last executing test programs: 1h5m57.482861416s ago: executing program 0 (id=147): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3}) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, r3, 0x2000003, 0x2013, r2, 0xff010000) syz_kvm_setup_cpu$arm64(r1, 0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil, &(0x7f0000000940)=[{0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="22018000000000004000000000000d00010000c400000800000000000000000009000000000000000100000000000000960000000007000000000000000000002778baec523871c8d7e0dc917af04b53edd4285ea415bf06"], 0x40}], 0x1, 0x0, 0x0, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r5 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000100)={0x0, &(0x7f0000000140)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x9}}, @msr={0x14, 0x20, {0x603000000013df61, 0x8}}], 0x40}, &(0x7f0000000180)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r7, 0x4018aee1, &(0x7f0000000200)=@attr_pmu_init) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r7, 0x4018aee1, &(0x7f0000000240)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0x8}) ioctl$KVM_RUN(r7, 0xae80, 0x0) close(r2) mmap$KVM_VCPU(&(0x7f0000000000/0x4000)=nil, 0x930, 0x4, 0x4f833, 0xffffffffffffffff, 0x0) 1h5m47.645427479s ago: executing program 0 (id=150): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000100)={0x0, &(0x7f0000000280)=[@irq_setup={0x46, 0x18, {0x4, 0x351}}], 0x18}, 0x0, 0x0) syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000980)={0x0, &(0x7f0000000380)=[@smc={0x1e, 0x40, {0xc4000014, [0x7, 0x7, 0x7, 0x0, 0x1]}}, @hvc={0x32, 0x40, {0xc4000005, [0x500000000000, 0x0, 0x9, 0x1]}}, @eret={0xe6, 0x18, 0x7}, @irq_setup={0x46, 0x18, {0x2, 0x340}}, @mrs={0xbe, 0x18, {0x603000000013c2a1}}, @irq_setup={0x46, 0x18, {0x0, 0x291}}, @its_setup={0x82, 0x28, {0x1, 0x1, 0x115}}, @code={0xa, 0x9c, {"1f2003d580b991d200e0b8f2210080d2e20180d2830080d2a40080d2020000d460fc9ed200e0b8f2a10180d2a20180d2e30180d2c40080d2020000d4a0568ed20040b8f2e10080d2a20080d2830180d2e40180d2020000d40060c00cc0709dd20080b8f2610080d2620180d2030180d2840180d2020000d400000072000028d5008008d5008008d5"}}, @hvc={0x32, 0x40, {0x800, [0x1, 0x3, 0x0, 0x800, 0x3b1]}}, @eret={0xe6, 0x18, 0x800}, @its_send_cmd={0xaa, 0x28, {0xd, 0x1, 0x0, 0x8, 0x10001, 0xff}}, @irq_setup={0x46, 0x18, {0x2, 0x100002a2}}, @irq_setup={0x46, 0x18, {0x3, 0x267}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x1, 0x4, 0x10, 0x80000000, 0x0, 0x3}}, @code={0xa, 0x54, {"0040000c006c200e0000001c60b893d200e0b0f2810180d2220180d2230180d2a40180d2020000d40010c0da007008d500a4006f0074202e0084600d008008d5"}}, @svc={0x122, 0x40, {0x8000, [0x7, 0x4e60000000000000, 0x7, 0x7, 0x7ff]}}, @memwrite={0x6e, 0x30, @generic={0x26000, 0x349, 0x1, 0x3}}, @its_setup={0x82, 0x28, {0x1, 0x0, 0x288}}, @msr={0x14, 0x20, {0x603000000013c090, 0x593}}, @code={0xa, 0x94, {"00a4004f80db96d200a0b0f2410080d2a20080d2e30180d2c40080d2020000d4c09397d20000b0f2a10080d2220180d2630080d2000020ea020000d4e0a387d2a10080d2820180d2230080d2640080d2020000d420e69dd200c0b0f2c10080d2420080d2230080d2c40180d2020000d40000c0680040400c007008d5007008d5"}}, @eret={0xe6, 0x18, 0x6}, @its_send_cmd={0xaa, 0x28, {0x0, 0x1, 0x2, 0xf, 0x8, 0x68, 0x1}}, @hvc={0x32, 0x40, {0x1000, [0xde13, 0xd941, 0x40, 0x6a3e, 0x7]}}, @hvc={0x32, 0x40, {0x84000002, [0x7, 0x65e, 0xb56, 0x6, 0x6]}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x0, 0x3, 0x2, 0xe0b, 0x9, 0x3}}, @memwrite={0x6e, 0x30, @generic={0xc000, 0xbb8, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x0, 0x1, 0x8}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x48, 0x2, 0xb}}, @smc={0x1e, 0x40, {0x8600ff01, [0x7, 0x3, 0x3, 0x8000, 0xe2]}}], 0x5cc}, &(0x7f00000009c0)=[@featur1={0x1, 0x80}], 0x1) syz_kvm_vgic_v3_setup(r2, 0x3, 0x100) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000240)=@attr_arm64={0x0, 0x4, 0x1, 0x0}) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000dd4000/0x3000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r7, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r7, 0x0) mmap$KVM_VCPU(0x0, 0x0, 0x2000003, 0x10, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000300)="fb4149dd033b8986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67525673312b01040000000000002627e7000000000000000200", 0x0, 0xfffffffffffffe73) mmap$KVM_VCPU(0x0, 0x50000, 0x2000002, 0x10031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0) r9 = openat$kvm(0x0, &(0x7f0000000a80), 0xa20423e466454116, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) syz_kvm_setup_cpu$arm64(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil, &(0x7f0000000140)=[{0x0, 0x0, 0x248}], 0x1, 0x0, 0x0, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000b00)={0xffffffffffffffff, 0xc8}) ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f0000000b40)={0x4, 0xffffffffffffffff, 0x1}) 1h5m37.614761089s ago: executing program 0 (id=153): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x300) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000080)=@attr_riscv64=@attr_imsic={0x0, 0x1, 0x4, &(0x7f0000000000)=0x100}) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x300) (async) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000080)=@attr_riscv64=@attr_imsic={0x0, 0x1, 0x4, &(0x7f0000000000)=0x100}) (async) 1h5m31.20907876s ago: executing program 0 (id=154): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000300), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000380)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r4, 0x4018aee1, &(0x7f00000003c0)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000400)={0x6, 0x500}}) r5 = openat$kvm(0x0, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x22) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x0, 0x2800003, 0x11, r7, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f0000000480)="fb0149dd033be3abf408020000f71a0000005a9610fbff67521ce16f8f1f3234702f6ed1963bd2262f00000000000000000200df38000000000000000020001e91114900", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r7, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000500), 0x600657af12600f2, 0x0) r9 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000280)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f00000005c0)=@attr_other={0x0, 0x8, 0x200, &(0x7f00000002c0)}) r12 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1000003c) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) r15 = ioctl$KVM_CREATE_GUEST_MEMFD(r14, 0xc040aed4, &(0x7f0000000040)={0x1000200001fe0000, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION2(r14, 0x40a0ae49, &(0x7f0000000080)={0x4, 0x4, 0x6000, 0x2000, &(0x7f0000ffd000/0x2000)=nil, 0x100000000000000, r15}) close(r14) ioctl$KVM_SET_USER_MEMORY_REGION(r14, 0x4020ae46, &(0x7f0000000180)={0x10000, 0x6, 0x7000, 0x1000, &(0x7f0000f35000/0x1000)=nil}) syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil) r16 = mmap$KVM_VCPU(&(0x7f0000cf2000/0x3000)=nil, 0x0, 0x0, 0x11, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r16, 0x20, &(0x7f00000001c0)="0a9651f0af2b0edf8d0a09a453f41edc2d3b85f08b9b4fa734152b06c2bca4ea97b11a6729f862e1c1d1590a8dba801ed322dff4ce227016e42c4783b56ec5bb07d86bb9ce438dbe", 0x0, 0x48) ioctl$KVM_GET_DEVICE_ATTR(r11, 0x4018aee2, &(0x7f0000000580)=@attr_arm64={0x0, 0x7, 0x1, &(0x7f0000000540)=0x3}) ioctl$KVM_CLEAR_DIRTY_LOG(r12, 0xc018aec0, 0xfffffffffffffffe) 1h5m21.480281122s ago: executing program 0 (id=156): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xc020660b, 0xe1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x200, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000040)={0x1000200001fe0000, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000180)={0x0, 0x4, 0x6000, 0x2000, &(0x7f0000ffd000/0x2000)=nil, 0x100000000000000, r2}) close(r1) close(r2) 1h5m14.642092055s ago: executing program 0 (id=158): openat$kvm(0x0, 0x0, 0x400400, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000600), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x31) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000640)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000680)=@attr_arm64={0x0, 0x1, 0x2, &(0x7f00000006c0)}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1d40, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000080)={0xffffffffffffffff, 0xc8}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000000c0)=@x86={0x1, 0x8, 0xb, 0x0, 0x2, 0x6, 0x6, 0x9, 0x8, 0x8, 0x6, 0x2, 0x0, 0x6, 0x6, 0xe2, 0x1, 0x29, 0x0, '\x00', 0x10, 0x6}) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r8, &(0x7f00000005c0), 0xf001) r9 = ioctl$KVM_CREATE_VM(r5, 0x400454de, 0x110e22fffb) ioctl$KVM_CLEAR_DIRTY_LOG(r9, 0xc018aec0, &(0x7f0000000580)={0x10001, 0x3c0, 0x300, &(0x7f0000000180)=[0x4, 0x1, 0x1, 0x7, 0xfffffffffffff801, 0xfffffffffffffffb, 0x2, 0x9, 0x5, 0x0, 0xfffffffffffffffa, 0x1, 0x5, 0x6, 0xb7, 0x3, 0x5, 0x6, 0x7fffffff, 0x3, 0xff, 0x445, 0x7, 0x8000000000000001, 0x0, 0xbc, 0x3, 0xff, 0x100, 0x7ae, 0x34a4, 0x36, 0x0, 0x2, 0x0, 0x8, 0x100000001, 0x3, 0x1, 0x7, 0x21c11721, 0xd, 0x7f6, 0xffffffffffff8000, 0x200, 0xfff, 0x11d, 0x5, 0x9, 0x3, 0x6, 0x7, 0x2, 0xe, 0x0, 0x6, 0x3, 0x9, 0x7fff, 0x7, 0x1, 0x1, 0x1ff, 0x1ff, 0x113, 0x8001, 0xb, 0x6, 0x1, 0xfdcf, 0x1, 0x8001, 0x7, 0x3, 0x21a4, 0x6, 0x82ef, 0x10001, 0x9, 0x4, 0x32f, 0x85a, 0x4, 0x7fffffff, 0x9, 0x0, 0x5, 0x80000000, 0x2, 0x4f8, 0x8001, 0x4, 0x10c, 0x401, 0xd, 0x3ff, 0x4, 0x2, 0x3, 0x2b, 0x6, 0xfffffffffffffffd, 0x9, 0x1, 0xa, 0xfffffffffffffffb, 0x3, 0x2, 0x3, 0x7, 0x800, 0x55e67a70, 0x7, 0x20bb828d, 0x101, 0x0, 0x9c, 0x5, 0x3, 0x3, 0x1000, 0x2, 0x7d4, 0x6, 0xbc, 0x80, 0x9d4, 0xe2e]}) openat$kvm(0x0, 0x0, 0x400400, 0x0) (async) openat$kvm(0x0, &(0x7f0000000600), 0x1, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x31) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000640)={0x4}) (async) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000680)=@attr_arm64={0x0, 0x1, 0x2, &(0x7f00000006c0)}) (async) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1d40, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) (async) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000080)={0xffffffffffffffff, 0xc8}) (async) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000000c0)=@x86={0x1, 0x8, 0xb, 0x0, 0x2, 0x6, 0x6, 0x9, 0x8, 0x8, 0x6, 0x2, 0x0, 0x6, 0x6, 0xe2, 0x1, 0x29, 0x0, '\x00', 0x10, 0x6}) (async) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff, 0x1}) (async) write$eventfd(r8, &(0x7f00000005c0), 0xf001) (async) ioctl$KVM_CREATE_VM(r5, 0x400454de, 0x110e22fffb) (async) ioctl$KVM_CLEAR_DIRTY_LOG(r9, 0xc018aec0, &(0x7f0000000580)={0x10001, 0x3c0, 0x300, &(0x7f0000000180)=[0x4, 0x1, 0x1, 0x7, 0xfffffffffffff801, 0xfffffffffffffffb, 0x2, 0x9, 0x5, 0x0, 0xfffffffffffffffa, 0x1, 0x5, 0x6, 0xb7, 0x3, 0x5, 0x6, 0x7fffffff, 0x3, 0xff, 0x445, 0x7, 0x8000000000000001, 0x0, 0xbc, 0x3, 0xff, 0x100, 0x7ae, 0x34a4, 0x36, 0x0, 0x2, 0x0, 0x8, 0x100000001, 0x3, 0x1, 0x7, 0x21c11721, 0xd, 0x7f6, 0xffffffffffff8000, 0x200, 0xfff, 0x11d, 0x5, 0x9, 0x3, 0x6, 0x7, 0x2, 0xe, 0x0, 0x6, 0x3, 0x9, 0x7fff, 0x7, 0x1, 0x1, 0x1ff, 0x1ff, 0x113, 0x8001, 0xb, 0x6, 0x1, 0xfdcf, 0x1, 0x8001, 0x7, 0x3, 0x21a4, 0x6, 0x82ef, 0x10001, 0x9, 0x4, 0x32f, 0x85a, 0x4, 0x7fffffff, 0x9, 0x0, 0x5, 0x80000000, 0x2, 0x4f8, 0x8001, 0x4, 0x10c, 0x401, 0xd, 0x3ff, 0x4, 0x2, 0x3, 0x2b, 0x6, 0xfffffffffffffffd, 0x9, 0x1, 0xa, 0xfffffffffffffffb, 0x3, 0x2, 0x3, 0x7, 0x800, 0x55e67a70, 0x7, 0x20bb828d, 0x101, 0x0, 0x9c, 0x5, 0x3, 0x3, 0x1000, 0x2, 0x7d4, 0x6, 0xbc, 0x80, 0x9d4, 0xe2e]}) (async) 1h4m27.289202046s ago: executing program 32 (id=158): openat$kvm(0x0, 0x0, 0x400400, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000600), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x31) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000640)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000680)=@attr_arm64={0x0, 0x1, 0x2, &(0x7f00000006c0)}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1d40, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000080)={0xffffffffffffffff, 0xc8}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000000c0)=@x86={0x1, 0x8, 0xb, 0x0, 0x2, 0x6, 0x6, 0x9, 0x8, 0x8, 0x6, 0x2, 0x0, 0x6, 0x6, 0xe2, 0x1, 0x29, 0x0, '\x00', 0x10, 0x6}) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r8, &(0x7f00000005c0), 0xf001) r9 = ioctl$KVM_CREATE_VM(r5, 0x400454de, 0x110e22fffb) ioctl$KVM_CLEAR_DIRTY_LOG(r9, 0xc018aec0, &(0x7f0000000580)={0x10001, 0x3c0, 0x300, &(0x7f0000000180)=[0x4, 0x1, 0x1, 0x7, 0xfffffffffffff801, 0xfffffffffffffffb, 0x2, 0x9, 0x5, 0x0, 0xfffffffffffffffa, 0x1, 0x5, 0x6, 0xb7, 0x3, 0x5, 0x6, 0x7fffffff, 0x3, 0xff, 0x445, 0x7, 0x8000000000000001, 0x0, 0xbc, 0x3, 0xff, 0x100, 0x7ae, 0x34a4, 0x36, 0x0, 0x2, 0x0, 0x8, 0x100000001, 0x3, 0x1, 0x7, 0x21c11721, 0xd, 0x7f6, 0xffffffffffff8000, 0x200, 0xfff, 0x11d, 0x5, 0x9, 0x3, 0x6, 0x7, 0x2, 0xe, 0x0, 0x6, 0x3, 0x9, 0x7fff, 0x7, 0x1, 0x1, 0x1ff, 0x1ff, 0x113, 0x8001, 0xb, 0x6, 0x1, 0xfdcf, 0x1, 0x8001, 0x7, 0x3, 0x21a4, 0x6, 0x82ef, 0x10001, 0x9, 0x4, 0x32f, 0x85a, 0x4, 0x7fffffff, 0x9, 0x0, 0x5, 0x80000000, 0x2, 0x4f8, 0x8001, 0x4, 0x10c, 0x401, 0xd, 0x3ff, 0x4, 0x2, 0x3, 0x2b, 0x6, 0xfffffffffffffffd, 0x9, 0x1, 0xa, 0xfffffffffffffffb, 0x3, 0x2, 0x3, 0x7, 0x800, 0x55e67a70, 0x7, 0x20bb828d, 0x101, 0x0, 0x9c, 0x5, 0x3, 0x3, 0x1000, 0x2, 0x7d4, 0x6, 0xbc, 0x80, 0x9d4, 0xe2e]}) openat$kvm(0x0, 0x0, 0x400400, 0x0) (async) openat$kvm(0x0, &(0x7f0000000600), 0x1, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x31) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000640)={0x4}) (async) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000680)=@attr_arm64={0x0, 0x1, 0x2, &(0x7f00000006c0)}) (async) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1d40, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) (async) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000080)={0xffffffffffffffff, 0xc8}) (async) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000000c0)=@x86={0x1, 0x8, 0xb, 0x0, 0x2, 0x6, 0x6, 0x9, 0x8, 0x8, 0x6, 0x2, 0x0, 0x6, 0x6, 0xe2, 0x1, 0x29, 0x0, '\x00', 0x10, 0x6}) (async) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff, 0x1}) (async) write$eventfd(r8, &(0x7f00000005c0), 0xf001) (async) ioctl$KVM_CREATE_VM(r5, 0x400454de, 0x110e22fffb) (async) ioctl$KVM_CLEAR_DIRTY_LOG(r9, 0xc018aec0, &(0x7f0000000580)={0x10001, 0x3c0, 0x300, &(0x7f0000000180)=[0x4, 0x1, 0x1, 0x7, 0xfffffffffffff801, 0xfffffffffffffffb, 0x2, 0x9, 0x5, 0x0, 0xfffffffffffffffa, 0x1, 0x5, 0x6, 0xb7, 0x3, 0x5, 0x6, 0x7fffffff, 0x3, 0xff, 0x445, 0x7, 0x8000000000000001, 0x0, 0xbc, 0x3, 0xff, 0x100, 0x7ae, 0x34a4, 0x36, 0x0, 0x2, 0x0, 0x8, 0x100000001, 0x3, 0x1, 0x7, 0x21c11721, 0xd, 0x7f6, 0xffffffffffff8000, 0x200, 0xfff, 0x11d, 0x5, 0x9, 0x3, 0x6, 0x7, 0x2, 0xe, 0x0, 0x6, 0x3, 0x9, 0x7fff, 0x7, 0x1, 0x1, 0x1ff, 0x1ff, 0x113, 0x8001, 0xb, 0x6, 0x1, 0xfdcf, 0x1, 0x8001, 0x7, 0x3, 0x21a4, 0x6, 0x82ef, 0x10001, 0x9, 0x4, 0x32f, 0x85a, 0x4, 0x7fffffff, 0x9, 0x0, 0x5, 0x80000000, 0x2, 0x4f8, 0x8001, 0x4, 0x10c, 0x401, 0xd, 0x3ff, 0x4, 0x2, 0x3, 0x2b, 0x6, 0xfffffffffffffffd, 0x9, 0x1, 0xa, 0xfffffffffffffffb, 0x3, 0x2, 0x3, 0x7, 0x800, 0x55e67a70, 0x7, 0x20bb828d, 0x101, 0x0, 0x9c, 0x5, 0x3, 0x3, 0x1000, 0x2, 0x7d4, 0x6, 0xbc, 0x80, 0x9d4, 0xe2e]}) (async) 51m40.261534458s ago: executing program 1 (id=266): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x29) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000bfe000/0x400000)=nil) r2 = openat$kvm(0x0, &(0x7f0000000200), 0x476002, 0x0) openat$kvm(0x0, &(0x7f0000000340), 0x0, 0x0) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r4 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000480)={0x0, &(0x7f00000004c0)=[@mrs={0xbe, 0x18, {0x6030000000138056}}], 0x18}, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000500)=@x86={0x1, 0x80, 0x7, 0x0, 0x0, 0x2, 0x6e, 0xf8, 0x46, 0x3, 0x8, 0xb9, 0x0, 0x8d0, 0xffffff80, 0x4, 0x5, 0xec, 0x9, '\x00', 0xff, 0x80000001}) syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000540)={0x0, &(0x7f0000000580)=[@hvc={0x32, 0x40, {0xc4000053, [0x9, 0x0, 0x200000000000, 0x6, 0x800]}}], 0x40}, 0x0, 0x0) ioctl$KVM_ARM_VCPU_INIT(0xffffffffffffffff, 0x4020aeae, &(0x7f00000005c0)={0x5, 0x18}) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r8 = openat$kvm(0x0, &(0x7f0000000380), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1, 0x16831, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_IRQ_LINE(r9, 0x4008ae61, &(0x7f00000003c0)={0x0, 0x1ff}) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000040)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f0000000100)=@attr_riscv64=@attr_aplic={0x0, 0x1, @valid=0x2004, &(0x7f0000000440)=0x1}) openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r11 = openat$kvm(0x0, &(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) 51m29.317797071s ago: executing program 2 (id=268): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) (async) r4 = openat$kvm(0x0, &(0x7f0000000180), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r6, 0x4020aeae, &(0x7f00000001c0)={0x5, 0x18}) (async) r7 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil) r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f00000002c0)={0x0, &(0x7f0000000300)=[@msr={0x14, 0x20, {0x603000000013d000, 0x9}}], 0x20}, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000200)=@x86={0x11, 0x8, 0xf, 0x0, 0x5, 0x4, 0x86, 0x3, 0x48, 0x86, 0xdd, 0xb, 0x0, 0x0, 0x0, 0x10, 0x7, 0x5, 0x8, '\x00', 0xfd, 0x93}) r11 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000040)={0x0, &(0x7f00000000c0)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x2}}], 0x28}, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r11, 