last executing test programs: 55m50.462955916s ago: executing program 1 (id=2): openat$kvm(0x0, &(0x7f0000000040), 0x800, 0x0) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) r0 = eventfd2(0x9, 0x80001) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x0, r0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r3, 0x400454e2, 0x1000110c23001c) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x26) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000580)=[@featur2={0x1, 0xe8}], 0x1) r8 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000b80)={0x0, 0x0}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1) r12 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r12, 0x4018aee1, 0x0) r13 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@hvc={0x32, 0x40, {0x84000003, [0x6, 0x0, 0x4, 0x9, 0x4d]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r13, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000000)=@x86={0x9, 0xe, 0x3, 0x0, 0x1b2, 0x99, 0x3, 0x9, 0x4, 0xa, 0x5, 0x0, 0x0, 0x6, 0x1, 0x11, 0x1, 0x9, 0xfb, '\x00', 0x97, 0x9}) ioctl$KVM_ARM_VCPU_INIT(0xffffffffffffffff, 0x4020aeae, &(0x7f0000000000)={0x5, 0x18}) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x4f832, 0xffffffffffffffff, 0x1000000) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xc, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x20000000) 55m47.300851125s ago: executing program 0 (id=1): openat$kvm(0x0, &(0x7f0000000080), 0x2a040, 0x0) (async) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}, 0x0, 0x0) (async) r4 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000100)={0x0, &(0x7f0000000140)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}, 0x0, 0x0) (async) syz_kvm_vgic_v3_setup(r1, 0x2, 0x100) (async) r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) syz_kvm_setup_cpu$arm64(r1, r4, &(0x7f0000a83000/0x400000)=nil, &(0x7f0000000340)=[{0x0, &(0x7f00000001c0)=ANY=[@ANYRES32=r4], 0x180}], 0x1, 0x0, &(0x7f0000000380)=[@featur2={0x1, 0x21}], 0x1) (async) r6 = mmap$KVM_VCPU(&(0x7f000000a000/0x1000)=nil, r5, 0x3, 0x10, r4, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async, rerun: 64) syz_kvm_assert_syzos_uexit$arm64(r4, r6, 0xffffffffffffffff) (async, rerun: 64) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000180)={0x1010020, 0x1}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) (async, rerun: 64) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (rerun: 64) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000004000/0x1000)=nil, 0x0, 0x1000001, 0x80010, 0xffffffffffffffff, 0x0) (async, rerun: 64) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x3) (rerun: 64) r10 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r9, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r10, 0x20, &(0x7f0000000300)="a000963203ef56d871c01e6eb70ed0d74d0300000000000000d5cd28470afa5c2f2fd86c82e085131841b4fd09e8e15de35acb00", 0x0, 0x48) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async, rerun: 64) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0xffffffffffffffff) (rerun: 64) r11 = openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) (async) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) (async) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) 55m34.251457999s ago: executing program 0 (id=3): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000040)=[@its_setup={0x82, 0x28, {0x4, 0x3, 0x3ac}}], 0x28}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000240)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x5, 0x5, &(0x7f0000000100)}) ioctl$KVM_RUN(r3, 0xae80, 0x0) munmap(&(0x7f0000011000/0xc00000)=nil, 0xc00000) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000000)=@attr_arm64={0x0, 0x4, 0x1, 0x0}) 55m32.887690651s ago: executing program 1 (id=4): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x25) mmap$KVM_VCPU(&(0x7f0000d57000/0x4000)=nil, 0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x20a6c2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1000000000000000) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000200)=@arm64_sys={0x603000000013c01c, &(0x7f0000000180)=0xd1}) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1f) syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000100)={0x0, &(0x7f00000005c0)}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r4, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000180)={0xd}) ioctl$KVM_GET_ONE_REG(r5, 0x4010aeab, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000001c0)=@attr_riscv64=@attr_aplic={0x0, 0x1, @any=0x2, &(0x7f0000000340)=0xf}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xf8b40, 0x0) r7 = openat$kvm(0x0, &(0x7f0000000140), 0x200, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r9, 0x4018aee2, &(0x7f00000000c0)=@attr_other={0x0, 0x1, 0x7fffffff, 0x0}) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x27) syz_kvm_vgic_v3_setup(r11, 0x1, 0x100) ioctl$KVM_CAP_ARM_USER_IRQ(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000380)) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={0xffffffffffffffff, 0x1, 0x1}) r12 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000040)={0x5, 0x4, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000bc2000/0x400000)=nil) 55m25.891750608s ago: executing program 0 (id=5): r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x20000033) syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r0, &(0x7f0000000200)={0x0, &(0x7f0000000340)=[@code={0xa, 0x9c, {"001ce02ea0ca9cd20020b0f2e10180d2c20180d2e30080d2e40080d2020000d4007008d520be88d20080b8f2c10080d2a20080d2030080d2240080d2020000d4406080d20000b0f2c10180d2220080d2030080d2440080d2020000d40024c01a000028d5007008d5805794d20040b8f2210080d2420080d2230180d2040180d2020000d4007008d5"}}], 0x9c}, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000180)=@arm64={0x4, 0xb2, 0x7, '\x00', 0x7e}) syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000300)={0x0, &(0x7f0000000000)=[@hvc={0x32, 0x40, {0xc4000053, [0x9, 0x0, 0x200000000000, 0x6, 0x800]}}], 0x40}, 0x0, 0x0) ioctl$KVM_ARM_VCPU_INIT(0xffffffffffffffff, 0x4020aeae, &(0x7f0000000000)={0x5, 0x18}) r4 = openat$kvm(0x0, &(0x7f0000000140), 0x206a02, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0xa8200, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x27) syz_kvm_vgic_v3_setup(r7, 0x1, 0x1a0) r8 = eventfd2(0x2, 0x80000) r9 = eventfd2(0xf, 0x80001) ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f0000000100)={r9, 0x0, 0x2, r8}) ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f0000000000)={r8, 0x8, 0x2, r8}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) close(0x4) openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0) r10 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0xfffffffffffffffc) openat$kvm(0x0, &(0x7f00000000c0), 0x98600, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r11 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2) mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x10, r12, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) 55m24.267467319s ago: executing program 1 (id=6): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async, rerun: 64) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x7, 0xffffffffffffffff}) (rerun: 64) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000280)=@attr_arm64={0x0, 0x0, 0x3, 0x0}) (async, rerun: 32) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (rerun: 32) r3 = openat$kvm(0x0, &(0x7f00000002c0), 0x4a080, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r5 = syz_kvm_vgic_v3_setup(r4, 0x1, 0x40) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x1, 0x0, 0xffffffffffffffff}) 55m18.539960634s ago: executing program 0 (id=7): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000518000/0x400000)=nil) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r2, 0x0) mmap$KVM_VCPU(&(0x7f0000e04000/0x2000)=nil, 0x930, 0x1, 0x11, r2, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r4, r5, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x20}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r5, 0x4010aeab, &(0x7f0000000100)=@arm64_core={0x6030000000100022, &(0x7f00000000c0)=0xfffffffffffffff7}) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x0, 0x8, 0x13, r2, 0x0) mmap$KVM_VCPU(&(0x7f000052d000/0x4000)=nil, 0x930, 0xc, 0x16831, 0xffffffffffffffff, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x24) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000040)={0x8, 0xffffffffffffffff}) r10 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r10, 0xae04) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_GET_DEVICE_ATTR(r9, 0x4018aee2, &(0x7f0000000280)=@attr_other={0x0, 0x8, 0x100000000, &(0x7f0000000100)=0x1000}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000000)={0xfff, 0x7}) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) r11 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r12, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)={0xef000000, 0x1000, 0x2}}) syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil) 55m17.965232273s ago: executing program 1 (id=8): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x52) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x5}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x161642, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x8, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r5, 0x400454dc, 0x23) r6 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CAP_ARM_SYSTEM_SUSPEND(r2, 0x4068aea3, &(0x7f00000000c0)) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000000)={0x0, &(0x7f0000000040)=[@smc={0x1e, 0x40, {0x8400000e, [0x99b, 0x100000003, 0x5, 0x101, 0x10]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r7, 0xae80, 0x0) 55m9.781043403s ago: executing program 1 (id=9): mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x33) r2 = openat$kvm(0x0, &(0x7f0000000140), 0x101000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r4, 0x4020aeae, &(0x7f0000000100)={0x5, 0x18}) ioctl$KVM_GET_ONE_REG(r4, 0x4010aeab, &(0x7f00000000c0)=@arm64_core={0x6030000000100050, &(0x7f00000001c0)=0x1}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r5, &(0x7f00000001c0)=0x8100000001, 0x51a8) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x3}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20040, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80c01, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x2000003, 0x2013, 0xffffffffffffffff, 0x200001fe0000) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x9b, 0xf, 0x0, 0x5, 0x8, 0x82, 