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000b75000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000140)={0x0, &(0x7f0000000000)=[@hvc={0x32, 0x40, {0x84000051, [0x84000052, 0xa, 0x4009, 0x4b, 0x7fff]}}], 0x40}, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) (async) r8 = openat$kvm(0x0, &(0x7f0000000140), 0x101000, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x3) (async) r11 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) (async) r13 = syz_kvm_vgic_v3_setup(r12, 0x3, 0x40) ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x6, 0x382bc663, &(0x7f0000000200)=0xffffffff}) (async) ioctl$KVM_ARM_VCPU_INIT(r10, 0x4020aeae, &(0x7f0000000100)={0x5, 0x18}) (async) ioctl$KVM_GET_ONE_REG(r10, 0x4010aeab, &(0x7f0000000000)=@arm64_core={0x603000000010000a, &(0x7f0000000040)=0x7}) (async) r14 = syz_kvm_add_vcpu$arm64(r7, &(0x7f00000000c0)={0x0, &(0x7f0000000300)=[@mrs={0xbe, 0x18, {0x603000000013d000}}], 0x18}, 0x0, 0x0) ioctl$KVM_RUN(r14, 0xae80, 0x0) (async) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000040)=@arm64={0x2, 0xf1, 0x5d, '\x00', 0x9}) 1h10m57.558212148s ago: executing program 1 (id=235): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000100)={0x0, &(0x7f0000000000)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x3, 0x40000000, 0x10000, 0x0, 0x0, 0x80000002}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f00000009c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, 0x0) r8 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil) r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r11, 0x4018aee1, &(0x7f0000000000)=@attr_other={0x0, 0x0, 0x4, &(0x7f0000000240)=0xffffffff}) r12 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) r13 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000100)={0x0, &(0x7f0000000140)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}, 0x0, 0x0) r14 = syz_kvm_vgic_v3_setup(r5, 0x2, 0x100) ioctl$KVM_RUN(r13, 0xae80, 0x0) ioctl$KVM_IRQ_LINE(r5, 0x4008ae61, 0x0) ioctl$KVM_SET_REGS(r12, 0x4360ae82, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r14, 0x4018aee1, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r15, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r5, 0x4068aea3, &(0x7f0000000240)={0xa8, 0x0, 0x3}) syz_kvm_setup_cpu$arm64(0xffffffffffffffff, r13, &(0x7f0000bff000/0x400000)=nil, &(0x7f00000002c0)=[{0x0, &(0x7f0000000380)=[@msr={0x14, 0x20, {0x603000000013e08e, 0xb}}], 0x20}], 0x0, 0x0, &(0x7f0000000340)=[@featur2={0x1, 0x24}], 0x1) r16 = eventfd2(0x0, 0x0) ioctl$KVM_CREATE_VM(r16, 0x4020940d, 0x20000000) 1h10m41.18804196s ago: executing program 1 (id=237): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x300, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x28) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) (async, rerun: 32) ioctl$KVM_GET_API_VERSION(r1, 0xae00, 0x0) (async, rerun: 32) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f0000000280)={0xdf, 0x0, 0x2000}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffffe) ioctl$KVM_SET_GUEST_DEBUG_arm64(r2, 0x4208ae9b, &(0x7f0000000380)={0x30000, 0x0, {[0x6, 0x8001, 0xbe, 0x2, 0xc, 0x9, 0x9, 0x0, 0x6, 0x100000000, 0x80, 0x7fffffffffffffff, 0x8, 0x8001, 0xb, 0x7fff], [0x0, 0x8001, 0x1, 0xff, 0x4cf1, 0xfffffffffffffffb, 0x6d3, 0x8001, 0x80, 0x242, 0x0, 0x8, 0xffffffffffffff10, 0xa17, 0x400, 0x7f], [0xc, 0xeb, 0xffffffffffffffff, 0x7a, 0x9, 0x3, 0x7fffffff, 0x1, 0x9, 0x8, 0x3, 0xc, 0x3, 0x0, 0xfffffffffffffff8, 0x7], [0x6, 0x6, 0x4, 0xfffffffffffffe00, 0x8, 0x1efb, 0x1, 0xf, 0x7, 0x2, 0x5, 0x89, 0x5, 0xb, 0x9, 0x2]}}) (async) r3 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r4, 0x4018aee1, &(0x7f0000000340)=@attr_arm64={0x0, 0x0, 0x0, 0xffffffffffffffff}) (async) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r6, r7, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_ONE_REG(r7, 0x4010aeac, &(0x7f00000002c0)=@arm64_sys={0x603000000013df11, &(0x7f0000000280)=0x80000001}) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r9, r10, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f00000000c0)=ANY=[], 0x18}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_IRQ_LINE(r9, 0x4008ae61, 0x0) (async) r11 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x33) ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f0000000000)={0xa}) (async) syz_kvm_setup_cpu$arm64(0xffffffffffffffff, r10, &(0x7f00009ea000/0x400000)=nil, &(0x7f0000000140)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) munmap$KVM_VCPU(0x0, 0xffffffffe) (async) mmap$KVM_VCPU(&(0x7f0000e31000/0x2000)=nil, 0x930, 0xa, 0x2012, r2, 0x40000) 1h9m53.866845219s ago: executing program 32 (id=237): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x300, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x28) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) (async, rerun: 32) ioctl$KVM_GET_API_VERSION(r1, 0xae00, 0x0) (async, rerun: 32) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f0000000280)={0xdf, 0x0, 0x2000}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffffe) ioctl$KVM_SET_GUEST_DEBUG_arm64(r2, 0x4208ae9b, &(0x7f0000000380)={0x30000, 0x0, {[0x6, 0x8001, 0xbe, 0x2, 0xc, 0x9, 0x9, 0x0, 0x6, 0x100000000, 0x80, 0x7fffffffffffffff, 0x8, 0x8001, 0xb, 0x7fff], [0x0, 0x8001, 0x1, 0xff, 0x4cf1, 0xfffffffffffffffb, 0x6d3, 0x8001, 0x80, 0x242, 0x0, 0x8, 0xffffffffffffff10, 0xa17, 0x400, 0x7f], [0xc, 0xeb, 0xffffffffffffffff, 0x7a, 0x9, 0x3, 0x7fffffff, 0x1, 0x9, 0x8, 0x3, 0xc, 0x3, 0x0, 0xfffffffffffffff8, 0x7], [0x6, 0x6, 0x4, 0xfffffffffffffe00, 0x8, 0x1efb, 0x1, 0xf, 0x7, 0x2, 0x5, 0x89, 0x5, 0xb, 0x9, 0x2]}}) (async) r3 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r4, 0x4018aee1, &(0x7f0000000340)=@attr_arm64={0x0, 0x0, 0x0, 0xffffffffffffffff}) (async) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r6, r7, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_ONE_REG(r7, 0x4010aeac, &(0x7f00000002c0)=@arm64_sys={0x603000000013df11, &(0x7f0000000280)=0x80000001}) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r9, r10, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f00000000c0)=ANY=[], 0x18}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_IRQ_LINE(r9, 0x4008ae61, 0x0) (async) r11 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x33) ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f0000000000)={0xa}) (async) syz_kvm_setup_cpu$arm64(0xffffffffffffffff, r10, &(0x7f00009ea000/0x400000)=nil, &(0x7f0000000140)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) munmap$KVM_VCPU(0x0, 0xffffffffe) (async) mmap$KVM_VCPU(&(0x7f0000e31000/0x2000)=nil, 0x930, 0xa, 0x2012, r2, 0x40000) 1h7m37.44900424s ago: executing program 0 (id=254): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xc0045878, 0x20000000) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ARM_VCPU_INIT(r5, 0x4020aeae, &(0x7f0000000140)={0x5, 0x8}) (rerun: 32) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x2e) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r7, r8, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000140)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r8, 0x4010aeac, &(0x7f00000000c0)=@arm64_core={0x6030000000100038, &(0x7f0000000000)=0x80003ff}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_ONE_REG(r5, 0x4010aeac, &(0x7f0000000080)=@arm64_sys={0x603000000013f682, &(0x7f0000000000)=0x36a0bd2a}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x2, 0xa000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000480)={0x2, 0x18000, 0x1}) ioctl$KVM_GET_API_VERSION(r4, 0xae00, 0x0) r9 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000200)={0x0, &(0x7f00000004c0)=[@smc={0x1e, 0x40, {0xf0a5fd7fe1ffdf79, [0x9, 0x8, 0x1, 0x3a6, 0x8]}}, @smc={0x1e, 0x40, {0xc400000e, [0x1ff, 0x522, 0xa58f350000000000, 0xf, 0x7]}}, @hvc={0x32, 0x40, {0x20, [0xc, 0xfffffffffffffffa, 0x7b5a, 0xfffffffffffffffd, 0x7f]}}, @irq_setup={0x46, 0x18, {0x3, 0x1e7}}, @uexit={0x0, 0x18, 0x8}, @uexit={0x0, 0x18, 0x9}, @smc={0x1e, 0x40, {0x80000001, [0x5, 0x2, 0x9, 0x8, 0x4]}}, @smc={0x1e, 0x40, {0x8600ff01, [0xffffffffffff836a, 0x5, 0x2, 0x9, 0x22c]}}, @svc={0x122, 0x40, {0x3000000, [0x800, 0x7, 0x6, 0x4, 0x9]}}, @smc={0x1e, 0x40, {0x31000000, [0x82, 0x2, 0x2, 0x6, 0xc291]}}], 0x208}, &(0x7f0000000240)=[@featur2={0x1, 0xc}], 0x1) close(r1) 1h7m16.785053598s ago: executing program 0 (id=255): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x8, 0xff, 0x0, 0x5, 0x6, 0x86, 0x6, 0x4b, 0x86, 0xdd, 0x68, 0x0, 0xc0000000, 0x11, 0x0, 0x3, 0x5, 0x8, '\x00', 0x1, 0x8000093}) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000240)=@attr_arm64={0x0, 0x0, 0x4, 0xffffffffffffffff}) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r7, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) r8 = syz_kvm_vgic_v3_setup(r6, 0x1, 0x100) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f0000000000)=@attr_other={0x0, 0x5, 0xb0, &(0x7f00000003c0)=0x5}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r9, &(0x7f00000001c0)=0xffffff7f, 0xff25) r10 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000300)={0x0, &(0x7f00000000c0)=[@irq_setup={0x46, 0x18, {0x0, 0xeb}}, @eret={0xe6, 0x18, 0x1a}, @smc={0x1e, 0x40, {0x84000013, [0x100000000, 0x5, 0x854, 0xffffffffffff0000, 0x1]}}, @svc={0x122, 0x40, {0xc4000003, [0x4, 0x8000, 0x8, 0x8, 0xfffffffffffffffe]}}, @msr={0x14, 0x20, {0xe1ba15230ae18e17, 0x10000}}, @msr={0x14, 0x20, {0x603000000013c288, 0x1}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xffe8, 0x22f61156, 0x4}}, @eret={0xe6, 0x18, 0x3}, @smc={0x1e, 0x40, {0x800, [0x1, 0x0, 0x7, 0x7, 0x8]}}, @mrs={0xbe, 0x18, {0x603000000013deeb}}, @eret={0xe6, 0x18, 0x345}, @memwrite={0x6e, 0x30, @vgic_gicr={0x8100000, 0xd00, 0x2}}, @svc={0x122, 0x40, {0xc4000010, [0x8000000000000001, 0x1, 0x2, 0xfe, 0x15a]}}], 0x218}, &(0x7f0000000340)=[@featur2={0x1, 0xd9}], 0x1) syz_kvm_setup_cpu$arm64(0xffffffffffffffff, r10, &(0x7f0000bfe000/0x400000)=nil, &(0x7f00000004c0)=[{0x0, &(0x7f0000000380)=[@svc={0x122, 0x40, {0xc4000003, [0x6, 0x7, 0x80000000, 0x5, 0x9]}}, @smc={0x1e, 0x40, {0xc400000c, [0x7fff, 0x5, 0x7, 0x8001, 0x2]}}, @hvc={0x32, 0x40, {0x8400000a, [0x1, 0x8000000000000000, 0x3, 0x0, 0x20000000000]}}, @its_setup={0x82, 0x28, {0x0, 0x2, 0x2ea}}, @mrs={0xbe, 0x18, {0x603000000013e21b}}, @its_send_cmd={0xaa, 0x28, {0x7, 0x0, 0x0, 0x9, 0x1, 0x5, 0x4}}, @mrs={0xbe, 0x18, {0x603000000013dce1}}], 0x140}], 0x1, 0x0, &(0x7f0000000500)=[@featur1={0x1, 0x80}], 0x1) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x5}) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r13, 0x0, 0x0) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) mmap$KVM_VCPU(&(0x7f0000011000/0x3000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) r14 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x8800, 0x0) ioctl$KVM_CHECK_EXTENSION(r14, 0xae03, 0xf1) 1h7m3.862430639s ago: executing program 0 (id=256): openat$kvm(0x0, &(0x7f0000000140), 0x200002, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x12) 1h6m56.031530858s ago: executing program 0 (id=257): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x24040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x80000000000) ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f0000000000)={0xdf, 0x0, 0x10000}) ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f00000000c0)={0xe1, 0x0, 0x3}) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CAP_DIRTY_LOG_RING_WITH_BITMAP(r1, 0x4068aea3, &(0x7f0000000140)={0xe1, 0x0, 0x1c1000}) ioctl$KVM_CAP_ARM_SYSTEM_SUSPEND(r1, 0x4068aea3, &(0x7f00000001c0)) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000540)={0x10000, 0x280, 0x3c0, 0x0}) 1h6m48.426544096s ago: executing program 0 (id=258): mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x0, 0x100000f, 0x8010, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000) munmap(&(0x7f0000482000/0x2000)=nil, 0x2000) openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x1}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xfffffffffffffffe) openat$kvm(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x8, 0xf, 0x0, 0x5, 0x6, 0xa6, 0x9, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x0, 0x189, 0x0, 0x3, 0x5, 0x8, '\x00', 0x1, 0x96}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r5, 0x4020aeae, &(0x7f0000000200)={0x5}) ioctl$KVM_SET_ONE_REG(r5, 0x4010aeac, &(0x7f00000000c0)=@arm64_sve_vls={0x606000000015ffff, 0x0}) write$eventfd(r2, &(0x7f0000000000)=0x3, 0x8) 1h6m36.233547635s ago: executing program 0 (id=259): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2e) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000100)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x100000, 0x1000}) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x100000, 0x1000}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80180, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0x4c01, 0x0) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000180)=@arm64_core={0x6030000000100028, &(0x7f0000000080)=0x4}) eventfd2(0x4, 0x80002) (async) r4 = eventfd2(0x4, 0x80002) openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r6, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x380, 0x0}) write$eventfd(r4, &(0x7f0000000140)=0xffffffff, 0x8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x33) syz_kvm_vgic_v3_setup(r7, 0x2, 0x120) (async) syz_kvm_vgic_v3_setup(r7, 0x2, 0x120) 1h5m48.318129861s ago: executing program 33 (id=259): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2e) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000100)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x100000, 0x1000}) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x100000, 0x1000}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80180, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0x4c01, 0x0) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000180)=@arm64_core={0x6030000000100028, &(0x7f0000000080)=0x4}) eventfd2(0x4, 0x80002) (async) r4 = eventfd2(0x4, 0x80002) openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r6, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x380, 0x0}) write$eventfd(r4, &(0x7f0000000140)=0xffffffff, 0x8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x33) syz_kvm_vgic_v3_setup(r7, 0x2, 0x120) (async) syz_kvm_vgic_v3_setup(r7, 0x2, 0x120) 51m23.187013518s ago: executing program 3 (id=347): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r0 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r4, 0x800454d7, 0x110e22ffff) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7) ioctl$KVM_SET_GUEST_DEBUG_arm64(r5, 0x4208ae9b, &(0x7f0000000240)={0x659aa93486115af1, 0x0, {[0x1, 0x5, 0xffff, 0x8, 0x2, 0x7, 0xff, 0x641, 0x1, 0x53, 0x59, 0x3ff, 0x100000001, 0xcf3b, 0x8, 0x6], [0x8, 0x7, 0x4, 0x6, 0x7, 0x0, 0x4000000042, 0x2, 0x3, 0x1, 0xa, 0x8000000000000001, 0x8, 0x9, 0x8, 0x6], [0x31, 0x53, 0xe, 0x56b0, 0x5, 0x2, 0x4, 0x8, 0x1, 0x1, 0x9, 0xffffffffffffffff, 0x3, 0x9, 0x78], [0xd6ef, 0x9, 0x4, 0x5, 0x3ff, 0x0, 0x0, 0xd, 0x7, 0x80, 0xd, 0xabb, 0xffffffffffffffff, 0x623, 0x1, 0x2]}}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x181b03, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r8, 0x400454dc, 0x800000110c23000a) 51m12.001302528s ago: executing program 3 (id=348): r0 = openat$kvm(0x0, &(0x7f0000000280), 0x103080, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r1 = syz_kvm_vgic_v3_setup(0xffffffffffffffff, 0x1, 0x40) ioctl$KVM_GET_DEVICE_ATTR(r1, 0x4018aee2, &(0x7f0000000040)=@attr_other={0x0, 0x7, 0x7, &(0x7f0000000080)=0x8000000000000001}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x5) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0x9) 51m8.893296996s ago: executing program 2 (id=349): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0x40086602, 0x8000000400000004) r1 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r1, &(0x7f0000000140)={0x0, &(0x7f0000000300)=[@mrs={0xbe, 0x18, {0x603000000013c024}}], 0x18}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r3, 0x1, 0x100) (async) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, 0x0) (async) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 51m4.9207094s ago: executing program 3 (id=350): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f00000002c0)=@arm64_sys={0x603000000013df61, &(0x7f00000001c0)}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000240)={0x1fe, 0x3, 0xffff1000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x2, 0x3, 0x100000, 0x2000, &(0x7f000000f000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xcccc0000, 0x1000, &(0x7f0000f15000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000200)={0x1fd, 0x0, 0xeeee0000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x2710, 0x3, 0x200000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f00000000c0)=@arm64_sys={0x603000000013dce0, &(0x7f0000000000)=0x43ff}) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r2, 0x4018aee1, &(0x7f00000000c0)=@attr_pmu_init) ioctl$KVM_RUN(r2, 0xae80, 0x0) 51m1.262060369s ago: executing program 2 (id=351): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0xb, 0xffffffffffffffff, 0x1}) munmap$KVM_VCPU(0x0, 0x1000000000) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x8040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r5, 0x4010aeab, &(0x7f0000000180)=@arm64_sys={0x603000000013d801, &(0x7f0000000000)=0x1}) mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x13, r1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x32) 50m26.322043158s ago: executing program 3 (id=352): r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x3}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4}) r2 = openat$kvm(0x0, &(0x7f0000000140), 0x141480, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000bc5000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@mrs={0xbe, 0x18, {0x603000000013dce1}}], 0x18}, &(0x7f0000000300)=[@featur1={0x1, 0x2d}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r5, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x2e) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r7, r8, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000100)=[{0x0, 0x0}], 0x1, 0x0, &(0x7f00000003c0)=[@featur2={0x1, 0x17}], 0x1) ioctl$KVM_SET_ONE_REG(r8, 0x4010aeac, &(0x7f0000000140)=@arm64_core={0x6030000000100042, &(0x7f0000000000)=0x11}) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f0000000080)=@arm64={0xe6, 0x7, 0x8, '\x00', 0xff}) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f00000000c0)=@x86={0xb3, 0x10, 0xe, 0x0, 0x3, 0x9, 0x89, 0x2, 0x5, 0x4, 0x1, 0x8, 0x0, 0x89, 0x183, 0x7, 0x5, 0x3, 0x7, '\x00', 0x81, 0x8}) ioctl$KVM_CREATE_VM(r0, 0x400454d4, 0x40) 50m24.740848375s ago: executing program 2 (id=353): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1, 0x16831, 0xffffffffffffffff, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000180)={0x80000000, 0x6000, 0x0, 0xffffffffffffffff, 0xf}) r4 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f00003af000/0x400000)=nil) r5 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) r9 = syz_kvm_vgic_v3_setup(r6, 0x4, 0x220) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r9, 0x4018aee3, &(0x7f0000000240)=@attr_other={0x0, 0x6, 0x0, 0x0}) eventfd2(0x0, 0x0) r10 = syz_kvm_add_vcpu$arm64(r4, &(0x7f00000000c0)={0x0, &(0x7f0000000280)=[@its_setup={0x82, 0x28, {0x5, 0x403, 0x1}}], 0x28}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000240)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4040aea0, &(0x7f0000000300)=@x86={0x6, 0x80, 0x80, 0x0, 0x2, 0x3, 0x4, 0x3, 0x2, 0x6, 0x0, 0x10, 0x0, 0x8, 0x4c2ae896, 0x7, 0x99, 0x8, 0x6, '\x00', 0x7, 0x4}) ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x8, 0x1, &(0x7f0000000100)=0xff3}) r12 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION(r12, 0xae03, 0x3) r13 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2040, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0002, 0x0) ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) munmap(&(0x7f0000011000/0xc00000)=nil, 0xc00000) 50m10.733480344s ago: executing program 2 (id=354): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x101e40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x28) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000140)={0x4, 0x0, [{0x1, 0x2, 0x1, 0x0, @adapter={0x7, 0x100000000, 0x5, 0x0, 0x7}}, {0x9, 0x2, 0x1, 0x0, @adapter={0xd4ff, 0x6d39, 0x0, 0x2, 0x7f}}, {0x3, 0x0, 0x1, 0x0, @sint={0x6, 0x8000}}, {0x0, 0x0, 0x0, 0x0, @adapter={0x8f9, 0xe808e8f, 0x3f, 0x8, 0x332ccd89}}]}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x40, 0x3, 0x0, 0x9943, 0x8, 0xc4, 0x46, 0x48, 0x84, 0xdd, 0x48, 0x0, 0x7fff, 0x0, 0xff, 0x3, 0xa, 0x8, '\x00', 0xff, 0x10}) write$eventfd(r4, &(0x7f00000001c0)=0x3, 0xfdef) r5 = eventfd2(0xffffdfff, 0x80800) r6 = eventfd2(0x6, 0x800) r7 = openat$kvm(0x0, &(0x7f0000000280), 0x28000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000100)={0xf7f7cfff, 0xeeef0000, 0x3ff, 0x0, 0x1}) syz_kvm_vgic_v3_setup(r8, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000180)={0x8}) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f00000002c0)={0xcae, 0x1000, 0x0, r6}) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000000c0)={r5, 0x4, 0x2, r6}) r9 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r10 = eventfd2(0x1, 0x1) r11 = openat$kvm(0x0, &(0x7f0000000080), 0x40000, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) syz_kvm_vgic_v3_setup(r12, 0x1, 