0x4010aeac, &(0x7f0000000100)=@arm64_extra={0x603000000013c103, &(0x7f0000000140)=0xa0}) (async) r12 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r13 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async) r14 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x2) mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r14, 0x0) (async) ioctl$KVM_CREATE_VM(r13, 0xae01, 0x2e) (async) mmap$KVM_VCPU(&(0x7f0000e04000/0x2000)=nil, 0x930, 0x1, 0x11, r14, 0x0) r15 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r13, 0xae04) mmap$KVM_VCPU(&(0x7f0000005000/0x3000)=nil, r15, 0x8, 0x30, r14, 0x0) (async) r16 = mmap$KVM_VCPU(&(0x7f0000ffd000/0x2000)=nil, r15, 0x1000001, 0x12, r14, 0x0) (async) munmap$KVM_VCPU(0x0, 0x1000000000) (async) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_MMIO(r16, 0x20, &(0x7f0000000240)="792f29464073490d538e47535fcbe424b3a6f0d6dcaf8d9b", 0x0, 0x18) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) 51m28.090221581s ago: executing program 1 (id=269): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0) r1 = mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000100)="37e689868d644f5de87bbc1ff382863b67f3eee57a32ec911d95f98f3dd8ea716e4a29cefbd440d2cbf83f57baf33b0c97182908a47ef45c954e42f2055384921830f6e273d2eb30", 0x0, 0x89c971df05cb8d1) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000300)="746abf250f7959c813e4adfb369b808022e69fe80cfadce4a1259e77bab54ac9749537b3d016bb7f745a6e22d2f9ff603f194677010000804a06c33400", 0x0, 0x48) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2e) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f00000000c0)={0x7, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000180)=@attr_riscv64=@attr_aplic={0x0, 0x1, @any=0xc, &(0x7f00000001c0)=0xca}) r5 = openat$kvm(0x0, &(0x7f0000000200), 0x300, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800004, 0x11, r7, 0x0) r8 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x2a) syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) r11 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000280)={0x0, &(0x7f00000002c0)=[@hvc={0x32, 0x40, {0x84000004, [0x100000001, 0xac, 0xffffffffffffffff, 0xee26, 0xfffffffffffeffff]}}], 0x40}, &(0x7f00000003c0)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r11, 0xae80, 0x0) r12 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r6, 0xae04) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000380)={0xffffffffffffffff, 0xc8}) r13 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000440)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000480)=@x86={0x67, 0x1, 0xb, 0x0, 0x0, 0x7, 0x1, 0xf, 0xa3, 0x0, 0x6, 0xaa, 0x0, 0x3, 0x6, 0x8, 0x9f, 0x4, 0x9, '\x00', 0x1, 0x1}) write$eventfd(r14, &(0x7f00000004c0)=0x9, 0x5d) mmap$KVM_VCPU(&(0x7f0000ffc000/0x3000)=nil, r12, 0x1, 0x11, r7, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r6, 0xae04) 51m12.806755096s ago: executing program 1 (id=270): r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) openat$kvm(0x0, &(0x7f0000000040), 0xa580, 0x0) (async) r1 = openat$kvm(0x0, &(0x7f0000000040), 0xa580, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000000)={0x0, &(0x7f0000000040)=[@smc={0x1e, 0x40, {0x84000008, [0x99b, 0x100000003, 0x5, 0x101, 0x10]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1) r5 = openat$kvm(0x0, &(0x7f0000000080), 0x100800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1, 0x16831, 0xffffffffffffffff, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f00000000c0)={0x1, 0x37d03030d7a92616}) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f00000000c0)={0x1, 0x37d03030d7a92616}) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000100)={0x10000, 0x4000}) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000100)={0x10000, 0x4000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r6, 0x4010ae68, &(0x7f0000000140)={0x30000, 0x10d000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) r7 = syz_kvm_add_vcpu$arm64(r0, &(0x7f0000000b80)={0x0, &(0x7f00000002c0)=[@hvc={0x32, 0x40, {0x84000003, [0xa00000000, 0x4, 0x4, 0x9, 0x4d]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r7, 0xae80, 0x0) 51m12.518289944s ago: executing program 2 (id=271): r0 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0xc8}) r3 = openat$kvm(0x0, &(0x7f0000000240), 0x8280, 0x0) ioctl$KVM_CREATE_VM(r3, 0x4c01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x181900, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r6, 0x400454d8, 0x1000000008) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) r7 = openat$kvm(0x0, &(0x7f00000001c0), 0x8280, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r9, 0x4018aee1, &(0x7f0000000200)=@attr_irq_timer={0x0, 0x1, 0x1, 0x0}) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) syz_kvm_add_vcpu$arm64(r2, &(0x7f00000002c0)={0x0, 0x0}, 0x0, 0x0) openat$kvm(0x0, &(0x7f0000000100), 0x169382, 0x0) r10 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r11 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000140)={0x0, &(0x7f0000000300)=[@irq_setup={0x46, 0x0, {0x0, 0x3b2}}, @hvc={0x32, 0x0, {0x10, [0xfffffffffffffffd, 0x1000, 0x0, 0x9, 0x1]}}, @uexit={0x0, 0x0, 0x2}, @hvc={0x32, 0x0, {0x31000000, [0xe6d, 0xe, 0x877, 0x5, 0x3]}}, @uexit={0x0, 0x0, 0x6}, @eret={0xe6, 0x0, 0x7fffffffffffffff}, @svc={0x122, 0x0, {0x2000000, [0x4, 0x72, 0x9, 0x4, 0x16]}}, @memwrite={0x6e, 0x0, @vgic_gicr={0x80c0000, 0x300, 0x3ff}}, @irq_setup={0x46, 0x0, {0x3, 0x38}}, @msr={0x14, 0x0, {0x603000000013df67, 0xdd0}}, @svc={0x122, 0x0, {0x84000012, [0xffffffffffff0000, 0xfffffffffffffff2, 0x0, 0x6, 0xff]}}, @memwrite={0x6e, 0x0, @generic={0x100a8000, 0x406, 0x0, 0xe}}]}, 0x0, 0xfffffe1a) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x400000000000007) munmap(&(0x7f0000ce4000/0x4000)=nil, 0x4000) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000b7b000/0x400000)=nil) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x101900, 0x0) 50m59.090512807s ago: executing program 1 (id=272): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000340)={0x1, 0x3, 0xdddd1000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000380)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r2, 0xc018aec0, &(0x7f00000003c0)={0x1}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x2}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x1, 0x80002, 0x30000, 0x0, 0x0, 0x2}}], 0x50}, 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0xc8}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000240)=@x86={0xd, 0x9, 0xb, 0x0, 0x2, 0x6, 0x6, 0x6, 0x4c, 0x88, 0xfb, 0x9, 0x0, 0xb, 0x6, 0xa, 0x3, 0x8, 0x1, '\x00', 0x10}) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000280)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r8, &(0x7f00000002c0)=0x3, 0x10) syz_kvm_vgic_v3_setup(r3, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) r10 = openat$kvm(0x0, &(0x7f0000000400), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) syz_kvm_vgic_v3_setup(r11, 0x3, 0xc0) r12 = eventfd2(0x8, 0x80801) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x203, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r14, 0x4020ae46, &(0x7f00000004c0)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r14, 0xc018aec0, &(0x7f0000000500)={0x0, 0x240, 0x380, 0x0}) r15 = ioctl$KVM_GET_STATS_FD_vm(r11, 0xaece) ioctl$KVM_IRQFD(r11, 0x4020ae76, &(0x7f0000000440)={r12, 0x1, 0x2, r15}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 50m56.110713776s ago: executing program 2 (id=273): r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000000000)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0x20e4586c}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) 50m43.849708681s ago: executing program 2 (id=274): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000bc2000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_arm64(r4, 0x4208ae9b, 0x0) ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f00000000c0)=@arm64_core={0x6030000000100046, &(0x7f0000000100)=0x11}) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$KVM_VCPU(0x0, 0x50000, 0x2000002, 0x10031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000680)={0x0, &(0x7f00000001c0)=[@irq_setup={0x46, 0x18, {0x0, 0x3db}}, @smc={0x1e, 0x40, {0x86000000, [0x2, 0x6, 0x194, 0x41fb, 0x2]}}, @msr={0x14, 0x20, {0x603000000013c01a, 0xd145}}, @svc={0x122, 0x40, {0x0, [0x5, 0x3, 0x9, 0x100, 0x5]}}, @irq_setup={0x46, 0x18, {0x3, 0x186}}, @hvc={0x32, 0x40, {0x84000013, [0x3, 0x8, 0x0, 0x6, 0x9]}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x1000, 0xe300000000000000, 0x4}}, @irq_setup={0x46, 0x18, {0x0, 0x2a1}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x0, 0x7}}, @hvc={0x32, 0x40, {0x84000011, [0x9, 0x7, 0x5, 0x4, 0xfffffffffffffffb]}}, @mrs={0xbe, 0x18, {0x18a8}}, @msr={0x14, 0x20, {0x603000000013c708, 0x9}}, @irq_setup={0x46, 0x18, {0x11, 0x20c}}, @msr={0x14, 0x20, {0x603000000013e290, 0x7}}, @its_setup={0x82, 0x28, {0x1, 0x4, 0x254}}, @hvc={0x32, 0x40, {0x4, [0x7f, 0x1, 0x7fffffffffffffff, 0x7fffffff, 0x316]}}, @mrs={0xbe, 0x18, {0x603000000013df6e}}, @irq_setup={0x46, 0x18, {0x4, 0x2bc}}, @svc={0x122, 0x40, {0xc5000021, [0x5, 0x3, 0xfffffffffffffffb, 0x400, 0x7]}}, @irq_setup={0x46, 0x18, {0x3, 0x330}}, @uexit={0x0, 0x18, 0x8}, @hvc={0x32, 0x40, {0x3f2ce59c3c824190, [0x3, 0xe1e, 0x8, 0x400, 0x1000007]}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x4, 0x6}}, @mrs={0xbe, 0x18, {0x603000000013e602}}, @svc={0x122, 0x40, {0x84000005, [0x5, 0x6, 0x9, 0x55b6, 0x1]}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x0, 0x1, 0x4, 0x5, 0x1000, 0x2}}, @code={0xa, 0x6c, {"e0df80d200a0b8f2010080d2020080d2230180d2a40080d2020000d40094002f007008d500d0200e0020000c000060c8e07e84d200e0b8f2210080d2220180d2030180d2a40180d2020000d40070000e007008d5007008d5"}}], 0x49c}, &(0x7f00000006c0)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_GET_SREGS(r6, 0x8000ae83, &(0x7f0000000700)) r7 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000180)={0x0, &(0x7f0000000840)=[@memwrite={0x6e, 0x30, @generic={0x8000000, 0x100000004ab, 0x2000006, 0x1}}], 0x30}, 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000b00)={0xffffffffffffffff, 0xc8, 0x1}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000b40), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000b80)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000bc0)=@x86={0x11, 0x8, 0xf, 0x0, 0x5, 0x6, 0x6, 0x6, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x9, 0x0, 0x0, 0x3, 0x5, 0x8, '\x00', 0x1, 0x400000000002}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000c00)={0x4, 0x0, [{0x1, 0x1, 0x0, 0x0, @adapter={0x8000000000000001, 0x8, 0x2, 0xb, 0x10}}, {0x9, 0x3, 0x0, 0x0, @adapter={0x4d4ff, 0xffffffffffffffff}}, {0x0, 0x4, 0x1, 0x0, @sint={0x7fffffff, 0x6}}, {0x0, 0x6, 0x0, 0x0, @adapter={0x8000, 0x7fffffff, 0x20000000401, 0x7f, 0xb2d}}]}) write$eventfd(r11, &(0x7f0000000d00)=0x3, 0x50) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r8, 0x4018aee2, &(0x7f0000000140)=@attr_irq_timer={0x0, 0x1, 0x1, &(0x7f0000000880)=0x1e}) r12 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000a80)={0x0, &(0x7f00000008c0)=[@uexit={0x0, 0x18, 0x2}, @its_send_cmd={0xaa, 0x28, {0x1, 0x1, 0x1, 0x0, 0x5, 0x3, 0x3}}, @hvc={0x32, 0x40, {0x1fe21, [0xe0, 0x3, 0xd, 0x7, 0x7]}}, @eret={0xe6, 0x18, 0x1}, @irq_setup={0x46, 0x18, {0x1, 0x236}}, @smc={0x1e, 0x40, {0xc5000020, [0x0, 0x4, 0x8, 0xe5, 0x1000]}}, @mrs={0xbe, 0x18, {0xa2f4c4c31dc7bac0}}, @msr={0x14, 0x20, {0x603000000013c528, 0x1}}, @its_setup={0x82, 0x28, {0x1, 0x3, 0x3d0}}, @smc={0x1e, 0x40, {0x4, [0x101, 0x80000001, 0x1, 0x2, 0x4]}}, @its_setup={0x82, 0x28, {0x2, 0x4, 0x31}}], 0x1b8}, &(0x7f0000000ac0)=[@featur1={0x1, 0x80}], 0x1) ioctl$KVM_RUN(r12, 0xae80, 0x0) 50m38.919922643s ago: executing program 1 (id=275): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000040)={0x5, 0x8}) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000080)=@riscv64_config={0x8030000000100006, &(0x7f0000000100)}) r3 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x7, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000180)=@attr_arm64={0x0, 0x4, 0x0, 0x0}) r6 = openat$kvm(0x0, &(0x7f00000001c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000200)={0x0, &(0x7f0000000240)=[@its_setup={0x82, 0x28, {0x4, 0x1, 0x1}}], 0x28}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r7, 0xfffffffffffffffd, 0x60) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000280)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f00000002c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000300)=0x8080000}) ioctl$KVM_RUN(r9, 0xae80, 0x0) close(r5) munmap$KVM_VCPU(0x0, 0x1000000000) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x8, 0x20031, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xc, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x20000000) 50m32.258057508s ago: executing program 2 (id=276): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000b7b000/0x400000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101900, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x26) syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000b7b000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000240)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r5, 0x4010aeac, &(0x7f0000000280)=@arm64_sys={0x603000000013e108, &(0x7f00000002c0)=0x1101001001111110}) r6 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = openat$kvm(0x0, &(0x7f0000000400), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000440)={0x7, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r11, 0x4018aee3, 0xffffffffffffffff) r12 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil) r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000340)={0x0, 0x0}, 0x0, 0x0) r14 = openat$kvm(0x0, 0x0, 0x80, 0x0) r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x2e) r16 = ioctl$KVM_CREATE_VCPU(r15, 0xae41, 0x5) syz_kvm_setup_cpu$arm64(r15, r16, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r13, 0x4010aeac, &(0x7f0000000380)=@arm64_core={0x6030000000100042, &(0x7f00000003c0)=0x801b}) r17 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000100)={0x0, &(0x7f0000000000)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x3, 0x40000000, 0x10000, 0x0, 0x105, 0x2}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_RUN(r17, 0xae80, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r18, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) 50m27.109130568s ago: executing program 1 (id=277): r0 = openat$kvm(0x0, &(0x7f0000000280), 0x103080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000180), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) close(0x4) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = ioctl$KVM_GET_STATS_FD_vm(r3, 0xaece) close(r6) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r7 = syz_kvm_vgic_v3_setup(r1, 0x1, 0x40) r8 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x34) r11 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r10, 0x0) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) syz_memcpy_off$KVM_EXIT_HYPERCALL(r11, 0x20, &(0x7f0000000040)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r10, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r13 = eventfd2(0x0, 0x0) close(r13) openat$kvm(0xffffff9c, &(0x7f0000000100), 0x1a17f2, 0x1f01) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x3000002, 0x13, r13, 0x0) ioctl$KVM_GET_DEVICE_ATTR(r7, 0x4018aee2, &(0x7f00000002c0)=@attr_riscv64=@attr_addr={0x0, 0x1, @imsic=0x4, &(0x7f0000000300)=0x2}) 50m19.069227217s ago: executing program 2 (id=278): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 64) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (rerun: 64) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000480)={0xffffffffffffffff, 0xc8}) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f00000004c0)="f21bc75509bf71ba470236fc044800fff7ffffffd249f297e87fd600000000000000002000e4ff000000f500", 0x0, 0x48) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000540)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r3, &(0x7f0000000580)=0xffffff7f, 0xff25) (async) r4 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000100)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000180)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x2}) (async) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000380)={0x7, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000240)={0x1fe, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000280)=@attr_other={0x0, 0x8, 0x100, &(0x7f00000002c0)=0x8000000000000000}) (async, rerun: 32) syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) (async, rerun: 32) openat$kvm(0x0, &(0x7f0000000300), 0x208300, 0x0) (async) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000340)=@attr_arm64={0x0, 0x4, 0x2, 0x0}) (async) r7 = openat$kvm(0x0, 0x0, 0x1b1280, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r7, 0xae04) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r9 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r8, 0xae04) mmap$KVM_VCPU(0x0, r9, 0x3000003, 0x7ffff, 0xffffffffffffffff, 0x0) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000440)={0xffffffffffffffff, 0xc8}) (async) ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) (async) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@arm64={0x3, 0x4, 0x80, '\x00', 0x63}) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0x2ffc, 0x18000, 0x81}) write$eventfd(r11, &(0x7f00000001c0)=0x8100000001, 0x3543) (async) r12 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x20) ioctl$KVM_SET_DEVICE_ATTR_vm(r12, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x100, 