0x46, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x100001, 0x0, 0x0, 0x3, 0xa, 0x4, '\x00', 0x1, 0xc31}) write$eventfd(r9, &(0x7f00000001c0)=0x3, 0xfdef) ioctl$KVM_CAP_PTP_KVM(r1, 0x4068aea3, &(0x7f0000000000)) 55m6.665911982s ago: executing program 0 (id=10): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r1 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r3, 0x4068aea3, &(0x7f0000000000)={0xef, 0x0, 0x7}) (async) syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) (async) mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x0, 0x40032, 0xffffffffffffffff, 0x0) (async) munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) (async) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) (async) r4 = syz_kvm_add_vcpu$arm64(r1, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@mrs={0xbe, 0x18, {0x603000000013c807}}], 0x18}, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0xdddd1000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) (async) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000000)={0x1, 0x0, &(0x7f0000ffb000/0x3000)=nil}) (async) ioctl$KVM_GET_ONE_REG(r4, 0x4010aeab, &(0x7f0000000180)=@arm64_extra={0x603000000013c025, &(0x7f0000000100)=0x3}) 54m23.55081706s ago: executing program 32 (id=9): mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x33) r2 = openat$kvm(0x0, &(0x7f0000000140), 0x101000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r4, 0x4020aeae, &(0x7f0000000100)={0x5, 0x18}) ioctl$KVM_GET_ONE_REG(r4, 0x4010aeab, &(0x7f00000000c0)=@arm64_core={0x6030000000100050, &(0x7f00000001c0)=0x1}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r5, &(0x7f00000001c0)=0x8100000001, 0x51a8) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x3}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20040, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80c01, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x2000003, 0x2013, 0xffffffffffffffff, 0x200001fe0000) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x9b, 0xf, 0x0, 0x5, 0x8, 0x82, 0x46, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x100001, 0x0, 0x0, 0x3, 0xa, 0x4, '\x00', 0x1, 0xc31}) write$eventfd(r9, &(0x7f00000001c0)=0x3, 0xfdef) ioctl$KVM_CAP_PTP_KVM(r1, 0x4068aea3, &(0x7f0000000000)) 54m18.005892193s ago: executing program 33 (id=10): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r1 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r3, 0x4068aea3, &(0x7f0000000000)={0xef, 0x0, 0x7}) (async) syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) (async) mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x0, 0x40032, 0xffffffffffffffff, 0x0) (async) munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) (async) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) (async) r4 = syz_kvm_add_vcpu$arm64(r1, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@mrs={0xbe, 0x18, {0x603000000013c807}}], 0x18}, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0xdddd1000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) (async) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000000)={0x1, 0x0, &(0x7f0000ffb000/0x3000)=nil}) (async) ioctl$KVM_GET_ONE_REG(r4, 0x4010aeab, &(0x7f0000000180)=@arm64_extra={0x603000000013c025, &(0x7f0000000100)=0x3}) 27m30.41125187s ago: executing program 2 (id=216): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x22) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r0, 0x4068aea3, &(0x7f0000000000)) ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f0000000080)) ioctl$KVM_PPC_ALLOCATE_HTAB(r0, 0xc004aea7, &(0x7f00000000c0)=0x8) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000100)={0x4, 0x0, [{0x81, 0x1, 0x0, 0x0, @adapter={0x6, 0x44d, 0xffffffffffffffd3, 0x200, 0xfffffff9}}, {0x2, 0x1, 0x1, 0x0, @msi={0x8, 0x8, 0xfffffffd, 0x8001}}, {0x6, 0x2, 0x1, 0x0, @irqchip={0x7}}, {0x3, 0x4, 0x1, 0x0, @sint={0x7, 0x34a}}]}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f0000000200)=0x200) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000240)={0x3, 0x0, &(0x7f0000ffc000/0x1000)=nil}) ioctl$KVM_ARM_VCPU_FINALIZE(r1, 0x4004aec2, &(0x7f0000000280)=0x5) r2 = ioctl$KVM_GET_STATS_FD_cpu(r1, 0xaece) syz_kvm_setup_cpu$arm64(0xffffffffffffffff, r2, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000800)=[{0x0, &(0x7f00000002c0)=[@memwrite={0x6e, 0x30, @vgic_gicr={0x80c0000, 0xe00, 0x36a17f97}}, @hvc={0x32, 0x40, {0x84000010, [0x8, 0xd, 0x0, 0x9, 0x6]}}, @msr={0x14, 0x20, {0x6030000000138076, 0xfffffffffffffffc}}, @smc={0x1e, 0x40, {0x2000, [0xb, 0x40, 0x1000000000, 0x9, 0xff]}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x3000, 0x4, 0x2}}, @msr={0x14, 0x20, {0x0, 0xffff}}, @memwrite={0x6e, 0x30, @generic={0x41000, 0x566, 0x6, 0xe}}, @hvc={0x32, 0x40, {0x80000001, [0x7, 0x2, 0x3, 0x8000000000000000, 0x8000]}}, @svc={0x122, 0x40, {0x100, [0xe, 0x2, 0x9, 0xffffffffffffffcd, 0x10000]}}, @irq_setup={0x46, 0x18, {0x1, 0x3c0}}, @mrs={0xbe, 0x18, {0x603000000013df11}}, @mrs={0xbe, 0x18, {0x603000000013debf}}, @uexit={0x0, 0x18, 0x5c52aa8a}, @svc={0x122, 0x40, {0xc4000007, [0x8, 0x4, 0x1, 0x0, 0x4]}}, @its_setup={0x82, 0x28, {0x0, 0x3, 0x16f}}, @irq_setup={0x46, 0x18, {0x2, 0x25b}}, @mrs={0xbe, 0x18, {0x603000000013c4d1}}, @uexit={0x0, 0x18, 0x5}, @irq_setup={0x46, 0x18, {0x2, 0x19d}}, @hvc={0x32, 0x40, {0x31000000, [0xff, 0x8, 0x0, 0x0, 0x9]}}, @msr={0x14, 0x20, {0x6030000000138016, 0x3}}, @uexit={0x0, 0x18, 0x1}, @irq_setup={0x46, 0x18, {0x1, 0x147}}, @smc={0x1e, 0x40, {0x84000008, [0x10000, 0x1, 0x9, 0x3]}}, @svc={0x122, 0x40, {0x80000000, [0xea6b, 0xff, 0x400, 0x8, 0x1cfc7efa]}}, @svc={0x122, 0x40, {0xc4000007, [0x2, 0x6b, 0x9, 0x2, 0xc1]}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x88, 0x80000000}}, @hvc={0x32, 0x40, {0x1000, [0xfffffffffffffff9, 0x4, 0x6, 0x2273, 0xefd]}}, @hvc={0x32, 0x40, {0xc4000010, [0x0, 0x9, 0xfffffffffffffffd, 0x6, 0x3]}}, @mrs={0xbe, 0x18, {0x603000000013df47}}, @memwrite={0x6e, 0x30, @generic={0x2, 0xe75, 0x7fff, 0xd}}], 0x540}], 0x1, 0x0, &(0x7f0000000840)=[@featur2={0x1, 0x12}], 0x1) ioctl$KVM_GET_DEVICE_ATTR_vm(r0, 0x4018aee2, &(0x7f00000008c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000880)={0x4, 0x4d, 0x2}}) ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000900)=0x7) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000940)={0x10000, 0x0, &(0x7f0000eea000/0x3000)=nil}) ioctl$KVM_CAP_ARM_INJECT_SERROR_ESR(r2, 0x4068aea3, &(0x7f0000000980)) ioctl$KVM_CAP_ARM_INJECT_SERROR_ESR(r0, 0x4068aea3, &(0x7f0000000a00)) ioctl$KVM_CAP_PTP_KVM(r2, 0x4068aea3, &(0x7f0000000a80)) ioctl$KVM_CLEAR_DIRTY_LOG(r2, 0xc018aec0, &(0x7f0000000f00)={0x0, 0x280, 0x380, &(0x7f0000000b00)=[0x3, 0x6, 0xffffffffffffffff, 0x6, 0x7ce9, 0x0, 0x101, 0x80, 0x0, 0xfffffffffffffff9, 0x3, 0x6, 0x81, 0x30, 0x8, 0xc7, 0x1800, 0x1, 0x7, 0x2, 0x7, 0x8000, 0x4, 0x8, 0x5, 0xb2, 0x8, 0x7, 0x3, 0x7, 0xdcf, 0x8, 0x4, 0x1, 0x2, 0xe6, 0x0, 0x296, 0x3, 0x4, 0x70, 0x74a, 0xb46d, 0x9, 0x2, 0x4, 0xffffffffffffffff, 0xfffffffffffffffa, 0x0, 0xfffffffffffff801, 0x77, 0x8000000000000000, 0x9, 0x139, 0x8, 0x8001, 0xd6a, 0x2, 0xcd, 0x5, 0x9, 0x4, 0x3, 0x2, 0x1, 0x6, 0x6, 0x1, 0x0, 0x8, 0x1, 0x9, 0xae, 0x9, 0x7f, 0x9, 0x8, 0x7, 0x7, 0x9, 0x902, 0xffffffffffffffff, 0x65, 0xbf, 0x38dd3f1a, 0xff, 0x6, 0xfffffffffffffff8, 0x9, 0x5, 0x6, 0x7, 0x4, 0x9, 0x7, 0x7fffffffffffffff, 0x1, 0x2, 0x8, 0xbb9, 0x5, 0xd26b, 0x8, 0xd, 0x9, 0x7, 0x30e4ba6d, 0xffffffffffffcaa3, 0x81, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x1, 0x704, 0x80, 0x4, 0x9, 0x9, 0x9, 0xd623, 0x6, 0x1, 0x1, 0x43, 0x3, 0xffffffff, 0x5, 0xfffffffffffffffb]}) syz_kvm_vgic_v3_setup(r0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000f80)={0x0, &(0x7f0000000f40)=[@irq_setup={0x46, 0x18, {0x0, 0xd8}}], 0x18}, &(0x7f0000000fc0)=[@featur1={0x1, 0x80}], 0x1) ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r0, 0x4068aea3, &(0x7f0000001000)={0xe4, 0x0, 0x903}) r3 = mmap$KVM_VCPU(&(0x7f0000e43000/0x2000)=nil, 0x0, 0x1000004, 0x20010, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000001080)="8b0ce231b48ef7eeb454d3f816326429a52bc0283028d83f374a927cb79d87e1bdf96df89647523219777636de15a28b9263abfbac240e14a82ddabf7ac0e0b49157cd9265cbe6e3", 0x0, 0x48) ioctl$KVM_PPC_ALLOCATE_HTAB(r0, 0xc004aea7, &(0x7f0000001100)=0x4) ioctl$KVM_CAP_ARM_INJECT_SERROR_ESR(r2, 0x4068aea3, &(0x7f0000001140)) syz_memcpy_off$KVM_EXIT_MMIO(r3, 0x20, &(0x7f00000011c0)="90d791c7cda7fcbaa3bd801e77c207c45ecc65e9a1859c3e", 0x0, 0x18) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000001200)={r2, 0xd, 0x1, r2}) syz_kvm_setup_syzos_vm$arm64(r0, &(0x7f0000c00000/0x400000)=nil) 27m23.183203876s ago: executing program 2 (id=218): mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) r0 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000580)={0x0, &(0x7f0000000040)=[@msr={0x14, 0x20, {0x603000000013e6db, 0x17f}}, @mrs={0xbe, 0x18, {0x603000000013c091}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x1, 0x2, 0xb, 0x5, 0x9}}, @msr={0x14, 0x20, {0x603000000013c210, 0x2}}, @mrs={0xbe, 0x18, {0x603000000013df5d}}, @uexit={0x0, 0x18, 0xc}, @smc={0x1e, 0x40, {0x2001, [0x0, 0x36e, 0x763, 0x5, 0x2]}}, @mrs={0xbe, 0x18, {0xa0500000003475bf}}, @mrs={0xbe, 0x18, {0x603000000013df1a}}, @smc={0x1e, 0x40, {0x8400000b, [0x7fff, 0x0, 0x8, 0x7, 0xb61]}}, @irq_setup={0x46, 0x18, {0x1, 0xfa}}, @its_setup={0x82, 0x28, {0x4, 0x3, 0x90}}, @eret={0xe6, 0x18, 0x5}, @irq_setup={0x46, 0x18, {0x1, 0x37d}}, @irq_setup={0x46, 0x18, {0x0, 0x173}}, @svc={0x122, 0x40, {0x8400000b, [0x800, 0x100000000, 0x4, 0x9, 0x3]}}, @irq_setup={0x46, 0x18, {0x4, 0xd2}}, @eret={0xe6, 0x18, 0x42}, @mrs={0xbe, 0x18, {0x603000000013df56}}, @msr={0x14, 0x20, {0x603000000013c005, 0x8}}, @uexit={0x0, 0x18, 0x17}, @smc={0x1e, 0x40, {0x8400000d, [0x6, 0x8, 0xfffffffffffffffe, 0x101, 0x9]}}, @svc={0x122, 0x40, {0xc400000d, [0x493, 0x7, 0x3c, 0xfffffffffffffff9, 0xc]}}, @svc={0x122, 0x40, {0x400, [0x48e, 0x4, 0x6, 0xfffffffffffffffe]}}, @hvc={0x32, 0x40, {0x86000000, [0x5, 0x6, 0x7, 0xca14626, 0x4]}}, @uexit={0x0, 0x18, 0x5}, @mrs={0xbe, 0x18, {0xca5723bb13236442}}, @smc={0x1e, 0x40, {0x84000010, [0x4, 0x1000, 0x9787, 0x7, 0xc]}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x1, 0x4, 0xb, 0x2, 0x64a, 0x1}}, @its_setup={0x82, 0x28, {0x1, 0x3, 0x5}}, @mrs={0xbe, 0x18, {0x603000000013dea7}}, @code={0xa, 0x84, {"007008d5007008d5403f92d200c0b0f2610080d2c20180d2430180d2840180d2020000d4007008d50028c01a0004002fa00e91d200c0b0f2610180d2420080d2230180d2640080d2020000d4008008d5c0a79ed20000b0f2010180d2620180d2830180d2e40080d2020000d4000008d5"}}], 0x504}, &(0x7f00000005c0)=[@featur1={0x1, 0x40}], 