0x100) ioctl$KVM_IRQFD(r12, 0x4020ae76, &(0x7f0000000100)={r10, 0x3, 0x2, r10}) ioctl$KVM_SET_GSI_ROUTING(r12, 0x4008ae6a, &(0x7f00000000c0)={0x1, 0x0, [{0x10, 0x2, 0x0, 0x0, @sint={0x7fff, 0xc0000000}}]}) write$eventfd(r10, &(0x7f0000000000)=0x1000007, 0x8) syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000180)={0x0, &(0x7f0000000000)=[@hvc={0x32, 0x40, {0x84000051, [0x84000051, 0x7, 0x9, 0xc, 0x7fff]}}], 0x40}, 0x0, 0x0) r13 = eventfd2(0x4, 0x1) write$eventfd(r13, &(0x7f0000000040)=0x4, 0x8) 50m10.340920988s ago: executing program 3 (id=355): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x25) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000001c0)={0x8, 0xffffffffffffffff}) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = syz_kvm_vgic_v3_setup(r4, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000180)={0x8}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xa5) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x5, 0x0, &(0x7f00000006c0)=0xc}) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f0000000200)={0xdf, 0x0, 0x2000}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000380)}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x5, 0x1, 0x1000000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, &(0x7f0000000180)=@attr_other={0x0, 0x4, 0x44, &(0x7f0000000040)=0x9}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000002c0)=@attr_other={0x0, 0x8, 0x108, &(0x7f0000000000)=0xc000000000000000}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x4, 0x1, 0x0}) 49m59.279328908s ago: executing program 3 (id=356): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x33) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000300)="fb4149dd033b8986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67525673312b01040000000000002627e7000000000000000200", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x12, r2, 0x0) r4 = eventfd2(0x70, 0x0) close(r4) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x0) eventfd2(0x6, 0x800) r5 = openat$kvm(0x0, &(0x7f0000000280), 0x40000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r7, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r6, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) r9 = eventfd2(0x1, 0x0) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000100)={0x2, 0x8080000, 0x8, r9}) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f00000002c0)={0x8, 0x8000000, 0x4}) ioctl$KVM_SIGNAL_MSI(r6, 0x4020aea5, &(0x7f0000000140)={0xffffffff, 0xffffffff, 0x4, 0x1}) write$eventfd(r4, &(0x7f0000000100)=0xfffffffffffffffe, 0x8) r10 = eventfd2(0x0, 0x0) close(r10) r11 = eventfd2(0x0, 0x0) close(r11) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xc0c82, 0x0) mmap$KVM_VCPU(&(0x7f0000008000/0x3000)=nil, 0x930, 0x2000004, 0x2011, r11, 0x0) mmap$KVM_VCPU(&(0x7f0000008000/0x3000)=nil, 0x930, 0x2000004, 0x2011, r10, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) 49m56.429547187s ago: executing program 2 (id=357): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x38) syz_kvm_setup_syzos_vm$arm64(r0, &(0x7f0000bff000/0x400000)=nil) (async) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) syz_kvm_setup_cpu$arm64(r0, r1, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000480)=[{0x0, &(0x7f0000000000)=[@uexit={0x0, 0x18, 0x2}, @mrs={0xbe, 0x18, {0x603000000013f081}}, @uexit={0x0, 0x18, 0x1}, @msr={0x14, 0x20, {0x603000000013c290, 0x6}}, @uexit={0x0, 0x18, 0x9}, @eret={0xe6, 0x18, 0x3}, @uexit={0x0, 0x18, 0xc3b0}, @mrs={0xbe, 0x18, {0x603000000013df41}}, @memwrite={0x6e, 0x30, @generic={0x100000, 0x5b2, 0x8, 0xc}}, @uexit={0x0, 0x18, 0x4}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80a0000, 0x400, 0x0, 0x6}}, @code={0xa, 0x6c, {"007008d500c0df0da05889d20060b0f2a10180d2e20080d2630080d2440080d2020000d4e0b192d200c0b0f2c10080d2620080d2230180d2640180d2020000d4007c001b000028d50088601e000028d5000028d50084000f"}}, @eret={0xe6, 0x18, 0x4}, @irq_setup={0x46, 0x18, {0x0, 0x295}}, @smc={0x1e, 0x40, {0x1000000, [0x4, 0x2, 0x0, 0x4, 0x3ff]}}, @its_setup={0x82, 0x28, {0x1, 0x2, 0x2f9}}, @svc={0x122, 0x40, {0x20, [0x5, 0x0, 0x7, 0x6, 0xffffffff00000001]}}, @eret={0xe6, 0x18, 0x8000}, @irq_setup={0x46, 0x18, {0x2, 0x2dd}}, @eret={0xe6, 0x18, 0xf391}, @irq_setup={0x46, 0x18, {0x0, 0x15b}}, @svc={0x122, 0x40, {0xc400000d, [0x2, 0x100, 0x6, 0x5, 0x4]}}, @svc={0x122, 0x40, {0xc4000053, [0x6, 0x1, 0xffffffffffffffff, 0x8, 0x800]}}, @mrs={0xbe, 0x18, {0x6030000000138014}}, @mrs={0xbe, 0x18, {0x603000000013e518}}, @code={0xa, 0x9c, {"000008d5000028d5000028d5e0738ad200c0b8f2e10080d2620180d2230180d2e40180d2020000d400889bd200a0b8f2810180d2420180d2230180d2440080d2020000d4000028d5007008d500a59dd20060b0f2210080d2020080d2a30080d2840180d2020000d460ee82d200a0b0f2e10180d2020080d2230080d2e40080d2020000d4007008d5"}}, @svc={0x122, 0x40, {0x100, [0x5, 0x400, 0x800, 0x9, 0x6]}}], 0x470}], 0x1, 0x0, &(0x7f00000004c0)=[@featur1={0x1, 0x61}], 0x1) (async) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000500)={0xfec00000, 0xdddd0000, 0xffffb09c, 0x1, 0x8000}) (async) ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f0000000540)={0x7, 0xfffffbff}) (async) ioctl$KVM_CAP_DIRTY_LOG_RING(r0, 0x4068aea3, &(0x7f0000000580)={0xc0, 0x0, 0x124000}) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) (async) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xd) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000600)={0xa}) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) (async) r5 = eventfd2(0xd, 0x80000) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000680)={0xffffffffffffffff, 0xfff, 0x1, r5}) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f00000006c0)={0x100000, 0x20a853ddc42a8404, 0x1}) (async) r6 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) ioctl$KVM_ARM_VCPU_INIT(r6, 0x4020aeae, &(0x7f0000000700)={0x5, 0x8}) (async) r7 = eventfd2(0x5, 0x1) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000740)={0x74, 0x30000, 0x4, r7, 0x5}) ioctl$KVM_SET_REGS(r2, 0x4360ae82, &(0x7f0000000780)={[0x10000, 0xffffffffffffffff, 0x39, 0x3, 0x3, 0xfffffffffffffff3, 0x9, 0x50, 0x94, 0xfb, 0x14, 0x5b, 0x0, 0x5, 0x80000000, 0xb7], 0x1ffe, 0x2}) (async) r8 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x10) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r8, 0x4010ae68, &(0x7f0000000840)={0xeecf7800, 0xa000}) (async) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) (async) ioctl$KVM_IRQFD(r8, 0x4020ae76, &(0x7f0000000880)={0xffffffffffffffff, 0x40, 0x0, r5}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000008c0), 0x200, 0x0) ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0x6) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000940)=@riscv64_csr={0x803000000030000a, &(0x7f0000000900)=0x3}) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, &(0x7f0000000980)={0x6, 0x2, 0x401}) (async) munmap(&(0x7f0000d17000/0x3000)=nil, 0x3000) 49m49.578992795s ago: executing program 2 (id=358): r0 = openat$kvm(0x0, &(0x7f0000000280), 0x20800, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000100)={0x5, 0x18}) r3 = openat$kvm(0x0, &(0x7f0000000240), 0x400, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x3}) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r5, 0x400454d4, 0x10000000000000) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000000)=@arm64_core={0x603000000010000a, &(0x7f0000000040)=0x7}) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x7e) r9 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000140)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x1}) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x8, 0xf, 0x0, 0x5, 0x6, 0x6, 0x6, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x9, 0x0, 0x0, 0x3, 0x5, 0x8, '\x00', 0x1, 0x400000000002}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000140)={0x4, 0x0, [{0x1, 0x1, 0x0, 0x0, @adapter={0x8000000000000001, 0x8, 0x2, 0xa, 0x10}}, {0x9, 0x3, 0x0, 0x0, @adapter={0xd4ff}}, {0x0, 0x0, 0x0, 0x0, @msi}, {0x0, 0x0, 0x1, 0x0, @adapter={0x0, 0x5, 0x2, 0x7f, 0xb2d}}]}) write$eventfd(r12, &(0x7f00000001c0)=0x3, 0x50) syz_kvm_vgic_v3_setup(r6, 0x1, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000000)=@arm64={0x0, 0x0, 0x3, '\x00', 0x9}) close(r9) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) ioctl$KVM_GET_API_VERSION(r8, 0xae00, 0x0) close(r2) r13 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) 49m13.023808256s ago: executing program 34 (id=356): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x33) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000300)="fb4149dd033b8986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67525673312b01040000000000002627e7000000000000000200", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x12, r2, 0x0) r4 = eventfd2(0x70, 0x0) close(r4) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x0) eventfd2(0x6, 0x800) r5 = openat$kvm(0x0, &(0x7f0000000280), 0x40000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r7, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r6, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) r9 = eventfd2(0x1, 0x0) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000100)={0x2, 0x8080000, 0x8, r9}) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f00000002c0)={0x8, 0x8000000, 0x4}) ioctl$KVM_SIGNAL_MSI(r6, 0x4020aea5, &(0x7f0000000140)={0xffffffff, 0xffffffff, 0x4, 0x1}) write$eventfd(r4, &(0x7f0000000100)=0xfffffffffffffffe, 0x8) r10 = eventfd2(0x0, 0x0) close(r10) r11 = eventfd2(0x0, 0x0) close(r11) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xc0c82, 0x0) mmap$KVM_VCPU(&(0x7f0000008000/0x3000)=nil, 0x930, 0x2000004, 0x2011, r11, 0x0) mmap$KVM_VCPU(&(0x7f0000008000/0x3000)=nil, 0x930, 0x2000004, 0x2011, r10, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) 49m2.940306748s ago: executing program 35 (id=358): r0 = openat$kvm(0x0, &(0x7f0000000280), 0x20800, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000100)={0x5, 0x18}) r3 = openat$kvm(0x0, &(0x7f0000000240), 0x400, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x3}) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r5, 0x400454d4, 0x10000000000000) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000000)=@arm64_core={0x603000000010000a, &(0x7f0000000040)=0x7}) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x7e) r9 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000140)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x1}) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x8, 0xf, 0x0, 0x5, 0x6, 0x6, 0x6, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x9, 0x0, 0x0, 0x3, 0x5, 0x8, '\x00', 0x1, 0x400000000002}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000140)={0x4, 0x0, [{0x1, 0x1, 0x0, 0x0, @adapter={0x8000000000000001, 0x8, 0x2, 0xa, 0x10}}, {0x9, 0x3, 0x0, 0x0, @adapter={0xd4ff}}, {0x0, 0x0, 0x0, 0x0, @msi}, {0x0, 0x0, 0x1, 0x0, @adapter={0x0, 0x5, 0x2, 0x7f, 0xb2d}}]}) write$eventfd(r12, &(0x7f00000001c0)=0x3, 0x50) syz_kvm_vgic_v3_setup(r6, 0x1, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000000)=@arm64={0x0, 0x0, 0x3, '\x00', 0x9}) close(r9) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) ioctl$KVM_GET_API_VERSION(r8, 0xae00, 0x0) close(r2) r13 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) 36m3.218835463s ago: executing program 4 (id=400): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x20e463, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@msr={0x14, 0x20, {0x603000000013c65e, 0x5}}], 0x20}, 0x0, 0x0) syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000000)={0x0, 0x0}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x2, 0x100) ioctl$KVM_RUN(r3, 0xae80, 0x0) 36m1.211192921s ago: executing program 5 (id=401): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3d) r1 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000000)=[@msr={0x14, 0x20, {0x603000000013df02, 0x80}}, @uexit={0x0, 0x18, 0x4}, @msr={0x14, 0x20, {0x603000000013df52, 0x8}}, @msr={0x14, 0x20, {0x603000000013c649, 0x8e4c}}, @mrs={0xbe, 0x18, {0x603000000013dea2}}, @svc={0x122, 0x40, {0xc4000012, [0x3ff, 0x1, 0x2, 0x50c, 0x9]}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x400, 0x1, 0x9}}], 0x100}, &(0x7f0000000140)=[@featur1={0x1, 0x28}], 0x1) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, &(0x7f0000000180)={0x2, 0x9}) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, &(0x7f00000001c0)={0x6, 0x9}) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_GET_REGS(r3, 0x8360ae81, &(0x7f0000000200)) r4 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r0, 0xc004aea7, &(0x7f00000002c0)=0x3) r5 = syz_kvm_setup_syzos_vm$arm64(r0, &(0x7f0000002000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000800)={0x0, &(0x7f0000000300)=[@code={0xa, 0x84, {"20e786d20080b8f2a10080d2820180d2830080d2440080d2020000d400a0a00de0b79dd200e0b8f2810080d2020180d2c30080d2a40180d2020000d4c0a89dd20060b8f2a10180d2220180d2830080d2a40080d2020000d4008008d5007008d5e003007a0000005a0058602e000028d5"}}, @hvc={0x32, 0x40, {0xc5000021, [0x8, 0xb3a, 0x1, 0x7, 0x44]}}, @its_setup={0x82, 0x28, {0x0, 0x2, 0x25f}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xffe8, 0xc6eb, 0x1}}, @msr={0x14, 0x20, {0x603000000013e532, 0x8}}, @hvc={0x32, 0x40, {0xc4000004, [0x6, 0x9, 0x6, 0x2, 0x9]}}, @smc={0x1e, 0x40, {0x0, [0x8, 0x694, 0x5, 0x7, 0x5]}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xffe4, 0x8001, 0x3}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xfff0, 0x3, 0x4}}, @memwrite={0x6e, 0x30, @generic={0x58000, 0xd68, 0x4, 0x8}}, @uexit={0x0, 0x18, 0x8000000000000000}, @svc={0x122, 0x40, {0x84000003, [0x2, 0x1, 0x3, 0x5, 0x6]}}, @its_setup={0x82, 0x28, {0x2, 0x1, 0x2e0}}, @eret={0xe6, 0x18, 0x5567}, @msr={0x14, 0x20, {0x603000000013defb, 0x1}}, @code={0xa, 0x84, {"008008d540cc8cd20020b8f2010080d2c20080d2e30080d2840180d2020000d4007008d5a0fa8bd200e0b8f2610080d2a20180d2030080d2e40180d2020000d460c380d200a0b0f2610080d2220080d2230080d2440180d2020000d40000029e008008d500fc202e000000eb0000202b"}}, @irq_setup={0x46, 0x18, {0x3, 0xc0}}, @code={0xa, 0x84, {"0000003260649dd20020b8f2610180d2a20080d2630080d2a40180d2020000d40054200e00b4202ec06896d200e0b8f2010080d2c20080d2e30180d2640080d2020000d400000013c08d97d200a0b0f2610180d2220180d2630080d2c40180d2020000d4000008d50040ff0d007008d5"}}, @uexit={0x0, 0x18}, @mrs={0xbe, 0x18, {0x603000000013c032}}, @mrs={0xbe, 0x18, {0x603000000013c640}}, @uexit={0x0, 0x18, 0x6}, @its_send_cmd={0xaa, 0x28, {0xd, 0x1, 0x4, 0x10, 0xcb, 0x10}}, @hvc={0x32, 0x40, {0x86000000, [0x7fffffff, 0x0, 0x757, 0x5, 0x4]}}], 0x4ec}, &(0x7f0000000840)=[@featur2={0x1, 0x8}], 0x1) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000880)={0x7000, 0x0, 0xd5, 0x1, 0x2}) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r1, 0x4018aee3, &(0x7f00000008c0)=@attr_pmu_init) ioctl$KVM_RUN(r2, 0xae80, 0x0) r7 = ioctl$KVM_GET_STATS_FD_cpu(r3, 0xaece) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000940)=@attr_arm64={0x0, 0x0, 0x2, &(0x7f0000000900)=0x3}) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f00000009c0)=@riscv64_sbi_fwft={0x803000000a010003, &(0x7f0000000980)=0x96}) syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f00002c2000/0x400000)=nil) ioctl$KVM_SET_REGS(r6, 0x4360ae82, &(0x7f0000000a00)={[0x2, 0xfffffffffffffffe, 0x3, 0x8, 0x100000001, 0x100000000, 0x8, 0x80, 0xfffffffffffffff9, 0x0, 0x7ff, 0x8001, 0x1, 0x81, 0x2, 0xfffffffffffffffa], 0xeeee8000, 0x200000}) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000ac0)={0x6, 0xffffffffffffffff, 0x1}) syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000c00)={0x0, &(0x7f0000000b00)=[@code={0xa, 0x9c, {"0000c03dc04287d200a0b0f2410080d2420180d2830180d2240180d2020000d4007008d5008008d50004002fa08881d20060b0f2210080d2c20080d2630080d2040180d2020000d4609a80d200a0b8f2c10080d2a20180d2a30180d2240180d2020000d40000200b802682d200e0b0f2410180d2820080d2830180d2440080d2020000d40020600d"}}, @eret={0xe6, 0x18, 0x3}, @its_send_cmd={0xaa, 0x28, {0x8, 0x0, 0x2, 0xc, 0x6, 0x3}}], 0xdc}, &(0x7f0000000c40)=[@featur2={0x1, 0x1c}], 0x1) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r7, 0x4068aea3, &(0x7f0000000c80)={0xa8, 0x0, 0x2}) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) ioctl$KVM_CAP_ARM_SYSTEM_SUSPEND(r0, 0x4068aea3, &(0x7f0000000d00)) r8 = ioctl$KVM_GET_STATS_FD_vm(r7, 0xaece) syz_kvm_setup_cpu$arm64(r0, r8, &(0x7f0000bfd000/0x400000)=nil, &(0x7f0000000f80)=[{0x0, &(0x7f0000000d80)=[@irq_setup={0x46, 0x18, {0x1, 0x3a}}, @its_send_cmd={0xaa, 0x28, {0x5, 0x1, 0x4, 0x6, 0x60d2, 0x9, 0x4}}, @svc={0x122, 0x40, {0xc4000004, [0xe, 0x5, 0x8000000000000001, 0x0, 0x7]}}, @hvc={0x32, 0x40, {0x40000011, [0xffffffffffffff33, 0x1, 0x90f, 0x80, 0x7]}}, @mrs={0xbe, 0x18, {0x603000000013df76}}, @code={0xa, 0x9c, {"c01c86d20000b8f2410080d2620180d2a30180d2640180d2020000d4000028d50078201e007008d50060004fc04a87d200a0b0f2610180d2620080d2630180d2040080d2020000d4a0e399d200e0b0f2210080d2220080d2230180d2840080d2020000d40000001c20bc9bd200c0b0f2010180d2620180d2e30080d2c40180d2020000d4008008d5"}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x0, 0x3, 0xd, 0xfffffff8, 0x9}}, @its_send_cmd={0xaa, 0x28, {0x5, 0x1, 0x0, 0x4, 0x40, 0x2f948ca8, 0x4}}], 0x1c4}], 0x1, 0x0, &(0x7f0000000fc0)=[@featur2={0x1, 0x20}], 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000001000)={0x10200, 0x0, 0xffff1000, 0x1000, &(0x7f00005aa000/0x1000)=nil}) 35m52.136859067s ago: executing program 4 (id=402): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1ffffd) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r6, 0x4020aeae, &(0x7f0000000100)={0x5, 0x18}) ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, 0x0) ioctl$KVM_GET_SREGS(r6, 0x8000ae83, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000480)=@x86={0x11, 0x8, 0xf, 0x0, 0x5, 0x4, 0x86, 0x3, 0x48, 0x86, 0xdd, 0xb, 0x0, 0x0, 0x0, 0x10, 0x7, 0x5, 0x8, '\x00', 0xfd, 0x93}) r7 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}, 0x0, 0x0) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000100)={0x0, &(0x7f0000000140)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r3, 0x2, 0x100) r9 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) syz_kvm_setup_cpu$arm64(r3, r8, &(0x7f0000a83000/0x400000)=nil, &(0x7f0000000340)=[{0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013df77, 0x2}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x1, 0x0, 0x0, 0xffffff7f, 0x7, 0x4}}, @mrs={0xbe, 0x18, {0x6030000000138010}}, @its_setup={0x82, 0x28, {0x4, 0x1, 0x2a2}}, @smc={0x1e, 0x40, {0x40, [0x1ff, 0x5, 0x3, 0x1, 0x6]}}, @hvc={0x32, 0x40, {0x20, [0x0, 0xe, 0x7fff, 0x2, 0x8]}}, @eret={0xe6, 0x18, 0xfff}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x1a00, 0x100000001}}, @memwrite={0x6e, 0x30, @generic={0xe000, 0xed8, 0x7, 0x2}}], 0x180}], 0x1, 0x0, &(0x7f0000000380)=[@featur2={0x1, 0x1}], 0x1) mmap$KVM_VCPU(&(0x7f000000a000/0x1000)=nil, r9, 0x3, 0x10, r8, 0x0) mmap$KVM_VCPU(&(0x7f0000ff9000/0x4000)=nil, r9, 0x100000c, 0x80010, 0xffffffffffffffff, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, 0x0) 35m50.036228418s ago: executing program 5 (id=403): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000b80)={0x0, &(0x7f0000000100)=[@smc={0x1e, 0x40, {0x8400000a, [0x84000001, 0xa, 0x0, 0x6, 0x10]}}], 0x40}, &(0x7f00000000c0)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000100)={0x3, 0x0, [{0x4, 0x2, 0x1, 0x0, @irqchip={0x4, 0x8000}}, {0x7, 0x7, 0x0, 0x0, @adapter={0x491, 0x9, 0xbaa, 0xd76, 0x4}}, {0x800, 0x2, 0x1, 0x0, @irqchip={0x9, 0x6}}]}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000bb7000/0x400000)=nil) r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000b80)={0x0, 0x0}, &(0x7f0000000bc0)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_SET_ONE_REG(r10, 0x4010aeac, &(0x7f0000000000)=@arm64_fw={0x6030000000140000, &(0x7f0000000200)=0x10003}) r11 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r6, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r11, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r6, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0x40086602, 0x110c230000) 35m31.387041611s ago: executing program 4 (id=404): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x29) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000000040)={0x1000200001fe0000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000080)={0x4, 0x6, 0xcde78ff8, 0x2000, &(0x7f0000ffc000/0x2000)=nil, 0x100000000000000, r3}) 35m30.786688219s ago: executing program 5 (id=405): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = openat$kvm(0x0, &(0x7f0000000280), 0x103080, 0x0) (async) openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) (async, rerun: 32) r2 = openat$kvm(0x0, &(0x7f0000000140), 0x206a02, 0x0) (rerun: 32) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0xa8200, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x27) syz_kvm_vgic_v3_setup(r5, 0x4, 0x1a0) r6 = eventfd2(0x2, 0x80000) (async) r7 = eventfd2(0xf, 0x80001) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000100)={r7, 0x0, 0x2, r6}) (async) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000000)={r6, 0x8, 0x2, r6}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) close(0x4) (async) r8 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil) r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x3, 0x3, 0x10000000004}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000005}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r9, 0x1, 0x100) (async) r12 = openat$kvm(0x0, &(0x7f0000000080), 0x141100, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r14, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x2}}, @its_send_cmd={0xaa, 0x28, {0x4, 0x1, 0x80000, 0x2fffc, 0x0, 0x0, 0x2}}], 0x50}, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) (async, rerun: 32) ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000000)={0x8, 0xffffffffffffffff}) (rerun: 32) ioctl$KVM_SET_DEVICE_ATTR(r15, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) (async) ioctl$KVM_RUN(r11, 0xae80, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 35m12.510067942s ago: executing program 4 (id=406): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000300)="fb4149dd033b8986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67525673312b01040000000000002627e7000000000000000200", 0x0, 0xfffffffffffffe73) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x12, r2, 0x0) r4 = eventfd2(0x70, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(r6, 0x4010aeab, &(0x7f0000000000)={0x7fffffff, 0x8000001}) close(r4) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_API_VERSION(r7, 0x2, 0x1000000000000) write$eventfd(r4, &(0x7f00000000c0)=0xfffffffffffbfffe, 0x8) r8 = eventfd2(0x0, 0x0) close(r8) r9 = eventfd2(0x0, 0x0) close(r9) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xc0c82, 0x0) mmap$KVM_VCPU(&(0x7f0000008000/0x3000)=nil, 0x930, 0x2000004, 0x2011, r9, 0x0) mmap$KVM_VCPU(&(0x7f0000008000/0x3000)=nil, 0x930, 0x2000004, 0x2011, r8, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x2000001, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x0) 35m5.103431626s ago: executing program 5 (id=407): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000040)=[@its_setup={0x82, 0x28, {0x4, 0x3, 0x3ac}}], 0x28}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x100000000000001, 0x100) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000240)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_ARM_PREFERRED_TARGET(r3, 0x8020aeaf, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x67, 0x1, 0x2e, 0x0, 0x0, 0x7, 0x1, 0xf, 0xa3, 0x0, 0x9, 0xaa, 0x0, 0x7f, 0x7, 0x8, 0x9f, 0x4, 0x9, '\x00', 0x1, 0x1}) write$eventfd(r8, &(0x7f00000001c0)=0x9, 0x5d) munmap(&(0x7f0000011000/0xc00000)=nil, 0xc00000) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000000)=@attr_arm64={0x0, 0x4, 0x1, 0x0}) 34m54.870271639s ago: executing program 4 (id=408): mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f00003af000/0x400000)=nil) munmap(&(0x7f0000011000/0xc00000)=nil, 0xc00000) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x6, 0x8032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x4, 0x4f832, 0xffffffffffffffff, 0x1000000) 34m46.840997248s ago: executing program 5 (id=409): r0 = openat$kvm(0x0, &(0x7f0000000080), 0xc9b9ea9ecbcfec64, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80c01, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x2000003, 0x2013, r3, 0x200001fe0000) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000004000/0x1000)=nil, 0x0, 0x1000001, 0x80010, 0xffffffffffffffff, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil) r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000000)={0x0, 0x0}, &(0x7f00000000c0)=[@featur1={0x1, 0x5}], 0x1) r11 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000b80)={0x0, &(0x7f0000000100)=[@smc={0x1e, 0x40, {0x84000003, [0x80000000000000, 0x53960c3d, 0xac8, 0x2, 0x7fffffffffffffff]}}], 0x40}, &(0x7f00000001c0)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_SET_ONE_REG(r10, 0x4010aeac, &(0x7f0000000140)=@arm64_sys={0x603000000013dea7, 0x0}) r12 = mmap$KVM_VCPU(&(0x7f0000007000/0x2000)=nil, 0x930, 0x280000b, 0x11, r5, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r12, 0x20, &(0x7f0000000300)="a000963203ef56d871c01e6eb70ed0d74d0300000000000000d5cd28470afa5c2f2fd86c82e085131841b4fd09e8e15de35acb00", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r5, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) r13 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r14, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r15 = syz_kvm_setup_syzos_vm$arm64(r14, &(0x7f0000c00000/0x400000)=nil) r16 = syz_kvm_add_vcpu$arm64(r15, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r16, 0x4018aee1, &(0x7f0000000000)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0x20e4586c}) ioctl$KVM_RUN(r16, 0xae80, 0x0) ioctl$KVM_RUN(r16, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x900c0, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x601, 0x0) 34m41.372269643s ago: executing program 4 (id=410): openat$kvm(0x0, &(0x7f0000000040), 0x800, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2e) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r2, 0x4018aee2, &(0x7f0000000180)=@attr_other={0x0, 0x9, 0xfffffffffffffffe, &(0x7f0000000000)=0xfe}) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r4, 0x8030aeb4, &(0x7f0000000040)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x9e, 0x7fffffff, 0x2}}) (async) ioctl$KVM_SET_DEVICE_ATTR_vm(r4, 0x8030aeb4, &(0x7f0000000040)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x9e, 0x7fffffff, 0x2}}) mmap$KVM_VCPU(&(0x7f0000f2b000/0x3000)=nil, 0x0, 0x3000002, 0x112, 0xffffffffffffffff, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000180)={0x8}) (async) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) (async) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_GET_DEVICE_ATTR(r8, 0x4018aee2, &(0x7f0000000280)=@attr_other={0x0, 0x8, 0x100000000, &(0x7f0000000100)=0x1000}) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_ARM_VCPU_INIT(0xffffffffffffffff, 0x4020aeae, &(0x7f0000000100)={0x5, 0x18}) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f00000000c0)=@arm64_sve_vls={0x606000000015ffff, &(0x7f0000000000)=0x1}) (async) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f00000000c0)=@arm64_sve_vls={0x606000000015ffff, &(0x7f0000000000)=0x1}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) (async) r10 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) syz_kvm_setup_cpu$arm64(r11, 0xffffffffffffffff, &(0x7f0000bff000/0x400000)=nil, &(0x7f0000000c00)=[{0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x208}], 0x1, 0x0, &(0x7f0000000c40)=[@featur2={0x1, 0x8}], 0x1) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000040)=@arm64_sys={0x603000000013c028, &(0x7f0000000600)=0x6}) (async) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000040)=@arm64_sys={0x603000000013c028, &(0x7f0000000600)=0x6}) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x2a) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x32) (async) r12 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x32) syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) ioctl$KVM_ARM_SET_COUNTER_OFFSET(r14, 0x4010aeb5, &(0x7f0000000300)={0x3, 0x2}) (async) ioctl$KVM_ARM_SET_COUNTER_OFFSET(r14, 0x4010aeb5, &(0x7f0000000300)={0x3, 0x2}) 34m27.059434678s ago: executing program 5 (id=411): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000c91000/0x2000)=nil, 0x0, 0x1000000, 0x4f832, 0xffffffffffffffff, 0x1000000) (async) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ARM_VCPU_INIT(r5, 0x4020aeae, &(0x7f0000000000)={0x5}) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_ARM_VCPU_FINALIZE(r5, 0x4004aec2, &(0x7f0000000100)=0x4) (async) mmap$KVM_VCPU(&(0x7f0000ffa000/0x3000)=nil, 0x930, 0x1000004, 0x810, r5, 0x0) (async) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CAP_ARM_USER_IRQ(r1, 0x4068aea3, &(0x7f0000000180)) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) r8 = eventfd2(0xfffffffa, 0x80001) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000140)={0x80, 0xf000, 0x0, r8}) (async) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000080)={0x0, 0x4, 0x0, r8, 0x5}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x7, 0xffffffffffffffff}) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x50000, 0x2000009, 0x102031, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_CREATE_VM(r9, 0x800454dd, 0x16) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4}) munmap$KVM_VCPU(0x0, 0x1000000000) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) 33m55.928837724s ago: executing program 36 (id=410): openat$kvm(0x0, &(0x7f0000000040), 0x800, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2e) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r2, 0x4018aee2, &(0x7f0000000180)=@attr_other={0x0, 0x9, 0xfffffffffffffffe, &(0x7f0000000000)=0xfe}) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r4, 0x8030aeb4, &(0x7f0000000040)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x9e, 0x7fffffff, 0x2}}) (async) ioctl$KVM_SET_DEVICE_ATTR_vm(r4, 0x8030aeb4, &(0x7f0000000040)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x9e, 0x7fffffff, 0x2}}) mmap$KVM_VCPU(&(0x7f0000f2b000/0x3000)=nil, 0x0, 0x3000002, 0x112, 0xffffffffffffffff, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000180)={0x8}) (async) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) (async) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_GET_DEVICE_ATTR(r8, 0x4018aee2, &(0x7f0000000280)=@attr_other={0x0, 0x8, 0x100000000, &(0x7f0000000100)=0x1000}) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_ARM_VCPU_INIT(0xffffffffffffffff, 0x4020aeae, &(0x7f0000000100)={0x5, 0x18}) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f00000000c0)=@arm64_sve_vls={0x606000000015ffff, &(0x7f0000000000)=0x1}) (async) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f00000000c0)=@arm64_sve_vls={0x606000000015ffff, &(0x7f0000000000)=0x1}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) (async) r10 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) syz_kvm_setup_cpu$arm64(r11, 0xffffffffffffffff, &(0x7f0000bff000/0x400000)=nil, &(0x7f0000000c00)=[{0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="82000000000000002800000000000000030000000000000003000000000000008501000000000000e6000000000000001800000000000000d542000000000010320000000000000040000000000000000000000400000000020000000000000009a73b5400000000040000000000008609e27298406e176319b0230007000000000000000300000000000000e60000000000000018000000000000002207000000000000e600000000000000180000000000000036331b250000000032000000000000004000000000000000070000c40000000001040000000000000200000000000000010000000000000008000000000000000500000000000000820000000000000028000000000000000200000000000000040000000000000011030000000000001e00000000000000400000000000000000020000000000000000000000000000080000000000000002000000000000000800000000000000f9ffffffffffffff3200000000000000400000000000000004000084000000000000ffffffffffff0000000000000000070000000000000009000000000000000600000000000000140000000014000020000000000000001280130000003060050000000000001400000000000000200000000000000070df130000103060040000000000000000000000000000000000000000000000020000000000000000000100000000001800000000"], 0x208}], 0x1, 0x0, &(0x7f0000000c40)=[@featur2={0x1, 0x8}], 0x1) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000040)=@arm64_sys={0x603000000013c028, &(0x7f0000000600)=0x6}) (async) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000040)=@arm64_sys={0x603000000013c028, &(0x7f0000000600)=0x6}) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x2a) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x32) (async) r12 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x32) syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) ioctl$KVM_ARM_SET_COUNTER_OFFSET(r14, 0x4010aeb5, &(0x7f0000000300)={0x3, 0x2}) (async) ioctl$KVM_ARM_SET_COUNTER_OFFSET(r14, 0x4010aeb5, &(0x7f0000000300)={0x3, 0x2}) 33m38.259344775s ago: executing program 37 (id=411): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000c91000/0x2000)=nil, 0x0, 0x1000000, 0x4f832, 0xffffffffffffffff, 0x1000000) (async) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ARM_VCPU_INIT(r5, 0x4020aeae, &(0x7f0000000000)={0x5}) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_ARM_VCPU_FINALIZE(r5, 0x4004aec2, &(0x7f0000000100)=0x4) (async) mmap$KVM_VCPU(&(0x7f0000ffa000/0x3000)=nil, 0x930, 0x1000004, 0x810, r5, 0x0) (async) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CAP_ARM_USER_IRQ(r1, 0x4068aea3, &(0x7f0000000180)) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) r8 = eventfd2(0xfffffffa, 0x80001) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000140)={0x80, 0xf000, 0x0, r8}) (async) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000080)={0x0, 0x4, 0x0, r8, 0x5}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x7, 0xffffffffffffffff}) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x50000, 0x2000009, 0x102031, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_CREATE_VM(r9, 0x800454dd, 0x16) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4}) munmap$KVM_VCPU(0x0, 0x1000000000) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) 24m16.052484264s ago: executing program 7 (id=423): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r3, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffd000/0x1000)=nil, r4, 0x1, 0x11, r3, 0x0) r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, r5, 0x8, 0x13, r3, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x4000)=nil, r5, 0x0, 0x12, r3, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_GUEST_MEMFD(r7, 0xc040aed4, &(0x7f0000000040)={0x1000200001fe0000, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION2(r7, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0x2000, &(0x7f0000ffc000/0x2000)=nil, 0x100000000000000, r8}) close(r7) close(r8) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) 23m48.340350744s ago: executing program 7 (id=425): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x33) (async) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x33) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000000)={0x1ff, 0xeeee0000, 0x0, 0xffffffffffffffff, 0x1}) r1 = ioctl$KVM_GET_STATS_FD_vm(r0, 0xaece) syz_kvm_setup_cpu$arm64(r1, r1, &(0x7f0000bfd000/0x400000)=nil, &(0x7f0000000480)=[{0x0, &(0x7f0000000040)=[@hvc={0x32, 0x40, {0xc4000004, [0x8, 0x9, 0x2, 0x7, 0x4]}}, @smc={0x1e, 0x40, {0xc4000003, [0x6, 0xffff, 0xe, 0x6, 0x3]}}, @irq_setup={0x46, 0x18, {0x3, 0xe3}}, @its_setup={0x82, 0x28, {0x1, 0x1, 0x2ec}}, @eret={0xe6, 0x18, 0x6}, @uexit={0x0, 0x18, 0x2}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x180, 0xffffffffffffffc0, 0x2}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80e0000, 0x300, 0xc2, 0x2}}, @svc={0x122, 0x40, {0x84000053, [0x0, 0xc2, 0x3, 0x2, 0x1]}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x1a00, 0x3, 0x6}}, @msr={0x14, 0x20, {0x6030000000130203, 0xffffffff}}, @code={0xa, 0x6c, {"0078202e0020e00d007008d5000028d5007008d500ec202e0050005e206881d200c0b0f2410080d2220180d2030080d2440180d2020000d4007008d500a682d200c0b8f2810180d2a20080d2430180d2840080d2020000d4"}}, @mrs={0xbe, 0x18, {0x6030000000138037}}, @eret={0xe6, 0x18, 0x3ff}, @msr={0x14, 0x20, {0x6030000000138027, 0x5}}, @irq_setup={0x46, 0x18, {0x3, 0x30d}}, @smc={0x1e, 0x40, {0x30000000, [0x6, 0x0, 0x8, 0xb1bc, 0x1]}}, @msr={0x14, 0x20, {0x603000000013e681, 0x4}}, @its_send_cmd={0xaa, 0x28, {0x7, 0x0, 0x2, 0xe, 0x5, 0x4b33, 0x1}}, @msr={0x14, 0x20, {0x603000000013df51, 0x8000000000000001}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x18f0fb0cfc1f4541, 0x6, 0x8}}, @svc={0x122, 0x40, {0x4000000, [0xffffffffffffffff, 0x6, 0xfffffffffffff801, 0x2, 0x5]}}, @its_setup={0x82, 0x28, {0x3, 0x0, 0x19b}}, @eret={0xe6, 0x18, 0x7}, @mrs={0xbe, 0x18, {0x603000000013c01e}}], 0x424}], 0x1, 0x0, &(0x7f00000004c0)=[@featur2={0x1, 0x5}], 0x1) (async) syz_kvm_setup_cpu$arm64(r1, r1, &(0x7f0000bfd000/0x400000)=nil, &(0x7f0000000480)=[{0x0, &(0x7f0000000040)=[@hvc={0x32, 0x40, {0xc4000004, [0x8, 0x9, 0x2, 0x7, 0x4]}}, @smc={0x1e, 0x40, {0xc4000003, [0x6, 0xffff, 0xe, 0x6, 0x3]}}, @irq_setup={0x46, 0x18, {0x3, 0xe3}}, @its_setup={0x82, 0x28, {0x1, 0x1, 0x2ec}}, @eret={0xe6, 0x18, 0x6}, @uexit={0x0, 0x18, 0x2}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x180, 0xffffffffffffffc0, 0x2}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80e0000, 0x300, 0xc2, 0x2}}, @svc={0x122, 0x40, {0x84000053, [0x0, 0xc2, 0x3, 0x2, 0x1]}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x1a00, 0x3, 0x6}}, @msr={0x14, 0x20, {0x6030000000130203, 0xffffffff}}, @code={0xa, 0x6c, {"0078202e0020e00d007008d5000028d5007008d500ec202e0050005e206881d200c0b0f2410080d2220180d2030080d2440180d2020000d4007008d500a682d200c0b8f2810180d2a20080d2430180d2840080d2020000d4"}}, @mrs={0xbe, 0x18, {0x6030000000138037}}, @eret={0xe6, 0x18, 0x3ff}, @msr={0x14, 0x20, {0x6030000000138027, 0x5}}, @irq_setup={0x46, 0x18, {0x3, 0x30d}}, @smc={0x1e, 0x40, {0x30000000, [0x6, 0x0, 0x8, 0xb1bc, 0x1]}}, @msr={0x14, 0x20, {0x603000000013e681, 0x4}}, @its_send_cmd={0xaa, 0x28, {0x7, 0x0, 0x2, 0xe, 0x5, 0x4b33, 0x1}}, @msr={0x14, 0x20, {0x603000000013df51, 0x8000000000000001}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x18f0fb0cfc1f4541, 0x6, 0x8}}, @svc={0x122, 0x40, {0x4000000, [0xffffffffffffffff, 0x6, 0xfffffffffffff801, 0x2, 0x5]}}, @its_setup={0x82, 0x28, {0x3, 0x0, 0x19b}}, @eret={0xe6, 0x18, 0x7}, @mrs={0xbe, 0x18, {0x603000000013c01e}}], 0x424}], 0x1, 0x0, &(0x7f00000004c0)=[@featur2={0x1, 0x5}], 0x1) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000540)=@attr_other={0x0, 0x2b2, 0x20c6328, &(0x7f0000000500)=0x1}) ioctl$KVM_CAP_PTP_KVM(r0, 0x4068aea3, &(0x7f0000000580)) (async) ioctl$KVM_CAP_PTP_KVM(r0, 0x4068aea3, &(0x7f0000000580)) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000600)={0x8000, 0x2ffc, 0x8, 0xffffffffffffffff, 0x5}) r2 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000840)={0x0, &(0x7f0000000640)=[@svc={0x122, 0x40, {0x10f6876ccffb954b, [0x1, 0x8000000000000000, 0x8001, 0x2c, 0xd]}}, @irq_setup={0x46, 0x18, {0x3, 0x159}}, @its_send_cmd={0xaa, 0x28, {0xb, 0x0, 0x4, 0xb, 0x22, 0xf, 0x3}}, @its_setup={0x82, 0x28, {0x2, 0x4, 0x214}}, @msr={0x14, 0x20, {0x603000000013e719, 0xfffffffffffff373}}, @hvc={0x32, 0x40, {0x84000006, [0x8, 0x400, 0x223, 0x4]}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x180, 0xe000000000000000, 0x2}}, @mrs={0xbe, 0x18, {0x603000000013e534}}, @code={0xa, 0x6c, {"0820601e0000399e0000421e20dd94d200a0b8f2810180d2220080d2a30180d2840180d2020000d4007008d500a4a00d601a86d20080b0f2a10080d2020080d2e30180d2e40080d2020000d4007008d5000000c8000020eb"}}, @irq_setup={0x46, 0x18, {0x4, 0x361}}], 0x1d4}, &(0x7f0000000880)=[@featur1={0x1, 0x2}], 0x1) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000900)=@arm64_fp={0x6040000000100070, &(0x7f00000008c0)=0x3}) eventfd2(0xed, 0x80000) (async) r3 = eventfd2(0xed, 0x80000) write$eventfd(r3, &(0x7f0000000940)=0xb99, 0x8) close(r1) ioctl$KVM_RUN(r1, 0xae80, 0x0) (async) ioctl$KVM_RUN(r1, 0xae80, 0x0) write$eventfd(r3, &(0x7f0000000980)=0xffffffff00000001, 0x8) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x39) (async) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x39) syz_kvm_setup_cpu$arm64(r4, r1, &(0x7f0000bff000/0x400000)=nil, &(0x7f0000000d00)=[{0x0, &(0x7f00000009c0)=[@svc={0x122, 0x40, {0x84000006, [0x7, 0x4, 0xb, 0x7, 0x9]}}, @eret={0xe6, 0x18, 0x8}, @smc={0x1e, 0x40, {0x40000000, [0x3, 0x601fb93b, 0xa94, 0xfffffffffffffff8, 0x9]}}, @irq_setup={0x46, 0x18, {0x4, 0x1bb}}, @hvc={0x32, 0x40, {0x4400f7ee, [0x7fff, 0x6b8f, 0xb, 0x5, 0x7fff]}}, @eret={0xe6, 0x18, 0x2}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x100, 0x7, 0x2}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x90, 0x3}}, @uexit={0x0, 0x18, 0x8}, @svc={0x122, 0x40, {0x84000005, [0x6, 0x200, 0x10001, 0x0, 0x6]}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x1, 0x1, 0x0, 0x75, 0x7}}, @eret={0xe6, 0x18, 0x5}, @hvc={0x32, 0x40, {0xc4000010, [0x7, 0x4, 0x0, 0x9, 0x9]}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0xc, 0x6, 0xc}}, @eret={0xe6, 0x18, 0xdd7}, @mrs={0xbe, 0x18, {0x603000000013da10}}, @msr={0x14, 0x20, {0x603000000013df40, 0x1}}, @mrs={0xbe, 0x18, {0x603000000013def3}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80c0000, 0xb0, 0x1, 0xd}}], 0x308}], 0x1, 0x0, &(0x7f0000000d40)=[@featur2={0x1, 0x94}], 0x1) ioctl$KVM_IRQ_LINE(r4, 0x4008ae61, &(0x7f0000000d80)={0x80000001, 0x80}) ioctl$KVM_SET_REGS(r1, 0x4360ae82, &(0x7f0000000dc0)={[0x660, 0x7, 0xe, 0x7, 0xfffffffffffffffd, 0xf2, 0x2, 0x5, 0x4, 0x8, 0x4, 0x5, 0xe, 0x7, 0x1, 0x401], 0xffe, 0x8800}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000e80)={0xa, 0xffffffffffffffff}) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x18) (async) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x18) r7 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04) mmap$KVM_VCPU(&(0x7f0000c94000/0x4000)=nil, r7, 0x8, 0x10010, r1, 0x0) mmap$KVM_VCPU(&(0x7f0000f86000/0x2000)=nil, r7, 0x2, 0x20010, r1, 0x0) r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x14) ioctl$KVM_CAP_ARM_INJECT_SERROR_ESR(r8, 0x4068aea3, &(0x7f0000000ec0)) ioctl$KVM_CAP_DIRTY_LOG_RING_WITH_BITMAP(r8, 0x4068aea3, &(0x7f0000000f40)={0xe1, 0x0, 0x3000}) (async) ioctl$KVM_CAP_DIRTY_LOG_RING_WITH_BITMAP(r8, 0x4068aea3, &(0x7f0000000f40)={0xe1, 0x0, 0x3000}) ioctl$KVM_ARM_SET_DEVICE_ADDR(r2, 0x4010aeab, &(0x7f0000000fc0)={0xa054, 0x2ffc}) (async) ioctl$KVM_ARM_SET_DEVICE_ADDR(r2, 0x4010aeab, &(0x7f0000000fc0)={0xa054, 0x2ffc}) openat$kvm(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r9 = eventfd2(0x7, 0x800) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000001040)={0xdfa6, 