0x2}}) 49m40.96424033s ago: executing program 33 (id=277): r0 = openat$kvm(0x0, &(0x7f0000000280), 0x103080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000180), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) close(0x4) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = ioctl$KVM_GET_STATS_FD_vm(r3, 0xaece) close(r6) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r7 = syz_kvm_vgic_v3_setup(r1, 0x1, 0x40) r8 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x34) r11 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r10, 0x0) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) syz_memcpy_off$KVM_EXIT_HYPERCALL(r11, 0x20, &(0x7f0000000040)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r10, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r13 = eventfd2(0x0, 0x0) close(r13) openat$kvm(0xffffff9c, &(0x7f0000000100), 0x1a17f2, 0x1f01) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x3000002, 0x13, r13, 0x0) ioctl$KVM_GET_DEVICE_ATTR(r7, 0x4018aee2, &(0x7f00000002c0)=@attr_riscv64=@attr_addr={0x0, 0x1, @imsic=0x4, &(0x7f0000000300)=0x2}) 49m32.022654878s ago: executing program 34 (id=278): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 64) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (rerun: 64) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000480)={0xffffffffffffffff, 0xc8}) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f00000004c0)="f21bc75509bf71ba470236fc044800fff7ffffffd249f297e87fd600000000000000002000e4ff000000f500", 0x0, 0x48) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000540)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r3, &(0x7f0000000580)=0xffffff7f, 0xff25) (async) r4 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000100)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000180)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x2}) (async) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000380)={0x7, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000240)={0x1fe, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000280)=@attr_other={0x0, 0x8, 0x100, &(0x7f00000002c0)=0x8000000000000000}) (async, rerun: 32) syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) (async, rerun: 32) openat$kvm(0x0, &(0x7f0000000300), 0x208300, 0x0) (async) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000340)=@attr_arm64={0x0, 0x4, 0x2, 0x0}) (async) r7 = openat$kvm(0x0, 0x0, 0x1b1280, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r7, 0xae04) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r9 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r8, 0xae04) mmap$KVM_VCPU(0x0, r9, 0x3000003, 0x7ffff, 0xffffffffffffffff, 0x0) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000440)={0xffffffffffffffff, 0xc8}) (async) ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) (async) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@arm64={0x3, 0x4, 0x80, '\x00', 0x63}) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0x2ffc, 0x18000, 0x81}) write$eventfd(r11, &(0x7f00000001c0)=0x8100000001, 0x3543) (async) r12 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x20) ioctl$KVM_SET_DEVICE_ATTR_vm(r12, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x100, 0x2}}) 39m40.997852215s ago: executing program 4 (id=303): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x42042, 0x0) r1 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_add_vcpu$arm64(r1, &(0x7f0000000240)={0x0, &(0x7f0000000280)=[@memwrite={0x6e, 0x30, @vgic_gicr={0x80c0000, 0xffe8, 0x2, 0x4}}, @eret={0xe6, 0x18, 0x3fff80000000}, @eret={0xe6, 0x18, 0x7}, @smc={0x1e, 0x40, {0x6000000, [0x1000, 0xc660, 0xffffffffffff7012, 0x7, 0x100000001]}}, @irq_setup={0x46, 0x18, {0x4, 0x2b9}}], 0xb8}, &(0x7f0000000340)=[@featur1={0x1, 0x20}], 0x1) ioctl$KVM_ARM_VCPU_FINALIZE(r4, 0x4004aec2, &(0x7f0000000380)=0x3) r5 = openat$kvm(0x0, &(0x7f00000003c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0x4b49, 0x0) r6 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f0000000400)={0x100000000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r3, 0x40a0ae49, &(0x7f0000000440)={0x0, 0x4, 0x0, 0x2000, &(0x7f0000e37000/0x2000)=nil, 0x10000, r6}) syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) eventfd2(0x2, 0x80000) r7 = syz_kvm_add_vcpu$arm64(r1, &(0x7f0000000500)={0x0, 0x0}, 0x0, 0xfffffffffffffdbd) ioctl$KVM_RUN(r7, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r8, 0x4010ae67, &(0x7f0000000000)={0x1000, 0x11c000, 0x1}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r11, 0x4020aeae, &(0x7f00000000c0)={0x5, 0x8}) ioctl$KVM_SET_ONE_REG(r11, 0x4010aeac, &(0x7f0000000100)=@arm64_core={0x603000000010003e, &(0x7f0000000140)=0x96}) ioctl$KVM_REGISTER_COALESCED_MMIO(r8, 0x4010ae67, &(0x7f0000000200)={0xc000, 0x11000, 0x1}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r8, 0x4010ae68, &(0x7f0000000040)={0x17000, 0x206000, 0x1}) 39m19.793788041s ago: executing program 4 (id=306): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000200)={0xffffffffffffffff, 0xc8}) (async) mmap$KVM_VCPU(0x0, 0x50000, 0x2000002, 0x10031, 0xffffffffffffffff, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) syz_kvm_setup_cpu$arm64(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000780)={0x4, 0xffffffffffffffff, 0x1}) r1 = ioctl$KVM_CREATE_VM(r0, 0x894c, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xb701, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xb704, 0x2) (async) r3 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000640)={0x0, &(0x7f00000002c0)=[@memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x80, 0x7, 0x8}}, @hvc={0x32, 0x40, {0x84000006, [0x8, 0x3, 0x1, 0x1, 0x7]}}, @eret={0xe6, 0x18, 0x8000}, @irq_setup={0x46, 0x18, {0x2, 0x2aa}}, @smc={0x1e, 0x40, {0x200, [0x7, 0x2, 0x4, 0x1, 0x5]}}, @mrs={0xbe, 0x18, {0x603000000013c2a8}}, @its_setup={0x82, 0x28, {0x5, 0x1, 0xa2}}, @its_send_cmd={0xaa, 0x28, {0x10, 0x0, 0x2, 0x6, 0x2, 0x9, 0x2}}, @memwrite={0x6e, 0x30, @generic={0x2, 0x5aa, 0x103}}, @irq_setup={0x46, 0x18, {0x4, 0xce}}, @its_setup={0x82, 0x28, {0x4, 0x0, 0x11c}}, @smc={0x1e, 0x40, {0xc4000012, [0x2, 0x80000001, 0x1, 0x6, 0x3c]}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x68, 0xffe8, 0x8000, 0x2}}, @svc={0x122, 0x40, {0x3000002, [0xff, 0x2, 0x1ff, 0x2, 0x3]}}, @hvc={0x32, 0x40, {0xc4000053, [0x8, 0xa, 0x6]}}, @uexit={0x0, 0x18, 0x4}, @svc={0x122, 0x40, {0x86000001, [0x2, 0x7, 0x8, 0x6]}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x0, 0x0, 0x5, 0x6, 0x2, 0x4}}, @msr={0x14, 0x20, {0x603000000013c288, 0x2}}], 0x348}, &(0x7f0000000680)=[@featur2={0x1, 0xa9}], 0x1) ioctl$KVM_SET_REGS(r3, 0x4360ae82, &(0x7f00000006c0)={[0x9, 0x3, 0x0, 0x2, 0x0, 0x3, 0x5, 0x9, 0x2, 0x5, 0x1, 0x5e52, 0x683, 0x6, 0x0, 0x65d8], 0xffff1000, 0x1}) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x0, 0x8032, 0xffffffffffffffff, 0x0) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0xf, 0x32, 0xffffffffffffffff, 0x0) (async) r4 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2081, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) r7 = ioctl$KVM_CREATE_GUEST_MEMFD(r6, 0xc040aed4, &(0x7f0000000180)={0x200200001fe0000, 0x3}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x2000003, 0x2013, r7, 0x200001fe0000) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x29) (async) r8 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) (async) r10 = openat$kvm(0x0, &(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0x401c5820, 0x20002500) (async) r11 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r11, 0x4040aea0, 0x0) (async) r12 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000040)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r11, 0x4040aea0, &(0x7f0000000100)=@arm64={0x0, 0xf5, 0x8, '\x00', 0x9}) 39m2.838389468s ago: executing program 4 (id=307): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) (async) r4 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000002c0)=[@featur1={0x1, 0x8}], 0x1) (async) syz_kvm_vgic_v3_setup(r2, 0x1, 0x0) (async) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r3, 0x4018aee2, &(0x7f0000000300)=@attr_pmu_irq={0x0, 0x0, 0x0, 0x0}) (async) mmap$KVM_VCPU(&(0x7f0000011000/0x3000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) r5 = mmap$KVM_VCPU(&(0x7f0000002000/0x4000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000000000)="37e68986ad644f5dc57bbc1ff382863b67f3eee57a32ec911d95f88f3dd8ea716e4a29cefbd440b2ecf83f57baf33b0c97182970a47ef45c954e42f2055384921830f6e273d2eb30", 0x0, 0x2a2019ac5ed2a1ef) (async) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0) (async, rerun: 32) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (rerun: 32) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x1}}, @its_send_cmd={0xaa, 0x28, {0xe, 0x0, 0x2, 0x6}}], 0x50}, 0x0, 0x0) (async, rerun: 64) syz_kvm_vgic_v3_setup(r6, 0x1, 0x100) (async, rerun: 64) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) (async, rerun: 64) ioctl$KVM_RUN(r8, 0xae80, 0x0) (rerun: 64) 38m38.326436581s ago: executing program 4 (id=310): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x101e40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x28) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000b75000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f0000000000)=[@hvc={0x32, 0x40, {0x84000051, [0x84000051, 0x7, 0x9, 0xc, 0x7fff]}}], 0x40}, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}, @its_setup={0x82, 0x28, {0x1, 0x1, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x3}}], 0x68}, 0x0, 0x0) (async) r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r8, 0x3, 0x11, r7, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000d89000/0x2000)=nil, r8, 0x2, 0x12, r3, 0x0) 38m23.450731989s ago: executing program 4 (id=312): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x28) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000100)={0xffffffffffffffff, 0xc8, 0x5}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x161642, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x8, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r5, 0x400454dc, 0x23) r6 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000080)="fb01db06033ce3c60100a29ea6ab8031d1dfd92f0000dc0320002c005a9610fbff67521c966f8f1f4408357070c2c7aadad0b207000000000400", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000040), 0xa00f2, 0x408) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0) 38m9.558707467s ago: executing program 4 (id=314): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x31) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x80, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x2e) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$arm64(r3, r4, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000140)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f0000000180)=@arm64_core={0x6030000000100042, &(0x7f00000001c0)=0x8}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x1, 0x2, &(0x7f00000000c0)}) 37m21.239963029s ago: executing program 35 (id=314): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x31) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x80, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x2e) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$arm64(r3, r4, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000140)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f0000000180)=@arm64_core={0x6030000000100042, &(0x7f00000001c0)=0x8}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x1, 0x2, &(0x7f00000000c0)}) 23m48.439411657s ago: executing program 5 (id=389): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r0, 0x8040ae9f, &(0x7f0000000000)) ioctl$KVM_PRE_FAULT_MEMORY(r0, 0xc040aed5, &(0x7f0000000040)={0xeeef0000, 0x12000}) ioctl$KVM_ARM_VCPU_FINALIZE(r0, 0x4004aec2, &(0x7f0000000080)=0x5) ioctl$KVM_ARM_VCPU_INIT(r0, 0x4020aeae, &(0x7f00000000c0)={0x0, 0xa0}) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000100)={0x2, 0xffffffffffffffff, 0x1}) ioctl$KVM_GET_REGS(r0, 0x8360ae81, &(0x7f0000000140)) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, &(0x7f0000000200)={0x6475, 0x1}) ioctl$KVM_SET_REGS(r0, 0x4360ae82, &(0x7f0000000240)={[0x6ff, 0x4, 0x4, 0x5, 0x4, 0x8, 0x0, 0x9, 0xffffffffffffffff, 0xfffffffffffff49f, 0x8, 0x9, 0x8, 0x5, 0x2, 0x6], 0x41000, 0x1}) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000340)=@attr_other={0x0, 0x9, 0x10000000000, &(0x7f0000000300)=0x5}) ioctl$KVM_ARM_PREFERRED_TARGET(r0, 0x8020aeaf, &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000400)=@riscv64_sbi_fwft={0x803000000a010002, &(0x7f00000003c0)=0x8}) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, r3, 0x2000001, 0x100010, r2, 0x0) ioctl$KVM_ARM_PREFERRED_TARGET(r0, 0x8020aeaf, &(0x7f0000000440)) r4 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000640)={0x0, &(0x7f0000000480)=[@msr={0x14, 0x20, {0x603000000013da21, 0x6}}, @its_setup={0x82, 0x28, {0x4, 0x2, 0x192}}, @smc={0x1e, 0x40, {0x4000, [0x9, 0x5, 0x2, 0x3, 0x101]}}, @eret={0xe6, 0x18, 0x5}, @code={0xa, 0x84, {"a0ac81d200a0b0f2810180d2c20180d2430180d2040080d2020000d4000008d50084002fa0a883d200a0b8f2610180d2a20080d2430180d2440180d2020000d40020200e0084002f000040f9008008d5403b8ad200a0b0f2c10180d2420180d2030080d2c40080d2020000d40034200e"}}, @mrs={0xbe, 0x18, {0x6030000000138057}}, @msr={0x14, 0x20, {0x603000000013defb, 0x9}}, @mrs={0xbe, 0x18, {0x6030000000131a01}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x1, 0x3, 0x5, 0xef5b}}], 0x19c}, &(0x7f0000000680)=[@featur2={0x1, 0xb8}], 0x1) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000d40)={0x0, &(0x7f00000006c0)=[@svc={0x122, 0x40, {0x8000, [0x100000000, 0x80000000, 0x7, 0x3, 0x81]}}, @code={0xa, 0xb4, {"001c004ee0a690d200e0b8f2610180d2820080d2c30180d2640180d2020000d4c01287d200c0b0f2810080d2e20180d2630080d2840080d2020000d4000c8038c02692d20000b0f2010080d2220080d2c30180d2e40180d2020000d400778ad200a0b0f2c10180d2e20080d2e30080d2440180d2020000d400fc007f9f3003d50098202e607f9ed20060b0f2010180d2c20180d2c30080d2a40180d2020000d4"}}, @code={0xa, 0x84, {"205c92d20000b8f2810080d2620180d2830180d2440080d2020000d400a8210ee0948ed200c0b0f2010080d2e20180d2a30180d2840080d2020000d4000028d50040671e00a4000d00c0251e000028d500e4002fe08e9dd200c0b8f2e10080d2a20180d2830180d2c40180d2020000d4"}}, @irq_setup={0x46, 0x18, {0x2, 0x35a}}, @uexit={0x0, 0x18, 0x6}, @its_setup={0x82, 0x28, {0x4, 0x4, 0xa0}}, @eret={0xe6, 0x18, 0xffffffffe46947ae}, @its_send_cmd={0xaa, 0x28, {0x8, 0x0, 0x0, 0xb, 0xe4, 0x401, 0x4}}, @eret={0xe6, 0x18, 0xe98}, @its_setup={0x82, 0x28, {0x3, 0x4, 0x1b5}}, @its_send_cmd={0xaa, 0x28, {0x4, 0x0, 0x1, 0x9, 0x200, 0x7ff, 0x4}}, @code={0xa, 0xcc, {"602d8fd200a0b8f2010180d2420180d2230080d2e40180d2020000d40008c05aa09f9bd200a0b8f2c10080d2220180d2830180d2440080d2020000d400dc92d20080b0f2410180d2020180d2a30180d2440180d2020000d4c03583d20060b0f2410180d2a20180d2430080d2840180d2020000d4007008d500a0206ec0149cd200e0b0f2410080d2820180d2630180d2640180d2020000d4008008d500db9fd200a0b0f2610080d2020080d2230180d2c40080d2020000d4"}}, @irq_setup={0x46, 0x18, {0x1, 0xee}}, @eret={0xe6, 0x18, 0x101}, @its_setup={0x82, 0x28, {0x1, 0x1, 0x117}}, @hvc={0x32, 0x40, {0xcf79173476e8f6b5, [0xa3, 0x7fffffff, 0x4, 0x8, 0x5]}}, @smc={0x1e, 0x40, {0x80008000, [0x9, 0x10, 0x7, 0x2]}}, @its_send_cmd={0xaa, 0x28, {0x7, 0x1, 0x3, 0x0, 0x10000, 0x0, 0x2}}, @mrs={0xbe, 0x18, {0x603000000013c510}}, @hvc={0x32, 0x40, {0x2, [0x7, 0x3, 0x5, 0x3, 0x13]}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x0, 0x1, 0x7, 0xfffffffb, 0x9, 0x3}}, @uexit={0x0, 0x18, 0x5}, @code={0xa, 0xb4, {"000860bc00f481d200c0b0f2810080d2020180d2430180d2840180d2020000d440689cd200e0b0f2810080d2820080d2c30080d2040180d2020000d400809f0cc0199ed20060b8f2210080d2e20180d2830080d2a40080d2020000d4004d85d20000b8f2610080d2420080d2a30180d2240180d2020000d4400185d20020b0f2a10180d2620180d2030180d2c40080d2020000d400009f0d0004807800a09f0c"}}, @eret={0xe6, 0x18, 0x3}, @irq_setup={0x46, 0x18, {0x4, 0x4b}}, @its_send_cmd={0xaa, 0x28, {0xa, 0x1, 0x3, 0x6, 0x0, 0x8, 0x3}}, @msr={0x14, 0x20, {0x603000000013e659, 0x7f}}, @msr={0x14, 0x20, {0x603000000013dea0, 0x2}}, @smc={0x1e, 0x40, {0x1, [0x7, 0x8, 0x5, 0x401, 0x4]}}], 0x668}, &(0x7f0000000d80)=[@featur2={0x1, 0x8}], 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r0, 0xc040aed5, &(0x7f0000000dc0)={0xdddd0000}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000e00), 0x2002, 0x0) ioctl$KVM_GET_API_VERSION(r6, 0xae00, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000e40)={0x9, 0xffffffffffffffff, 0x1}) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x12) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000e80)={0x6}) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x1e) openat$kvm(0xffffffffffffff9c, &(0x7f0000000ec0), 0x200000, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_ARM_SET_DEVICE_ADDR(r9, 0x4010aeab, &(0x7f0000000f00)={0x6, 0x26000}) 23m36.92800713s ago: executing program 5 (id=391): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2e) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) r3 = openat$kvm(0x0, &(0x7f00000001c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r6 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r5, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000200)="fb4149dd033b8986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67525673312b01040000000000002627e7000000000000000200", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x12, r5, 0x0) r7 = eventfd2(0x0, 0x0) close(r7) r8 = eventfd2(0x0, 0x0) close(r8) openat$kvm(0xffffff9c, &(0x7f0000000280), 0x109272, 0x1f01) write$eventfd(r8, &(0x7f00000002c0)=0x6, 