0x1) r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) mmap$KVM_VCPU(&(0x7f0000115000/0x2000)=nil, r1, 0x4, 0x110, r0, 0x0) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x9000000) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) r2 = eventfd2(0x5, 0x800) write$eventfd(r2, &(0x7f0000000000)=0xffffffffffffffff, 0x8) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) munmap(&(0x7f0000e76000/0x12000)=nil, 0x12000) mmap$KVM_VCPU(&(0x7f0000f1a000/0x4000)=nil, 0x930, 0x0, 0x9032, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4360ae82, 0x0) mmap$KVM_VCPU(&(0x7f0000fed000/0x3000)=nil, 0x930, 0x0, 0x4030031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) munmap(&(0x7f0000011000/0xc00000)=nil, 0xc00000) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) munmap(&(0x7f0000d8f000/0x4000)=nil, 0x4000) munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x3000000, 0x4d832, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) 27m21.289731538s ago: executing program 3 (id=219): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0) r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2a) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) (async) syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r0, &(0x7f0000000b80)={0x0, &(0x7f0000000100)=[@hvc={0x32, 0x40, {0x84000015, [0x100000001, 0x8000000000000000, 0xffffffffffffffff, 0xee24, 0xfffffffffffeffff]}}], 0x40}, &(0x7f0000000040)=[@featur1={0x1, 0x4}], 0x1) (async) r3 = syz_kvm_add_vcpu$arm64(r0, &(0x7f0000000b80)={0x0, &(0x7f0000000100)=[@hvc={0x32, 0x40, {0x84000015, [0x100000001, 0x8000000000000000, 0xffffffffffffffff, 0xee24, 0xfffffffffffeffff]}}], 0x40}, &(0x7f0000000040)=[@featur1={0x1, 0x4}], 0x1) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r6, 0x0) (async) r7 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r6, 0x0) munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) (async) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0xaf832, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0xaf832, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000d8e000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) munmap$KVM_VCPU(0x0, 0x1000000000) syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29) syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f00000001c0)="e3753c17d06376f2af5d7a1ecf6206c3d26d12f147fdaece40c2dff5a3b6066a743292bb7c3a26fb29988dd7bbbe7ac4e4f8f4eae6c2e6017d2561fcd1493fba409b4948fb21a876", 0x0, 0x48) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000000)={0x4000, 0x10a000, 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_IOEVENTFD(r8, 0x5452, &(0x7f0000000180)={0x6, 0x2, 0x4, 0xffffffffffffffff, 0x7}) 27m15.025349592s ago: executing program 2 (id=220): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x2e) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r3, r4, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f0000000140)=@arm64_core={0x6030000000100042}) (async) r5 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000180)={0x0, &(0x7f0000000600)=[@msr={0x14, 0x20, {0x6030000000138084, 0x3ff}}], 0x20}, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_GET_API_VERSION(r7, 0xae03, 0x42) 27m10.18557452s ago: executing program 3 (id=221): mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x4000)=nil, 0x0, 0x300000c, 0x10, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x9000000) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x9000000) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000) munmap(&(0x7f0000e76000/0x12000)=nil, 0x12000) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000f1a000/0x4000)=nil, 0x930, 0x0, 0x9032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000fed000/0x3000)=nil, 0x930, 0x0, 0x4030031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) munmap(&(0x7f00007cd000/0x3000)=nil, 0x3000) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000) munmap(&(0x7f0000482000/0x2000)=nil, 0x2000) munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000) munmap(&(0x7f0000e76000/0x12000)=nil, 0x12000) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000f1a000/0x4000)=nil, 0x930, 0x0, 0x9032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000fed000/0x3000)=nil, 0x930, 0x0, 0x4030031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 27m2.42108855s ago: executing program 3 (id=222): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) r3 = syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f00000000c0)=@attr_riscv64=@attr_config={0x0, 0x1, 0x0, &(0x7f0000000000)=0x10}) 27m1.619271724s ago: executing program 2 (id=223): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3e) r2 = eventfd2(0x20f, 0x80800) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x100000001, 0x46000, 0x0, r2, 0x8}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r5 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r4, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000000300)="fb4149dd033b8986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67525673312b01040000000000002627e7000000000000000200", 0x0, 0xfffffffffffffe73) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x12, r4, 0x0) r6 = eventfd2(0x0, 0x0) r7 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f00000001c0)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4}) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$arm64(r8, 0xffffffffffffffff, &(0x7f0000001000/0x400000)=nil, &(0x7f0000000140)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x8, 0x100, &(0x7f0000000080)=0x8000000000000000}) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f0000000280)=@attr_arm64={0x0, 0x4, 0x2, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x1ff, 0x2, 0x30000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f0000000300)=@attr_other={0x0, 0x4, 0x1, 0x0}) close(r6) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x0) r10 = eventfd2(0x0, 0x0) close(r10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mmap$KVM_VCPU(&(0x7f0000008000/0x3000)=nil, 0x930, 0x2000004, 0x2011, r10, 0x0) write$eventfd(r6, &(0x7f0000000180)=0xa19, 0x8) 26m53.277585902s ago: executing program 3 (id=224): r0 = openat$kvm(0x0, &(0x7f0000000280), 0x103080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = syz_kvm_vgic_v3_setup(r1, 0x1, 0x40) ioctl$KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, &(0x7f0000000100)=@attr_other={0x0, 0x5, 0x10080, &(0x7f0000000140)=0x200a8a}) munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) r3 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32) r4 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0) syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000bfe000/0x400000)=nil) 26m47.570615052s ago: executing program 2 (id=225): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101800, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x7f) r1 = mmap$KVM_VCPU(&(0x7f0000bfe000/0x400000)=nil, 0x0, 0x3000000, 0x8010, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000040)="a57d3556d6f402cf95c1ca6a33eae6d75f380b622ce32796b8df2bfabf1ee8f32aa2cc23857de820b4dd96ffec57333f35f489111766b80e33fd1e1ac72f20792efdf1e64a1d4907", 0x0, 0x48) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) mmap$KVM_VCPU(&(0x7f0000c5b000/0x4000)=nil, 0x0, 0x100000e, 0x10, r2, 0x0) ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f00000000c0)={0x2, 0x24}) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3) syz_kvm_setup_cpu$arm64(r3, r2, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000003c0)=[{0x0, &(0x7f0000000100)=[@code={0xa, 0x84, {"000028d5a0e982d20000b8f2810180d2a20080d2630180d2240180d2020000d4007008d5407d86d20020b0f2c10080d2420180d2c30180d2c40080d2020000d4a0f78ed200e0b0f2c10180d2e20080d2430180d2240080d2020000d4000840b81f0000f1007008d50000206a00b8a15e"}}, @uexit={0x0, 0x18, 0x3}, @hvc={0x32, 0x40, {0x3f000000, [0x54, 0xfffffffffffffffb, 0x1, 0x1ff, 0x4]}}, @irq_setup={0x46, 0x18, {0x4, 0x13}}, @msr={0x14, 0x20, {0x603000000013e088, 0x5}}, @irq_setup={0x46, 0x18, {0x3, 0x142}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x1400, 0x892f, 0x4}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0xf10, 0x9, 0x1}}, @irq_setup={0x46, 0x18, {0x2, 0xfd}}, @irq_setup={0x46, 0x18, {0x2, 0x203}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x1, 0x0, 0xf, 0x8, 0x4}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x0, 0x3, 0x1, 0x1, 0x8, 0x2}}, @hvc={0x32, 0x40, {0x1000, [0x2, 0x3, 0x9, 0x2, 0x8]}}, @eret={0xe6, 0x18, 0x200}, @smc={0x1e, 0x40, {0x80000002, [0xf1, 0x4, 0x80, 0x101]}}, @mrs={0xbe, 0x18, {0x603000000013c02d}}], 0x2bc}], 0x1, 0x0, &(0x7f0000000400)=[@featur2={0x1, 0x40}], 0x1) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2f) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = eventfd2(0xd595, 0x801) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000440)={0xffffffffffffffff, 0x8, 0x2, r5}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x19) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3b) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x240982, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000004c0)=0x5) r7 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f00000006c0)={0x0, &(0x7f0000000500)=[@uexit={0x0, 0x18, 0x3}, @uexit={0x0, 0x18, 0x4}, @its_setup={0x82, 0x28, {0x4, 0x2, 0x150}}, @smc={0x1e, 0x40, {0xc4000010, [0x0, 0xfffffffffffffffa, 0x9, 0x9, 0x82]}}, @uexit={0x0, 0x18, 0x6}, @smc={0x1e, 0x40, {0x1000, [0x7fff, 0x47a11bdc, 0x5, 0xe, 0x8]}}, @smc={0x1e, 0x40, {0x8, [0x6, 0x8, 0x1, 0x8000000000000000, 0x41]}}, @its_setup={0x82, 0x28, {0x4, 0x3, 0x1b6}}, @svc={0x122, 0x40, {0x0, [0x1, 0x8, 0x1, 0xffffffff, 0x8]}}], 0x198}, &(0x7f0000000700)=[@featur1={0x1, 0x4}], 0x1) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x9) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xb) ioctl$KVM_GET_DEVICE_ATTR_vm(r10, 0x4018aee2, &(0x7f0000000780)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000740)={0x7, 0x4, 0x2}}) r11 = mmap$KVM_VCPU(&(0x7f0000da2000/0x2000)=nil, 0x0, 0x1800002, 0x80010, r8, 0x0) syz_memcpy_off$KVM_EXIT_MMIO(r11, 0x20, &(0x7f00000007c0)="0bc04a9502fb9a23cb27850ac8c34fc1541ffa075aa896bd", 0x0, 0x18) ioctl$KVM_CAP_ARM_USER_IRQ(r10, 0x4068aea3, &(0x7f0000000800)) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f00000008c0)=@riscv64_timer={0x8030000004000000, &(0x7f0000000880)=0xc268}) r12 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x23) ioctl$KVM_GET_DEVICE_ATTR_vm(r12, 0x4018aee2, &(0x7f0000000940)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000900)={0x1, 0x9bb2, 0x2}}) ioctl$KVM_SET_SREGS(r9, 0x4000ae84, &(0x7f0000000980)={{0xdddd1000, 