0xffff1000, 0x2, r9, 0xa6f977415baa48ca}) (async) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000001040)={0xdfa6, 0xffff1000, 0x2, r9, 0xa6f977415baa48ca}) 23m35.081187682s ago: executing program 7 (id=427): r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r2 = eventfd2(0xfffffffa, 0x80001) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x80, 0x50000, 0x0, r2}) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x1, 0x37d03030d7a92616}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x10000, 0x4000}) (async) r3 = syz_kvm_add_vcpu$arm64(r0, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23m21.321075765s ago: executing program 7 (id=428): mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x9000000) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x7) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0xb127bc221242f04b, 0x1, 0x8000000, 0x1000, &(0x7f0000dc3000/0x1000)=nil}) munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000) munmap(&(0x7f0000482000/0x2000)=nil, 0x2000) munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000) munmap(&(0x7f0000e76000/0x12000)=nil, 0x12000) mmap$KVM_VCPU(&(0x7f00005e7000/0x2000)=nil, 0x930, 0x3000000, 0x24132, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) r1 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000bc5000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r4, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) ioctl$KVM_RUN(r4, 0xae80, 0x0) 23m14.696116952s ago: executing program 6 (id=429): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xf4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r6, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r6, 0x4018aee1, &(0x7f0000000000)=@attr_set_pmu={0x0, 0x0, 0x3, 0xfffffffffffffffe}) ioctl$KVM_IRQFD(r3, 0x4020ae76, 0xffffffffffffffff) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2b) ioctl$KVM_REGISTER_COALESCED_MMIO(r7, 0x4010ae67, 0x0) ioctl$KVM_CAP_ARM_MTE(r7, 0x4068aea3, &(0x7f0000000000)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r7, 0x4010ae68, &(0x7f0000001480)={0xfffffffffffffdfd, 0x13000, 0xffffffff}) 22m57.322666943s ago: executing program 7 (id=430): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000000c0)={0xffffffffffffffff, 0xc6, 0x2}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r4, 0x400454cd, 0x110c230020) r5 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000080), 0x40000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) syz_kvm_vgic_v3_setup(r7, 0x1, 0x100) ioctl$KVM_SET_GSI_ROUTING(r7, 0x4008ae6a, &(0x7f0000000180)) r8 = eventfd2(0x4, 0x80000) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x6) ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f0000000000)={r8, 0x535, 0x0, r8}) r9 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) r11 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r12 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r11, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r12, 0x3, 0x11, r10, 0x0) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$KVM_GET_API_VERSION(r13, 0xae00, 0x0) r14 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r14, 0x40086602, 0x110ca32020) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r10, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x25) ioctl$KVM_CREATE_VM(r14, 0xae01, 0x14) munmap(&(0x7f0000011000/0xc00000)=nil, 0xc00000) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 22m49.448083412s ago: executing program 6 (id=431): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x8800, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xf1) (async) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x1d1380, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x50000, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x33) (async) r4 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r5 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f00000001c0)={0xa, 0x0, [{0x0, 0x4, 0x1, 0x0, @sint={0x1d, 0x2}}, {0x1, 0x2, 0x1, 0x0, @sint={0x0, 0x9}}, {0xf, 0x2, 0x0, 0x0, @msi={0x0, 0x7ff, 0x100, 0x6}}, {0x7, 0x5, 0x0, 0x0, @adapter={0x9, 0x1, 0x7f, 0x1000, 0xfffff8ef}}, {0x5, 0x5, 0x1, 0x0, @adapter={0x0, 0x8000, 0x7, 0x3, 0xab}}, {0x9, 0x5, 0x0, 0x0, @adapter={0x9, 0x5b281fcb, 0x7b1, 0x2, 0xfffffffe}}, {0x4604, 0x1, 0x1, 0x0, @msi={0x7, 0x101, 0xe}}, {0x2, 0x1, 0x1, 0x0, @sint={0x5, 0x80000001}}, {0xfffff020, 0x1, 0x1, 0x0, @sint={0x3, 0xe}}, {0x40, 0x4, 0x0, 0x0, @irqchip={0xfffffffc, 0x80}}]}) (async) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000180)={0x0, &(0x7f0000000000)=[@hvc={0x32, 0x40, {0x84000052, [0x5, 0x81, 0x9, 0x4, 0x2]}}, @hvc={0x32, 0x40, {0x8400000b, [0x4d5c, 0x800, 0x2, 0xb, 0xfff]}}], 0x80}, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) r9 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x18, {"7f2003d5"}}], 0x18}, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) eventfd2(0x8, 0x80801) (async) ioctl$KVM_SET_MP_STATE(r9, 0x4004ae99, &(0x7f0000000000)) 22m32.879905415s ago: executing program 6 (id=432): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x3, 0x3, 0x10000000004}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000005}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r2, 0x1, 0x100) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000040)={0x5, 0x0, 0x1000, 0x1000, &(0x7f0000275000/0x1000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000040)={0x5, 0x0, 0x1000, 0x1000, &(0x7f0000275000/0x1000)=nil}) syz_kvm_setup_cpu$arm64(r6, 0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil, &(0x7f0000000280)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$arm64(r6, 0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil, &(0x7f0000000280)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000500)={0x2710, 0x1, 0x10000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000500)={0x2710, 0x1, 0x10000, 0x2000, &(0x7f0000000000/0x2000)=nil}) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000000)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) (async) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r8, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x16, 0x4, 0x1}}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r8, r9, &(0x7f0000bfe000/0x400000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1e0000000000000040000000000000005100008400f7ff00980f000000000000ffffffff0000000007000000000000000000008000000000fbffffffffffffff1d31f0"], 0xffffffffffffff8a}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$arm64(r8, r9, &(0x7f0000bfe000/0x400000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1e0000000000000040000000000000005100008400f7ff00980f000000000000ffffffff0000000007000000000000000000008000000000fbffffffffffffff1d31f0"], 0xffffffffffffff8a}], 0x1, 0x0, 0x0, 0x0) r10 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil) r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000100)={0x0, &(0x7f0000000000)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x1}}, @its_send_cmd={0xaa, 0x28, {0xb, 0x3, 0x40000000, 0x10000, 0x0, 0x105, 0x2}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r11, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r14, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) (async) ioctl$KVM_SET_DEVICE_ATTR(r14, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r13, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 22m24.878886498s ago: executing program 7 (id=433): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x80, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000bfe000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000040)={0x0, &(0x7f0000000340)=[@code={0xa, 0x3c, {"008008d5003c4093000008d5000008d50000806d0000231e000080b8007008d500e0200e0000031e"}}, @smc={0x1e, 0x40, {0x80, [0x8, 0x1, 0x200, 0xfffffffffffffff5, 0x8]}}], 0x7c}, 0x0, 0x0) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x300) syz_kvm_vgic_v3_setup(r4, 0x2, 0x100) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000000)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee2, 0x0) syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000980)={0x0, 0x0}, 0x0, 0x0) r11 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil) r14 = syz_kvm_add_vcpu$arm64(r13, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x3, 0x2}}, @its_send_cmd={0xaa, 0x28, {0x4, 0x1, 0x80000, 0xfffc, 0x0, 0x8, 0x2}}], 0x50}, 0x0, 0x0) r15 = syz_kvm_vgic_v3_setup(r12, 0x1, 0x100) ioctl$KVM_RUN(r14, 0xae80, 0x0) r16 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x32) ioctl$KVM_CHECK_EXTENSION_VM(r16, 0xae03, 0x201) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8}) ioctl$KVM_SET_DEVICE_ATTR(r15, 0x4018aee1, &(0x7f00000001c0)=@attr_riscv64=@attr_ctrl={0x0, 0x1, 0x1, &(0x7f0000000240)=0x84}) 22m5.128961591s ago: executing program 6 (id=434): ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000040)=@arm64_fp={0x60400000001000c4, &(0x7f0000000000)=0xa}) r0 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000480)={0x0, &(0x7f0000000080)=[@mrs={0xbe, 0x18, {0x603000000013c289}}, @eret={0xe6, 0x18, 0x101}, @eret={0xe6, 0x18, 0x6}, @uexit={0x0, 0x18, 0x8}, @code={0xa, 0x84, {"007008d5e0c79dd200e0b8f2410180d2a20080d2630080d2e40180d2020000d40000221e007008d5007008d5e00300fa40d093d20000b8f2a10180d2e20080d2a30180d2e40080d2020000d40020000d0078202e206299d20060b0f2010180d2420180d2430180d2c40180d2020000d4"}}, @svc={0x122, 0x40, {0x8000, [0x8000000000000001, 0x8, 0x200, 0x10]}}, @smc={0x1e, 0x40, {0x0, [0x0, 0x4, 0x2b2e, 0x2, 0x800]}}, @hvc={0x32, 0x40, {0x80000001, [0x800, 0x5, 0xda, 0xfff, 0x3]}}, @msr={0x14, 0x20, {0x6030000000138045, 0x800}}, @uexit={0x0, 0x18, 0x8}, @irq_setup={0x46, 0x18, {0x4, 0xf1}}, @its_send_cmd={0xaa, 0x28, {0xe, 0x1, 0x0, 0xa, 0x200, 0x4}}, @svc={0x122, 0x40, {0x86000001, [0x29f1, 0x6, 0x0, 0x5, 0x146]}}, @its_setup={0x82, 0x28, {0x4, 0x1, 0x3e8}}, @mrs={0xbe, 0x18, {0x603000000013800c}}, @msr={0x14, 0x20, {0x603000000013c080, 0x318}}, @code={0xa, 0xe4, {"20b583d200c0b0f2810080d2a20180d2230080d2a40080d2020000d4207b9ad200e0b8f2e10080d2220180d2230080d2440180d2020000d40000805a000008d580fc8fd20080b0f2410080d2620080d2630080d2640080d2020000d40000403920a189d20000b8f2c10180d2420080d2a30180d2e40180d2020000d4e0a58fd200c0b0f2410180d2420180d2630180d2040080d2020000d4a00c87d200c0b8f2410080d2020180d2630180d2440180d2020000d460dd8dd200a0b8f2610180d2220080d2830080d2a40080d2020000d4"}}, @msr={0x14, 0x20, {0x603000000013c2a6, 0x6}}, @hvc={0x32, 0x40, {0x8400000a, [0x395, 0x80000001, 0x3, 0x6, 0x7]}}], 0x400}, &(0x7f00000004c0)=[@featur1={0x1, 0x20}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r0, 0x4018aee1, &(0x7f0000000500)=@attr_pmu_init) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f0000000540)={0x80000001, 0x7ff}) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000580)=@arm64={0x4, 0x4, 0xd0, '\x00', 0x7ff}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f00000005c0)={0x18, "f1a0f0d61f08c506b3bc6bdd5058250d204a15568560c628"}) ioctl$KVM_GET_MP_STATE(r0, 0x8004ae98, &(0x7f0000000600)) ioctl$KVM_ARM_VCPU_FINALIZE(r0, 0x4004aec2, &(0x7f0000000640)=0x1) r2 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) r3 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000680)={r2, 0x4, 0x3, r3}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x2c) ioctl$KVM_IRQ_LINE(r4, 0x4008ae61, &(0x7f00000006c0)={0x8}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000bff000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000800)={0x0, &(0x7f0000000700)=[@eret={0xe6, 0x18, 0x8001}, @uexit={0x0, 0x18, 0x4}, @its_setup={0x82, 0x28, {0x0, 0x0, 0xea}}, @svc={0x122, 0x40, {0x4000000, [0x4, 0x6, 0x3a, 0x8001]}}, @eret={0xe6, 0x18, 0x324}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x48, 0x0, 0x1}}], 0xe0}, &(0x7f0000000840)=[@featur2={0x1, 0x1}], 0x1) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) ioctl$KVM_RUN(r6, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000880), 0x8000, 0x0) ioctl$KVM_GET_SREGS(r2, 0x8000ae83, &(0x7f00000008c0)) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000a00)={0xb, 0xffffffffffffffff, 0xf56ec6c963da7fe4}) ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000a40)={0x1fe, 0x2, 0xffc, 0x1000, &(0x7f0000ffd000/0x1000)=nil, 0x10000, r3}) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000b00)={0xc6, "e84da9e74a4f1c9da893c140108b0495e0ffe9fee226020964b1354dc933f53711b93ac36c00360b00cdfc5ffd18ddfdf0f8719dc79d35165047955a4f36db35cdcefb4b22bf7bc149c614f4d0e2777114fde53808489307475cba84dac0ba6f3ae8ab30774051f9da0e174e9c1913caf9ce2d9c68ab8f9b6a5f104244cad4e428bd57ad348f621a1d9081f4c3f09d6afe0ba4d7dcacf2b84b6529cd68c62fe4f682a765c0019288333d80e54aa366d1bd5d4d429c19d1c2b3df6626ef8b95d6f20104fdeb95"}) munmap(&(0x7f0000c9b000/0x3000)=nil, 0x3000) munmap(&(0x7f0000fbb000/0x3000)=nil, 0x3000) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000c00)={0x10000, 0x0, &(0x7f0000e69000/0x1000)=nil}) syz_kvm_vgic_v3_setup(r4, 0x1, 0x0) ioctl$KVM_CAP_ARM_SYSTEM_SUSPEND(r4, 0x4068aea3, &(0x7f0000000c40)) close(r2) 21m50.006042639s ago: executing program 6 (id=435): mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000fed000/0x3000)=nil, 0x930, 0x0, 0x4030031, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xc, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x20000000) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) (async) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) (async) munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) (async) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) (async) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) (async) munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000) (async) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000fed000/0x3000)=nil, 0x930, 0x0, 0x4030031, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xc, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x20000000) (async) 21m38.949935237s ago: executing program 38 (id=433): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x80, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000bfe000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000040)={0x0, &(0x7f0000000340)=[@code={0xa, 0x3c, {"008008d5003c4093000008d5000008d50000806d0000231e000080b8007008d500e0200e0000031e"}}, @smc={0x1e, 0x40, {0x80, [0x8, 0x1, 0x200, 0xfffffffffffffff5, 0x8]}}], 0x7c}, 0x0, 0x0) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x300) syz_kvm_vgic_v3_setup(r4, 0x2, 0x100) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000000)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee2, 0x0) syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000980)={0x0, 0x0}, 0x0, 0x0) r11 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil) r14 = syz_kvm_add_vcpu$arm64(r13, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x3, 0x2}}, @its_send_cmd={0xaa, 0x28, {0x4, 0x1, 0x80000, 0xfffc, 0x0, 0x8, 0x2}}], 0x50}, 0x0, 0x0) r15 = syz_kvm_vgic_v3_setup(r12, 0x1, 0x100) ioctl$KVM_RUN(r14, 0xae80, 0x0) r16 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x32) ioctl$KVM_CHECK_EXTENSION_VM(r16, 0xae03, 0x201) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8}) ioctl$KVM_SET_DEVICE_ATTR(r15, 0x4018aee1, &(0x7f00000001c0)=@attr_riscv64=@attr_ctrl={0x0, 0x1, 0x1, &(0x7f0000000240)=0x84}) 21m33.161280829s ago: executing program 6 (id=437): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x24) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0x40086602, 0x110c230000) openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r2, 0x0) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x24) (async) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) (async) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) (async) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r5, 0x40086602, 0x110c230000) (async) 20m44.447923069s ago: executing program 39 (id=437): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x24) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0x40086602, 0x110c230000) openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r2, 0x0) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x24) (async) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) (async) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) (async) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r5, 0x40086602, 0x110c230000) (async) 3m12.686281957s ago: executing program 9 (id=475): r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000100)={0x0, 0x0}, &(0x7f00000000c0)=[@featur2={0x1, 0x18}], 0x47) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x1}) r4 = syz_kvm_add_vcpu$arm64(r0, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r4, 0x4018aee1, &(0x7f0000000040)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000280)={0x14, 0xff}}) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r6, r7, &(0x7f0000b74000/0x400000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x40}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$arm64(r6, r7, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000880)=[{0x0, 0x0}], 0x1, 0x0, &(0x7f00000008c0)=[@featur2={0x1, 0x1a}], 0x1) ioctl$KVM_CAP_ARM_SYSTEM_SUSPEND(r6, 0x4068aea3, &(0x7f0000000000)) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x300, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x28) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r9, 0x4068aea3, &(0x7f0000000280)={0xdf, 0x0, 0x2000}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r11 = mmap$KVM_VCPU(&(0x7f0000e31000/0x2000)=nil, 0x930, 0xa, 0x11, r10, 0x40000) syz_memcpy_off$KVM_EXIT_HYPERCALL(r11, 0x20, &(0x7f00000000c0)="f610f5b33c962b62c00d0914345792dd23a78cdac1300e5e167ce3c540e94f06530dc539e8c1d98289a14446bb8d486f0060cb76b4abc705083f72adeea32830e92b6c89e7b929ff", 0x0, 0x48) r12 = openat$kvm(0x0, &(0x7f0000000280), 0x103080, 0x0) ioctl$KVM_CHECK_EXTENSION(r12, 0xae03, 0x8) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r13 = syz_kvm_vgic_v3_setup(0xffffffffffffffff, 0x4, 0x40) ioctl$KVM_GET_DEVICE_ATTR(r13, 0x4018aee2, &(0x7f0000000100)=@attr_riscv64=@attr_imsic={0x0, 0x1, 0x80, &(0x7f0000000080)=0x7fffffff}) r14 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r14, 0x5460, 0xd) 2m58.671958875s ago: executing program 8 (id=476): r0 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f00000001c0)="f21bc75509bf71c9d70236fc044842da97e87fd62c18b875c2357c6ed6000000000000000000000000002000e4ff00", 0x0, 0x48) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r4, &(0x7f00000001c0)=0xffffff7f, 0xff25) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ARM_VCPU_INIT(r5, 0x4020aeae, &(0x7f0000000000)={0x5}) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xc, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x20000000) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2m44.602352856s ago: executing program 9 (id=477): mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x0, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2d) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x7, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f00000002c0)=@attr_other={0x0, 0x7, 0x10001, 0x0}) (async) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) ioctl$KVM_CAP_HALT_POLL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000100)) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x300, 0x0) (async, rerun: 32) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (rerun: 32) mmap$KVM_VCPU(&(0x7f0000e31000/0x2000)=nil, 0x930, 0xa, 0x11, r7, 0x40000) (async) mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r6, 0x0) (async, rerun: 64) mmap$KVM_VCPU(&(0x7f0000e04000/0x2000)=nil, 0x930, 0x1, 0x11, r6, 0x0) (rerun: 64) r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f0000000000)={0x4, 0x3000, 0x1}) (async) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, r8, 0x8, 0x13, r6, 0x0) (async) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000180)={0x8}) (async) r9 = openat$kvm(0x0, &(0x7f0000000040), 0x8800, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000a5a000/0x400000)=nil) r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000b80)={0x0, &(0x7f0000000040)=[@smc={0x1e, 0x40, {0x84000012, [0x79c4, 0x100080001, 0x5, 0x101, 0x13]}}], 0x40}, &(0x7f00000000c0)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r12, 0xae80, 0x0) (async) r13 = syz_kvm_vgic_v3_setup(r4, 0x2, 0x2a0) ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f0000000240)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f00000001c0)=0x442}) mmap$KVM_VCPU(&(0x7f0000ffd000/0x2000)=nil, r8, 0x1000001, 0x12, r6, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b6565d2f1, 0xffffffffffffffff, 0x0) 2m28.829145843s ago: executing program 8 (id=478): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r1, 0x4068aea3, &(0x7f0000000040)={0xe4, 0x0, 0x1000}) (async) r2 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async, rerun: 32) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (rerun: 32) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000000)={0x1, 0x37d03030d7a92616}) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000180)={0xeeee0000}) r5 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async, rerun: 64) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f00009a5000/0x400000)=nil) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0xdddd0000, 0x2000, &(0x7f000000a000/0x2000)=nil}) 2m7.909668028s ago: executing program 