0x8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x8200, 0x0) write$eventfd(r7, &(0x7f0000000340)=0xfffffffffffffffe, 0xfdef) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x84000, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r10, 0x4008ae6a, &(0x7f00000000c0)={0x802}) syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000100)=[{0x0, 0x0}], 0x1, 0x0, &(0x7f00000003c0)=[@featur2={0x1, 0x17}], 0x1) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)=@arm64_core={0x6030000000100042, &(0x7f0000000000)=0x801b}) 23m15.2526472s ago: executing program 5 (id=393): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) (async) r3 = openat$kvm(0x0, &(0x7f0000000000), 0x20200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_vgic_v3_setup(r4, 0x3, 0x40) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x4, 0x0, 0x0}) (async) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r2, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000080)={0x8001, 0x55e, 0x1}}) 23m4.542827741s ago: executing program 5 (id=395): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29) (async, rerun: 32) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) (rerun: 32) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) (async) ioctl$KVM_SET_GUEST_DEBUG_arm64(r2, 0x4208ae9b, &(0x7f0000000100)={0x30005, 0x0, {[0x0, 0x6, 0x65, 0x8, 0x1, 0x5, 0x7, 0xf988, 0x7fffffffffffffff, 0x7, 0xb, 0x3, 0xffff, 0x100000000, 0x1ff], [0x8, 0xfffffffffffffffa, 0x2, 0x3, 0x5, 0x4, 0x7fff, 0x8000, 0xffffffff, 0x4, 0x66d5f242, 0xffffffffffffffff, 0xf0, 0x3e3, 0x0, 0x4], [0xf, 0xa, 0xa97f, 0x4, 0x0, 0xa, 0x8, 0x5e, 0x1, 0x3700000000000000, 0x8, 0x6, 0x5, 0x6, 0x1b4a, 0xc3d], [0x80000001, 0x3, 0x9, 0x10001, 0x0, 0x5, 0x5a7f, 0x2, 0x2, 0xf9fd, 0x6, 0x4, 0x3, 0x8, 0x7fffffff, 0x3]}}) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20080, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000c44000/0xd000)=nil, 0x930, 0x0, 0xce36b03e1c480b38, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r4, 0xc0189436, 0x20003fff) 22m53.673028302s ago: executing program 5 (id=397): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000240)={0x7, 0x0, [{0x43e7, 0x2, 0x0, 0x0, @msi={0x0, 0x100, 0x1, 0xb0}}, {0x5, 0x1, 0x0, 0x0, @irqchip={0xf, 0x2}}, {0x7, 0x2, 0x1, 0x0, @irqchip={0x80000000, 0xd2c8}}, {0x2, 0x1, 0x0, 0x0, @irqchip={0x7, 0x7}}, {0xfffffffd, 0x4, 0x1, 0x0, @adapter={0x9, 0x7, 0x9, 0xa, 0x800}}, {0x7fff, 0x4, 0x1, 0x0, @adapter={0x1, 0x101, 0x7, 0x0, 0x7ff}}, {0xfff, 0x3, 0x1, 0x0, @irqchip={0x744, 0xfff}}]}) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x4}}], 0x28}, 0x0, 0x0) r4 = syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x2, 0x4f832, 0xffffffffffffffff, 0x1000000) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x8, 0x88, &(0x7f0000000000)=0x10}) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xf) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000400)=@attr_other={0x0, 0xffffffff, 0x8, &(0x7f0000000440)=0x3}) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r6, 0x4010ae74, &(0x7f0000000140)={0x3, 0x7, 0x3}) 22m39.158945253s ago: executing program 5 (id=399): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_ARM_VCPU_INIT(r0, 0x4020aeae, &(0x7f0000000000)={0x5, 0x42}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x189081, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x12) ioctl$KVM_ARM_PREFERRED_TARGET(r0, 0x8020aeaf, &(0x7f0000000080)) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f00000000c0)={0x8, 0x200000}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x32) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000100)={0x1, 0x0, [{0x6, 0x4, 0x0, 0x0, @irqchip={0xfff, 0x3}}]}) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r2, 0x4068aea3, &(0x7f0000000140)={0xa8, 0x0, 0x3}) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, &(0x7f00000001c0)={0x7, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r3, 0x4068aea3, &(0x7f0000000200)={0xe4, 0x0, 0x2}) ioctl$KVM_CAP_ARM_MTE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000280)) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f0000000300)={0x3, 0x3000}) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r3, 0x4068aea3, &(0x7f0000000340)={0xa8, 0x0, 0x3}) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r4, 0x4018aee2, &(0x7f0000000400)=@attr_other={0x0, 0x6, 0x5, &(0x7f00000003c0)=0x9}) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000000440)={0x25000, 0x1000, 0xfff, 0x1, 0x3}) ioctl$KVM_GET_SREGS(r5, 0x8000ae83, &(0x7f0000000480)) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(0xffffffffffffffff, 0x4068aea3, &(0x7f00000005c0)={0xa8, 0x0, 0x1}) eventfd2(0xb4, 0x80801) ioctl$KVM_GET_ONE_REG(r4, 0x4010aeab, &(0x7f0000000680)=@arm64_sys={0x603000000013c807, &(0x7f0000000640)}) r6 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000800)={0x0, &(0x7f00000006c0)=[@uexit={0x0, 0x18, 0x2}, @svc={0x122, 0x40, {0x84000004, [0x0, 0x0, 0x80000000, 0x8, 0x1]}}, @uexit={0x0, 0x18, 0x6}, @code={0xa, 0x54, {"007008d50078284e0040a00d001580d20000b8f2210080d2220180d2230080d2640080d2020000d4000008d50000209e000c8078000028d500a4004f000028d5"}}, @mrs={0xbe, 0x18, {0x603000000013a038}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x0, 0x2, 0x6, 0x4, 0xfffffffb}}], 0x104}, &(0x7f0000000840)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_SET_SREGS(r6, 0x4000ae84, &(0x7f0000000880)={{0x58000, 0x1ff8, 0x10, 0x28, 0x5, 0x1e, 0xc, 0x3, 0xff, 0x6, 0x7, 0x7f}, {0x40000, 0xa000, 0xa, 0x4, 0x7, 0x5, 0x7, 0x6, 0xfd, 0xf6, 0xa, 0x8}, {0x1ffe, 0x54000, 0xd, 0x7f, 0x3, 0x2, 0x5, 0x1, 0x2, 0x1, 0x7, 0x2}, {0x0, 0x2, 0x4, 0x4, 0x2, 0x7, 0x3, 0x6, 0xb, 0x10, 0x8, 0x3}, {0x4000, 0x8080000, 0xf, 0x0, 0xc, 0x4, 0x0, 0x56, 0xfd, 0x1, 0x8, 0xf0}, {0x8080000, 0x1ffe, 0x10, 0x4, 0x40, 0x2, 0x2, 0x1b, 0x3, 0x5, 0x6, 0x2}, {0x3ff8, 0x10000, 0xa, 0xb, 0xc, 0x2, 0x3, 0x1, 0x6, 0x5, 0x0, 0x6}, {0x54000, 0x7000, 0xc, 0x9, 0xe4, 0x1, 0x7, 0xa, 0x1, 0x5, 0x5, 0x5}, {0x5000, 0x9}, {0xf000, 0x8}, 0xa0000020, 0x0, 0xeeee8000, 0x100004, 0x2, 0x1, 0xeeef0000, [0x4, 0x8, 0x7, 0x1]}) ioctl$KVM_SET_REGS(r6, 0x4360ae82, &(0x7f00000009c0)={[0x5, 0x9, 0x8000000000000000, 0x19, 0x6, 0x7, 0xa, 0x80, 0x3, 0x3, 0xd, 0x6d, 0x2, 0x80000000, 0x0, 0x4], 0x80a0000, 0x3000}) ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f0000000a80)={0x5, 0xfffffffa}) ioctl$KVM_S390_VCPU_FAULT(r4, 0x4008ae52, &(0x7f0000000ac0)=0x10001) 21m51.282955788s ago: executing program 36 (id=399): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_ARM_VCPU_INIT(r0, 0x4020aeae, &(0x7f0000000000)={0x5, 0x42}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x189081, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x12) ioctl$KVM_ARM_PREFERRED_TARGET(r0, 0x8020aeaf, &(0x7f0000000080)) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f00000000c0)={0x8, 0x200000}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x32) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000100)={0x1, 0x0, [{0x6, 0x4, 0x0, 0x0, @irqchip={0xfff, 0x3}}]}) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r2, 0x4068aea3, &(0x7f0000000140)={0xa8, 0x0, 0x3}) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, &(0x7f00000001c0)={0x7, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r3, 0x4068aea3, &(0x7f0000000200)={0xe4, 0x0, 0x2}) ioctl$KVM_CAP_ARM_MTE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000280)) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f0000000300)={0x3, 0x3000}) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r3, 0x4068aea3, &(0x7f0000000340)={0xa8, 0x0, 0x3}) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r4, 0x4018aee2, &(0x7f0000000400)=@attr_other={0x0, 0x6, 0x5, &(0x7f00000003c0)=0x9}) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000000440)={0x25000, 0x1000, 0xfff, 0x1, 0x3}) ioctl$KVM_GET_SREGS(r5, 0x8000ae83, &(0x7f0000000480)) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(0xffffffffffffffff, 0x4068aea3, &(0x7f00000005c0)={0xa8, 0x0, 0x1}) eventfd2(0xb4, 0x80801) ioctl$KVM_GET_ONE_REG(r4, 0x4010aeab, &(0x7f0000000680)=@arm64_sys={0x603000000013c807, &(0x7f0000000640)}) r6 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000800)={0x0, &(0x7f00000006c0)=[@uexit={0x0, 0x18, 0x2}, @svc={0x122, 0x40, {0x84000004, [0x0, 0x0, 0x80000000, 0x8, 0x1]}}, @uexit={0x0, 0x18, 0x6}, @code={0xa, 0x54, {"007008d50078284e0040a00d001580d20000b8f2210080d2220180d2230080d2640080d2020000d4000008d50000209e000c8078000028d500a4004f000028d5"}}, @mrs={0xbe, 0x18, {0x603000000013a038}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x0, 0x2, 0x6, 0x4, 0xfffffffb}}], 0x104}, &(0x7f0000000840)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_SET_SREGS(r6, 0x4000ae84, &(0x7f0000000880)={{0x58000, 0x1ff8, 0x10, 0x28, 0x5, 0x1e, 0xc, 0x3, 0xff, 0x6, 0x7, 0x7f}, {0x40000, 0xa000, 0xa, 0x4, 0x7, 0x5, 0x7, 0x6, 0xfd, 0xf6, 0xa, 0x8}, {0x1ffe, 0x54000, 0xd, 0x7f, 0x3, 0x2, 0x5, 0x1, 0x2, 0x1, 0x7, 0x2}, {0x0, 0x2, 0x4, 0x4, 0x2, 0x7, 0x3, 0x6, 0xb, 0x10, 0x8, 0x3}, {0x4000, 0x8080000, 0xf, 0x0, 0xc, 0x4, 0x0, 0x56, 0xfd, 0x1, 0x8, 0xf0}, {0x8080000, 0x1ffe, 0x10, 0x4, 0x40, 0x2, 0x2, 0x1b, 0x3, 0x5, 0x6, 0x2}, {0x3ff8, 0x10000, 0xa, 0xb, 0xc, 0x2, 0x3, 0x1, 0x6, 0x5, 0x0, 0x6}, {0x54000, 0x7000, 0xc, 0x9, 0xe4, 0x1, 0x7, 0xa, 0x1, 0x5, 0x5, 0x5}, {0x5000, 0x9}, {0xf000, 0x8}, 0xa0000020, 0x0, 0xeeee8000, 0x100004, 0x2, 0x1, 0xeeef0000, [0x4, 0x8, 0x7, 0x1]}) ioctl$KVM_SET_REGS(r6, 0x4360ae82, &(0x7f00000009c0)={[0x5, 0x9, 0x8000000000000000, 0x19, 0x6, 0x7, 0xa, 0x80, 0x3, 0x3, 0xd, 0x6d, 0x2, 0x80000000, 0x0, 0x4], 0x80a0000, 0x3000}) ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f0000000a80)={0x5, 0xfffffffa}) ioctl$KVM_S390_VCPU_FAULT(r4, 0x4008ae52, &(0x7f0000000ac0)=0x10001) 2m48.590942995s ago: executing program 3 (id=503): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000100)={0x0, 0x0}, 0x0, 0x0) r4 = syz_kvm_vgic_v3_setup(r2, 0x1, 0x100) ioctl$KVM_GET_DEVICE_ATTR(r4, 0x4018aee2, &(0x7f0000000140)=@attr_riscv64=@attr_imsic={0x0, 0x1, 0x204, 0xfffffffffffffffe}) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r5, 0xae03, 0x42) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x40300, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x24) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1, 0x16831, 0xffffffffffffffff, 0x0) r8 = syz_kvm_vgic_v3_setup(r7, 0x3, 0x40) ioctl$KVM_GET_DEVICE_ATTR(r8, 0x4018aee2, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x5, 0x0}) 2m46.426124299s ago: executing program 6 (id=504): openat$kvm(0x0, 0x0, 0x0, 0x0) (async) syz_kvm_add_vcpu$arm64(0x0, 0x0, 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000040)={0x200001fe0000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000140)={0x1fe, 0x4, 0xeeee8000, 0x1000, &(0x7f0000001000/0x1000)=nil, 0x0, r2}) (async) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000200)={0x2710, 0x4, 0x100000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil, 0x8000, r2}) (async) r3 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x29) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0x4b47, 0xfffffffffffffffe) (async) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) (async) r7 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r8 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, r7, 0x2, 0x12, r6, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f00000002c0)="fb016bddfb405ee52cc6a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb2070000000000000000000000c20cecfa0a97ab7800", 0x0, 0x48) (async) r9 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r9, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32) (async) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0) 2m29.747938739s ago: executing program 6 (id=505): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000bfe000/0x400000)=nil) r3 = openat$kvm(0x0, &(0x7f0000000000), 0x8280, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) eventfd2(0x3, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r5, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000240)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d2ce5cf98a52fba18300", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r5, 0x0) openat$kvm(0xffffff9c, &(0x7f00000002c0), 0x1a17f2, 0x1f01) r7 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x2}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x1, 0x80000, 0x10000, 0x20, 0x0, 0x2}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_ARM_SET_DEVICE_ADDR(r7, 0x4010aeab, &(0x7f0000000040)={0x9, 0xdddd0000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000bfe000/0x400000)=nil) (async) openat$kvm(0x0, &(0x7f0000000000), 0x8280, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) eventfd2(0x3, 0x0) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r5, 0x0) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000240)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d2ce5cf98a52fba18300", 0x0, 0x48) (async) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r5, 0x0) (async) openat$kvm(0xffffff9c, &(0x7f00000002c0), 0x1a17f2, 0x1f01) (async) syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x2}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x1, 0x80000, 0x10000, 0x20, 0x0, 0x2}}], 0x50}, 0x0, 0x0) (async) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8}) (async) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) (async) ioctl$KVM_ARM_SET_DEVICE_ADDR(r7, 0x4010aeab, &(0x7f0000000040)={0x9, 0xdddd0000}) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) 2m24.880294414s ago: executing program 3 (id=506): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0x80111500, 0x20000000) ioctl$KVM_CREATE_VM(r2, 0x541b, 0x2000001c) r3 = openat$kvm(0x0, &(0x7f0000000000), 0x80, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000340), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000380)={0x0, &(0x7f00000003c0)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x2}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x1, 0x80003, 0x10000, 0x0, 0x2, 0x2}}], 0x50}, 0x0, 0x0) r9 = openat$kvm(0x0, &(0x7f0000000440), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000480)={0x0, &(0x7f0000000540)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x1}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x3, 0x40000000, 0x3, 0x0, 0x0, 0x80000002}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r6, 0x1, 0x380) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f00000005c0)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r12, 0x4018aee1, &(0x7f0000000600)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000640)=0x8080000}) ioctl$KVM_RUN(r8, 0xae80, 0x0) r13 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r14 = syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000c00000/0x400000)=nil) r15 = syz_kvm_add_vcpu$arm64(r14, &(0x7f0000000140)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r15, 0x4040aea0, &(0x7f0000000180)=@arm64={0x6, 0x6, 0xad, '\x00', 0x76}) ioctl$KVM_RUN(r15, 0xae80, 0x0) r16 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x2e) r17 = ioctl$KVM_CREATE_VCPU(r16, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r16, r17, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r17, 0x4010aeac, &(0x7f0000000080)=@arm64_core={0x6030000000100018, &(0x7f00000000c0)=0x80003fd}) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xa2) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) 2m7.930863006s ago: executing program 6 (id=507): eventfd2(0x0, 0x0) r0 = eventfd2(0x0, 0x0) close(r0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x14) syz_kvm_vgic_v3_setup(r1, 0x4, 0x180) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xae) eventfd2(0x0, 0x0) (async) eventfd2(0x0, 0x0) (async) close(r0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x14) (async) syz_kvm_vgic_v3_setup(r1, 0x4, 0x180) (async) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xae) (async) 1m59.418053287s ago: executing program 6 (id=508): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = mmap$KVM_VCPU(&(0x7f0000dd4000/0x3000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x5) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) eventfd2(0x0, 0x0) mmap$KVM_VCPU(0x0, 0x50000, 0x2000002, 0x10031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r6, 0x4020aeae, &(0x7f0000000100)={0x5, 0x18}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x77) ioctl$KVM_GET_ONE_REG(r6, 0x4010aeab, &(0x7f0000000140)=@arm64_sve={0x603000000013df02, 0x0}) r8 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r3, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r3, 0x0) r9 = eventfd2(0x0, 0x0) close(r9) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) write$eventfd(r9, &(0x7f0000000180)=0x5, 0xfffffde3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0) 1m57.241844753s ago: executing program 3 (id=509): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0xd7, 0x80000001}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x25) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000440)={0x0, &(0x7f0000000480)=[@its_setup={0x82, 0x28, {0x2, 0x4, 0x1}}, @its_setup={0x82, 0x28, {0x3, 0x1, 0x3ee}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r3, 0x1, 0x100) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000500)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000540)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000580)=0x8080000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r7 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000300)={0x4, 0xffffffffffffffff, 0x1}) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) r11 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x1800002, 