0xd000, 0x3, 0x6, 0xff, 0x5, 0xf0, 0x7f, 0x0, 0x4, 0x2, 0x4}, {0x30000, 0x6000, 0xa, 0x46, 0x33, 0x7, 0x8, 0x6, 0x8, 0x8, 0xfa, 0x5}, {0x4, 0xe000, 0xd, 0x8, 0x45, 0x1, 0x5, 0x4, 0x2a, 0x3, 0x1, 0x8}, {0x1, 0x0, 0x0, 0x1, 0x3, 0xd9, 0x0, 0x7c, 0x2, 0xfa, 0xfc, 0x6}, {0x200000, 0x4000, 0xf, 0xe, 0x1, 0xff, 0x5, 0x10, 0x4, 0x5, 0x4, 0x3}, {0x26000, 0xf000, 0x6, 0xff, 0x6, 0xe6, 0x40, 0x2, 0x8, 0x7f, 0xff, 0x3}, {0x10000, 0x12800, 0xd, 0x1, 0x91, 0x2a, 0x10, 0xd, 0xf, 0x2, 0x65, 0x4}, {0xdddd3000, 0xeeee8000, 0x49742ad603ddea9d, 0x7, 0x3, 0x0, 0x11, 0x5, 0x2, 0xa1, 0x2, 0x7}, {0x6000, 0xe}, {0xeeee0000, 0x401}, 0x40000001, 0x0, 0xdddd1000, 0x20, 0xe, 0x2900, 0x2, [0x0, 0x5, 0x6, 0x80000000]}) 26m28.397742741s ago: executing program 3 (id=226): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000002c0)={0x2, 0x0, [{0x3, 0x1, 0x0, 0x0, @adapter={0x0, 0x6a, 0x8, 0x5, 0x3}}, {0x3, 0x1, 0x0, 0x0, @msi={0x0, 0xf, 0x9, 0xfffffff9}}]}) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x1) r2 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000000)={0x0, &(0x7f00000009c0)}, &(0x7f0000000980)=[@featur1={0x1, 0x17}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 26m27.844103046s ago: executing program 2 (id=227): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x33) r2 = mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) munmap$KVM_VCPU(0x0, 0x1000000000) (async) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r6 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r5, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000300)="fb4149dd033b8986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67525673312b01040000000000002627e7000000000000000200", 0x0, 0xfffffffffffffe73) (async) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x12, r5, 0x0) (async) r7 = eventfd2(0x70, 0x0) close(r7) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x0) (async) write$eventfd(r7, &(0x7f0000000100)=0xfffffffffffffffe, 0x8) (async) r8 = eventfd2(0x0, 0x0) close(r8) (async) r9 = eventfd2(0x0, 0x0) close(r9) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xc0c82, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000008000/0x3000)=nil, 0x930, 0x2000004, 0x2011, r9, 0x4000) (async) mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, 0x930, 0x200000e, 0x2011, r8, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000c79000/0x4000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xc, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x20000000) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000000000/0x400000)=nil) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000240)="37e68986ad644f5dc57bbc1ff382863b67f3eee57a32ec911d95f88f3dd8ea716e4a29cefbd440b2ecf83f57baf33b0c97182970a47ef45c954e42f2055384921830f6e273d2eb30", 0x0, 0x2a2019ac5ed2a1ef) 26m20.918144859s ago: executing program 3 (id=228): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r4, 0x400454e2, 0x30) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000740)={0x10002, 0x1c0, 0x0, &(0x7f0000000340)=[0x5, 0x3cdf73e0, 0x9, 0x10, 0xfffffffffffffff2, 0xfffffffffffffffd, 0x2, 0x32, 0x8, 0x5, 0x100000001, 0x8a02, 0x7, 0xf9, 0x4, 0x100, 0x5, 0x9, 0x1c0, 0xffff, 0x2, 0x9, 0x100000001, 0x8000000000000001, 0xe, 0x1e, 0x7, 0x7ef, 0x10000, 0x4, 0x7, 0x2, 0x8, 0x1, 0xfffffffffffffffe, 0xff, 0x9, 0x9de6, 0x5, 0xa, 0x401, 0x6, 0x6, 0x1, 0x2, 0x7fffffff, 0x4, 0x3, 0x3, 0x4, 0xfffffffffffffff3, 0x2, 0xfffffffffffffffb, 0x5, 0x1, 0x800, 0x6f09, 0xce7b, 0x8, 0x7ff, 0xfffffffffffffffb, 0x0, 0x38aa, 0x9, 0xffffffffffffffff, 0x400, 0xfff, 0x3ff, 0x7fff, 0x1, 0x2, 0x0, 0x7, 0x9, 0xbf, 0x800, 0x4, 0x3, 0x3, 0x6, 0x101, 0x80000001, 0x6, 0x487, 0x7cc2f64e, 0x6, 0x8, 0xffffffff, 0x7, 0x4, 0x6b, 0x2, 0x0, 0xa8, 0x4, 0xfffffffffffffff8, 0x5, 0x40, 0x8, 0xffffffffffffffff, 0x7fffffffffffffff, 0x7ff, 0xffffffff, 0x7fff, 0x94f, 0x4, 0x9, 0x1, 0x4, 0x6, 0x0, 0x6, 0x84, 0xa2, 0x6, 0x9, 0x4, 0x5, 0x0, 0x8, 0x1, 0x5, 0x3, 0x1ff, 0x7fffffff, 0x900000000000, 0x6, 0x1]}) syz_kvm_add_vcpu$arm64(r6, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x81}], 0x1) r7 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013c65d, 0xfffdffffc1af0ec0}}], 0x20}, 0x0, 0xffffffffffffff92) syz_kvm_add_vcpu$arm64(r5, 0x0, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x3, 0xa0) r8 = ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece) syz_kvm_vgic_v3_setup(r8, 0x3, 0x60) ioctl$KVM_RUN(r7, 0xae80, 0x0) 25m41.311876631s ago: executing program 34 (id=227): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x33) r2 = mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) munmap$KVM_VCPU(0x0, 0x1000000000) (async) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r6 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r5, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000300)="fb4149dd033b8986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67525673312b01040000000000002627e7000000000000000200", 0x0, 0xfffffffffffffe73) (async) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x12, r5, 0x0) (async) r7 = eventfd2(0x70, 0x0) close(r7) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x0) (async) write$eventfd(r7, &(0x7f0000000100)=0xfffffffffffffffe, 0x8) (async) r8 = eventfd2(0x0, 0x0) close(r8) (async) r9 = eventfd2(0x0, 0x0) close(r9) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xc0c82, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000008000/0x3000)=nil, 0x930, 0x2000004, 0x2011, r9, 0x4000) (async) mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, 0x930, 0x200000e, 0x2011, r8, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000c79000/0x4000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xc, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x20000000) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000000000/0x400000)=nil) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000240)="37e68986ad644f5dc57bbc1ff382863b67f3eee57a32ec911d95f88f3dd8ea716e4a29cefbd440b2ecf83f57baf33b0c97182970a47ef45c954e42f2055384921830f6e273d2eb30", 0x0, 0x2a2019ac5ed2a1ef) 25m33.470926572s ago: executing program 35 (id=228): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r4, 0x400454e2, 0x30) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000740)={0x10002, 0x1c0, 0x0, &(0x7f0000000340)=[0x5, 0x3cdf73e0, 0x9, 0x10, 0xfffffffffffffff2, 0xfffffffffffffffd, 0x2, 0x32, 0x8, 0x5, 0x100000001, 0x8a02, 0x7, 0xf9, 0x4, 0x100, 0x5, 0x9, 0x1c0, 0xffff, 0x2, 0x9, 0x100000001, 0x8000000000000001, 0xe, 0x1e, 0x7, 0x7ef, 0x10000, 0x4, 0x7, 0x2, 0x8, 0x1, 0xfffffffffffffffe, 0xff, 0x9, 0x9de6, 0x5, 0xa, 0x401, 0x6, 0x6, 0x1, 0x2, 0x7fffffff, 0x4, 0x3, 0x3, 0x4, 0xfffffffffffffff3, 0x2, 0xfffffffffffffffb, 0x5, 0x1, 0x800, 0x6f09, 0xce7b, 0x8, 0x7ff, 0xfffffffffffffffb, 0x0, 0x38aa, 0x9, 0xffffffffffffffff, 0x400, 0xfff, 0x3ff, 0x7fff, 0x1, 0x2, 0x0, 0x7, 0x9, 0xbf, 0x800, 0x4, 0x3, 0x3, 0x6, 0x101, 0x80000001, 0x6, 0x487, 0x7cc2f64e, 0x6, 0x8, 0xffffffff, 0x7, 0x4, 0x6b, 0x2, 0x0, 0xa8, 0x4, 0xfffffffffffffff8, 0x5, 0x40, 0x8, 0xffffffffffffffff, 0x7fffffffffffffff, 0x7ff, 0xffffffff, 0x7fff, 0x94f, 0x4, 0x9, 0x1, 0x4, 0x6, 0x0, 0x6, 0x84, 0xa2, 0x6, 0x9, 0x4, 0x5, 0x0, 0x8, 0x1, 0x5, 0x3, 0x1ff, 0x7fffffff, 0x900000000000, 0x6, 0x1]}) syz_kvm_add_vcpu$arm64(r6, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x81}], 0x1) r7 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013c65d, 0xfffdffffc1af0ec0}}], 0x20}, 0x0, 0xffffffffffffff92) syz_kvm_add_vcpu$arm64(r5, 0x0, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x3, 0xa0) r8 = ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece) syz_kvm_vgic_v3_setup(r8, 0x3, 0x60) ioctl$KVM_RUN(r7, 0xae80, 0x0) 19m9.58107972s ago: executing program 5 (id=233): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x0, 0xa, 0x28031, 0xffffffffffffffff, 0x9000000) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) r3 = eventfd2(0x5, 0x800) write$eventfd(r3, &(0x7f0000000000)=0xffffffffffffffff, 0x8) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000) munmap(&(0x7f0000e76000/0x12000)=nil, 0x12000) mmap$KVM_VCPU(&(0x7f0000f1a000/0x4000)=nil, 0x930, 0x0, 0x9032, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4360ae82, 0x0) mmap$KVM_VCPU(&(0x7f0000fed000/0x3000)=nil, 0x930, 0x0, 0x4030031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) munmap(&(0x7f0000011000/0xc00000)=nil, 0xc00000) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) munmap(&(0x7f0000d8f000/0x4000)=nil, 0x4000) munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x3000000, 0x4d832, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18m53.202562649s ago: executing program 5 (id=235): r0 = syz_kvm_add_vcpu$arm64(0x0, 0x0, 0x0, 0x69) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x21) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r4 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r3, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r3, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, 0x0, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ca3000/0x4000)=nil, 0x0, 0x2000000, 0x1010, r0, 0x0) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x0, 0x1000003, 0x4010, r5, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000240), 0x10080, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x11) syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000b8f000/0x400000)=nil) r8 = syz_kvm_vgic_v3_setup(r7, 0x1, 0x20) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x21) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f00000002c0)=@attr_other={0x0, 0x3, 0x3, &(0x7f0000000080)=0xb43a}) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f00000001c0)=@attr_riscv64=@attr_imsic={0x0, 0x1, 0x10000, &(0x7f0000000180)=0x4}) r9 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x21) syz_kvm_add_vcpu$arm64(0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r9, 0xae04) ioctl$KVM_GET_ONE_REG(r10, 0x4010aeab, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_kvm_add_vcpu$arm64(0x0, &(0x7f00000004c0)={0x0, 0x0}, &(0x7f0000000500)=[@featur2], 0x1) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r13, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) ioctl$KVM_SET_ONE_REG(r13, 0x4010aeac, &(0x7f0000000000)=@arm64_sys={0x603000000013dce3, &(0x7f0000000100)=0x833}) 18m38.13776239s ago: executing program 4 (id=237): r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000bfe000/0x400000)=nil) r1 = syz_kvm_add_vcpu$arm64(r0, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040), 0x1) ioctl$KVM_ARM_VCPU_INIT(r1, 