9 (id=479): mmap$KVM_VCPU(&(0x7f0000011000/0x3000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000002000/0x4000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x0, 0xa, 0x10, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r1 = mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, r0, 0xc, 0x16831, 0xffffffffffffffff, 0x0) ioctl$KVM_ARM_VCPU_INIT(0xffffffffffffffff, 0x4020aeae, &(0x7f0000000000)={0x4, 0xa2}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000240)="37e68986ad644f5dc57bbc1ff382863b67f3eee57a32ec911d95f88f3dd8ea716e4a29cefbd440b2ecf83f57baf33b0c97182970a47ef45c954e42f2055384921830f6e273d2eb30", 0x0, 0x2a2019ac5ed2a1ef) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x5}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x2400, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) ioctl$KVM_CREATE_VM(r4, 0x400454ce, 0x20000000000f) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000100)="746abf250f7959c813e4adfb369b808022e69fe80cfadce4a1259e77bab54ac9749537b3d016bb7f745a6e22d2f9ff443f19467748a3fe02c239457600", 0x0, 0xfffffffffffffec5) r5 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0xb, 0x30d2a4fbfbfad6b8, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil) r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) syz_kvm_vgic_v3_setup(r8, 0x3, 0x320) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r10, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_irq={0x0, 0x0, 0x0, &(0x7f00000000c0)=0x11}) r11 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_ARM_VCPU_INIT(r11, 0x4020aeae, &(0x7f0000000040)={0x5}) ioctl$KVM_RUN(r11, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0) 2m7.451728778s ago: executing program 8 (id=480): r0 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r4, 0x4020aeae, &(0x7f0000000100)={0x5, 0x18}) ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, 0x0) ioctl$KVM_GET_SREGS(r4, 0x8000ae83, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000480)=@x86={0x11, 0x8, 0xf, 0x0, 0x5, 0x4, 0x86, 0x3, 0x48, 0x86, 0xdd, 0xb, 0x0, 0x0, 0x0, 0x10, 0x7, 0x5, 0x8, '\x00', 0xfd, 0x93}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ARM_VCPU_INIT(r5, 0x4020aeae, &(0x7f0000000000)={0x5}) r6 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) syz_kvm_vgic_v3_setup(r10, 0x1, 0x100) ioctl$KVM_SIGNAL_MSI(r10, 0x4020aea5, &(0x7f0000000280)={0x100000, 0x6000, 0x0, 0x2000000}) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f0000000540)=@attr_other={0x0, 0x8, 0x80, &(0x7f0000000500)=0x5}) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0xb, 0x23ac5f9b426ec4b2, 0xffffffffffffffff, 0x0) 1m41.080700129s ago: executing program 9 (id=481): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000500)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x60fb, 0x5}}, @msr={0x14, 0x20, {0x603000000013c101, 0x4}}, @mrs={0xbe, 0x18, {0x603000000013e66d}}, @svc={0x122, 0x40, {0x80000001, [0x9, 0x100, 0x8, 0x1ff, 0x8]}}, @svc={0x122, 0x40, {0x8400000a, [0xffffffffffffff2c, 0x9, 0x0, 0x10001]}}, @mrs={0xbe, 0x18, {0x603000000013e091}}, @code={0xa, 0x84, {"0000c00c80a288d20040b8f2e10180d2c20180d2c30180d2e40080d2020000d40008203c000a98d20000b8f2610080d2c20180d2c30080d2440180d2020000d4008008d5007008d500fc007fc0d983d200c0b8f2c10080d2420180d2030180d2640180d2020000d400000013007008d5"}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x8, 0xf3, 0xe}}, @eret={0xe6, 0x18, 0xfffffffffffffffd}, @hvc={0x32, 0x40, {0x80000002, [0x1000, 0x2, 0x1000, 0x6d, 0x9]}}, @code={0xa, 0x6c, {"206e8ad200c0b8f2810180d2c20180d2030180d2e40080d2020000d4000028d5001ce00e805495d20040b0f2210180d2020180d2430080d2240080d2020000d400c0c00d007008d5000040bd007008d5007008d5000cc0da"}}, @smc={0x1e, 0x40, {0x7200bfa0, [0x3ff, 0x3, 0x200, 0x100000001, 0xfffffffffffffc01]}}, @smc={0x1e, 0x40, {0x40, [0x9, 0x5, 0x10000, 0x800, 0x43ad02ee]}}, @its_setup={0x82, 0x28, {0x4, 0x3, 0x51}}], 0x310}, &(0x7f0000000540)=[@featur2={0x1, 0x4a}], 0x1) (async) r4 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f0000000600)=[@smc={0x1e, 0x40, {0xc4000053, [0x0, 0x4, 0x1, 0x8, 0x8]}}, @its_setup={0x82, 0x28, {0x2, 0x2, 0x37f}}, @svc={0x122, 0x40, {0x84000005, [0x9, 0x7fffffffffffffff, 0x0, 0x8000000000000001]}}, @msr={0x14, 0x20, {0x603000000013deab, 0xff}}, @code={0xa, 0x54, {"0040200e000000c8008008d5008008d5008008d50004809a001399d20060b0f2210080d2820080d2830080d2040180d2020000d4007008d50004201e00004039"}}, @eret={0xe6, 0x18, 0x4}, @eret={0xe6, 0x18, 0x3}, @svc={0x122, 0x40, {0x84000001, [0x3, 0x3, 0x7, 0x37, 0x1f74]}}], 0x18c}, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m37.736705235s ago: executing program 8 (id=482): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000080)=@other={0x1ff, &(0x7f00000000c0)=0x80}) ioctl$KVM_CREATE_VM(r0, 0x40086602, 0x80020000000) 1m24.93656155s ago: executing program 9 (id=483): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x2, 0x10000000000000) ioctl$KVM_ARM_VCPU_INIT(0xffffffffffffffff, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x3}) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x82000, 0x0) r1 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x8800, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0xf0) ioctl$KVM_SET_DEVICE_ATTR_vm(r4, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)={0xef000000, 0x1000, 0x2}}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r4, r6, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000140)=[{0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000000000ef00000000dd000000000008000100000000000000020000000000000003000000000000000032000000000000004000000000000000000000ef0000000000000000000000060000000000000000020000000000000003000000000000000400"/121], 0x80}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x8) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x9) r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0x19) r10 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000000)={0x0, 0x0}, &(0x7f00000000c0)=[@featur1={0x1, 0x5}], 0x1) r11 = syz_kvm_add_vcpu$arm64(r1, &(0x7f0000000b80)={0x0, &(0x7f0000000100)=[@smc={0x1e, 0x40, {0x84000003, [0x80000000000000, 0x53960c3d, 0xac5, 0x2, 0x7fffffffffffffff]}}], 0x40}, &(0x7f00000001c0)=[@featur1={0x1, 0x14}], 0x1) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_GET_ONE_REG(r10, 0x4010aeab, &(0x7f0000000140)=@riscv64_core={0x803000000020001f, &(0x7f0000000280)=0x2}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@arm64={0x0, 0x6a, 0x94, '\x00', 0xb54d}) write$eventfd(r12, &(0x7f00000001c0)=0x3, 0xfdef) 1m21.368792317s ago: executing program 8 (id=484): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x181b03, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap$KVM_VCPU(0x0, 0x50000, 0x3, 0x11, r3, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r3, 0x4018aee2, &(0x7f0000000140)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0x3}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r5, 0x400454d8, 0x110c23000a) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x12240, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r8, 0x4020aeae, &(0x7f0000000080)={0x5}) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r9, 0x4018aee1, &(0x7f0000000140)=@attr_other={0x0, 0x0, 0x4, 0x0}) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r11 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r13, 0x4018aee1, &(0x7f0000000040)=@attr_irq_timer={0x0, 0x1, 0x1, 0x0}) r14 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r15 = ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r15, 0x4018aee3, &(0x7f0000000040)=@attr_other={0x0, 0x0, 0xa99, 0x0}) 1m0.936772427s ago: executing program 9 (id=485): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f0000000000)={0xdf, 0x0, 0x10000}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async) r2 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x2a) r5 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000b80)={0x0, 0x0}, &(0x7f0000000340)=[@featur2={0x1, 0x4}], 0x1) (async) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000b80)={0x0, 0x0}, &(0x7f0000000340)=[@featur2={0x1, 0x4}], 0x1) ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, &(0x7f0000000240)=@riscv64_aia_csr={0x8030000003010004, &(0x7f0000000200)=0x81}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) r8 = openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) (async) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x100001) ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f00000001c0)={0x200001fe4000}) (async) r10 = ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f00000001c0)={0x200001fe4000}) mmap$KVM_VCPU(&(0x7f0000ffc000/0x1000)=nil, 0x930, 0x2000002, 0x2013, r10, 0x0) r11 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000b80)={0x0, &(0x7f0000000400)=[@memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x3000, 0xff, 0x2}}, @its_send_cmd={0xaa, 0xfffffea2, {0x3, 0x0, 0x2, 0x3, 0x1}}, @its_setup={0x82, 0x28, {0x1, 0x3, 0x70}}], 0x80}, &(0x7f0000000280)=[@featur2={0x1, 0x8}], 0x1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f000099c000/0x400000)=nil) (async) r12 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f000099c000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r12, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) (async) ioctl$KVM_RUN(r11, 0xae80, 0x0) r13 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) (async) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r14, &(0x7f0000c00000/0x400000)=nil) (async) r15 = syz_kvm_setup_syzos_vm$arm64(r14, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r15, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dcea, 0x8000}}], 0x20}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r13, 0xae01, 0x34) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x3c) ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000140)={0x4}) 52.154104532s ago: executing program 8 (id=486): r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29) (async) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) r4 = eventfd2(0x0, 0x0) close(r4) (async) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) (async) r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0x4000)=nil, r5, 0x3000009, 0x11, r2, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000001640), 0x0, 0x0) (async) write$eventfd(r4, &(0x7f0000000180)=0x5, 0xfffffde3) (async) openat$kvm(0x0, &(0x7f0000000040), 0x800, 0x0) (async) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) r8 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil) syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil) r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r9, 0x3, 0xa0) (async) ioctl$KVM_RUN(r11, 0xae80, 0x0) syz_kvm_setup_cpu$arm64(r7, r11, &(0x7f0000000000/0x400000)=nil, &(0x7f0000000280)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x4f832, 0xffffffffffffffff, 0x1000000) (async) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xc, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x20000000) (async) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0) 11.759883919s ago: executing program 40 (id=485): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f0000000000)={0xdf, 0x0, 0x10000}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async) r2 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x2a) r5 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000b80)={0x0, 0x0}, &(0x7f0000000340)=[@featur2={0x1, 0x4}], 0x1) (async) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000b80)={0x0, 0x0}, &(0x7f0000000340)=[@featur2={0x1, 0x4}], 0x1) ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, &(0x7f0000000240)=@riscv64_aia_csr={0x8030000003010004, &(0x7f0000000200)=0x81}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) r8 = openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) (async) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x100001) ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f00000001c0)={0x200001fe4000}) (async) r10 = ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f00000001c0)={0x200001fe4000}) mmap$KVM_VCPU(&(0x7f0000ffc000/0x1000)=nil, 0x930, 0x2000002, 0x2013, r10, 0x0) r11 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000b80)={0x0, &(0x7f0000000400)=[@memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x3000, 0xff, 0x2}}, @its_send_cmd={0xaa, 0xfffffea2, {0x3, 0x0, 0x2, 0x3, 0x1}}, @its_setup={0x82, 0x28, {0x1, 0x3, 0x70}}], 0x80}, &(0x7f0000000280)=[@featur2={0x1, 0x8}], 0x1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f000099c000/0x400000)=nil) (async) r12 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f000099c000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r12, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) (async) ioctl$KVM_RUN(r11, 0xae80, 0x0) r13 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) (async) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r14, &(0x7f0000c00000/0x400000)=nil) (async) r15 = syz_kvm_setup_syzos_vm$arm64(r14, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r15, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dcea, 0x8000}}], 0x20}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r13, 0xae01, 0x34) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x3c) ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000140)={0x4}) 0s ago: executing program 41 (id=486): r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29) (async) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) r4 = eventfd2(0x0, 0x0) close(r4) (async) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) (async) r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0x4000)=nil, r5, 0x3000009, 0x11, r2, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000001640), 0x0, 0x0) (async) write$eventfd(r4, &(0x7f0000000180)=0x5, 0xfffffde3) (async) openat$kvm(0x0, &(0x7f0000000040), 0x800, 0x0) (async) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) r8 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil) syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil) r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r9, 0x3, 0xa0) (async) ioctl$KVM_RUN(r11, 0xae80, 0x0) syz_kvm_setup_cpu$arm64(r7, r11, &(0x7f0000000000/0x400000)=nil, &(0x7f0000000280)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x4f832, 0xffffffffffffffff, 0x1000000) (async) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xc, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x20000000) (async) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): [ 378.612378][ T24] audit: type=1400 audit(377.950:74): avc: denied { read } for pid=3225 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 385.338466][ T24] audit: type=1400 audit(384.710:75): avc: denied { write } for pid=3282 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 389.629555][ T24] audit: type=1400 audit(389.000:76): avc: denied { write } for pid=3285 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 393.055291][ T3225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.888607][ T24] audit: type=1400 audit(401.260:77): avc: denied { write } for pid=3290 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 405.832446][ T24] audit: type=1400 audit(405.200:78): avc: denied { write } for pid=3293 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 415.095901][ T24] audit: type=1400 audit(414.470:79): avc: denied { write } for pid=3297 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 418.803761][ T24] audit: type=1400 audit(418.170:80): avc: denied { write } for pid=3300 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 430.299535][ T24] audit: type=1400 audit(429.670:81): avc: denied { write } for pid=3305 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 433.948983][ T24] audit: type=1400 audit(433.320:82): avc: denied { write } for pid=3308 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 436.418915][ T3225] eql: remember to turn off Van-Jacobson compression on your slave devices [ 445.718617][ T24] audit: type=1400 audit(445.090:83): avc: denied { write } for pid=3314 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 449.402429][ T24] audit: type=1400 audit(448.760:84): avc: denied { write } for pid=3317 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 464.693868][ T24] audit: type=1400 audit(464.050:85): avc: denied { write } for pid=3323 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 468.540623][ T24] audit: type=1400 audit(467.910:86): avc: denied { write } for pid=3326 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 477.719027][ T24] audit: type=1400 audit(477.090:87): avc: denied { write } for pid=3330 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 481.443951][ T24] audit: type=1400 audit(480.790:88): avc: denied { write } for pid=3333 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 491.340619][ T24] audit: type=1400 audit(490.710:89): avc: denied { write } for pid=3338 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 495.109392][ T24] audit: type=1400 audit(494.480:90): avc: denied { write } for pid=3341 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 504.174322][ T24] audit: type=1400 audit(503.530:91): avc: denied { write } for pid=3345 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 507.860613][ T24] audit: type=1400 audit(507.230:92): avc: denied { write } for pid=3348 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 521.973717][ T24] audit: type=1400 audit(521.310:93): avc: denied { write } for pid=3353 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 526.242113][ T24] audit: type=1400 audit(525.610:94): avc: denied { write } for pid=3356 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 546.466870][ T24] audit: type=1400 audit(545.840:95): avc: denied { write } for pid=3365 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 550.352291][ T24] audit: type=1400 audit(549.700:96): avc: denied { write } for pid=3368 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 556.505488][ T24] audit: type=1400 audit(555.880:97): avc: denied { write } for pid=3371 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 561.436402][ T24] audit: type=1400 audit(560.810:98): avc: denied { write } for pid=3374 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 567.617295][ T24] audit: type=1400 audit(566.990:99): avc: denied { write } for pid=3376 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:21649' (ED25519) to the list of known hosts. [ 571.426615][ T24] audit: type=1400 audit(570.800:100): avc: denied { write } for pid=3381 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 573.947698][ T24] audit: type=1400 audit(573.320:101): avc: denied { name_bind } for pid=3383 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 577.323778][ T24] audit: type=1400 audit(576.660:102): avc: denied { execute } for pid=3385 comm="sh" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 577.359614][ T24] audit: type=1400 audit(576.690:103): avc: denied { execute_no_trans } for pid=3385 comm="sh" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 613.048059][ T24] audit: type=1400 audit(612.420:104): avc: denied { mounton } for pid=3385 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 613.085768][ T24] audit: type=1400 audit(612.450:105): avc: denied { mount } for pid=3385 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 613.166504][ T3385] cgroup: Unknown subsys name 'net' [ 613.219426][ T24] audit: type=1400 audit(612.590:106): avc: denied { unmount } for pid=3385 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 613.592571][ T3385] cgroup: Unknown subsys name 'cpuset' [ 613.690859][ T3385] cgroup: Unknown subsys name 'rlimit' [ 614.502905][ T24] audit: type=1400 audit(613.870:107): avc: denied { setattr } for pid=3385 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 614.528041][ T24] audit: type=1400 audit(613.880:108): avc: denied { mounton } for pid=3385 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 614.548543][ T24] audit: type=1400 audit(613.920:109): avc: denied { mount } for pid=3385 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 615.547890][ T3388] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 615.567512][ T24] audit: type=1400 audit(614.920:110): avc: denied { relabelto } for pid=3388 comm="mkswap" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 615.593917][ T24] audit: type=1400 audit(614.960:111): avc: denied { write } for pid=3388 comm="mkswap" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 615.770264][ T24] audit: type=1400 audit(615.140:112): avc: denied { read } for pid=3385 comm="syz-executor" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 615.789729][ T24] audit: type=1400 audit(615.160:113): avc: denied { open } for pid=3385 comm="syz-executor" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 615.846523][ T3385] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 669.514593][ T24] audit: type=1400 audit(668.880:114): avc: denied { execmem } for pid=3389 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 673.103880][ T24] audit: type=1400 audit(672.470:115): avc: denied { read } for pid=3391 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 673.136538][ T24] audit: type=1400 audit(672.480:116): avc: denied { open } for pid=3392 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 673.194300][ T24] audit: type=1400 audit(672.550:117): avc: denied { mounton } for pid=3391 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 673.435068][ T24] audit: type=1400 audit(672.810:118): avc: denied { module_request } for pid=3391 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 673.457661][ T24] audit: type=1400 audit(672.830:119): avc: denied { module_request } for pid=3392 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 674.433843][ T24] audit: type=1400 audit(673.800:120): avc: denied { sys_module } for pid=3392 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 696.430815][ T3392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 697.075529][ T3392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 697.529345][ T3391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 698.086291][ T3391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 711.393366][ T3392] hsr_slave_0: entered promiscuous mode [ 711.419129][ T3392] hsr_slave_1: entered promiscuous mode [ 712.745617][ T3391] hsr_slave_0: entered promiscuous mode [ 712.767968][ T3391] hsr_slave_1: entered promiscuous mode [ 712.790653][ T3391] debugfs: 'hsr0' already exists in 'hsr' [ 712.793828][ T3391] Cannot create hsr debugfs directory [ 718.033967][ T24] audit: type=1400 audit(717.400:121): avc: denied { create } for pid=3392 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 718.063991][ T24] audit: type=1400 audit(717.410:122): avc: denied { write } for pid=3392 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 718.117974][ T24] audit: type=1400 audit(717.490:123): avc: denied { read } for pid=3392 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 718.256083][ T3392] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 718.476543][ T3392] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 718.538215][ T3392] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 718.796871][ T3392] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 718.934348][ T3392] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 719.167647][ T3392] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 719.325815][ T3392] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 719.409588][ T3392] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 720.877982][ T3391] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 720.999324][ T3391] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 721.069928][ T3391] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 721.187907][ T3391] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 721.262388][ T3391] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 721.376627][ T3391] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 721.436748][ T3391] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 721.576048][ T3391] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 733.425924][ T3392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 735.000841][ T3391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 785.865785][ T3392] veth0_vlan: entered promiscuous mode [ 786.324781][ T3392] veth1_vlan: entered promiscuous mode [ 788.128462][ T3391] veth0_vlan: entered promiscuous mode [ 788.369964][ T3392] veth0_macvtap: entered promiscuous mode [ 788.968582][ T3392] veth1_macvtap: entered promiscuous mode [ 789.180428][ T3391] veth1_vlan: entered promiscuous mode [ 791.394152][ T32] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.420535][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.428149][ T3438] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.452356][ T3433] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.148187][ T3391] veth0_macvtap: entered promiscuous mode [ 792.630833][ T3391] veth1_macvtap: entered promiscuous mode [ 793.953059][ T24] audit: type=1400 audit(793.320:124): avc: denied { mount } for pid=3392 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 794.129031][ T24] audit: type=1400 audit(793.500:125): avc: denied { mounton } for pid=3392 comm="syz-executor" path="/syzkaller.YpuSDj/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 794.328254][ T24] audit: type=1400 audit(793.680:126): avc: denied { mount } for pid=3392 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 794.607970][ T24] audit: type=1400 audit(793.980:127): avc: denied { mounton } for pid=3392 comm="syz-executor" path="/syzkaller.YpuSDj/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 794.744915][ T24] audit: type=1400 audit(794.110:128): avc: denied { mounton } for pid=3392 comm="syz-executor" path="/syzkaller.YpuSDj/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 795.448915][ T31] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.449594][ T31] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.450113][ T31] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.450631][ T31] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.604659][ T24] audit: type=1400 audit(794.970:129): avc: denied { unmount } for pid=3392 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 795.738105][ T24] audit: type=1400 audit(795.110:130): avc: denied { mounton } for pid=3392 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1544 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 795.886063][ T24] audit: type=1400 audit(795.260:131): avc: denied { mount } for pid=3392 comm="syz-executor" name="/" dev="gadgetfs" ino=3740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 796.192172][ T24] audit: type=1400 audit(795.560:132): avc: denied { mount } for pid=3392 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 796.312789][ T24] audit: type=1400 audit(795.670:133): avc: denied { mounton } for pid=3392 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 797.813698][ T3392] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 798.976141][ T24] kauditd_printk_skb: 2 callbacks suppressed [ 798.976463][ T24] audit: type=1400 audit(798.310:136): avc: denied { open } for pid=3392 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 799.053288][ T24] audit: type=1400 audit(798.350:137): avc: denied { ioctl } for pid=3392 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=636 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 807.473746][ T24] audit: type=1400 audit(806.830:138): avc: denied { read } for pid=3542 comm="syz.0.1" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 807.556836][ T24] audit: type=1400 audit(806.930:139): avc: denied { open } for pid=3542 comm="syz.0.1" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 807.883709][ T24] audit: type=1400 audit(807.250:140): avc: denied { ioctl } for pid=3542 comm="syz.0.1" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 809.618120][ T24] audit: type=1400 audit(808.990:141): avc: denied { write } for pid=3544 comm="syz.1.2" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 811.724005][ T24] audit: type=1400 audit(811.080:142): avc: denied { execute } for pid=3544 comm="syz.1.2" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=3885 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 828.157531][ T24] audit: type=1400 audit(827.530:143): avc: denied { append } for pid=3555 comm="syz.0.4" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 828.298092][ T24] audit: type=1400 audit(827.670:144): avc: denied { map } for pid=3555 comm="syz.0.4" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 828.423533][ T24] audit: type=1400 audit(827.780:145): avc: denied { execute } for pid=3555 comm="syz.0.4" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 841.242837][ T24] audit: type=1400 audit(840.590:146): avc: denied { create } for pid=3562 comm="syz.0.6" anonclass=[kvm-gmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 841.433105][ T24] audit: type=1400 audit(840.790:147): avc: denied { map } for pid=3562 comm="syz.0.6" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=4226 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 841.526848][ T24] audit: type=1400 audit(840.900:148): avc: denied { read } for pid=3562 comm="syz.0.6" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=4226 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 842.437025][ T24] audit: type=1400 audit(841.780:149): avc: denied { write } for pid=3562 comm="syz.0.6" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=4226 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 906.024904][ T24] audit: type=1400 audit(905.370:150): avc: denied { mmap_zero } for pid=3594 comm="syz.1.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 920.668915][ T3606] kvm [3604]: Unsupported guest access at: eeef0000 [ 920.668915][ T3606] { Op0( 2), Op1( 3), CRn(15), CRm( 5), Op2( 5), func_write }, [ 967.320909][ T3633] kvm [3633]: Failed to find VMA for hva 0x20d99000 [ 1043.760139][ T24] audit: type=1400 audit(1043.130:151): avc: denied { write } for pid=3680 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1051.423424][ T24] audit: type=1400 audit(1050.790:152): avc: denied { write } for pid=3690 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1057.354510][ T24] audit: type=1400 audit(1056.710:153): avc: denied { ioctl } for pid=3693 comm="syz.0.46" path="net:[4026532633]" dev="nsfs" ino=4026532633 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1246.926992][ T24] audit: type=1400 audit(1246.270:154): avc: denied { setattr } for pid=3801 comm="syz.0.79" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1465.959630][ T3940] kvm [3940]: Failed to find VMA for hva 0x203b0000 [ 1536.623090][ T24] audit: type=1400 audit(1535.920:155): avc: denied { write } for pid=3976 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1545.279398][ T24] audit: type=1400 audit(1544.600:156): avc: denied { write } for pid=3987 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1701.870424][ T4095] kvm [4095]: Failed to find VMA for hva 0x20c79000 [ 1833.085894][ T24] audit: type=1400 audit(1832.400:157): avc: denied { write } for pid=4182 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1840.802094][ T24] audit: type=1400 audit(1840.170:158): avc: denied { write } for pid=4190 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1915.192797][ T24] audit: type=1400 audit(1914.500:159): avc: denied { map } for pid=4238 comm="syz.0.204" path="/" dev="tmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2159.099588][ T3433] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2160.766567][ T3433] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2162.787658][ T3433] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2164.367103][ T3433] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2181.625940][ T3433] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2181.963162][ T3433] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2182.128788][ T3433] bond0 (unregistering): Released all slaves [ 2184.012588][ T3433] hsr_slave_0: left promiscuous mode [ 2184.144197][ T3433] hsr_slave_1: left promiscuous mode [ 2184.579036][ T3433] veth1_macvtap: left promiscuous mode [ 2184.580323][ T3433] veth0_macvtap: left promiscuous mode [ 2184.607952][ T3433] veth1_vlan: left promiscuous mode [ 2184.609880][ T3433] veth0_vlan: left promiscuous mode [ 2226.445817][ T24] audit: type=1400 audit(2225.810:160): avc: denied { write } for pid=4404 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2232.365447][ T24] audit: type=1400 audit(2231.730:161): avc: denied { write } for pid=4412 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2236.759356][ T3225] 8021q: adding VLAN 0 to HW filter on device eth1 [ 2250.976478][ T4367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2251.347543][ T4367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2252.772788][ T24] audit: type=1400 audit(2252.080:162): avc: denied { write } for pid=4434 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2258.855485][ T24] audit: type=1400 audit(2258.230:163): avc: denied { write } for pid=4443 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2263.704739][ T3225] 8021q: adding VLAN 0 to HW filter on device eth3 [ 2281.498971][ T24] audit: type=1400 audit(2280.870:164): avc: denied { write } for pid=4464 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2282.783727][ T4367] hsr_slave_0: entered promiscuous mode [ 2282.946633][ T4367] hsr_slave_1: entered promiscuous mode [ 2283.058393][ T4367] debugfs: 'hsr0' already exists in 'hsr' [ 2283.058820][ T4367] Cannot create hsr debugfs directory [ 2289.636931][ T24] audit: type=1400 audit(2289.000:165): avc: denied { write } for pid=4473 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2294.039183][ T3225] 8021q: adding VLAN 0 to HW filter on device eth2 [ 2300.715227][ T4367] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2301.006808][ T4367] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2301.089850][ T4367] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2301.596091][ T4367] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2301.695328][ T4367] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2302.047517][ T4367] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2302.110608][ T4367] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2302.447333][ T4367] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2311.474043][ T24] audit: type=1400 audit(2310.840:166): avc: denied { write } for pid=4490 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2318.737232][ T24] audit: type=1400 audit(2318.070:167): avc: denied { write } for pid=4498 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2323.828944][ T3225] 8021q: adding VLAN 0 to HW filter on device eth4 [ 2326.920169][ T4367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2347.869988][ T24] audit: type=1400 audit(2347.220:168): avc: denied { write } for pid=4515 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2357.453781][ T24] audit: type=1400 audit(2356.770:169): avc: denied { write } for pid=4526 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2377.262767][ T24] audit: type=1400 audit(2376.630:170): avc: denied { write } for pid=4541 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2382.877573][ T24] audit: type=1400 audit(2382.250:171): avc: denied { write } for pid=4547 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2400.303393][ T24] audit: type=1400 audit(2399.660:172): avc: denied { write } for pid=4557 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2409.533571][ T24] audit: type=1400 audit(2408.790:173): avc: denied { write } for pid=4566 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2420.372396][ T24] audit: type=1400 audit(2419.650:174): avc: denied { write } for pid=4573 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2423.090430][ T4367] veth0_vlan: entered promiscuous mode [ 2423.904849][ T4367] veth1_vlan: entered promiscuous mode [ 2427.197594][ T4367] veth0_macvtap: entered promiscuous mode [ 2427.846908][ T4367] veth1_macvtap: entered promiscuous mode [ 2429.233675][ T24] audit: type=1400 audit(2428.600:175): avc: denied { write } for pid=4582 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2433.994105][ T3433] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2434.004942][ T4563] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2434.005694][ T4563] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2434.006293][ T4563] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2443.004361][ T24] audit: type=1400 audit(2442.340:176): avc: denied { write } for pid=4586 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2453.547248][ T24] audit: type=1400 audit(2452.840:177): avc: denied { write } for pid=4596 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2480.388862][ T4560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2480.748216][ T4560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2489.940854][ T3436] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2491.266149][ T3436] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2492.489834][ T3436] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2493.780110][ T3436] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2513.843972][ T3436] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2514.209634][ T3436] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2514.426800][ T3436] bond0 (unregistering): Released all slaves [ 2516.472891][ T3436] hsr_slave_0: left promiscuous mode [ 2516.863769][ T3436] hsr_slave_1: left promiscuous mode [ 2517.544259][ T3436] veth1_macvtap: left promiscuous mode [ 2517.545040][ T3436] veth0_macvtap: left promiscuous mode [ 2517.597556][ T3436] veth1_vlan: left promiscuous mode [ 2517.598924][ T3436] veth0_vlan: left promiscuous mode [ 2550.046427][ T4560] hsr_slave_0: entered promiscuous mode [ 2550.126002][ T4560] hsr_slave_1: entered promiscuous mode [ 2555.405738][ T24] audit: type=1400 audit(2554.750:178): avc: denied { write } for pid=4648 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2561.589804][ T24] audit: type=1400 audit(2560.910:179): avc: denied { write } for pid=4654 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2567.416212][ T3225] 8021q: adding VLAN 0 to HW filter on device eth5 [ 2567.435025][ T4560] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2567.843680][ T4560] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2567.939859][ T4560] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2568.336730][ T4560] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2568.498047][ T4560] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2568.944986][ T4560] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2569.048151][ T4560] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2569.414402][ T4560] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2589.086445][ T24] audit: type=1400 audit(2588.430:180): avc: denied { write } for pid=4674 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2597.973651][ T24] audit: type=1400 audit(2597.340:181): avc: denied { write } for pid=4681 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2599.684020][ T4560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2603.819517][ T3225] 8021q: adding VLAN 0 to HW filter on device eth6 [ 2618.983047][ T24] audit: type=1400 audit(2618.280:182): avc: denied { write } for pid=4694 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2628.703338][ T24] audit: type=1400 audit(2628.070:183): avc: denied { write } for pid=4702 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2635.877938][ T3225] 8021q: adding VLAN 0 to HW filter on device eth7 [ 2652.090657][ T24] audit: type=1400 audit(2651.460:184): avc: denied { write } for pid=4714 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2660.705505][ T24] audit: type=1400 audit(2660.060:185): avc: denied { write } for pid=4724 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2680.579749][ T24] audit: type=1400 audit(2679.950:186): avc: denied { write } for pid=4739 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2689.553392][ T24] audit: type=1400 audit(2688.830:187): avc: denied { write } for pid=4748 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2696.639418][ T3225] 8021q: adding VLAN 0 to HW filter on device eth8 [ 2708.176621][ T4560] veth0_vlan: entered promiscuous mode [ 2709.494012][ T4560] veth1_vlan: entered promiscuous mode [ 2713.445560][ T4560] veth0_macvtap: entered promiscuous mode [ 2714.159395][ T4560] veth1_macvtap: entered promiscuous mode [ 2718.177794][ T32] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2718.197084][ T4032] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2718.437919][ T4638] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2718.480746][ T32] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2737.353930][ T24] audit: type=1400 audit(2736.650:188): avc: denied { write } for pid=4782 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2746.448005][ T24] audit: type=1400 audit(2745.810:189): avc: denied { write } for pid=4787 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2770.262975][ T24] audit: type=1400 audit(2769.590:190): avc: denied { write } for pid=4801 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2781.084920][ T24] audit: type=1400 audit(2780.450:191): avc: denied { write } for pid=4810 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2800.682820][ T24] audit: type=1400 audit(2800.050:192): avc: denied { write } for pid=4819 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2811.288898][ T24] audit: type=1400 audit(2810.610:193): avc: denied { write } for pid=4829 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2832.515932][ T24] audit: type=1400 audit(2831.810:194): avc: denied { write } for pid=4839 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2842.437799][ T24] audit: type=1400 audit(2841.760:195): avc: denied { write } for pid=4845 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2920.860133][ T24] audit: type=1400 audit(2920.210:196): avc: denied { execute } for pid=4885 comm="syz.2.301" path=2F33302FFF67521CD66F8F1F447D3570707CD24B7EEBB207 dev="tmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2963.814408][ T4910] kvm [4910]: Failed to find VMA for hva 0x20c79000 [ 2993.915544][ T24] audit: type=1400 audit(2993.250:197): avc: denied { write } for pid=4923 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3004.502831][ T24] audit: type=1400 audit(3003.870:198): avc: denied { write } for pid=4931 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3438.898736][ T4638] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3440.018396][ T4638] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3440.913885][ T4638] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3441.928589][ T4638] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3455.336679][ T4638] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3455.490393][ T4638] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3455.608621][ T4638] bond0 (unregistering): Released all slaves [ 3456.708732][ T4638] hsr_slave_0: left promiscuous mode [ 3456.924642][ T4638] hsr_slave_1: left promiscuous mode [ 3457.643041][ T4638] veth1_macvtap: left promiscuous mode [ 3457.643879][ T4638] veth0_macvtap: left promiscuous mode [ 3457.645531][ T4638] veth1_vlan: left promiscuous mode [ 3457.646929][ T4638] veth0_vlan: left promiscuous mode [ 3479.252787][ T5103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3479.616517][ T5103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3483.376754][ T4638] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3485.238799][ T4638] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3486.637387][ T4638] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3489.498599][ T4638] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3494.927253][ T24] audit: type=1400 audit(3494.300:199): avc: denied { write } for pid=5155 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3502.853728][ T24] audit: type=1400 audit(3502.190:200): avc: denied { write } for pid=5167 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3507.366435][ T4638] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3507.465324][ T4638] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3507.526507][ T4638] bond0 (unregistering): Released all slaves [ 3508.028386][ T3225] 8021q: adding VLAN 0 to HW filter on device eth9 [ 3509.132863][ T4638] hsr_slave_0: left promiscuous mode [ 3509.403598][ T4638] hsr_slave_1: left promiscuous mode [ 3510.038948][ T4638] veth1_macvtap: left promiscuous mode [ 3510.040148][ T4638] veth0_macvtap: left promiscuous mode [ 3510.056410][ T4638] veth1_vlan: left promiscuous mode [ 3510.057726][ T4638] veth0_vlan: left promiscuous mode [ 3526.676214][ T5111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3527.289879][ T5103] hsr_slave_0: entered promiscuous mode [ 3527.327048][ T5103] hsr_slave_1: entered promiscuous mode [ 3527.410306][ T5111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3538.795549][ T24] audit: type=1400 audit(3538.170:201): avc: denied { write } for pid=5180 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3545.782588][ T24] audit: type=1400 audit(3545.110:202): avc: denied { write } for pid=5187 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3546.434678][ T5103] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 3546.723360][ T5103] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 3546.785248][ T5103] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 3547.148796][ T5103] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3547.284358][ T5103] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 3547.580775][ T5103] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 3547.690891][ T5103] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 3548.126684][ T5103] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 3551.929725][ T3225] 8021q: adding VLAN 0 to HW filter on device eth10 [ 3557.673165][ T24] audit: type=1400 audit(3557.040:203): avc: denied { write } for pid=5199 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3558.579158][ T5111] hsr_slave_0: entered promiscuous mode [ 3558.726807][ T5111] hsr_slave_1: entered promiscuous mode [ 3558.786018][ T5111] debugfs: 'hsr0' already exists in 'hsr' [ 3558.786444][ T5111] Cannot create hsr debugfs directory [ 3564.123699][ T24] audit: type=1400 audit(3563.440:204): avc: denied { write } for pid=5208 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3574.233883][ T5111] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 3574.480992][ T5111] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 3574.570733][ T5111] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 3574.850822][ T5111] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3575.063504][ T5111] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 3575.434206][ T5111] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 3575.560305][ T5111] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 3575.900979][ T5111] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 3577.213233][ T5103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3582.813328][ T24] audit: type=1400 audit(3582.180:205): avc: denied { write } for pid=5219 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3589.890148][ T24] audit: type=1400 audit(3589.260:206): avc: denied { write } for pid=5230 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3595.749995][ T3225] 8021q: adding VLAN 0 to HW filter on device eth11 [ 3607.687075][ T5111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3616.595257][ T24] audit: type=1400 audit(3615.920:207): avc: denied { write } for pid=5241 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3624.053998][ T24] audit: type=1400 audit(3623.370:208): avc: denied { write } for pid=5251 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3629.224366][ T3225] 8021q: adding VLAN 0 to HW filter on device eth12 [ 3645.908293][ T24] audit: type=1400 audit(3645.250:209): avc: denied { write } for pid=5266 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3653.514218][ T24] audit: type=1400 audit(3652.880:210): avc: denied { write } for pid=5276 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3660.016136][ T3225] 8021q: adding VLAN 0 to HW filter on device eth13 [ 3679.722950][ T24] audit: type=1400 audit(3679.080:211): avc: denied { write } for pid=5292 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3688.038526][ T24] audit: type=1400 audit(3687.410:212): avc: denied { write } for pid=5302 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3693.287597][ T3225] 8021q: adding VLAN 0 to HW filter on device eth14 [ 3703.454455][ T5103] veth0_vlan: entered promiscuous mode [ 3704.236892][ T5103] veth1_vlan: entered promiscuous mode [ 3708.859185][ T5103] veth0_macvtap: entered promiscuous mode [ 3709.627306][ T5103] veth1_macvtap: entered promiscuous mode [ 3710.534018][ T24] audit: type=1400 audit(3709.890:213): avc: denied { write } for pid=5317 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3713.479061][ T31] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3713.744823][ T4369] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3713.756463][ T31] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3713.888232][ T4990] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3721.844687][ T24] audit: type=1400 audit(3721.170:214): avc: denied { write } for pid=5325 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3729.989950][ T3225] 8021q: adding VLAN 0 to HW filter on device eth15 [ 3737.840634][ T5111] veth0_vlan: entered promiscuous mode [ 3739.404332][ T5111] veth1_vlan: entered promiscuous mode [ 3743.816884][ T5111] veth0_macvtap: entered promiscuous mode [ 3744.900509][ T5111] veth1_macvtap: entered promiscuous mode [ 3749.765195][ T31] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3749.777737][ T5122] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3749.780384][ T5122] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3749.917907][ T31] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3757.623597][ T24] audit: type=1400 audit(3756.980:215): avc: denied { write } for pid=5340 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3768.600284][ T24] audit: type=1400 audit(3767.940:216): avc: denied { write } for pid=5348 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3777.049849][ T3225] 8021q: adding VLAN 0 to HW filter on device eth16 [ 3854.536413][ T24] audit: type=1400 audit(3853.850:217): avc: denied { write } for pid=5399 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3868.020955][ T24] audit: type=1400 audit(3867.270:218): avc: denied { write } for pid=5404 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3889.882760][ T24] audit: type=1400 audit(3889.250:219): avc: denied { write } for pid=5415 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3903.184358][ T24] audit: type=1400 audit(3902.500:220): avc: denied { write } for pid=5425 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3932.027522][ T24] audit: type=1400 audit(3931.360:221): avc: denied { write } for pid=5438 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3943.193604][ T24] audit: type=1400 audit(3942.520:222): avc: denied { write } for pid=5448 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3966.394277][ T24] audit: type=1400 audit(3965.760:223): avc: denied { write } for pid=5455 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3979.868559][ T24] audit: type=1400 audit(3979.130:224): avc: denied { write } for pid=5468 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4001.779693][ T24] audit: type=1400 audit(4001.080:225): avc: denied { write } for pid=5476 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4013.018886][ T24] audit: type=1400 audit(4012.380:226): avc: denied { write } for pid=5480 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4036.733503][ T24] audit: type=1400 audit(4036.080:227): avc: denied { write } for pid=5490 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4050.215729][ T24] audit: type=1400 audit(4049.540:228): avc: denied { write } for pid=5500 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4116.623231][ T24] audit: type=1400 audit(4115.940:229): avc: denied { write } for pid=5531 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4127.242439][ T24] audit: type=1400 audit(4126.570:230): avc: denied { write } for pid=5546 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4155.273034][ T24] audit: type=1400 audit(4154.630:231): avc: denied { write } for pid=5556 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4168.686680][ T24] audit: type=1400 audit(4168.060:232): avc: denied { write } for pid=5567 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4192.192326][ T24] audit: type=1400 audit(4191.550:233): avc: denied { write } for pid=5574 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4204.912607][ T24] audit: type=1400 audit(4204.260:234): avc: denied { write } for pid=5584 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4231.664919][ T24] audit: type=1400 audit(4231.020:235): avc: denied { write } for pid=5597 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4243.439802][ T24] audit: type=1400 audit(4242.810:236): avc: denied { write } for pid=5606 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4396.100781][ T5626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4396.635790][ T5626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4405.688902][ T5639] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4409.437658][ T5639] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4412.860346][ T5639] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4415.124192][ T5639] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4433.429559][ T5639] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 4433.607548][ T5639] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 4433.824887][ T5639] bond0 (unregistering): Released all slaves [ 4438.063650][ T5639] hsr_slave_0: left promiscuous mode [ 4438.184513][ T5639] hsr_slave_1: left promiscuous mode [ 4438.873278][ T5639] veth1_macvtap: left promiscuous mode [ 4438.874052][ T5639] veth0_macvtap: left promiscuous mode [ 4438.875660][ T5639] veth1_vlan: left promiscuous mode [ 4438.876880][ T5639] veth0_vlan: left promiscuous mode [ 4461.890365][ T5636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4462.766127][ T5636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4466.723362][ T5626] hsr_slave_0: entered promiscuous mode [ 4466.826852][ T5626] hsr_slave_1: entered promiscuous mode [ 4466.965207][ T5626] debugfs: 'hsr0' already exists in 'hsr' [ 4466.965633][ T5626] Cannot create hsr debugfs directory [ 4469.050413][ T5639] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4470.615349][ T5639] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4472.156429][ T5639] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4474.760871][ T5639] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4480.375022][ T24] audit: type=1400 audit(4479.740:237): avc: denied { write } for pid=5694 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4489.094467][ T24] audit: type=1400 audit(4488.450:238): avc: denied { write } for pid=5701 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4499.348346][ T5639] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 4500.019291][ T5639] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 4500.246481][ T5639] bond0 (unregistering): Released all slaves [ 4501.329407][ T3225] 8021q: adding VLAN 0 to HW filter on device eth17 [ 4503.134714][ T5639] hsr_slave_0: left promiscuous mode [ 4503.244025][ T5639] hsr_slave_1: left promiscuous mode [ 4503.877697][ T5639] veth1_macvtap: left promiscuous mode [ 4503.878494][ T5639] veth0_macvtap: left promiscuous mode [ 4503.882152][ T5639] veth1_vlan: left promiscuous mode [ 4503.903996][ T5639] veth0_vlan: left promiscuous mode [ 4528.193838][ T5626] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 4528.450116][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 4529.058584][ T5636] hsr_slave_0: entered promiscuous mode [ 4529.117198][ T5636] hsr_slave_1: entered promiscuous mode [ 4529.214823][ T5626] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 4529.385042][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 4529.608883][ T5626] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 4529.826726][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 4529.969930][ T5626] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 4530.140914][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 4543.197280][ T24] audit: type=1400 audit(4542.500:239): avc: denied { write } for pid=5719 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4548.280300][ T5636] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 4548.649215][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 4548.775304][ T5636] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 4549.078791][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 4549.170571][ T5636] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 4549.548074][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 4549.735025][ T5636] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 4550.088375][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 4552.402977][ T24] audit: type=1400 audit(4551.760:240): avc: denied { write } for pid=5726 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4560.239674][ T3225] 8021q: adding VLAN 0 to HW filter on device eth18 [ 4560.830122][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4584.176018][ T24] audit: type=1400 audit(4583.550:241): avc: denied { write } for pid=5747 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4585.978010][ T5636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4595.805664][ T24] audit: type=1400 audit(4595.170:242): avc: denied { write } for pid=5754 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4602.057396][ T3225] 8021q: adding VLAN 0 to HW filter on device eth19 [ 4613.455655][ T24] audit: type=1400 audit(4612.810:243): avc: denied { write } for pid=5764 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4625.564075][ T24] audit: type=1400 audit(4624.910:244): avc: denied { write } for pid=5773 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4653.958735][ T24] audit: type=1400 audit(4653.320:245): avc: denied { write } for pid=5789 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4663.039515][ T24] audit: type=1400 audit(4662.290:246): avc: denied { write } for pid=5799 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4668.818406][ T3225] 8021q: adding VLAN 0 to HW filter on device eth20 [ 4693.020676][ T24] audit: type=1400 audit(4692.390:247): avc: denied { write } for pid=5816 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4703.903829][ T24] audit: type=1400 audit(4703.130:248): avc: denied { write } for pid=5827 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4710.235833][ T5626] veth0_vlan: entered promiscuous mode [ 4711.398929][ T3225] 8021q: adding VLAN 0 to HW filter on device eth21 [ 4711.689077][ T5626] veth1_vlan: entered promiscuous mode [ 4715.319623][ T5626] veth0_macvtap: entered promiscuous mode [ 4716.149363][ T5626] veth1_macvtap: entered promiscuous mode [ 4720.128503][ T5639] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 4720.193642][ T5394] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 4720.319234][ T4563] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 4720.320026][ T4563] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 4737.897071][ T5636] veth0_vlan: entered promiscuous mode [ 4739.527134][ T5636] veth1_vlan: entered promiscuous mode [ 4744.964054][ T5636] veth0_macvtap: entered promiscuous mode [ 4745.816855][ T5636] veth1_macvtap: entered promiscuous mode [ 4747.377562][ T24] audit: type=1400 audit(4746.750:249): avc: denied { write } for pid=5843 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4751.353599][ T5116] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 4751.364965][ T5116] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 4751.369356][ T4369] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 4751.370037][ T4369] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 4763.543892][ T24] audit: type=1400 audit(4762.900:250): avc: denied { write } for pid=5851 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4774.103727][ T3225] 8021q: adding VLAN 0 to HW filter on device eth22 [ 4807.086697][ T24] audit: type=1400 audit(4806.460:251): avc: denied { write } for pid=5865 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4823.323494][ T24] audit: type=1400 audit(4822.640:252): avc: denied { write } for pid=5878 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4833.378420][ T3225] 8021q: adding VLAN 0 to HW filter on device eth23 [ 4869.663299][ T24] audit: type=1400 audit(4868.980:253): avc: denied { write } for pid=5891 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4885.440646][ T24] audit: type=1400 audit(4884.810:254): avc: denied { write } for pid=5901 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4896.296396][ T3225] 8021q: adding VLAN 0 to HW filter on device eth24 [ 4916.192560][ T24] audit: type=1400 audit(4915.500:255): avc: denied { write } for pid=5908 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4931.575604][ T24] audit: type=1400 audit(4930.810:256): avc: denied { write } for pid=5917 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4957.412408][ T24] audit: type=1400 audit(4956.620:257): avc: denied { write } for pid=5929 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4971.674116][ T24] audit: type=1400 audit(4971.030:258): avc: denied { write } for pid=5940 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5066.379236][ T24] audit: type=1400 audit(5065.740:259): avc: denied { write } for pid=5979 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5078.332609][ T24] audit: type=1400 audit(5077.680:260): avc: denied { write } for pid=5990 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5105.434636][ T24] audit: type=1400 audit(5104.760:261): avc: denied { write } for pid=6000 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5118.264318][ T24] audit: type=1400 audit(5117.470:262): avc: denied { write } for pid=6003 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5143.345443][ T5122] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5145.727572][ T5122] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5147.214354][ T24] audit: type=1400 audit(5146.570:263): avc: denied { write } for pid=6014 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5147.966258][ T5122] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5149.919546][ T5122] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5160.464439][ T24] audit: type=1400 audit(5159.730:264): avc: denied { write } for pid=6023 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5179.408918][ T5122] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 5179.989555][ T5122] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 5180.655312][ T5122] bond0 (unregistering): Released all slaves [ 5184.127649][ T5122] hsr_slave_0: left promiscuous mode [ 5184.310510][ T5122] hsr_slave_1: left promiscuous mode [ 5185.078634][ T5122] veth1_macvtap: left promiscuous mode [ 5185.079488][ T5122] veth0_macvtap: left promiscuous mode [ 5185.182960][ T5122] veth1_vlan: left promiscuous mode [ 5185.184617][ T5122] veth0_vlan: left promiscuous mode [ 5193.053994][ T24] audit: type=1400 audit(5192.360:265): avc: denied { write } for pid=6034 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5200.243398][ T24] audit: type=1400 audit(5199.590:266): avc: denied { write } for pid=6037 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5225.798181][ T5639] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5228.746907][ T5639] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5231.028570][ T5639] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5233.130738][ T5639] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5247.510858][ T5984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 5249.137681][ T24] audit: type=1400 audit(5248.490:267): avc: denied { write } for pid=6050 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5256.682349][ T24] audit: type=1400 audit(5256.050:268): avc: denied { write } for pid=6058 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5260.164058][ T5639] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 5260.360162][ T5639] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 5260.530807][ T5639] bond0 (unregistering): Released all slaves [ 5261.258991][ T5984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 5263.375106][ T5639] hsr_slave_0: left promiscuous mode [ 5263.519518][ T5639] hsr_slave_1: left promiscuous mode [ 5263.978571][ T5639] veth1_macvtap: left promiscuous mode [ 5263.979369][ T5639] veth0_macvtap: left promiscuous mode [ 5263.980895][ T5639] veth1_vlan: left promiscuous mode [ 5264.007706][ T5639] veth0_vlan: left promiscuous mode [ 5285.656576][ T3225] 8021q: adding VLAN 0 to HW filter on device eth25 [ 5298.685101][ T24] audit: type=1400 audit(5297.990:269): avc: denied { write } for pid=6063 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5306.756760][ T24] audit: type=1400 audit(5306.130:270): avc: denied { write } for pid=6073 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5318.230086][ T6006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 5318.468064][ T6006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 5321.437976][ T5984] hsr_slave_0: entered promiscuous mode [ 5321.566515][ T5984] hsr_slave_1: entered promiscuous mode [ 5335.059982][ T24] audit: type=1400 audit(5334.360:271): avc: denied { write } for pid=6090 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5345.333833][ T24] audit: type=1400 audit(5344.640:272): avc: denied { write } for pid=6097 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5345.645352][ T5984] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 5346.147922][ T5984] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 5346.435586][ T5984] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 5347.114371][ T5984] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 5347.405655][ T5984] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 5347.800615][ T5984] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 5348.024470][ T5984] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 5348.486217][ T5984] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 5354.096590][ T3225] 8021q: adding VLAN 0 to HW filter on device eth26 [ 5360.989174][ T6006] hsr_slave_0: entered promiscuous mode [ 5361.145469][ T6006] hsr_slave_1: entered promiscuous mode [ 5361.253615][ T6006] debugfs: 'hsr0' already exists in 'hsr' [ 5361.254003][ T6006] Cannot create hsr debugfs directory [ 5378.192757][ T24] audit: type=1400 audit(5377.560:273): avc: denied { write } for pid=6116 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5386.770688][ T24] audit: type=1400 audit(5386.120:274): avc: denied { write } for pid=6121 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5388.913458][ T6006] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 5389.328377][ T6006] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 5389.796483][ T6006] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 5390.238468][ T6006] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 5390.932712][ T6006] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 5391.306438][ T6006] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 5391.420084][ T6006] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 5391.817517][ T6006] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 5393.819015][ T5984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 5394.125202][ T3225] 8021q: adding VLAN 0 to HW filter on device eth27 [ 5425.153817][ T24] audit: type=1400 audit(5424.400:275): avc: denied { write } for pid=6142 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5436.507039][ T24] audit: type=1400 audit(5435.870:276): avc: denied { write } for pid=6149 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5440.921014][ T6006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 5444.270633][ T3225] 8021q: adding VLAN 0 to HW filter on device eth28 [ 5471.256125][ T24] audit: type=1400 audit(5470.600:277): avc: denied { write } for pid=6161 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5485.992544][ T24] audit: type=1400 audit(5485.360:278): avc: denied { write } for pid=6170 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5495.208766][ T3225] 8021q: adding VLAN 0 to HW filter on device eth29 [ 5512.249237][ T24] audit: type=1400 audit(5511.600:279): avc: denied { write } for pid=6181 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5524.604838][ T24] audit: type=1400 audit(5523.840:280): avc: denied { write } for pid=6192 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5561.702910][ T24] audit: type=1400 audit(5561.070:281): avc: denied { write } for pid=6208 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5572.743180][ T24] audit: type=1400 audit(5572.100:282): avc: denied { write } for pid=6219 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5580.924565][ T3225] 8021q: adding VLAN 0 to HW filter on device eth30 [ 5583.074988][ T5984] veth0_vlan: entered promiscuous mode [ 5584.770709][ T5984] veth1_vlan: entered promiscuous mode [ 5590.126122][ T5984] veth0_macvtap: entered promiscuous mode [ 5591.386501][ T5984] veth1_macvtap: entered promiscuous mode [ 5599.175771][ T6011] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 5599.200183][ T6132] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 5599.216515][ T5739] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 5599.217286][ T5739] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 5632.245831][ T24] audit: type=1400 audit(5631.610:283): avc: denied { write } for pid=6237 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5635.528982][ T6006] veth0_vlan: entered promiscuous mode [ 5637.575333][ T6006] veth1_vlan: entered promiscuous mode [ 5643.496173][ T6006] veth0_macvtap: entered promiscuous mode [ 5645.150339][ T6006] veth1_macvtap: entered promiscuous mode [ 5650.385086][ T24] audit: type=1400 audit(5649.610:284): avc: denied { write } for pid=6246 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5652.025190][ T6011] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 5652.057613][ T5739] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 5652.058376][ T5739] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 5652.059017][ T5739] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 5662.779912][ T3225] 8021q: adding VLAN 0 to HW filter on device eth31 [ 5711.464214][ T24] audit: type=1400 audit(5710.820:285): avc: denied { write } for pid=6267 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5729.355912][ T24] audit: type=1400 audit(5728.720:286): avc: denied { write } for pid=6280 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5741.349898][ T3225] 8021q: adding VLAN 0 to HW filter on device eth32 [ 5771.365160][ T24] audit: type=1400 audit(5770.580:287): avc: denied { write } for pid=6293 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5788.792389][ T24] audit: type=1400 audit(5788.150:288): avc: denied { write } for pid=6304 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5830.966611][ T24] audit: type=1400 audit(5830.300:289): avc: denied { write } for pid=6318 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5848.643650][ T24] audit: type=1400 audit(5847.830:290): avc: denied { write } for pid=6325 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5914.282900][ T24] audit: type=1400 audit(5913.630:291): avc: denied { write } for pid=6348 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5931.932941][ T24] audit: type=1400 audit(5931.290:292): avc: denied { write } for pid=6359 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5976.947081][ T24] audit: type=1400 audit(5976.210:293): avc: denied { write } for pid=6371 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5994.572266][ T24] audit: type=1400 audit(5993.930:294): avc: denied { write } for pid=6387 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6104.556390][ T24] audit: type=1400 audit(6103.910:295): avc: denied { write } for pid=6431 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6122.629087][ T24] audit: type=1400 audit(6121.990:296): avc: denied { write } for pid=6442 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6183.355052][ T24] audit: type=1400 audit(6182.690:297): avc: denied { write } for pid=6467 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6201.028977][ T24] audit: type=1400 audit(6200.390:298): avc: denied { write } for pid=6479 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6249.316015][ T24] audit: type=1400 audit(6248.660:299): avc: denied { write } for pid=6493 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6266.978680][ T24] audit: type=1400 audit(6266.150:300): avc: denied { write } for pid=6503 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6306.239207][ T24] audit: type=1400 audit(6305.600:301): avc: denied { write } for pid=6518 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6319.632748][ T24] audit: type=1400 audit(6318.950:302): avc: denied { write } for pid=6528 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6345.593995][ T24] audit: type=1400 audit(6344.950:303): avc: denied { write } for pid=6531 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6357.185543][ T24] audit: type=1400 audit(6356.520:304): avc: denied { write } for pid=6535 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6402.404038][ T24] audit: type=1400 audit(6401.750:305): avc: denied { write } for pid=6551 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6417.015151][ T24] audit: type=1400 audit(6416.350:306): avc: denied { write } for pid=6561 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6492.002512][ T24] audit: type=1400 audit(6491.330:307): avc: denied { write } for pid=6586 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6508.287627][ T24] audit: type=1400 audit(6507.640:308): avc: denied { write } for pid=6598 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6519.106610][ T6536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 6519.790397][ T6536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 6528.744738][ T6540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 6529.395904][ T6540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 6548.745878][ T24] audit: type=1400 audit(6548.090:309): avc: denied { write } for pid=6609 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6564.444454][ T24] audit: type=1400 audit(6563.680:310): avc: denied { write } for pid=6618 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6590.095942][ T6536] hsr_slave_0: entered promiscuous mode [ 6590.227447][ T6536] hsr_slave_1: entered promiscuous mode [ 6590.318529][ T6536] debugfs: 'hsr0' already exists in 'hsr' [ 6590.318954][ T6536] Cannot create hsr debugfs directory [ 6594.283941][ T24] audit: type=1400 audit(6593.650:311): avc: denied { write } for pid=6629 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6597.149602][ T6540] hsr_slave_0: entered promiscuous mode [ 6597.468691][ T6540] hsr_slave_1: entered promiscuous mode [ 6597.634660][ T6540] debugfs: 'hsr0' already exists in 'hsr' [ 6597.635081][ T6540] Cannot create hsr debugfs directory [ 6609.666511][ T24] audit: type=1400 audit(6608.950:312): avc: denied { write } for pid=6634 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6646.065553][ T24] audit: type=1400 audit(6645.340:313): avc: denied { write } for pid=6636 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6660.994522][ T24] audit: type=1400 audit(6660.360:314): avc: denied { write } for pid=6642 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6677.015630][ T6536] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 6677.859505][ T6536] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 6678.160105][ T6536] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 6678.865182][ T6536] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 6679.104462][ T6536] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 6680.086170][ T6536] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 6680.367422][ T6536] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 6681.696210][ T6536] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 6692.280983][ T6540] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 6692.988040][ T6540] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 6693.187717][ T6540] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 6693.927294][ T6540] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 6694.217789][ T6540] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 6694.810247][ T6540] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 6694.971011][ T6540] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 6695.947869][ T6540] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 6735.846397][ T26] INFO: task syz.8.486:6520 blocked for more than 430 seconds. [ 6735.847271][ T26] Not tainted syzkaller #0 [ 6735.847779][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 6735.848073][ T26] task:syz.8.486 state:D stack:0 pid:6520 tgid:6520 ppid:5984 task_flags:0x400040 flags:0x00000011 [ 6735.850709][ T26] Call trace: [ 6735.976715][ T26] __switch_to+0x5e4/0xb74 (T) [ 6735.978906][ T26] __schedule+0x1e0c/0x38cc [ 6735.979384][ T26] schedule+0x1b4/0x274 [ 6735.979749][ T26] schedule_timeout+0x68/0x1e4 [ 6735.980034][ T26] wait_for_completion+0x1b8/0x414 [ 6735.980284][ T26] __synchronize_srcu+0x1c8/0x208 [ 6735.980677][ T26] synchronize_srcu+0x668/0x8dc [ 6736.090332][ T26] mmu_notifier_unregister+0x33c/0x444 [ 6736.090893][ T26] kvm_put_kvm+0x69c/0xbbc SYZFAIL: failed to recv rpc [ 6736.156983][ T26] kvm_vm_release+0x58/0x78 [ 6736.157438][ T26] __fput+0x4ac/0x978 [ 6736.157749][ T26] ____fput+0x20/0x30 [ 6736.158031][ T26] task_work_run+0x1b8/0x250 [ 6736.158317][ T26] exit_to_user_mode_loop+0x110/0x188 [ 6736.158649][ T26] el0_svc+0x18c/0x240 [ 6736.158975][ T26] el0t_64_sync_handler+0x68/0xdc [ 6736.159264][ T26] el0t_64_sync+0x198/0x19c [ 6736.160754][ T26] [ 6736.160754][ T26] Showing all locks held in the system: [ 6736.303000][ T26] locks held by khungtaskd/26: 1, last CPU#0: [ 6736.303411][ T26] #0: ffff800087fce618 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x4c/0x188 [ 6736.305037][ T26] locks held by getty/3254: 2, on CPU#0: [ 6736.305253][ T26] #0: c8f00000123a60a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 6736.306079][ T26] #1: 6eff80008cd2b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x314/0x11f8 [ 6736.306933][ T26] locks held by sshd-session/3383: 1, last CPU#0: [ 6736.307127][ T26] #0: 46f0000015bb40e0 (sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_sendmsg+0x30/0x64 [ 6736.307933][ T26] locks held by syz-executor/3385: 2, last CPU#0: [ 6736.308115][ T26] #0: 09f000000e264cf8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0xf4/0xb64 [ 6736.308953][ T26] #1: ffff800087fce618 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x50/0x22c [ 6736.309728][ T26] locks held by kworker/u4:1/4369: 3, last CPU#0: [ 6736.309911][ T26] #0: 51f000000d033d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b4 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 6736.310668][ T26] #1: ffff80008e157ce8 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b4 [ 6736.533203][ T26] #2: bff000001eead258 (&devlink->lock_key#6){+.+.}-{4:4}, at: devl_trylock+0x24/0x34 [ 6736.534242][ T26] locks held by kworker/u4:7/4370: 3, last CPU#0: [ 6736.534479][ T26] #0: 51f000000d033d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b4 [ 6736.535265][ T26] #1: ffff80008e447ce8 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b4 [ 6736.536038][ T26] #2: ffff800087fce618 (rcu_read_lock){....}-{1:3}, at: gc_worker+0x234/0x14c0 [ 6736.536885][ T26] locks held by kworker/u4:8/4563: 3, last CPU#0: [ 6736.537070][ T26] #0: 3ff000000d034140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b4 [ 6736.537822][ T26] #1: ffff80008ed17ce8 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b4 [ 6736.538574][ T26] #2: bdf000002818d258 (&devlink->lock_key#12){+.+.}-{4:4}, at: devl_trylock+0x24/0x34 [ 6736.539484][ T26] locks held by kworker/u4:6/5122: 2, last CPU#0: [ 6736.539672][ T26] #0: 51f000000d033d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b4 [ 6736.540391][ T26] #1: ffff80008ec97ce8 ((gc_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b4 [ 6736.854745][ T26] locks held by kworker/u4:10/5149: 3, last CPU#0: [ 6736.855084][ T26] #0: 3ff000000d034140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b4 [ 6736.855960][ T26] #1: ffff80008ea27ce8 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b4 [ 6736.856755][ T26] #2: c7f000001edf7a58 (&devlink->lock_key#11){+.+.}-{4:4}, at: devl_trylock+0x24/0x34 [ 6736.857636][ T26] locks held by kworker/u4:12/5394: 3, last CPU#0: [ 6736.857824][ T26] #0: 3ff000000d034140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b4 [ 6736.858571][ T26] #1: ffff80008f4e7ce8 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b4 [ 6736.859387][ T26] #2: 55f00000219eca58 (&devlink->lock_key#9){+.+.}-{4:4}, at: devl_trylock+0x24/0x34 [ 6736.860205][ T26] locks held by kworker/u4:4/5666: 2, on CPU#0: [ 6736.860421][ T26] #0: 3ff000000d034140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b4 [ 6737.042761][ T26] #1: ffff8000a0047ce8 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b4 [ 6737.043823][ T26] locks held by kworker/u4:11/5739: 3, last CPU#0: [ 6737.044027][ T26] #0: 3ff000000d034140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b4 [ 6737.044786][ T26] #1: ffff80008ed07ce8 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b4 [ 6737.045554][ T26] #2: b9f000001da23258 (&devlink->lock_key#5){+.+.}-{4:4}, at: devl_trylock+0x24/0x34 [ 6737.046431][ T26] locks held by kworker/u4:13/6031: 3, last CPU#0: [ 6737.046627][ T26] #0: 3ff000000d034140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b4 [ 6737.047402][ T26] #1: ffff80008e7a7ce8 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b4 [ 6737.048118][ T26] #2: 41f000001eec1258 (&devlink->lock_key#8){+.+.}-{4:4}, at: devl_trylock+0x24/0x34 [ 6737.048992][ T26] locks held by kworker/u4:14/6132: 3, last CPU#0: [ 6737.049179][ T26] #0: 3ff000000d034140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b4 [ 6737.049910][ T26] #1: ffff80008f2a7ce8 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b4 [ 6737.050645][ T26] #2: 76f00000129cda58 (&devlink->lock_key#3){+.+.}-{4:4}, at: devl_trylock+0x24/0x34 [ 6737.273456][ T26] locks held by kworker/u4:15/6135: 3, last CPU#0: [ 6737.273681][ T26] #0: 3ff000000d034140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b4 [ 6737.274455][ T26] #1: ffff80008f2c7ce8 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b4 [ 6737.275232][ T26] #2: 41f000001eec1258 (&devlink->lock_key#8){+.+.}-{4:4}, at: devl_trylock+0x24/0x34 [ 6737.276126][ T26] locks held by syz.9.485/6513: 2, last CPU#0: [ 6737.276328][ T26] #0: ffff80008801bf70 (srcu){.+.+}-{0:0}, at: __mmu_notifier_release+0x4e8/0x87c [ 6737.277119][ T26] #1: 6af00000121bb530 (&kvm->srcu){.+.+}-{0:0}, at: kvm_mmu_notifier_release+0x50/0xc4 [ 6737.277905][ T26] locks held by syz-executor/6536: 1, last CPU#0: [ 6737.278083][ T26] #0: ffff8000882c43b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x9e4/0x1b0c [ 6737.278877][ T26] locks held by kworker/u4:3/6567: 2, on CPU#0: [ 6737.279068][ T26] #0: 3ff000000d034140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b4 [ 6737.279808][ T26] #1: ffff8000a0ee7ce8 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b4 [ 6737.280593][ T26] locks held by modprobe/6678: 2, last CPU#0: [ 6737.280784][ T26] #0: 79f0000027182d78 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1b0/0xb64 [ 6737.495639][ T26] #1: ffff800087fce618 (rcu_read_lock){....}-{1:3}, at: folio_lruvec_lock_irqsave+0x50/0x294 [ 6737.496698][ T26] [ 6737.496830][ T26] ============================================= [ 6737.496830][ T26] [ 6737.497637][ T26] Kernel panic - not syncing: hung_task: blocked tasks [ 6737.504992][ T26] CPU: 0 UID: 0 PID: 26 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT [ 6737.506519][ T26] Hardware name: linux,dummy-virt (DT) [ 6737.507486][ T26] Call trace: [ 6737.508263][ T26] show_stack+0x2c/0x3c (C) [ 6737.509245][ T26] __dump_stack+0x30/0x40 [ 6737.510183][ T26] dump_stack_lvl+0x30/0x12c [ 6737.511171][ T26] dump_stack+0x1c/0x28 [ 6737.512105][ T26] vpanic+0x4cc/0x844 [ 6737.512993][ T26] vpanic+0x0/0x844 [ 6737.513860][ T26] hung_task_panic+0x0/0x2c [ 6737.514838][ T26] kthread+0x4cc/0x514 [ 6737.515756][ T26] ret_from_fork+0x10/0x20 [ 6737.517498][ T26] Kernel Offset: disabled [ 6737.518177][ T26] CPU features: 0x0,00000000,00d1802f,df188f42,0afff61f [ 6737.519376][ T26] Memory Limit: none [ 6737.521609][ T26] Rebooting in 86400 seconds..