0x11, r10, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r11, 0x20, &(0x7f0000000340)="f3011813013c36000000004ee28398f8964346cbd98700000001908b9463d139887a01002e25000000000000ffff00", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r10, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x40305839, &(0x7f00000003c0)=@attr_other={0x0, 0x0, 0xfffffffffffffff7, 0x0}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) ioctl$KVM_SET_DEVICE_ATTR_vm(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x4, 0x81, &(0x7f0000000200)=0x971}) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r13 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) r15 = syz_kvm_setup_syzos_vm$arm64(r14, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r15, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) r16 = syz_kvm_vgic_v3_setup(r14, 0x1, 0xc0) ioctl$KVM_SET_DEVICE_ATTR(r16, 0x4018aee1, &(0x7f0000000100)=@attr_riscv64=@attr_imsic={0x0, 0x1, 0x9c, &(0x7f0000000180)=0x9}) 1m32.914882647s ago: executing program 6 (id=510): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000380)={0xffffffffffffffff, 0xd7, 0x80000001}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000140), 0x300, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0x0, &(0x7f00000004c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x4000000012) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x42) syz_kvm_setup_cpu$arm64(r4, r5, &(0x7f0000bff000/0x400000)=nil, &(0x7f0000000500)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r5, 0x4010aeab, &(0x7f0000000540)=@arm64_bitmap={0x6030000000162001, 0x0}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3f) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x4eed40, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x4010, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0xf, 0x32, 0xffffffffffffffff, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x17) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) r10 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x1800002, 0x11, r9, 0x0) syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f000000d000/0x400000)=nil) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = openat$kvm(0x0, &(0x7f0000000400), 0x80, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x2e) r15 = ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r14, r15, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000440)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r15, 0x4010aeac, &(0x7f0000000480)=@arm64_core={0x6030000000100022, 0x0}) r16 = ioctl$KVM_CREATE_GUEST_MEMFD(r12, 0xc040aed4, &(0x7f0000000200)={0x200001fe0000}) ioctl$KVM_SET_USER_MEMORY_REGION2(r12, 0x40a0ae49, &(0x7f0000000240)={0x4, 0x4, 0x6000, 0xa7000, &(0x7f0000ffc000/0x2000)=nil, 0x0, r16}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r10, 0x20, &(0x7f0000000180)="f3011813013c36000000004ee28398f8964346cbd98700000001908b9463d139887a01002e25000000000000ffff00", 0x0, 0x48) 1m32.876182611s ago: executing program 3 (id=511): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x40000000, 0x80000) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x2, r4, 0x3}) r5 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000140)={0x7, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000180)=@attr_arm64={0x0, 0x4, 0x0, 0x0}) r8 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r11, 0x80111500, 0xfffffffffffff000) openat$kvm(0x0, &(0x7f0000000400), 0x4000, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000440)={0x4, 0x0, [{0x2, 0x4, 0x0, 0x0, @sint={0x65, 0x2}}, {0x0, 0x2, 0x0, 0x0, @irqchip={0x5, 0x3}}, {0x9, 0x5, 0x1, 0x0, @msi={0x2, 0x5, 0x800}}, {0x1, 0x3, 0x0, 0x0, @adapter={0xc, 0xfffffffffffffff8, 0x676d, 0x3, 0xff}}]}) ioctl$KVM_CAP_HALT_POLL(r9, 0x4068aea3, &(0x7f00000002c0)={0xb6, 0x0, 0x7}) r12 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000340)={0x0, &(0x7f0000000380)=[@code={0xa, 0x18, {"7f2003d5"}}], 0x18}, 0x0, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r9, 0xc008ae67, &(0x7f00000003c0)={0x0, 0x81}) r13 = eventfd2(0x0, 0x0) r14 = eventfd2(0x8801, 0x800) r15 = eventfd2(0x3ff, 0x0) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f00000001c0)={r15, 0x5, 0x2, r15}) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000200)={r14, 0x1, 0x2, r15}) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000240)={r13, 0x1c7, 0x2, r13}) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000280)={0x5, 0x7000, 0x4, r4, 0xa}) close(0x4) munmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000) 1m4.419042169s ago: executing program 3 (id=512): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0xc8}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x37) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f0000000280)={0xdf, 0x0, 0xa2000}) ioctl$KVM_CAP_DIRTY_LOG_RING_WITH_BITMAP(r1, 0x4068aea3, &(0x7f0000000400)={0xe1, 0x0, 0x5f000}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000000c0)=@x86={0x11, 0x8, 0xf, 0x0, 0x5, 0x6, 0x6, 0x6, 0x74, 0x86, 0xdd, 0x68, 0x0, 0x209, 0x0, 0x0, 0x3, 0x5, 0x5, '\x00', 0x1, 0x400000000002}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000100)={0x4, 0x0, [{0x1, 0x1, 0x0, 0x0, @irqchip={0x8, 0x9}}, {0x9, 0x3, 0x1, 0x0, @sint={0xc30, 0x2}}, {0x0, 0x2, 0x0, 0x0, @msi={0x83, 0x4, 0x804, 0x6}}, {0x0, 0x0, 0x1, 0x0, @adapter={0x3, 0x5, 0x80000001, 0x7f, 0xc}}]}) write$eventfd(r3, &(0x7f0000000200)=0x3, 0x50) mmap$KVM_VCPU(0x0, 0x50000, 0x2000002, 0x10031, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_SIGNAL_MASK(r6, 0x4004ae8b, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000300)="fb4149dd033b8986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67525673312b01040000000000002627e7000000000000000200", 0x0, 0xfffffffffffffe73) mmap$KVM_VCPU(0x0, 0x50000, 0x2000002, 0x10031, 0xffffffffffffffff, 0x0) 1m4.418316809s ago: executing program 6 (id=513): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000180), 0x121802, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x22) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000140)={0x0, 0x0}, 0x0, 0x0) (async, rerun: 64) r6 = openat$kvm(0x0, &(0x7f0000000380), 0x0, 0x0) (rerun: 64) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f00000003c0)={0x7, 0xffffffffffffffff, 0x1}) ioctl$KVM_HAS_DEVICE_ATTR(r8, 0x4018aee3, &(0x7f0000000400)=@attr_riscv64=@attr_config={0x0, 0x1, 0x0, &(0x7f0000000240)=0x4}) (async) r9 = syz_kvm_vgic_v3_setup(r3, 0x1, 0x100) (async, rerun: 64) r10 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) (rerun: 64) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f00000001c0)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f0000000200)=@attr_other={0x0, 0x2, 0x101, &(0x7f00000000c0)=0x405b}) (async, rerun: 64) ioctl$KVM_GET_DEVICE_ATTR(r12, 0x4018aee2, &(0x7f0000000280)=@attr_other={0x0, 0x8, 0x100000000, &(0x7f00000002c0)=0x1000}) (async, rerun: 64) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (async, rerun: 32) r13 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x33) (rerun: 32) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r14, 0x4020aeae, &(0x7f00000004c0)={0x5, 0x8}) ioctl$KVM_SET_ONE_REG(r14, 0x4010aeac, &(0x7f0000000500)=@arm64_core={0x6030000000100050, &(0x7f0000000540)=0x11}) close(r9) (async, rerun: 64) r15 = ioctl$KVM_GET_STATS_FD_cpu(r5, 0xaece) (rerun: 64) ioctl$KVM_SET_DEVICE_ATTR(r15, 0x4018aee1, &(0x7f0000000080)=@attr_riscv64=@attr_addr={0x0, 0x1, @aplic, &(0x7f0000000300)=0x3}) close(0x4) close(0x5) ioctl$KVM_REGISTER_COALESCED_MMIO(r7, 0x4010ae67, &(0x7f0000000440)={0x1ffc, 0x114000, 0x1}) (async, rerun: 64) r16 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (rerun: 64) syz_kvm_setup_cpu$arm64(r1, r16, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000000)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) 47.027980894s ago: executing program 3 (id=514): r0 = openat$kvm(0x0, &(0x7f0000000200), 0x500, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xfffffffffdfffffe) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000240)={0x0, &(0x7f0000000280)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x1}}], 0x50}, 0x0, 0x0) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000000)=0x5) syz_kvm_vgic_v3_setup(r1, 0xfffffffffffffffd, 0x120) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000300)={0x8}) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000a48000/0x400000)=nil) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x25) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000080)={0x8}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000140), 0x103080, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) r8 = syz_kvm_vgic_v3_setup(r7, 0x1, 0x40) ioctl$KVM_GET_DEVICE_ATTR(r8, 0x4018aee2, &(0x7f0000000180)=@attr_other={0x0, 0x6, 0xb2, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000000c0)={0x5, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000100)={0x8, 0xffffffffffffffff, 0x1}) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x4f832, 0xffffffffffffffff, 0x1000000) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000340)={0xffffffffffffffff, 0xc8}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x181900, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f00000003c0)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(0x0, 0x50000, 0x3, 0x102031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r11, 0x800454dd, 0x16) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) 18.738152591s ago: executing program 37 (id=513): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000180), 0x121802, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x22) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000140)={0x0, 0x0}, 0x0, 0x0) (async, rerun: 64) r6 = openat$kvm(0x0, &(0x7f0000000380), 0x0, 0x0) (rerun: 64) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f00000003c0)={0x7, 0xffffffffffffffff, 0x1}) ioctl$KVM_HAS_DEVICE_ATTR(r8, 0x4018aee3, &(0x7f0000000400)=@attr_riscv64=@attr_config={0x0, 0x1, 0x0, &(0x7f0000000240)=0x4}) (async) r9 = syz_kvm_vgic_v3_setup(r3, 0x1, 0x100) (async, rerun: 64) r10 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) (rerun: 64) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f00000001c0)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f0000000200)=@attr_other={0x0, 0x2, 0x101, &(0x7f00000000c0)=0x405b}) (async, rerun: 64) ioctl$KVM_GET_DEVICE_ATTR(r12, 0x4018aee2, &(0x7f0000000280)=@attr_other={0x0, 0x8, 0x100000000, &(0x7f00000002c0)=0x1000}) (async, rerun: 64) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (async, rerun: 32) r13 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x33) (rerun: 32) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r14, 0x4020aeae, &(0x7f00000004c0)={0x5, 0x8}) ioctl$KVM_SET_ONE_REG(r14, 0x4010aeac, &(0x7f0000000500)=@arm64_core={0x6030000000100050, &(0x7f0000000540)=0x11}) close(r9) (async, rerun: 64) r15 = ioctl$KVM_GET_STATS_FD_cpu(r5, 0xaece) (rerun: 64) ioctl$KVM_SET_DEVICE_ATTR(r15, 0x4018aee1, &(0x7f0000000080)=@attr_riscv64=@attr_addr={0x0, 0x1, @aplic, &(0x7f0000000300)=0x3}) close(0x4) close(0x5) ioctl$KVM_REGISTER_COALESCED_MMIO(r7, 0x4010ae67, &(0x7f0000000440)={0x1ffc, 0x114000, 0x1}) (async, rerun: 64) r16 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (rerun: 64) syz_kvm_setup_cpu$arm64(r1, r16, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000000)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) 0s ago: executing program 38 (id=514): r0 = openat$kvm(0x0, &(0x7f0000000200), 0x500, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xfffffffffdfffffe) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000240)={0x0, &(0x7f0000000280)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x1}}], 0x50}, 0x0, 0x0) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000000)=0x5) syz_kvm_vgic_v3_setup(r1, 0xfffffffffffffffd, 0x120) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000300)={0x8}) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000a48000/0x400000)=nil) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x25) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000080)={0x8}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000140), 0x103080, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) r8 = syz_kvm_vgic_v3_setup(r7, 0x1, 0x40) ioctl$KVM_GET_DEVICE_ATTR(r8, 0x4018aee2, &(0x7f0000000180)=@attr_other={0x0, 0x6, 0xb2, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000000c0)={0x5, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000100)={0x8, 0xffffffffffffffff, 0x1}) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x4f832, 0xffffffffffffffff, 0x1000000) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000340)={0xffffffffffffffff, 0xc8}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x181900, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f00000003c0)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(0x0, 0x50000, 0x3, 0x102031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r11, 0x800454dd, 0x16) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) kernel console output (not intermixed with test programs): [ 364.359441][ T24] audit: type=1400 audit(363.540:74): avc: denied { write } for pid=3265 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 368.483600][ T24] audit: type=1400 audit(367.660:75): avc: denied { write } for pid=3269 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 386.637513][ T24] audit: type=1400 audit(385.810:76): avc: denied { read } for pid=3218 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 394.073653][ T24] audit: type=1400 audit(393.250:77): avc: denied { write } for pid=3278 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 399.317921][ T24] audit: type=1400 audit(398.460:78): avc: denied { write } for pid=3281 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 402.570877][ T3218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.406764][ T24] audit: type=1400 audit(409.560:79): avc: denied { write } for pid=3285 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 414.053354][ T24] audit: type=1400 audit(413.230:80): avc: denied { write } for pid=3288 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 423.109402][ T24] audit: type=1400 audit(422.260:81): avc: denied { write } for pid=3292 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 426.813506][ T24] audit: type=1400 audit(425.970:82): avc: denied { write } for pid=3295 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 438.349413][ T24] audit: type=1400 audit(437.520:83): avc: denied { write } for pid=3301 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 442.119814][ T24] audit: type=1400 audit(441.280:84): avc: denied { write } for pid=3304 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 444.604302][ T3218] eql: remember to turn off Van-Jacobson compression on your slave devices [ 453.782287][ T24] audit: type=1400 audit(452.960:85): avc: denied { write } for pid=3310 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 458.457635][ T24] audit: type=1400 audit(457.570:86): avc: denied { write } for pid=3313 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 475.081638][ T24] audit: type=1400 audit(474.260:87): avc: denied { write } for pid=3320 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 478.830193][ T24] audit: type=1400 audit(478.010:88): avc: denied { write } for pid=3323 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 484.327485][ T24] audit: type=1400 audit(483.450:89): avc: denied { write } for pid=3325 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 487.962580][ T24] audit: type=1400 audit(487.140:90): avc: denied { write } for pid=3328 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 497.924471][ T24] audit: type=1400 audit(497.100:91): avc: denied { write } for pid=3333 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 501.588001][ T24] audit: type=1400 audit(500.740:92): avc: denied { write } for pid=3336 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 506.694835][ T24] audit: type=1400 audit(505.870:93): avc: denied { write } for pid=3338 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 510.406490][ T24] audit: type=1400 audit(509.570:94): avc: denied { write } for pid=3341 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 534.443405][ T24] audit: type=1400 audit(533.620:95): avc: denied { write } for pid=3352 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 538.072453][ T24] audit: type=1400 audit(537.250:96): avc: denied { write } for pid=3355 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 547.799438][ T24] audit: type=1400 audit(546.980:97): avc: denied { write } for pid=3359 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 551.636465][ T24] audit: type=1400 audit(550.810:98): avc: denied { write } for pid=3362 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 567.733634][ T24] audit: type=1400 audit(566.910:99): avc: denied { write } for pid=3367 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 572.610213][ T24] audit: type=1400 audit(571.760:100): avc: denied { write } for pid=3370 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:35013' (ED25519) to the list of known hosts. [ 585.088074][ T24] audit: type=1400 audit(584.250:101): avc: denied { name_bind } for pid=3375 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 588.030503][ T24] audit: type=1400 audit(587.180:102): avc: denied { execute } for pid=3376 comm="sh" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 588.063445][ T24] audit: type=1400 audit(587.240:103): avc: denied { execute_no_trans } for pid=3376 