0x4020aeae, &(0x7f0000000080)) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, &(0x7f00000000c0)={0x5, 0x6e}) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000100)=@arm64={0x5, 0x8, 0x4, '\x00', 0x2}) ioctl$KVM_SET_REGS(r1, 0x4360ae82, &(0x7f0000000140)={[0x6, 0xa7, 0x364, 0x0, 0xe1c4, 0x6, 0x2, 0x1f, 0x8000000000000001, 0xc, 0x3, 0x8, 0x1, 0x1, 0x8, 0x2800], 0x10000, 0x200}) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f0000000200)={0x2, [0xfffffffffffffff7, 0x1]}) ioctl$KVM_SET_GUEST_DEBUG_arm64(r1, 0x4208ae9b, &(0x7f0000000240)={0x0, 0x0, {[0x4, 0x3, 0x3, 0x9, 0x7, 0x815, 0x4, 0x401, 0x9, 0x1, 0xeb3a, 0xffffffffffffffff, 0x401, 0x7fff, 0x4, 0xa28], [0x2, 0x1098, 0x2, 0xff, 0x8, 0x5, 0x3, 0x100, 0x6, 0x0, 0x3, 0x4b, 0xffffffffffffffff, 0x1, 0x8, 0x3ff], [0x4, 0x80000000, 0xfffffffffffffffa, 0x58, 0x4, 0x3, 0xfffffffffffffffb, 0x0, 0x800, 0x0, 0x1e8, 0x0, 0xb, 0x4, 0x0, 0x10000], [0x2, 0x3, 0x6, 0x0, 0xd, 0xde72, 0x7, 0x2, 0x2, 0x4, 0x100, 0x7fff, 0xfffffffffffffff7, 0x8, 0xe3f, 0xa]}}) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x37) r3 = eventfd2(0x6, 0x800) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000480)={0xffffffffffffff7f, 0x8080000, 0x4, r3, 0x6}) r4 = syz_kvm_add_vcpu$arm64(r0, &(0x7f0000000a40)={0x0, &(0x7f00000004c0)=[@code={0xa, 0x9c, {"c0ff89d20020b8f2010080d2c20180d2030080d2240180d2020000d4008008d5002cc01a000008d5007008d5401c81d20040b8f2810180d2220180d2a30080d2440180d2020000d4a0ef8bd20060b0f2a10080d2420080d2830080d2040180d2020000d4806394d20000b0f2e10080d2a20080d2430080d2640180d2020000d400a0800c0000002e"}}, @mrs={0xbe, 0x18, {0x603000000013dea2}}, @msr={0x14, 0x20, {0x603000000013e537, 0x7}}, @eret={0xe6, 0x18, 0x11a}, @smc={0x1e, 0x40, {0x1, [0x7, 0x9, 0x8, 0x2, 0x3584]}}, @smc={0x1e, 0x40, {0x80000002, [0x22924d98, 0xadec, 0xa, 0x3]}}, @hvc={0x32, 0x40, {0x84000012, [0x7f, 0x100, 0x45, 0xa6a, 0x20]}}, @msr={0x14, 0x20, {0x603000000013e669, 0xe50}}, @msr={0x14, 0x20, {0x603000000013deed, 0x8}}, @msr={0x14, 0x20, {0x603000000013806e, 0x6}}, @its_send_cmd={0xaa, 0x28, {0xb, 0x1, 0x3, 0xf, 0xb107, 0x8, 0x4}}, @eret={0xe6, 0x18, 0x6}, @eret={0xe6, 0x18, 0x7}, @hvc={0x32, 0x40, {0x84000004, [0x0, 0x3ff, 0x3, 0x101, 0x8]}}, @uexit={0x0, 0x18, 0xc}, @smc={0x1e, 0x40, {0x84000053, [0x10, 0x100000001, 0x9, 0x9, 0x6]}}, @uexit={0x0, 0x18}, @its_send_cmd={0xaa, 0x28, {0xb, 0x1, 0x1, 0x2, 0x0, 0x97c3, 0x4}}, @mrs={0xbe, 0x18, {0x603000000013c080}}, @msr={0x14, 0x20, {0x603000000013c017}}, @hvc={0x32, 0x40, {0xc4000053, [0x6, 0x9, 0xd, 0x100000000, 0x3]}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x0, 0x0, 0x9, 0x4, 0x1000}}, @its_send_cmd={0xaa, 0x28, {0x4, 0x0, 0x1, 0x10, 0x2, 0x4, 0x2}}, @irq_setup={0x46, 0x18, {0x2, 0x237}}, @mrs={0xbe, 0x18, {0x603000000013c112}}, @irq_setup={0x46, 0x18, {0x2, 0x33d}}, @msr={0x14, 0x20, {0x6030000000138032, 0x9}}, @mrs={0xbe, 0x18, {0x1bb9}}, @uexit={0x0, 0x18, 0x6}, @smc={0x1e, 0x40, {0x4400000e, [0xffffffffffffffff, 0x4, 0x4, 0xd, 0x6]}}, @hvc={0x32, 0x40, {0xc400000d, [0x0, 0x8, 0x5, 0x4, 0x6]}}, @hvc={0x32, 0x40, {0xc400000e, [0x7ff, 0x6, 0xee, 0xe, 0x6]}}], 0x55c}, &(0x7f0000000a80)=[@featur2={0x1, 0x84}], 0x1) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000ac0)={r3, 0x7ff, 0x2, r3}) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r1, 0x4018aee1, &(0x7f0000000b40)=@attr_irq_timer={0x0, 0x1, 0x0, &(0x7f0000000b00)=0x14}) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, &(0x7f0000000b80)=@arm64) syz_kvm_vgic_v3_setup(r2, 0x3, 0x100) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000bc0)={0xf0, "6df7bfca5f51f6c5a88160704c831cc39679f8fd056bc4ab2bccaded483ec58868e08fa44cb208d6d8369eee0b9c06fd1327685fbac1f35048a69f3b9210e511ee65c58581f60e8e58966c3a7de0959d4a8458bf4813b4f64a6bc496ee546b56b6188fac0ab3356d44e21f87396404a782fae4dbecb98bf499ef2e5c21e0f7b1cae14eb0ef3b3c9e51b789ad4bf13725dd3e8dd90173ca08333058b28947003554794159f1556ed3d9e6424c7c5d2af8a83e97c6567b2bc130a44f30a978323f31ac44b6968c0453b9cbf30b2f8a3ccbb5bc0839d05135bfcbb48826c3e346dea4e1b5d87d40fc1aa37ae9756e3a8c6c"}) ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f0000000cc0)={0x7b, "732e727ee3ddef861f864f45d089b9659904782236565555a0c387c1f240ae2210018213c70bc7c57a33246188ed934a952e59dd0287a1e9254dcbe3302bd9b252642d597f742dfa3a298e46e2952dc3cd457847be99e177d13fb808241ba4825cefd3305b1aa2ac6bdccde2c4729fb70c1284a829e16dca876e42"}) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r1, 0x4018aee1, &(0x7f0000000d40)=@attr_pmu_init) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1a) ioctl$KVM_HAS_DEVICE_ATTR_vm(r5, 0x4018aee3, &(0x7f0000000dc0)=@attr_other={0x0, 0x6, 0x80, &(0x7f0000000d80)=0x41c}) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r4, 0x4018aee2, &(0x7f0000000e40)=@attr_other={0x0, 0x5, 0xfff, &(0x7f0000000e00)}) ioctl$KVM_S390_VCPU_FAULT(r4, 0x4008ae52, &(0x7f0000000e80)=0x3) r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffa000/0x4000)=nil, r6, 0x0, 0x100010, r4, 0x0) ioctl$KVM_GET_ONE_REG(r4, 0x4010aeab, &(0x7f0000000f00)=@riscv64_d={0x8030000006000016, &(0x7f0000000ec0)=0x4}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000f40), 0x300, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x4) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f0000000f80)={0xdddd1000, 0x111000}) write$eventfd(r3, &(0x7f0000000fc0)=0x1000, 0x8) 18m32.724548336s ago: executing program 5 (id=238): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161942, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x100016) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x25) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f00000001c0)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000380)}) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f00000002c0)=@attr_other={0x0, 0x8, 0x108, &(0x7f0000000000)=0xc000000000000000}) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x4, 0x1, 0x0}) r7 = eventfd2(0xeffffffd, 0x801) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000000)={0x200, 0x4000, 0x4, r7, 0x1}) r8 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil) r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dcea, 0x8000}}], 0x20}, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r11, 0x4018aee1, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vm(r9, 0x4018aee3, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) r12 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r13, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)={0xef000000, 0x1000, 0x2}}) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r13, r14, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000140)=[{0x0, &(0x7f0000000180)=[@smc={0x1e, 0x40, {0xef000000, [0x0, 0x1, 0x2, 0x3, 0x4]}}, @hvc={0x32, 0x40, {0xef000000, [0x0, 0x1, 0x2, 0x3, 0x4]}}], 0x80}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r14, 0xae80, 0x0) ioctl$KVM_RUN(r14, 0xae80, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000001340)={0x3, 0x0, 0x2, r7, 0x3}) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000000c0)={0x51d987bd, 0x0, 0x0, r7, 0xa}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000100)={0x1, 0x0, [{0x0, 0x2, 0xbf6a7be1b71b6187, 0x0, @irqchip={0x0, 0x8}}]}) 18m24.130164148s ago: executing program 4 (id=239): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) r4 = eventfd2(0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x2b) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000240)={0x1, 0xe000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000080)={0x3000, 0x1000, 0x1}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r6, 0x4010ae68, &(0x7f0000000040)={0x0, 0x10c000, 0x1}) close(r4) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) r7 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, r7, 0x3000002, 0x13, r4, 0x0) write$eventfd(r4, &(0x7f0000000180)=0x5, 0xfffffde3) r8 = openat$kvm(0x0, 0x0, 0x8280, 0x0) r9 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000300)=[@featur2={0x1, 0x491cab28f0f6d128}], 0x1) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000080)="4200eee491ca24e00d0003000098bea5038b6db300cd411a0000000000000001a8092240f0ee5c0030521e10000000830000000000000000010000000000000000000000591f9b21", 0x0, 0xffffffffffffff1f) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, 0xffffffffffffffff, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) ioctl$KVM_SET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee1, &(0x7f00000002c0)=@attr_pmu_irq={0x0, 0x0, 0x1000000, 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x18) r12 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil) 18m9.479223397s ago: executing program 5 (id=240): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x27) ioctl$KVM_GET_DEVICE_ATTR_vm(r0, 0x4018aee2, &(0x7f0000000040)=@attr_other={0x0, 0xffffffff, 0x2, &(0x7f0000000000)=0x5}) ioctl$KVM_CAP_PTP_KVM(r0, 0x4068aea3, &(0x7f0000000080)) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000100)={0x4, 0x0, [{0x2, 0x1, 0x0, 0x0, @sint={0xa, 0x80}}, {0x4e7, 0x2, 0x0, 0x0, @irqchip={0x5, 0x5}}, {0xb, 0x5, 0x1, 0x0, @irqchip={0x8, 0xffff0000}}, {0x4, 0x2, 0x0, 0x0, @adapter={0x3, 0x4, 0x1, 0xf, 0x6}}]}) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000200)="6ca1fd7a66ab3045a04c64257fe5ecac5f6124a419ca7c3d394f1e7a97cf5e9f177af5c1506eb8c00f565b0bad2d1505f533b0540f013e9f8550db6e4a3e22f67c31f2632c21f28c", 0x0, 0x48) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000280)={0xf000, 0x0, 0x5f, 0x1, 0x800}) ioctl$KVM_CAP_ARM_SYSTEM_SUSPEND(r0, 0x4068aea3, &(0x7f00000002c0)) ioctl$KVM_CAP_PTP_KVM(r0, 0x4068aea3, &(0x7f0000000340)) eventfd2(0x10000, 0x801) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x27) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000003c0)={0xffffffffffffffff, 0x7f}) syz_kvm_setup_cpu$arm64(r0, r1, &(0x7f0000bfe000/0x400000)=nil, &(0x7f0000000440)=[{0x0, &(0x7f0000000400)=[@hvc={0x32, 0x40, {0x8400000e, [0x0, 0x4, 0x8, 0x1000, 0x10c]}}], 0x40}], 0x1, 0x0, &(0x7f0000000480)=[@featur1={0x1, 0x6c}], 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x40182, 0x0) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000500)={0x101ff, 0x0, &(0x7f0000c50000/0xd000)=nil}) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000540)={0x3, 0x0, [{0x9, 0x3, 0x0, 0x0, @adapter={0xafd, 0x7, 0x0, 0x7, 0x100}}, {0x4, 0x2, 0x1, 0x0, @irqchip={0x3ff, 0x822b}}, {0x7f, 0x3, 0x1, 0x0, @msi={0x7f, 0x1, 0xff, 0x81}}]}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, r4, 0x1, 0x40010, r1, 0x0) r5 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, r4, 0x2000000, 0x12, r1, 0x0) syz_kvm_vgic_v3_setup(r2, 0x3, 0xc0) ioctl$KVM_ARM_VCPU_INIT(r1, 0x4020aeae, &(0x7f0000000600)={0x3, 0x8}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000640)={0xffffffff, 0xb000}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000680)=@x86={0x2, 0x6, 0x7b, 0x0, 0x4, 0x1, 0x7, 0x8, 0x8, 0xd, 0x3, 0x6, 0x0, 0xa, 0xff, 0x73, 0x4, 0xaa, 0xa, '\x00', 0xfc, 0xffffffffffffa62d}) syz_kvm_setup_cpu$arm64(r0, r6, &(0x7f0000ab6000/0x400000)=nil, &(0x7f0000000940)=[{0x0, &(0x7f00000006c0)=[@uexit={0x0, 0x18, 0x5}, @hvc={0x32, 0x40, {0xc400000d, [0xffffffffffffffff, 0xe2, 0x8000000000000000, 0xd]}}, @its_send_cmd={0xaa, 0x28, {0xb, 0x0, 0x4, 0x7, 0x3, 0x400, 0x4}}, @msr={0x14, 0x20, {0x603000000013e089, 0xffff}}, @code={0xa, 0x84, {"00b8315e00004088c04a82d20060b8f2010180d2620080d2630080d2640180d2020000d4008008d5008008d560e39ad200e0b8f2e10180d2820080d2e30080d2e40080d2020000d4000028d50084e00d007008d540818ed20020b0f2810180d2e20080d2630080d2e40180d2020000d4"}}, @eret={0xe6, 0x18, 0x3}, @mrs={0xbe, 0x18, {0x603000000013dce1}}, @code={0xa, 0x84, {"60d397d200e0b0f2010080d2020080d2030180d2440080d2020000d4007008d5001ca00e00a0c00ca01d99d200c0b0f2810080d2220080d2a30080d2240180d2020000d40070005f803b89d200c0b0f2010180d2a20080d2c30080d2a40180d2020000d4000028d5007008d50058c01a"}}, @msr={0x14, 0x20, {0x603000000013c024, 0x2}}, @hvc={0x32, 0x40, {0x20, [0x80000000, 0xa, 0x7f, 0x7, 0x7]}}, @mrs={0xbe, 0x18, {0x6030000000138006}}, @irq_setup={0x46, 0x18, {0x4, 0x1f3}}], 0x268}], 0x1, 0x0, &(0x7f0000000980)=[@featur1={0x1, 0xa6}], 0x1) syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f00000009c0)="6fc5e2c73066abf254183d94688b6ff9759e238efbac2386bf933746a3c22fc4d682f719e07009a2e7a12c688789ccf0e3f8eef0fa36590ea783c0c4b5b958943674ec1162166ec2", 0x0, 0x48) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000a40)={0xeeee0000, 0x8800}) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, &(0x7f0000000a80)) ioctl$KVM_SET_DEVICE_ATTR_vm(r2, 0x4018aee1, &(0x7f0000000b00)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x7, 0x1}}) 18m2.755848781s ago: executing program 4 (id=241): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r3, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000e04000/0x2000)=nil, 0x930, 0x1, 0x11, r3, 0x0) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, r4, 0x8, 0x13, r3, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ffd000/0x2000)=nil, r4, 0x1000001, 0x12, r3, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000027000/0x13000)=nil, r4, 0x3, 0x11, r3, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) 17m58.163140506s ago: executing program 5 (id=242): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x181b03, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r4, 0x400454d9, 0x24) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000a, 0x11, r8, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r9, 0x20, &(0x7f0000000380)="f30149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a3ff7fbc51869be2e2e0000000000000f000000000000000001000000000000000000000000000e00", 0x0, 0x34) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r8, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x3a15f2, 0x1f01) ioctl$KVM_GET_DEVICE_ATTR(r5, 0x4018aee2, &(0x7f0000000140)=@attr_arm64={0x0, 0x8, 0x4, 0x0}) 17m51.699978925s ago: executing program 4 (id=243): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) r2 = ioctl$KVM_CREATE_VM(r1, 0x894c, 0x0) syz_kvm_setup_cpu$arm64(r2, 0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil, &(0x7f00000008c0)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3d) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_ASSIGN_SET_MSIX_NR(r4, 0x4008ae73, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000000)={0x0, &(0x7f0000000000), 0xfffffffffffffe19}, 0x0, 0x0) r10 = syz_kvm_vgic_v3_setup(r7, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000180)={0x8}) ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x2, 0x4, &(0x7f0000000200)=0x807ffff}) ioctl$KVM_RUN(r9, 0xae80, 0x0) r11 = syz_kvm_add_vcpu$arm64(r5, &(0x7f00000000c0)={0x0, &(0x7f0000000380)=[@its_setup={0x82, 0x28, {0x3, 0x1, 0x39d}}], 0x28}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r4, 0x4, 0x120) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000180)={0x3, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_DEVICE_ATTR(r12, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r11, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x4f832, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r12, 0x4018aee1, &(0x7f0000000240)=@attr_arm64={0x0, 0x4, 0x2, 0x0}) r13 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0xfffffffffffffffd) r14 = syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000c00000/0x400000)=nil) r15 = syz_kvm_add_vcpu$arm64(r14, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@mrs={0xbe, 0x18, {0x603000000013df40}}], 0x18}, &(0x7f0000000100)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r15, 0x4018aee1, &(0x7f0000000140)=@attr_pmu_init) 17m39.102199984s ago: executing program 5 (id=244): r0 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r0, 0x4018aee2, &(0x7f0000000000)=@attr_pmu_init) r1 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000740)={0x0, &(0x7f0000000040)=[@svc={0x122, 0x40, {0x84000002, [0x1ff, 0x6, 0x2, 0x6, 0x6]}}, @its_setup={0x82, 0x28, {0x0, 0x1, 0x3b7}}, @code={0xa, 0x84, {"404a83d20020b8f2010080d2e20180d2830080d2640080d2020000d4008e82d20040b8f2e10080d2e20180d2030180d2c40080d2020000d40000291e00c8a10e402784d200c0b0f2c10080d2220180d2e30180d2840180d2020000d4007008d50000403a0034200e007008d5000028d5"}}, @code={0xa, 0x54, {"000028d50000008a007008d5000028d5007008d5007008d5405f8cd20080b8f2610080d2c20180d2c30080d2040080d2020000d40094200ee003202a000028d5"}}, @msr={0x14, 0x20, {0x603000000013e532, 0x2}}, @mrs={0xbe, 0x18, {0x603000000013c082}}, @irq_setup={0x46, 0x18, {0x0, 0x6}}, @uexit={0x0, 0x18, 0x94}, @its_send_cmd={0xaa, 0x28, {0xc, 0x0, 0x2, 0xa, 0x0, 0x3}}, @code={0xa, 0x6c, {"000008d5008008d5003b9dd200c0b8f2410080d2820180d2a30080d2240180d2020000d400a0df0c008008d580f28dd20080b0f2210080d2a20080d2230180d2c40180d2020000d4000028d500082038008008d50028285e"}}, @svc={0x122, 0x40, {0x31000000, [0xffff, 0xffffffffffff5c02, 0x8, 0x1, 0x3]}}, @code={0xa, 0x6c, {"0004006e00429dd200a0b8f2010080d2620180d2030180d2040080d2020000d4008008d5000800f8000040b90000002860179fd20000b0f2410080d2e20080d2030180d2640180d2020000d400002088008080880000319e"}}, @its_setup={0x82, 0x28, {0x2, 0x3, 0x44}}, @irq_setup={0x46, 0x18, {0x4, 0x1a9}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x1, 0x2, 0xc, 0xfdfe, 0x7, 0x2}}, @msr={0x14, 0x20, {0x603000000013de90, 0x10000}}, @svc={0x122, 0x40, {0x8400000d, [0x4c0f, 0x0, 0x3, 0x2, 0x8]}}, @msr={0x14, 0x20, {0x6030000000138010, 0x4}}, @irq_setup={0x46, 0x18, {0x4, 0x28e}}, @its_setup={0x82, 0x28, {0x2, 0x2, 0x2a0}}, @svc={0x122, 0x40, {0xc4000003, [0x9, 0x809, 0x8, 0xd2, 0x100000001]}}, @hvc={0x32, 0x40, {0xc5000021, [0x8, 0x3, 0x4c1, 0x6, 0x1]}}, @code={0xa, 0xb4, {"000028d500cd8ad20060b0f2810180d2820080d2430180d2240080d2020000d400609f0d20f89cd20000b8f2010180d2420180d2e30080d2c40180d2020000d4e07a9ad20020b0f2410180d2620080d2830080d2a40080d2020000d40038207e008008d5007008d5201291d20080b8f2a10180d2020080d2830080d2040080d2020000d4a01a90d20060b8f2c10080d2420180d2c30180d2c40080d2020000d4"}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x10040, 0x100000001, 0x8}}, @code={0xa, 0xb4, {"c06b9bd20080b0f2610180d2420180d2630080d2240180d2020000d460e88cd20000b8f2810180d2a20180d2e30080d2040080d2020000d4000008d540cd96d200a0b8f2010080d2220080d2030080d2840080d2020000d4007008d50068a038c0959dd200c0b0f2c10180d2820180d2230180d2040180d2020000d4c05987d20000b8f2210080d2420080d2c30180d2a40180d2020000d400004078000028d5"}}, @eret={0xe6, 0x18, 0x9}, @msr={0x14, 0x20, {0x603000000013e719, 0x2}}, @svc={0x122, 0x40, {0x8700ff1e, [0x2, 0x1, 0x5, 0x100, 0x9]}}, @hvc={0x32, 0x40, {0x80, [0x5, 0x0, 0x0, 0x1, 0x6]}}], 0x6e0}, &(0x7f0000000780)=[@featur2={0x1, 0x2}], 0x1) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r1, 0x4018aee2, &(0x7f0000000800)=@attr_other={0x0, 0xfffffff7, 0x4, &(0x7f00000007c0)=0x100000000}) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r0, 0x4018aee2, &(0x7f0000000880)=@attr_set_pmu={0x0, 0x0, 0x3, &(0x7f0000000840)=0xb}) ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f00000008c0)) r2 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r3 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, r2, 0x2000007, 0x40010, r0, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000900)={0x6}) r4 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000d00)={0x0, &(0x7f0000000940)=[@svc={0x122, 0x40, {0x52000400, [0x8, 0x3, 0x8, 0x40, 0x2]}}, @smc={0x1e, 0x40, {0x80000000, [0x9, 0xfb, 0x8, 0x28000000000, 0x4]}}, @smc={0x1e, 0x40, {0x8400000b, [0x5, 0xffffffffffffffff, 0x8001, 0x8, 0x5]}}, @code={0xa, 0x84, {"20019fd200a0b8f2410180d2820080d2c30080d2e40080d2020000d4604e95d20060b0f2a10080d2420180d2c30080d2440180d2020000d400b886d20080b0f2010180d2220080d2230180d2640080d2020000d40024c01a008040c8000008d5007c200e00002088007008d5000028d5"}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xffe8, 0x9, 0x1}}, @irq_setup={0x46, 0x18, {0x1, 0x120}}, @mrs={0xbe, 0x18, {0x603000000013df5a}}, @svc={0x122, 0x40, {0x86000001, [0x8, 0x81, 0x8, 0x6, 0x1]}}, @its_setup={0x82, 0x28, {0x4, 0x2, 0x1b4}}, @irq_setup={0x46, 0x18, {0x4, 0xcd}}, @code={0xa, 0x9c, {"000008d5e0ed9ad200c0b0f2010080d2820180d2e30180d2040080d2020000d40080204ea01282d200e0b8f2e10080d2620080d2830180d2c40080d2020000d440ee9cd20040b0f2210080d2220180d2e30080d2e40080d2020000d4007008d500a0df0c008008d500b8a15e402a97d200c0b8f2a10180d2220180d2030080d2a40080d2020000d4"}}, @svc={0x122, 0x40, {0x2000000, [0x6, 0x1000, 0x3, 0x9, 0x13a]}}, @hvc={0x32, 0x40, {0x84000013, [0x8000, 0x1d288b6e, 0x2, 0xc]}}, @smc={0x1e, 0x40, {0xc4000003, [0xc1, 0x4, 0x0, 0x0, 0x6000000]}}, @msr={0x14, 0x20, {0x603000000013df7f}}], 0x3a0}, &(0x7f0000000d40)=[@featur2], 0x1) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3d) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000d80)="e23cdd662371759c4eee3cdbea240a14bd9b514d90c2b0dc8b74a378ee05d8bed1c17a087e1cc2d3be1e7f3b1a20dafe89992b3dd5f4add2f7e0df36f23418fc0d97f4de756cc7e2", 0x0, 0x48) ioctl$KVM_GET_ONE_REG(r4, 0x4010aeab, &(0x7f0000000e40)=@arm64_core={0x6030000000100010, &(0x7f0000000e00)=0x1}) ioctl$KVM_SET_DEVICE_ATTR(r0, 0x4018aee1, &(0x7f0000000ec0)=@attr_other={0x0, 0x3e8a, 0x9, &(0x7f0000000e80)=0x7}) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f0000000f40)=@riscv64_aia_csr={0x8030000003010006, &(0x7f0000000f00)=0x1}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000f80), 