comm="sh" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 619.092043][ T24] audit: type=1400 audit(618.270:104): avc: denied { mounton } for pid=3376 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 619.129055][ T24] audit: type=1400 audit(618.300:105): avc: denied { mount } for pid=3376 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 619.208224][ T3376] cgroup: Unknown subsys name 'net' [ 619.260926][ T24] audit: type=1400 audit(618.440:106): avc: denied { unmount } for pid=3376 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 619.681278][ T3376] cgroup: Unknown subsys name 'cpuset' [ 619.793707][ T3376] cgroup: Unknown subsys name 'rlimit' [ 620.584890][ T24] audit: type=1400 audit(619.760:107): avc: denied { setattr } for pid=3376 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 620.608755][ T24] audit: type=1400 audit(619.770:108): avc: denied { mounton } for pid=3376 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 620.630253][ T24] audit: type=1400 audit(619.790:109): avc: denied { mount } for pid=3376 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 621.614663][ T3379] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 621.633951][ T24] audit: type=1400 audit(620.810:110): avc: denied { relabelto } for pid=3379 comm="mkswap" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 621.663953][ T24] audit: type=1400 audit(620.840:111): avc: denied { write } for pid=3379 comm="mkswap" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 621.843854][ T24] audit: type=1400 audit(621.020:112): avc: denied { read } for pid=3376 comm="syz-executor" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 621.870271][ T24] audit: type=1400 audit(621.040:113): avc: denied { open } for pid=3376 comm="syz-executor" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 621.921215][ T3376] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 677.147758][ T24] audit: type=1400 audit(676.320:114): avc: denied { execmem } for pid=3380 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 680.720672][ T24] audit: type=1400 audit(679.900:116): avc: denied { read } for pid=3382 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 680.742332][ T24] audit: type=1400 audit(679.890:115): avc: denied { open } for pid=3383 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 680.817256][ T24] audit: type=1400 audit(679.970:117): avc: denied { mounton } for pid=3382 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 681.037546][ T24] audit: type=1400 audit(680.210:118): avc: denied { module_request } for pid=3382 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 681.043310][ T24] audit: type=1400 audit(680.220:119): avc: denied { module_request } for pid=3383 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 682.013428][ T24] audit: type=1400 audit(681.190:120): avc: denied { sys_module } for pid=3382 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 688.576470][ T24] audit: type=1400 audit(687.750:122): avc: denied { create } for pid=3383 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 688.603423][ T24] audit: type=1400 audit(687.740:121): avc: denied { create } for pid=3382 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 689.177542][ T24] audit: type=1400 audit(688.350:123): avc: denied { write } for pid=3383 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 689.383243][ T3383] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 689.399255][ T24] audit: type=1400 audit(688.580:124): avc: denied { read } for pid=3383 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 689.429875][ T3382] rxe_eth0 speed is unknown, defaulting to 1000 [ 689.530206][ T3382] rxe_eth0 speed is unknown, defaulting to 1000 [ 689.636666][ T3382] rxe_eth0 speed is unknown, defaulting to 1000 [ 697.749444][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 697.763347][ T3382] infiniband rxe0: set active [ 697.763804][ T3382] infiniband rxe0: added rxe_eth0 [ 699.102791][ T3382] RDS/IB: rxe0: added [ 699.147923][ T3382] smc: adding ib device rxe0 with port count 1 [ 699.149265][ T3382] smc: ib device rxe0 port 1 has no pnetid [ 699.167799][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 699.267922][ T3382] rxe_eth0 speed is unknown, defaulting to 1000 [ 708.861320][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 711.713439][ T3382] rxe_eth0 speed is unknown, defaulting to 1000 [ 713.256208][ T24] audit: type=1400 audit(712.400:125): avc: denied { write } for pid=3423 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 717.298329][ T24] audit: type=1400 audit(716.460:126): avc: denied { write } for pid=3431 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 719.218994][ T3383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 719.452822][ T3383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 731.288806][ T3383] hsr_slave_0: entered promiscuous mode [ 731.333557][ T3383] hsr_slave_1: entered promiscuous mode [ 735.883647][ T3382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 736.059388][ T3382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 738.902405][ T24] audit: type=1400 audit(738.050:127): avc: denied { create } for pid=3383 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 738.966753][ T24] audit: type=1400 audit(738.140:128): avc: denied { write } for pid=3383 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 738.987954][ T24] audit: type=1400 audit(738.160:129): avc: denied { read } for pid=3383 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 739.071205][ T3383] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 739.252684][ T3383] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 739.348249][ T3383] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 739.490549][ T3383] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 739.553332][ T3383] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 739.718803][ T3383] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 739.794182][ T3383] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 739.894300][ T3383] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 749.421176][ T3382] hsr_slave_0: entered promiscuous mode [ 749.443180][ T3382] hsr_slave_1: entered promiscuous mode [ 749.461069][ T3382] debugfs: 'hsr0' already exists in 'hsr' [ 749.462487][ T3382] Cannot create hsr debugfs directory [ 752.073202][ T3383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 757.501160][ T3382] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 757.680179][ T3382] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 757.742463][ T3382] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 757.921350][ T3382] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 757.984350][ T3382] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 758.199420][ T3382] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 758.270785][ T3382] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 758.391027][ T3382] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 775.993236][ T3382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 803.503930][ T24] audit: type=1400 audit(802.680:130): avc: denied { write } for pid=3534 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 808.827768][ T24] audit: type=1400 audit(807.980:131): avc: denied { write } for pid=3543 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 808.900330][ T3383] veth0_vlan: entered promiscuous mode [ 809.679340][ T3383] veth1_vlan: entered promiscuous mode [ 812.044247][ T3383] veth0_macvtap: entered promiscuous mode [ 812.422629][ T3383] veth1_macvtap: entered promiscuous mode [ 814.629116][ T3496] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.630948][ T3496] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.631608][ T3496] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.632216][ T3496] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.919488][ T24] audit: type=1400 audit(816.100:132): avc: denied { mount } for pid=3383 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 817.088545][ T24] audit: type=1400 audit(816.260:133): avc: denied { mounton } for pid=3383 comm="syz-executor" path="/syzkaller.1CJijU/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 817.198166][ T24] audit: type=1400 audit(816.370:134): avc: denied { mount } for pid=3383 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 817.442105][ T24] audit: type=1400 audit(816.620:135): avc: denied { mounton } for pid=3383 comm="syz-executor" path="/syzkaller.1CJijU/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 817.537868][ T24] audit: type=1400 audit(816.680:136): avc: denied { mounton } for pid=3383 comm="syz-executor" path="/syzkaller.1CJijU/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 817.824523][ T24] audit: type=1400 audit(817.000:137): avc: denied { unmount } for pid=3383 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 818.029429][ T24] audit: type=1400 audit(817.200:138): avc: denied { mounton } for pid=3383 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1548 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 818.092845][ T24] audit: type=1400 audit(817.270:139): avc: denied { mount } for pid=3383 comm="syz-executor" name="/" dev="gadgetfs" ino=3757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 821.570667][ T24] audit: type=1400 audit(820.740:140): avc: denied { mounton } for pid=3383 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 821.628594][ T24] audit: type=1400 audit(820.790:141): avc: denied { mount } for pid=3383 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 822.561178][ T3383] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 823.656800][ T24] audit: type=1400 audit(822.780:142): avc: denied { read } for pid=3383 comm="syz-executor" name="loop1" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 823.657586][ T24] audit: type=1400 audit(822.830:143): avc: denied { open } for pid=3383 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 823.740459][ T24] audit: type=1400 audit(822.830:144): avc: denied { ioctl } for pid=3383 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=637 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 833.129214][ T3382] veth0_vlan: entered promiscuous mode [ 833.753974][ T3382] veth1_vlan: entered promiscuous mode [ 834.053522][ T24] audit: type=1400 audit(833.230:145): avc: denied { read } for pid=3557 comm="syz.1.2" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 834.126639][ T24] audit: type=1400 audit(833.300:146): avc: denied { open } for pid=3557 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 834.837531][ T24] audit: type=1400 audit(834.010:147): avc: denied { ioctl } for pid=3557 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 836.210788][ T3382] veth0_macvtap: entered promiscuous mode [ 836.760980][ T3382] veth1_macvtap: entered promiscuous mode [ 840.140049][ T3496] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.142767][ T3496] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.278540][ T3467] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.281382][ T3467] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.197486][ T24] audit: type=1400 audit(853.360:148): avc: denied { write } for pid=3571 comm="syz.1.4" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 883.054724][ T24] audit: type=1400 audit(882.230:149): avc: denied { execute } for pid=3599 comm="syz.0.9" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=4432 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 937.788747][ T24] audit: type=1400 audit(936.960:150): avc: denied { append } for pid=3645 comm="syz.1.19" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 998.980561][ T3693] kvm [3693]: Failed to find VMA for hva 0x21016000 [ 1037.571638][ T24] audit: type=1400 audit(1036.670:151): avc: denied { mmap_zero } for pid=3714 comm="syz.0.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 1068.456147][ T24] audit: type=1400 audit(1067.620:152): avc: denied { execute } for pid=3737 comm="syz.1.50" path=2F32362F23313438202864656C6574656429 dev="tmpfs" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1121.864772][ T3776] kvm [3776]: Failed to find VMA for hva 0x21016000 [ 1121.963884][ T3776] kvm [3776]: Failed to find VMA for hva 0x21016000 [ 1137.247284][ T24] audit: type=1400 audit(1136.260:153): avc: denied { map } for pid=3784 comm="syz.0.63" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1137.323418][ T24] audit: type=1400 audit(1136.500:154): avc: denied { execute } for pid=3784 comm="syz.0.63" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1138.518149][ T24] audit: type=1400 audit(1137.680:155): avc: denied { write } for pid=3785 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1146.580722][ T24] audit: type=1400 audit(1145.710:156): avc: denied { write } for pid=3799 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1213.922656][ T24] audit: type=1400 audit(1213.090:157): avc: denied { create } for pid=3853 comm="syz.0.77" anonclass=[kvm-gmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1236.220824][ T24] audit: type=1400 audit(1235.390:158): avc: denied { ioctl } for pid=3870 comm="syz.0.83" path="net:[4026532731]" dev="nsfs" ino=4026532731 ioctlcmd=0xb708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1245.119381][ T24] audit: type=1400 audit(1244.290:159): avc: denied { map } for pid=3877 comm="syz.0.85" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=8647 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1245.207781][ T24] audit: type=1400 audit(1244.370:160): avc: denied { read } for pid=3877 comm="syz.0.85" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=8647 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1469.337282][ T24] audit: type=1400 audit(1468.500:161): avc: denied { write } for pid=3991 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1476.550827][ T24] audit: type=1400 audit(1475.700:162): avc: denied { write } for pid=4002 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1486.299181][ T4010] kvm [4010]: Failed to find VMA for hva 0x2041c000 [ 1487.156404][ T24] audit: type=1400 audit(1486.330:163): avc: denied { map } for pid=4009 comm="syz.0.123" path="pipe:[2765]" dev="pipefs" ino=2765 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1700.906325][ T24] audit: type=1400 audit(1700.060:164): avc: denied { write } for pid=4149 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1706.249802][ T24] audit: type=1400 audit(1705.430:165): avc: denied { write } for pid=4157 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1726.800839][ T3496] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1728.036917][ T3496] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1729.127430][ T3496] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1730.943319][ T3496] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1751.160624][ T3496] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1751.542704][ T3496] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1751.800041][ T3496] bond0 (unregistering): Released all slaves [ 1763.073830][ T4165] rxe_eth0 speed is unknown, defaulting to 1000 [ 1769.732023][ T24] audit: type=1400 audit(1768.900:166): avc: denied { write } for pid=4191 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1772.026810][ T3496] hsr_slave_0: left promiscuous mode [ 1772.107112][ T3496] hsr_slave_1: left promiscuous mode [ 1772.676808][ T3496] veth1_macvtap: left promiscuous mode [ 1772.678833][ T3496] veth0_macvtap: left promiscuous mode [ 1772.737921][ T3496] veth1_vlan: left promiscuous mode [ 1772.739896][ T3496] veth0_vlan: left promiscuous mode [ 1776.898975][ T24] audit: type=1400 audit(1776.040:167): avc: denied { write } for pid=4194 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1801.011962][ T3218] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1818.363633][ T24] audit: type=1400 audit(1817.540:168): avc: denied { write } for pid=4214 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1824.134505][ T24] audit: type=1400 audit(1823.310:169): avc: denied { write } for pid=4224 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1828.711283][ T3218] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1839.810619][ T4165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1840.030452][ T4165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1840.476444][ T24] audit: type=1400 audit(1839.640:170): avc: denied { write } for pid=4240 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1842.621455][ T4239] kvm [4239]: Failed to find VMA for hva 0x20c79000 [ 1846.382492][ T24] audit: type=1400 audit(1845.560:171): avc: denied { write } for pid=4248 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1850.510558][ T3218] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1870.866951][ T4165] hsr_slave_0: entered promiscuous mode [ 1870.963355][ T4165] hsr_slave_1: entered promiscuous mode [ 1871.078924][ T4165] debugfs: 'hsr0' already exists in 'hsr' [ 1871.079371][ T4165] Cannot create hsr debugfs directory [ 1871.568273][ T24] audit: type=1400 audit(1870.680:172): avc: denied { write } for pid=4269 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1877.682606][ T24] audit: type=1400 audit(1876.850:173): avc: denied { write } for pid=4277 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1882.623011][ T3218] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1887.909421][ T4165] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1888.318993][ T4165] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1888.422631][ T4165] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1888.743539][ T4165] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1888.867769][ T4165] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1889.048262][ T4165] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1889.147224][ T4165] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1889.264763][ T4165] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1914.622621][ T4165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1916.824019][ T24] audit: type=1400 audit(1915.980:174): avc: denied { write } for pid=4313 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1926.668381][ T24] audit: type=1400 audit(1925.820:175): avc: denied { write } for pid=4319 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1947.603260][ T24] audit: type=1400 audit(1946.780:176): avc: denied { write } for pid=4336 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1954.383910][ T24] audit: type=1400 audit(1953.560:177): avc: denied { write } for pid=4347 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1969.106434][ T24] audit: type=1400 audit(1968.260:178): avc: denied { write } for pid=4359 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1978.117812][ T24] audit: type=1400 audit(1977.270:179): avc: denied { write } for pid=4369 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1993.043300][ T24] audit: type=1400 audit(1992.140:180): avc: denied { write } for pid=4378 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2001.216511][ T24] audit: type=1400 audit(2000.370:181): avc: denied { write } for pid=4389 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2012.593495][ T4165] veth0_vlan: entered promiscuous mode [ 2013.231512][ T4165] veth1_vlan: entered promiscuous mode [ 2017.039101][ T4165] veth0_macvtap: entered promiscuous mode [ 2017.817223][ T4165] veth1_macvtap: entered promiscuous mode [ 2021.731410][ T4015] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2022.039157][ T4334] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2022.044267][ T4334] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2022.118499][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2137.562158][ T24] audit: type=1400 audit(2136.740:182): avc: denied { write } for pid=4475 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2146.079754][ T24] audit: type=1400 audit(2145.210:183): avc: denied { write } for pid=4484 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2319.232244][ T4596] kvm [4595]: Unsupported guest access at: eeef0000 [ 2319.232244][ T4596] { Op0( 2), Op1( 0), CRn( 0), CRm( 6), Op2( 2), func_read }, [ 2323.123526][ T4599] kvm [4599]: Failed to find VMA for hva 0x20c01000 [ 2477.399569][ T4705] kvm [4705]: Failed to find VMA for hva 0x20c79000 [ 2524.283300][ T24] audit: type=1400 audit(2523.450:184): avc: denied { write } for pid=4732 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2534.172424][ T24] audit: type=1400 audit(2533.310:185): avc: denied { write } for pid=4741 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2549.354304][ T4747] kvm [4747]: Failed to find VMA for hva 0x20c01000 [ 2623.892494][ T4764] rxe_eth0 speed is unknown, defaulting to 1000 [ 2638.808399][ T4772] rxe_eth0 speed is unknown, defaulting to 1000 [ 2681.088224][ T4764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2681.932254][ T4764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2692.717973][ T4772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2693.480243][ T4772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2713.590486][ T4764] hsr_slave_0: entered promiscuous mode [ 2713.662860][ T4764] hsr_slave_1: entered promiscuous mode [ 2713.748134][ T4764] debugfs: 'hsr0' already exists in 'hsr' [ 2713.748527][ T4764] Cannot create hsr debugfs directory [ 2718.977195][ T4795] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2720.789835][ T4795] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2722.699864][ T4795] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2724.154128][ T4795] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2731.132749][ T4772] hsr_slave_0: entered promiscuous mode [ 2731.181905][ T4772] hsr_slave_1: entered promiscuous mode [ 2731.257139][ T4772] debugfs: 'hsr0' already exists in 'hsr' [ 2731.257540][ T4772] Cannot create hsr debugfs directory [ 2737.166547][ T4795] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2737.413391][ T4795] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2737.593796][ T4795] bond0 (unregistering): Released all slaves [ 2747.208019][ T4764] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2747.663219][ T4764] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2747.837701][ T4764] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2748.170210][ T4764] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2749.094165][ T4764] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2749.361781][ T4764] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2750.427583][ T4764] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2750.790989][ T4764] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2754.020251][ T4795] hsr_slave_0: left promiscuous mode [ 2754.084482][ T4795] hsr_slave_1: left promiscuous mode [ 2754.431667][ T4795] veth1_macvtap: left promiscuous mode [ 2754.432424][ T4795] veth0_macvtap: left promiscuous mode [ 2754.433979][ T4795] veth1_vlan: left promiscuous mode [ 2754.462941][ T4795] veth0_vlan: left promiscuous mode [ 2755.434523][ T24] audit: type=1400 audit(2754.610:186): avc: denied { write } for pid=4839 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2761.261856][ T24] audit: type=1400 audit(2760.440:187): avc: denied { write } for pid=4846 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2778.441620][ T3218] 8021q: adding VLAN 0 to HW filter on device eth5 [ 2784.284191][ T4795] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2786.341763][ T4795] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2787.979979][ T4795] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2789.340465][ T4795] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2789.869809][ T4772] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2790.198526][ T4772] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2790.294641][ T4772] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2790.638429][ T4772] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2790.684170][ T4772] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2791.034941][ T4772] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2791.209471][ T4772] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2791.449551][ T4772] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2796.868911][ T24] audit: type=1400 audit(2796.030:188): avc: denied { write } for pid=4857 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2806.031653][ T24] audit: type=1400 audit(2805.200:189): avc: denied { write } for pid=4875 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2809.772258][ T4795] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2810.182787][ T4795] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2810.490110][ T4795] bond0 (unregistering): Released all slaves [ 2811.522683][ T3218] 8021q: adding VLAN 0 to HW filter on device eth6 [ 2817.949934][ T4764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2831.947569][ T4795] hsr_slave_0: left promiscuous mode [ 2832.027168][ T4795] hsr_slave_1: left promiscuous mode [ 2832.566238][ T4795] veth1_macvtap: left promiscuous mode [ 2832.566982][ T4795] veth0_macvtap: left promiscuous mode [ 2832.590196][ T4795] veth1_vlan: left promiscuous mode [ 2832.591495][ T4795] veth0_vlan: left promiscuous mode [ 2834.997697][ T24] audit: type=1400 audit(2834.090:190): avc: denied { write } for pid=4885 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2841.902991][ T24] audit: type=1400 audit(2841.080:191): avc: denied { write } for pid=4891 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2855.989571][ T3218] 8021q: adding VLAN 0 to HW filter on device eth7 [ 2860.233380][ T4772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2873.338244][ T24] audit: type=1400 audit(2872.510:192): avc: denied { write } for pid=4900 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2879.824756][ T24] audit: type=1400 audit(2879.000:193): avc: denied { write } for pid=4910 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2886.721574][ T3218] 8021q: adding VLAN 0 to HW filter on device eth8 [ 2903.721016][ T24] audit: type=1400 audit(2902.900:194): avc: denied { write } for pid=4923 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2911.056866][ T24] audit: type=1400 audit(2910.230:195): avc: denied { write } for pid=4934 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2915.601746][ T3218] 8021q: adding VLAN 0 to HW filter on device eth9 [ 2934.631369][ T24] audit: type=1400 audit(2933.780:196): avc: denied { write } for pid=4953 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2937.613932][ T4764] veth0_vlan: entered promiscuous mode [ 2938.679841][ T4764] veth1_vlan: entered promiscuous mode [ 2941.812200][ T4764] veth0_macvtap: entered promiscuous mode [ 2942.372743][ T4764] veth1_macvtap: entered promiscuous mode [ 2943.697844][ T24] audit: type=1400 audit(2942.860:197): avc: denied { write } for pid=4962 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2946.178237][ T4656] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2946.263609][ T4656] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2946.360251][ T4656] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2946.488711][ T4889] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2950.852833][ T3218] 8021q: adding VLAN 0 to HW filter on device eth10 [ 2973.823066][ T24] audit: type=1400 audit(2972.970:198): avc: denied { write } for pid=4977 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2980.837658][ T4772] veth0_vlan: entered promiscuous mode [ 2981.733173][ T4772] veth1_vlan: entered promiscuous mode [ 2983.022712][ T24] audit: type=1400 audit(2982.200:199): avc: denied { write } for pid=4987 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2985.420086][ T4772] veth0_macvtap: entered promiscuous mode [ 2986.008551][ T4772] veth1_macvtap: entered promiscuous mode [ 2990.107670][ T3415] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2990.123915][ T4889] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2990.288828][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2990.664152][ T3218] 8021q: adding VLAN 0 to HW filter on device eth12 [ 2990.844244][ T4015] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3014.903057][ T24] audit: type=1400 audit(3014.020:200): avc: denied { write } for pid=5003 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3027.559230][ T24] audit: type=1400 audit(3026.690:201): avc: denied { write } for pid=5013 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3035.974202][ T3218] 8021q: adding VLAN 0 to HW filter on device eth11 [ 3062.909386][ T24] audit: type=1400 audit(3062.010:202): avc: denied { write } for pid=5034 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3073.956620][ T24] audit: type=1400 audit(3073.050:203): avc: denied { write } for pid=5038 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3101.006933][ T24] audit: type=1400 audit(3100.150:204): avc: denied { write } for pid=5051 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3110.953765][ T24] audit: type=1400 audit(3110.130:205): avc: denied { write } for pid=5064 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3150.107093][ T24] audit: type=1400 audit(3149.280:206): avc: denied { write } for pid=5083 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3162.136711][ T24] audit: type=1400 audit(3161.260:207): avc: denied { write } for pid=5094 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3180.858656][ T24] audit: type=1400 audit(3180.020:208): avc: denied { write } for pid=5105 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3192.949235][ T24] audit: type=1400 audit(3192.100:209): avc: denied { write } for pid=5117 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3233.886424][ T24] audit: type=1400 audit(3232.950:210): avc: denied { write } for pid=5138 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3243.740168][ T24] audit: type=1400 audit(3242.890:211): avc: denied { write } for pid=5149 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3267.271266][ T24] audit: type=1400 audit(3266.440:212): avc: denied { write } for pid=5164 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3278.696307][ T24] audit: type=1400 audit(3277.840:213): avc: denied { write } for pid=5173 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3313.127739][ T24] audit: type=1400 audit(3312.290:214): avc: denied { write } for pid=5199 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3322.028186][ T24] audit: type=1400 audit(3321.200:215): avc: denied { write } for pid=5205 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3332.785878][ T24] audit: type=1400 audit(3331.960:216): avc: denied { write } for pid=5208 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3339.160633][ T24] audit: type=1400 audit(3338.320:217): avc: denied { write } for pid=5211 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3359.613962][ T4171] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3361.921642][ T4171] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3364.261363][ T4171] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3366.098559][ T24] audit: type=1400 audit(3365.250:218): avc: denied { write } for pid=5225 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3366.457842][ T4171] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3379.827127][ T24] audit: type=1400 audit(3378.960:219): avc: denied { write } for pid=5239 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3394.470273][ T24] audit: type=1400 audit(3393.600:220): avc: denied { setattr } for pid=5248 comm="syz.3.320" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 3395.074672][ T4171] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3395.464165][ T4171] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3395.910098][ T4171] bond0 (unregistering): Released all slaves [ 3406.787166][ T24] audit: type=1400 audit(3405.910:221): avc: denied { write } for pid=5251 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3417.948235][ T24] audit: type=1400 audit(3417.100:222): avc: denied { write } for pid=5261 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3418.160603][ T4171] hsr_slave_0: left promiscuous mode [ 3418.221944][ T4171] hsr_slave_1: left promiscuous mode [ 3418.736479][ T4171] veth1_macvtap: left promiscuous mode [ 3418.737266][ T4171] veth0_macvtap: left promiscuous mode [ 3418.747797][ T4171] veth1_vlan: left promiscuous mode [ 3418.749162][ T4171] veth0_vlan: left promiscuous mode [ 3456.779647][ T5224] rxe_eth0 speed is unknown, defaulting to 1000 [ 3474.714728][ T24] audit: type=1400 audit(3473.830:223): avc: denied { write } for pid=5288 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3482.179369][ T24] audit: type=1400 audit(3481.350:224): avc: denied { write } for pid=5293 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3488.754586][ T3218] 8021q: adding VLAN 0 to HW filter on device eth13 [ 3510.520133][ T24] audit: type=1400 audit(3509.690:225): avc: denied { write } for pid=5309 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3518.841294][ T24] audit: type=1400 audit(3517.990:226): avc: denied { write } for pid=5321 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3525.321467][ T3218] 8021q: adding VLAN 0 to HW filter on device eth14 [ 3526.710756][ T5224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3527.042119][ T5224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3546.726127][ T24] audit: type=1400 audit(3545.870:227): avc: denied { write } for pid=5336 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3556.352759][ T24] audit: type=1400 audit(3555.530:228): avc: denied { write } for pid=5347 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3564.290781][ T3218] 8021q: adding VLAN 0 to HW filter on device eth15 [ 3565.427103][ T5224] hsr_slave_0: entered promiscuous mode [ 3565.564592][ T5224] hsr_slave_1: entered promiscuous mode [ 3586.837208][ T24] audit: type=1400 audit(3585.990:229): avc: denied { write } for pid=5361 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3588.353573][ T5224] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 3588.744665][ T5224] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 3588.823585][ T5224] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 3589.318786][ T5224] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3589.482097][ T5224] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 3590.012603][ T5224] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 3590.249754][ T5224] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 3590.733631][ T5224] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 3597.090352][ T24] audit: type=1400 audit(3596.180:230): avc: denied { write } for pid=5374 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3604.394548][ T3218] 8021q: adding VLAN 0 to HW filter on device eth16 [ 3626.380386][ T5224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3666.434097][ T24] audit: type=1400 audit(3665.530:231): avc: denied { write } for pid=5416 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3678.228046][ T24] audit: type=1400 audit(3677.390:232): avc: denied { write } for pid=5428 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3699.294656][ T24] audit: type=1400 audit(3698.470:233): avc: denied { write } for pid=5439 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3707.997664][ T24] audit: type=1400 audit(3707.140:234): avc: denied { write } for pid=5450 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3732.311679][ T24] audit: type=1400 audit(3731.490:235): avc: denied { write } for pid=5463 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3744.437571][ T24] audit: type=1400 audit(3743.600:236): avc: denied { write } for pid=5474 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3762.406862][ T24] audit: type=1400 audit(3761.570:237): avc: denied { write } for pid=5485 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3772.198328][ T24] audit: type=1400 audit(3771.350:238): avc: denied { write } for pid=5495 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3781.873343][ T5224] veth0_vlan: entered promiscuous mode [ 3783.546721][ T5224] veth1_vlan: entered promiscuous mode [ 3788.291472][ T5224] veth0_macvtap: entered promiscuous mode [ 3789.349064][ T5224] veth1_macvtap: entered promiscuous mode [ 3794.744859][ T4656] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3794.857452][ T4656] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3794.858286][ T4656] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3794.858889][ T4656] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3796.050683][ T24] audit: type=1400 audit(3795.220:239): avc: denied { write } for pid=5508 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3808.588136][ T24] audit: type=1400 audit(3807.710:240): avc: denied { write } for pid=5514 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4042.291186][ T24] audit: type=1400 audit(4041.470:241): avc: denied { write } for pid=5639 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4056.166586][ T24] audit: type=1400 audit(4055.320:242): avc: denied { write } for pid=5651 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4290.591319][ T24] audit: type=1400 audit(4289.770:243): avc: denied { write } for pid=5747 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4302.064277][ T5228] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4303.090033][ T24] audit: type=1400 audit(4302.230:244): avc: denied { write } for pid=5759 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4304.284157][ T5228] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4306.481878][ T5228] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4308.423677][ T5228] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4332.474209][ T5228] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 4333.061193][ T5228] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 4333.292528][ T5228] bond0 (unregistering): Released all slaves [ 4337.633243][ T5746] rxe_eth0 speed is unknown, defaulting to 1000 [ 4362.017379][ T24] audit: type=1400 audit(4361.090:245): avc: denied { write } for pid=5788 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4366.011032][ T5228] hsr_slave_0: left promiscuous mode [ 4366.270412][ T5228] hsr_slave_1: left promiscuous mode [ 4366.880846][ T5228] veth1_macvtap: left promiscuous mode [ 4366.881666][ T5228] veth0_macvtap: left promiscuous mode [ 4366.904382][ T5228] veth1_vlan: left promiscuous mode [ 4366.931404][ T5228] veth0_vlan: left promiscuous mode [ 4373.073255][ T24] audit: type=1400 audit(4372.250:246): avc: denied { write } for pid=5793 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4412.889420][ T3218] 8021q: adding VLAN 0 to HW filter on device eth17 [ 4441.267386][ T24] audit: type=1400 audit(4440.380:247): avc: denied { write } for pid=5820 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4450.368282][ T24] audit: type=1400 audit(4449.540:248): avc: denied { write } for pid=5831 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4458.331803][ T3218] 8021q: adding VLAN 0 to HW filter on device eth18 [ 4470.458588][ T5746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4471.070195][ T5746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4483.518835][ T24] audit: type=1400 audit(4482.690:249): avc: denied { write } for pid=5850 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4493.620047][ T24] audit: type=1400 audit(4492.690:250): avc: denied { write } for pid=5863 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4500.264147][ T3218] 8021q: adding VLAN 0 to HW filter on device eth19 [ 4513.531591][ T5746] hsr_slave_0: entered promiscuous mode [ 4513.732855][ T5746] hsr_slave_1: entered promiscuous mode [ 4528.569169][ T24] audit: type=1400 audit(4527.690:251): avc: denied { write } for pid=5879 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4539.874867][ T24] audit: type=1400 audit(4539.050:252): avc: denied { write } for pid=5886 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4541.434535][ T5746] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 4541.978313][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 4542.170798][ T5746] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 4542.558553][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 4542.690346][ T5746] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 4543.069515][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 4543.188966][ T5746] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 4543.583876][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 4547.874448][ T3218] 8021q: adding VLAN 0 to HW filter on device eth20 [ 4576.928877][ T24] audit: type=1400 audit(4576.050:253): avc: denied { write } for pid=5911 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4581.169726][ T5746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4590.147649][ T24] audit: type=1400 audit(4589.210:254): avc: denied { write } for pid=5921 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4636.236440][ T24] audit: type=1400 audit(4635.400:255): avc: denied { write } for pid=5948 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4648.278164][ T24] audit: type=1400 audit(4647.450:256): avc: denied { write } for pid=5959 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4670.456895][ T24] audit: type=1400 audit(4669.560:257): avc: denied { write } for pid=5972 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4681.848689][ T24] audit: type=1400 audit(4680.950:258): avc: denied { write } for pid=5983 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4712.237883][ T24] audit: type=1400 audit(4711.380:259): avc: denied { write } for pid=5996 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4724.206834][ T24] audit: type=1400 audit(4723.380:260): avc: denied { write } for pid=6007 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4750.937031][ T24] audit: type=1400 audit(4750.100:261): avc: denied { write } for pid=6019 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4751.667690][ T5746] veth0_vlan: entered promiscuous mode [ 4753.192469][ T5746] veth1_vlan: entered promiscuous mode [ 4758.299477][ T5746] veth0_macvtap: entered promiscuous mode [ 4759.199320][ T5746] veth1_macvtap: entered promiscuous mode [ 4764.152921][ T4828] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 4764.431552][ T4889] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 4764.453285][ T5805] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 4764.454053][ T5805] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 4765.744359][ T24] audit: type=1400 audit(4764.820:262): avc: denied { write } for pid=6029 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5071.007020][ T24] audit: type=1400 audit(5070.170:263): avc: denied { write } for pid=6161 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5084.822734][ T24] audit: type=1400 audit(5083.990:264): avc: denied { write } for pid=6171 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5505.891359][ T24] audit: type=1400 audit(5505.060:265): avc: denied { write } for pid=6373 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5517.677133][ T24] audit: type=1400 audit(5516.830:266): avc: denied { write } for pid=6381 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5598.152742][ T6402] rxe_eth0 speed is unknown, defaulting to 1000 [ 5630.479807][ T6412] rxe_eth0 speed is unknown, defaulting to 1000 [ 5685.049884][ T6402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 5685.411259][ T6402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 5717.561259][ T6412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 5718.092978][ T6412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 5726.951407][ T6402] hsr_slave_0: entered promiscuous mode [ 5727.131336][ T6402] hsr_slave_1: entered promiscuous mode [ 5727.207330][ T6402] debugfs: 'hsr0' already exists in 'hsr' [ 5727.207709][ T6402] Cannot create hsr debugfs directory [ 5755.598948][ T6402] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 5756.088418][ T6402] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 5756.292482][ T6402] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 5756.774470][ T6402] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 5756.950683][ T6402] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 5757.254885][ T6402] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 5757.497914][ T6402] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 5757.850032][ T6402] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 5764.598677][ T6412] hsr_slave_0: entered promiscuous mode [ 5764.700763][ T6412] hsr_slave_1: entered promiscuous mode [ 5764.918274][ T6412] debugfs: 'hsr0' already exists in 'hsr' [ 5764.918663][ T6412] Cannot create hsr debugfs directory [ 5798.230281][ T6412] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 5798.823912][ T6412] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 5799.348780][ T6412] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 5799.991683][ T6412] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 5800.613977][ T6412] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 5801.120554][ T6412] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 5801.358885][ T6412] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 5801.921303][ T6412] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 5811.560715][ T6402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 5829.601152][ T24] audit: type=1400 audit(5828.780:267): avc: denied { write } for pid=6494 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5845.656572][ T24] audit: type=1400 audit(5844.810:268): avc: denied { write } for pid=6505 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5858.447470][ T6412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 5984.062775][ T26] INFO: task syz.3.514:6397 blocked for more than 430 seconds. [ 5984.063632][ T26] Not tainted syzkaller #0 [ 5984.063881][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 5984.064204][ T26] task:syz.3.514 state:D stack:0 pid:6397 tgid:6397 ppid:4764 task_flags:0x400040 flags:0x00000011 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 5984.293956][ T26] Call trace: [ 5984.294414][ T26] __switch_to+0x5e4/0xb74 (T) [ 5984.350007][ T26] __schedule+0x1e0c/0x38a4 [ 5984.350555][ T26] schedule+0x1b4/0x274 [ 5984.350854][ T26] schedule_timeout+0x68/0x1e4 [ 5984.351202][ T26] wait_for_completion+0x1bc/0x418 [ 5984.351512][ T26] __synchronize_srcu+0x1cc/0x20c [ 5984.351786][ T26] synchronize_srcu+0x668/0x8dc [ 5984.352045][ T26] mmu_notifier_unregister+0x33c/0x444 [ 5984.352340][ T26] kvm_put_kvm+0x69c/0xbbc [ 5984.352692][ T26] kvm_vm_release+0x58/0x78 [ 5984.352977][ T26] __fput+0x4b0/0x97c [ 5984.353319][ T26] ____fput+0x20/0x30 [ 5984.353665][ T26] task_work_run+0x1b8/0x254 [ 5984.354008][ T26] exit_to_user_mode_loop+0x110/0x188 [ 5984.354394][ T26] el0_svc+0x18c/0x240 [ 5984.354718][ T26] el0t_64_sync_handler+0x68/0xdc [ 5984.513196][ T26] el0t_64_sync+0x198/0x19c [ 5984.523961][ T26] [ 5984.523961][ T26] Showing all locks held in the system: [ 5984.524417][ T26] locks held by khungtaskd/26: 1, last CPU#0: [ 5984.524689][ T26] #0: ffff800088a7e858 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x4c/0x188 [ 5984.567733][ T26] locks held by getty/3248: 2, on CPU#0: [ 5984.567977][ T26] #0: 7ff00000134320a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x40/0x50 [ 5984.568873][ T26] #1: 63ff80008d7db2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x314/0x11f8 [ 5984.569765][ T26] locks held by syz-executor/3376: 2, last CPU#0: [ 5984.569965][ T26] #0: 06f0000017d25778 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0xf4/0xb64 [ 5984.570750][ T26] #1: ffff800088a7e858 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x50/0x22c [ 5984.571578][ T26] locks held by kworker/u4:5/4171: 3, last CPU#0: [ 5984.571770][ T26] #0: 25f000000dc34140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b8 [ 5984.572545][ T26] #1: ffff80008fd17ce8 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b8 [ 5984.573332][ T26] #2: b5f0000028cde258 (&devlink->lock_key#8){+.+.}-{4:4}, at: devl_trylock+0x24/0x34 [ 5984.574451][ T26] locks held by kworker/u4:9/4828: 2, on CPU#0: [ 5984.574651][ T26] #0: 25f000000dc34140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b8 [ 5984.877302][ T26] #1: ffff80008df67ce8 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b8 [ 5984.878214][ T26] locks held by kworker/u4:11/4889: 2, on CPU#0: [ 5984.878441][ T26] #0: 25f000000dc34140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b8 [ 5984.879202][ T26] #1: ffff80008f5a7ce8 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b8 [ 5984.880002][ T26] locks held by kworker/u4:6/5228: 3, last CPU#0: [ 5984.880217][ T26] #0: 25f000000dc34140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b8 [ 5984.880960][ T26] #1: ffff80008efb7ce8 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b8 [ 5984.881793][ T26] #2: b5f0000028cde258 (&devlink->lock_key#8){+.+.}-{4:4}, at: devl_trylock+0x24/0x34 [ 5984.882757][ T26] locks held by kworker/u4:0/5681: 3, last CPU#0: [ 5984.882947][ T26] #0: 25f000000dc34140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b8 [ 5984.883708][ T26] #1: ffff8000a1b87ce8 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b8 [ 5984.884485][ T26] #2: d4f000002750f258 (&devlink->lock_key#7){+.+.}-{4:4}, at: __mod_timer+0x5cc/0xe90 [ 5985.097918][ T26] locks held by kworker/u4:2/5761: 3, last CPU#0: [ 5985.098168][ T26] #0: 25f000000dc34140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b8 [ 5985.098976][ T26] #1: ffff8000a3e47ce8 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b8 [ 5985.099780][ T26] #2: d4f000002750f258 (&devlink->lock_key#7){+.+.}-{4:4}, at: devl_trylock+0x24/0x34 [ 5985.100745][ T26] locks held by syz.6.513/6393: 2, last CPU#0: [ 5985.100938][ T26] #0: ffff800088acc330 (srcu){.+.+}-{0:0}, at: __mmu_notifier_release+0x4e8/0x87c [ 5985.101858][ T26] #1: b0f0000020a21518 (&kvm->srcu){.+.+}-{0:0}, at: kvm_mmu_notifier_release+0x50/0xc4 [ 5985.102717][ T26] locks held by kworker/u4:7/6418: 3, last CPU#0: [ 5985.102912][ T26] #0: 25f000000dc34140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b8 [ 5985.103701][ T26] #1: ffff8000a1307ce8 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b8 [ 5985.104536][ T26] #2: 0bf000001efb4a58 (&devlink->lock_key#6){+.+.}-{4:4}, at: devl_trylock+0x24/0x34 [ 5985.287772][ T26] locks held by kworker/u4:12/6476: 2, last CPU#0: [ 5985.287994][ T26] #0: 15f000000dc33d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b8 [ 5985.288820][ T26] #1: ffff8000a13f7ce8 ((gc_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b8 [ 5985.289654][ T26] locks held by kworker/u4:13/6491: 3, last CPU#0: [ 5985.289864][ T26] #0: 25f000000dc34140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b8 [ 5985.290653][ T26] #1: ffff8000a1477ce8 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b8 [ 5985.291447][ T26] #2: 6bf0000027539a58 (&devlink->lock_key#4){+.+.}-{4:4}, at: devl_trylock+0x24/0x34 [ 5985.292342][ T26] locks held by kworker/u4:14/6548: 3, last CPU#0: [ 5985.292538][ T26] #0: 25f000000dc34140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b8 [ 5985.293310][ T26] #1: ffff8000a14a7ce8 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b8 [ 5985.294157][ T26] #2: b5f0000028cde258 (&devlink->lock_key#8){+.+.}-{4:4}, at: devl_trylock+0x24/0x34 [ 5985.490610][ T26] locks held by modprobe/6554: 1, last CPU#0: [ 5985.490924][ T26] #0: 51f000001367b460 (sb_writers#4){.+.+}-{0:0}, at: pick_link+0x9a0/0x1014 [ 5985.491909][ T26] locks held by modprobe/6555: 1, last CPU#0: [ 5985.492099][ T26] #0: 99f0000018fc76f8 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x12c/0x3cc [ 5985.589666][ T26] [ 5985.589903][ T26] ============================================= [ 5985.589903][ T26] [ 5985.590751][ T26] Kernel panic - not syncing: hung_task: blocked tasks [ 5985.595723][ T26] CPU: 0 UID: 0 PID: 26 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 5985.597424][ T26] Hardware name: linux,dummy-virt (DT) [ 5985.598391][ T26] Call trace: [ 5985.599206][ T26] show_stack+0x2c/0x3c (C) [ 5985.600225][ T26] __dump_stack+0x30/0x40 [ 5985.601033][ T26] dump_stack_lvl+0x30/0x12c [ 5985.602057][ T26] dump_stack+0x1c/0x28 [ 5985.603070][ T26] vpanic+0x4cc/0x844 [ 5985.603914][ T26] vpanic+0x0/0x844 [ 5985.604777][ T26] hung_task_panic+0x0/0x2c [ 5985.605689][ T26] kthread+0x4cc/0x514 [ 5985.606652][ T26] ret_from_fork+0x10/0x20 [ 5985.608424][ T26] Kernel Offset: disabled [ 5985.609211][ T26] CPU features: 0x0,00000000,00d1802f,df188f42,0afff61f [ 5985.610388][ T26] Memory Limit: none [ 5985.612659][ T26] Rebooting in 86400 seconds..