0x2983, 0x0) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000fc0)=0x1) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x3c) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r7, 0x4010ae68, &(0x7f0000001000)={0x4, 0x8000, 0x1}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000001040)={0x70000, 0x110000}) syz_memcpy_off$KVM_EXIT_MMIO(r3, 0x20, &(0x7f0000001080)="8d6421a1384dd10344a97197704674d2079702f9b2a0d20c", 0x0, 0x18) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, &(0x7f00000010c0)=@arm64) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x20) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, &(0x7f0000001100)) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, &(0x7f0000001140)={0x8000000000000000, 0x7}) mmap$KVM_VCPU(&(0x7f0000ffc000/0x3000)=nil, r2, 0x6, 0x10010, r0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x33) r8 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000001340)={0x0, &(0x7f0000001180)=[@its_setup={0x82, 0x28, {0x3, 0x0, 0x31d}}, @msr={0x14, 0x20, {0x603000000013805d, 0x9}}, @its_setup={0x82, 0x28, {0x1, 0x3, 0x192}}, @irq_setup={0x46, 0x18, {0x1, 0x3d5}}, @svc={0x122, 0x40, {0x84000052, [0x8, 0x10000, 0x8, 0xfffffffffffffff8]}}, @hvc={0x32, 0x40, {0x8600ff01, [0x8, 0x9, 0xff, 0x68d, 0x1]}}, @svc={0x122, 0x40, {0x84000008, [0x3, 0x7, 0x3, 0xb, 0x9]}}, @eret={0xe6, 0x18, 0x4}, @uexit={0x0, 0x18, 0xffff}, @svc={0x122, 0x40, {0x1, [0x4ea, 0x7, 0xf64, 0x4, 0x6]}}], 0x1b8}, &(0x7f0000001380)=[@featur1={0x1, 0x2}], 0x1) syz_kvm_setup_cpu$arm64(r5, r8, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000001580)=[{0x0, &(0x7f00000013c0)=[@irq_setup={0x46, 0x18, {0x4, 0x2ac}}, @code={0xa, 0x84, {"0058200e405587d20020b8f2c10180d2820080d2430180d2040080d2020000d400c4202e000008d540989bd20020b0f2a10080d2220180d2a30180d2a40080d2020000d4602c90d20040b0f2210080d2620080d2830180d2c40080d2020000d4020000d4007008d50000251e000028d5"}}, @uexit={0x0, 0x18, 0xffff}, @its_setup={0x82, 0x28, {0x1, 0x1, 0xe5}}, @its_setup={0x82, 0x28, {0x0, 0x1, 0x268}}, @smc={0x1e, 0x40, {0xffff, [0x73f, 0x1, 0x6, 0xc, 0x7]}}, @smc={0x1e, 0x40, {0x84000002, [0xff2, 0x40, 0x2800, 0x10, 0x4]}}], 0x184}], 0x1, 0x0, &(0x7f00000015c0)=[@featur1={0x1, 0x11}], 0x1) 17m35.083614654s ago: executing program 4 (id=245): r0 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r1 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f00000004c0)={0x0, &(0x7f0000000000)=[@msr={0x14, 0x20, {0x603000000013c009, 0x9}}, @eret={0xe6, 0x18, 0xf}, @its_send_cmd={0xaa, 0x28, {0x3, 0x1, 0x1, 0xd, 0x5, 0x4, 0x4}}, @eret={0xe6, 0x18, 0xd66}, @msr={0x14, 0x20, {0x603000000013c018, 0x69af}}, @its_setup={0x82, 0x28, {0x0, 0x1, 0x1a4}}, @its_setup={0x82, 0x28, {0x0, 0x4, 0x1cb}}, @uexit={0x0, 0x18}, @uexit={0x0, 0x18, 0x9}, @uexit={0x0, 0x18, 0x9}, @hvc={0x32, 0x40, {0x80000001, [0xfffffffffffffffc, 0x2, 0x3, 0xfffffffffffffffb, 0xffffffffffffffff]}}, @code={0xa, 0x84, {"007008d5007008d5a04c97d20000b0f2810180d2c20080d2430080d2e40180d2020000d4007008d5007008d5809c82d20060b0f2210080d2c20180d2230180d2a40080d2020000d4800c86d20000b8f2a10180d2420080d2a30080d2640180d2020000d4007008d50084007f000028d5"}}, @its_setup={0x82, 0x28, {0x1, 0x4, 0x6b}}, @smc={0x1e, 0x40, {0x84000011, [0x8000, 0x2, 0x1, 0xc, 0x7fff]}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x0, 0x4, 0x9, 0x2ee0, 0x2}}, @uexit={0x0, 0x18, 0x236}, @uexit={0x0, 0x18, 0x10c}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x100, 0x0, 0x2}}, @uexit={0x0, 0x18, 0x25e4}, @its_setup={0x82, 0x28, {0x0, 0x4, 0x23c}}, @smc={0x1e, 0x40, {0xc5000021, [0x9, 0x6, 0x6, 0x4, 0x2]}}, @svc={0x122, 0x40, {0x0, [0x1ff, 0x800, 0xe, 0x7f, 0x6]}}, @uexit={0x0, 0x18, 0xffffffff}, @its_send_cmd={0xaa, 0x28, {0xf, 0x1, 0x3, 0x4, 0x6, 0x1}}, @hvc={0x32, 0x40, {0x40000000, [0x735, 0x5, 0xc, 0x0, 0x8000]}}, @irq_setup={0x46, 0x18, {0x3, 0x32d}}, @uexit={0x0, 0x18, 0x3f8000000000}, @its_send_cmd={0xaa, 0x28, {0xb, 0x1, 0x3, 0x9, 0x1ff, 0x1, 0x1}}, @eret={0xe6, 0x18, 0x7}], 0x494}, &(0x7f0000000500)=[@featur2={0x1, 0x88}], 0x1) mmap$KVM_VCPU(&(0x7f0000fff000/0x1000)=nil, r0, 0xc, 0x121130, r1, 0x0) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x25) ioctl$KVM_CAP_HALT_POLL(r2, 0x4068aea3, &(0x7f0000000540)={0xb6, 0x0, 0x7}) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) ioctl$KVM_PRE_FAULT_MEMORY(r1, 0xc040aed5, &(0x7f00000005c0)={0x7000, 0x18000}) ioctl$KVM_CAP_ARM_INJECT_SERROR_ESR(r2, 0x4068aea3, &(0x7f0000000600)) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000680)={0x70000, 0x110000}) r3 = ioctl$KVM_GET_STATS_FD_cpu(r1, 0xaece) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x410040, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000700)={0x2, 0x0, 0xe000, 0x2000, &(0x7f0000c8e000/0x2000)=nil}) ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f0000000740)={0xd12c, 0x1}) ioctl$KVM_ARM_PREFERRED_TARGET(r1, 0x8020aeaf, &(0x7f0000000780)) syz_kvm_setup_cpu$arm64(r3, r3, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000cc0)=[{0x0, &(0x7f00000007c0)=[@uexit={0x0, 0x18, 0xc}, @its_send_cmd={0xaa, 0x28, {0xc, 0x0, 0x2, 0xa, 0x6, 0x80000000, 0x3}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x2ff5c, 0x9, 0x9}}, @msr={0x14, 0x20, {0x603000000013df6e, 0xffffffffffffffff}}, @svc={0x122, 0x40, {0x84000014, [0x3, 0xff, 0x6, 0x4400a9ff, 0xb8]}}, @irq_setup={0x46, 0x18, {0x1, 0x34c}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x280, 0x31f5, 0xa}}, @uexit={0x0, 0x18, 0x10000}, @msr={0x14, 0x20, {0x603000000013c2a6, 0x4}}, @irq_setup={0x46, 0x18, {0x0, 0x1dd}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80a0000, 0xffd0, 0x7fffffffffffffff, 0x1}}, @uexit={0x0, 0x18, 0x7fffffffffffffff}, @hvc={0x32, 0x40, {0x1000000, [0x6, 0x0, 0x6, 0x7, 0x8]}}, @eret={0xe6, 0x18, 0xc40}, @code={0xa, 0xcc, {"804098d20000b8f2810180d2e20180d2c30180d2a40180d2020000d4a05091d200e0b0f2e10180d2c20080d2c30080d2e40180d2020000d4e0d996d20080b8f2210180d2820180d2e30080d2a40180d2020000d4e00d81d20040b8f2010080d2420180d2630080d2a40080d2020000d4000820bc201e97d200e0b8f2e10080d2420080d2630180d2840180d2020000d4007008d5007c0053008008d5e0b183d20000b0f2e10180d2820180d2630180d2240080d2020000d4"}}, @smc={0x1e, 0x40, {0xc400000d, [0x6, 0xa6, 0x3, 0x0, 0x9]}}, @eret={0xe6, 0x18, 0xcee}, @smc={0x1e, 0x40, {0x8400000e, [0x0, 0x0, 0x1, 0xea8d, 0x8]}}, @msr={0x14, 0x20, {0x603000000013801a, 0x2544}}, @mrs={0xbe, 0x18, {0x603000000013deb9}}, @msr={0x14, 0x20, {0x603000000013c65b, 0x7}}, @smc={0x1e, 0x40, {0x8400000a, [0x0, 0xfffffffffffffffb, 0x6, 0x0, 0x8000]}}, @smc={0x1e, 0x40, {0x80008400, [0x8, 0x6b0, 0xfffffffffffffff8, 0x7, 0x1d7]}}, @code={0xa, 0x9c, {"00dc205e600b8ad200e0b0f2e10180d2020180d2630180d2640080d2020000d4007008d580fa97d20080b0f2010080d2c20180d2c30180d2840080d2020000d4007008d580249fd200c0b0f2610180d2220180d2430180d2a40180d2020000d40084bf0d60d882d20000b8f2810080d2e20080d2a30180d2840080d2020000d40000000e000008d5"}}, @msr={0x14, 0x20, {0x603000000013ff12, 0x7f}}], 0x500}], 0x1, 0x0, &(0x7f0000000d00)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x8040ae9f, &(0x7f0000000d40)=@arm64) syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CLEAR_DIRTY_LOG(r3, 0xc018aec0, &(0x7f0000001180)={0x4, 0x240, 0x280, &(0x7f0000000d80)=[0x7fffffffffffffff, 0x47a, 0xfff, 0x4, 0x0, 0xc, 0x4, 0x0, 0x5, 0x7, 0x5, 0x2, 0xd, 0x7, 0xffffffffffffffff, 0x4, 0x3, 0x10001, 0x10001, 0x8001, 0x5, 0x401, 0xb, 0x101, 0xb0, 0x3ff, 0x7ff, 0x1, 0x7, 0xfff, 0x80000000000, 0xfffffffffffffffc, 0x3, 0x5, 0x100000000, 0x6, 0x3ff, 0x9, 0x100000000, 0xd1e, 0x9, 0xd, 0x0, 0x4, 0x7fffffffffffffff, 0x4, 0xb868, 0x2, 0x7, 0x7, 0x10000, 0xffffffffffff7fff, 0x7594f2d0, 0x3, 0xb85, 0x0, 0x101, 0x7, 0x8, 0x6, 0x2, 0x8001, 0x5, 0x1, 0x5, 0x9, 0x8, 0x6, 0x1, 0xffffffffffffff93, 0x7, 0x100, 0x101, 0x10, 0x1, 0x0, 0x1, 0xb771, 0x2300000000, 0x8, 0x4, 0x193c18a1, 0x0, 0x28a, 0x2, 0x2, 0xb, 0x2, 0x8, 0x4, 0x3, 0x1c8, 0x3d, 0x1, 0x8, 0x8, 0x71f, 0x9, 0x7, 0x6, 0x5, 0x80, 0x5, 0x8d5, 0x7, 0x807, 0xb5, 0x45c2, 0xef, 0x8, 0x1000, 0x2, 0x1, 0x6, 0x100, 0x2, 0x4, 0x8, 0xc, 0x6a, 0x8, 0x8, 0x7, 0x9, 0x6, 0x76, 0xc, 0x90]}) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000011c0)={0xa}) syz_kvm_add_vcpu$arm64(r4, &(0x7f0000001300)={0x0, &(0x7f0000001200)=[@msr={0x14, 0x20, {0x603000000013d000, 0x7}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x1800, 0x8, 0x4}}, @smc={0x1e, 0x40, {0xc4000010, [0x4, 0x0, 0xc, 0xa, 0x61]}}, @mrs={0xbe, 0x18, {0x603000000013e65f}}, @its_setup={0x82, 0x28, {0x0, 0x1, 0x34e}}], 0xd0}, &(0x7f0000001340)=[@featur1={0x1, 0x10}], 0x1) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, &(0x7f0000001380)) r6 = ioctl$KVM_GET_STATS_FD_vm(r2, 0xaece) syz_kvm_setup_cpu$arm64(r3, r6, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000019c0)=[{0x0, &(0x7f00000013c0)=[@its_send_cmd={0xaa, 0x28, {0x5, 0x0, 0x3, 0x6, 0x80000000, 0x838, 0x4}}, @hvc={0x32, 0x40, {0xc4000003, [0xfffffffffffffff9, 0x3, 0x0, 0x7fffffffffffffff, 0x7]}}, @mrs={0xbe, 0x18, {0x603000000013c00d}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x1, 0x3, 0x10, 0x0, 0x3, 0x1}}, @eret={0xe6, 0x18, 0xa1}, @uexit={0x0, 0x18, 0x7fff}, @its_send_cmd={0xaa, 0x28, {0x3, 0x1, 0x4, 0x3, 0x6, 0x5, 0x2}}, @code={0xa, 0x84, {"20599bd20040b0f2010180d2420080d2830180d2e40180d2020000d420de8ad20040b0f2410080d2420180d2a30180d2640180d2020000d400fc4093c0fa8dd20000b8f2610180d2e20180d2c30080d2640080d2020000d4007008d5000028d5000008d50060000f007008d50024c01a"}}, @memwrite={0x6e, 0x30, @generic={0x10000, 0xc66, 0x3, 0x1}}, @its_setup={0x82, 0x28, {0x1, 0x1, 0x26d}}, @smc={0x1e, 0x40, {0x80000001, [0xfffffffffffffff8, 0x4, 0x7f, 0x7fff, 0x8000]}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0xc00, 0x100000001}}, @msr={0x14, 0x20, {0x603000000013e6de, 0x6}}, @mrs={0xbe, 0x18, {0x603000000013e08b}}, @code={0xa, 0x9c, {"00c8a02e00a0000d007008d5000589d20020b8f2010180d2a20080d2630080d2840080d2020000d4806b81d20000b8f2610080d2e20180d2c30180d2640180d2020000d40000c028a05198d20020b0f2610180d2420080d2830080d2640080d2020000d400a594d200c0b0f2e10080d2e20180d2230180d2a40080d2020000d400ec202e000000f1"}}, @mrs={0xbe, 0x18, {0x603000000013deb9}}, @smc={0x1e, 0x40, {0x84000000, [0x9, 0xf35e, 0x0, 0x7, 0x7]}}, @hvc={0x32, 0x40, {0x8600ff01, [0x6, 0xff, 0xffc, 0x5]}}, @code={0xa, 0x6c, {"0820601e1004201e0024002f007008d580439ad200e0b8f2610080d2620080d2230080d2a40080d2020000d4007008d5004185d20040b0f2010080d2620180d2e30080d2640080d2020000d4007008d5007008d50000005e"}}, @mrs={0xbe, 0x18, {0x603000000013e4c8}}, @smc={0x1e, 0x40, {0x84000050, [0xf2d, 0xcb90, 0x0, 0x400, 0x5]}}, @svc={0x122, 0x40, {0x84000007, [0x5, 0x0, 0x0, 0x7fffffffffffffff, 0x5]}}, @mrs={0xbe, 0x18, {0x603000000013c299}}, @hvc={0x32, 0x40, {0x86000000, [0x5, 0x4, 0xfffffffffffffffe, 0x8, 0xe]}}, @eret={0xe6, 0x18, 0x3ff}, @code={0xa, 0x6c, {"008008d500b0200e407a83d20020b8f2a10180d2a20080d2830180d2840080d2020000d400b8207e0054200e20e48bd200a0b0f2610080d2e20180d2030180d2640080d2020000d40000651e00d8a05e0000805a0060004f"}}, @msr={0x14, 0x20, {0x603000000013de83, 0x80}}, @its_send_cmd={0xaa, 0x28, {0x5, 0x0, 0x3, 0x2, 0x0, 0x7fff, 0x2}}, @irq_setup={0x46, 0x18, {0x3, 0x15}}], 0x5f8}], 0x1, 0x0, &(0x7f0000001a00)=[@featur2], 0x1) ioctl$KVM_CAP_ARM_SYSTEM_SUSPEND(r2, 0x4068aea3, &(0x7f0000001a40)) r7 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000001b80)={0x0, &(0x7f0000001ac0)=[@irq_setup={0x46, 0x18, {0x0, 0x211}}, @smc={0x1e, 0x40, {0x200, [0x1, 0x9, 0x7fffffff, 0x47f]}}, @mrs={0xbe, 0x18, {0x603000000013da10}}, @eret={0xe6, 0x18}], 0x88}, &(0x7f0000001bc0)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_RUN(r7, 0xae80, 0x0) 17m22.344207883s ago: executing program 4 (id=246): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}, @its_setup={0x82, 0x28, {0x1, 0x1, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x3}}], 0x68}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000240)=@attr_arm64={0x0, 0x0, 0x0, 0x0}) r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r6 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r5, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$arm64(r3, r6, 0xfffffffffffffffe) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$arm64(r3, r6, 0xffffffffffffffff) 16m51.520067381s ago: executing program 36 (id=244): r0 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r0, 0x4018aee2, &(0x7f0000000000)=@attr_pmu_init) r1 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000740)={0x0, &(0x7f0000000040)=[@svc={0x122, 0x40, {0x84000002, [0x1ff, 0x6, 0x2, 0x6, 0x6]}}, @its_setup={0x82, 0x28, {0x0, 0x1, 0x3b7}}, @code={0xa, 0x84, {"404a83d20020b8f2010080d2e20180d2830080d2640080d2020000d4008e82d20040b8f2e10080d2e20180d2030180d2c40080d2020000d40000291e00c8a10e402784d200c0b0f2c10080d2220180d2e30180d2840180d2020000d4007008d50000403a0034200e007008d5000028d5"}}, @code={0xa, 0x54, {"000028d50000008a007008d5000028d5007008d5007008d5405f8cd20080b8f2610080d2c20180d2c30080d2040080d2020000d40094200ee003202a000028d5"}}, @msr={0x14, 0x20, {0x603000000013e532, 0x2}}, @mrs={0xbe, 0x18, {0x603000000013c082}}, @irq_setup={0x46, 0x18, {0x0, 0x6}}, @uexit={0x0, 0x18, 0x94}, @its_send_cmd={0xaa, 0x28, {0xc, 0x0, 0x2, 0xa, 0x0, 0x3}}, @code={0xa, 0x6c, {"000008d5008008d5003b9dd200c0b8f2410080d2820180d2a30080d2240180d2020000d400a0df0c008008d580f28dd20080b0f2210080d2a20080d2230180d2c40180d2020000d4000028d500082038008008d50028285e"}}, @svc={0x122, 0x40, {0x31000000, [0xffff, 0xffffffffffff5c02, 0x8, 0x1, 0x3]}}, @code={0xa, 0x6c, {"0004006e00429dd200a0b8f2010080d2620180d2030180d2040080d2020000d4008008d5000800f8000040b90000002860179fd20000b0f2410080d2e20080d2030180d2640180d2020000d400002088008080880000319e"}}, @its_setup={0x82, 0x28, {0x2, 0x3, 0x44}}, @irq_setup={0x46, 0x18, {0x4, 0x1a9}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x1, 0x2, 0xc, 0xfdfe, 0x7, 0x2}}, @msr={0x14, 0x20, {0x603000000013de90, 0x10000}}, @svc={0x122, 0x40, {0x8400000d, [0x4c0f, 0x0, 0x3, 0x2, 0x8]}}, @msr={0x14, 0x20, {0x6030000000138010, 0x4}}, @irq_setup={0x46, 0x18, {0x4, 0x28e}}, @its_setup={0x82, 0x28, {0x2, 0x2, 0x2a0}}, @svc={0x122, 0x40, {0xc4000003, [0x9, 0x809, 0x8, 0xd2, 0x100000001]}}, @hvc={0x32, 0x40, {0xc5000021, [0x8, 0x3, 0x4c1, 0x6, 0x1]}}, @code={0xa, 0xb4, {"000028d500cd8ad20060b0f2810180d2820080d2430180d2240080d2020000d400609f0d20f89cd20000b8f2010180d2420180d2e30080d2c40180d2020000d4e07a9ad20020b0f2410180d2620080d2830080d2a40080d2020000d40038207e008008d5007008d5201291d20080b8f2a10180d2020080d2830080d2040080d2020000d4a01a90d20060b8f2c10080d2420180d2c30180d2c40080d2020000d4"}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x10040, 0x100000001, 0x8}}, @code={0xa, 0xb4, {"c06b9bd20080b0f2610180d2420180d2630080d2240180d2020000d460e88cd20000b8f2810180d2a20180d2e30080d2040080d2020000d4000008d540cd96d200a0b8f2010080d2220080d2030080d2840080d2020000d4007008d50068a038c0959dd200c0b0f2c10180d2820180d2230180d2040180d2020000d4c05987d20000b8f2210080d2420080d2c30180d2a40180d2020000d400004078000028d5"}}, @eret={0xe6, 0x18, 0x9}, @msr={0x14, 0x20, {0x603000000013e719, 0x2}}, @svc={0x122, 0x40, {0x8700ff1e, [0x2, 0x1, 0x5, 0x100, 0x9]}}, @hvc={0x32, 0x40, {0x80, [0x5, 0x0, 0x0, 0x1, 0x6]}}], 0x6e0}, &(0x7f0000000780)=[@featur2={0x1, 0x2}], 0x1) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r1, 0x4018aee2, &(0x7f0000000800)=@attr_other={0x0, 0xfffffff7, 0x4, &(0x7f00000007c0)=0x100000000}) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r0, 0x4018aee2, &(0x7f0000000880)=@attr_set_pmu={0x0, 0x0, 0x3, &(0x7f0000000840)=0xb}) ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f00000008c0)) r2 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r3 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, r2, 0x2000007, 0x40010, r0, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000900)={0x6}) r4 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000d00)={0x0, &(0x7f0000000940)=[@svc={0x122, 0x40, {0x52000400, [0x8, 0x3, 0x8, 0x40, 0x2]}}, @smc={0x1e, 0x40, {0x80000000, [0x9, 0xfb, 0x8, 0x28000000000, 0x4]}}, @smc={0x1e, 0x40, {0x8400000b, [0x5, 0xffffffffffffffff, 0x8001, 0x8, 0x5]}}, @code={0xa, 0x84, {"20019fd200a0b8f2410180d2820080d2c30080d2e40080d2020000d4604e95d20060b0f2a10080d2420180d2c30080d2440180d2020000d400b886d20080b0f2010180d2220080d2230180d2640080d2020000d40024c01a008040c8000008d5007c200e00002088007008d5000028d5"}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xffe8, 0x9, 0x1}}, @irq_setup={0x46, 0x18, {0x1, 0x120}}, @mrs={0xbe, 0x18, {0x603000000013df5a}}, @svc={0x122, 0x40, {0x86000001, [0x8, 0x81, 0x8, 0x6, 0x1]}}, @its_setup={0x82, 0x28, {0x4, 0x2, 0x1b4}}, @irq_setup={0x46, 0x18, {0x4, 0xcd}}, @code={0xa, 0x9c, {"000008d5e0ed9ad200c0b0f2010080d2820180d2e30180d2040080d2020000d40080204ea01282d200e0b8f2e10080d2620080d2830180d2c40080d2020000d440ee9cd20040b0f2210080d2220180d2e30080d2e40080d2020000d4007008d500a0df0c008008d500b8a15e402a97d200c0b8f2a10180d2220180d2030080d2a40080d2020000d4"}}, @svc={0x122, 0x40, {0x2000000, [0x6, 0x1000, 0x3, 0x9, 0x13a]}}, @hvc={0x32, 0x40, {0x84000013, [0x8000, 0x1d288b6e, 0x2, 0xc]}}, @smc={0x1e, 0x40, {0xc4000003, [0xc1, 0x4, 0x0, 0x0, 0x6000000]}}, @msr={0x14, 0x20, {0x603000000013df7f}}], 0x3a0}, &(0x7f0000000d40)=[@featur2], 0x1) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3d) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000d80)="e23cdd662371759c4eee3cdbea240a14bd9b514d90c2b0dc8b74a378ee05d8bed1c17a087e1cc2d3be1e7f3b1a20dafe89992b3dd5f4add2f7e0df36f23418fc0d97f4de756cc7e2", 0x0, 0x48) ioctl$KVM_GET_ONE_REG(r4, 0x4010aeab, &(0x7f0000000e40)=@arm64_core={0x6030000000100010, &(0x7f0000000e00)=0x1}) ioctl$KVM_SET_DEVICE_ATTR(r0, 0x4018aee1, &(0x7f0000000ec0)=@attr_other={0x0, 0x3e8a, 0x9, &(0x7f0000000e80)=0x7}) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f0000000f40)=@riscv64_aia_csr={0x8030000003010006, &(0x7f0000000f00)=0x1}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000f80), 0x2983, 0x0) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000fc0)=0x1) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x3c) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r7, 0x4010ae68, &(0x7f0000001000)={0x4, 0x8000, 0x1}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000001040)={0x70000, 0x110000}) syz_memcpy_off$KVM_EXIT_MMIO(r3, 0x20, &(0x7f0000001080)="8d6421a1384dd10344a97197704674d2079702f9b2a0d20c", 0x0, 0x18) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, &(0x7f00000010c0)=@arm64) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x20) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, &(0x7f0000001100)) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, &(0x7f0000001140)={0x8000000000000000, 0x7}) mmap$KVM_VCPU(&(0x7f0000ffc000/0x3000)=nil, r2, 0x6, 0x10010, r0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x33) r8 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000001340)={0x0, &(0x7f0000001180)=[@its_setup={0x82, 0x28, {0x3, 0x0, 0x31d}}, @msr={0x14, 0x20, {0x603000000013805d, 0x9}}, @its_setup={0x82, 0x28, {0x1, 0x3, 0x192}}, @irq_setup={0x46, 0x18, {0x1, 0x3d5}}, @svc={0x122, 0x40, {0x84000052, [0x8, 0x10000, 0x8, 0xfffffffffffffff8]}}, @hvc={0x32, 0x40, {0x8600ff01, [0x8, 0x9, 0xff, 0x68d, 0x1]}}, @svc={0x122, 0x40, {0x84000008, [0x3, 0x7, 0x3, 0xb, 0x9]}}, @eret={0xe6, 0x18, 0x4}, @uexit={0x0, 0x18, 0xffff}, @svc={0x122, 0x40, {0x1, [0x4ea, 0x7, 0xf64, 0x4, 0x6]}}], 0x1b8}, &(0x7f0000001380)=[@featur1={0x1, 0x2}], 0x1) syz_kvm_setup_cpu$arm64(r5, r8, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000001580)=[{0x0, &(0x7f00000013c0)=[@irq_setup={0x46, 0x18, {0x4, 0x2ac}}, @code={0xa, 0x84, {"0058200e405587d20020b8f2c10180d2820080d2430180d2040080d2020000d400c4202e000008d540989bd20020b0f2a10080d2220180d2a30180d2a40080d2020000d4602c90d20040b0f2210080d2620080d2830180d2c40080d2020000d4020000d4007008d50000251e000028d5"}}, @uexit={0x0, 0x18, 0xffff}, @its_setup={0x82, 0x28, {0x1, 0x1, 0xe5}}, @its_setup={0x82, 0x28, {0x0, 0x1, 0x268}}, @smc={0x1e, 0x40, {0xffff, [0x73f, 0x1, 0x6, 0xc, 0x7]}}, @smc={0x1e, 0x40, {0x84000002, [0xff2, 0x40, 0x2800, 0x10, 0x4]}}], 0x184}], 0x1, 0x0, &(0x7f00000015c0)=[@featur1={0x1, 0x11}], 0x1) 16m33.782711668s ago: executing program 37 (id=246): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}, @its_setup={0x82, 0x28, {0x1, 0x1, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x3}}], 0x68}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000240)=@attr_arm64={0x0, 0x0, 0x0, 0x0}) r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r6 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r5, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$arm64(r3, r6, 0xfffffffffffffffe) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$arm64(r3, r6, 0xffffffffffffffff) 3m5.161056229s ago: executing program 7 (id=277): ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000040)=@arm64_sve_vls={0x606000000015ffff, &(0x7f0000000000)=0xcb26}) r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000bfe000/0x400000)=nil) r1 = syz_kvm_add_vcpu$arm64(r0, &(0x7f0000000480)={0x0, &(0x7f0000000080)=[@its_setup={0x82, 0x28, {0x1, 0x3, 0x318}}, @msr={0x14, 0x20, {0x1885, 0xffff}}, @hvc={0x32, 0x40, {0xfa0000a2, [0x7fffffffffffffff, 0x100, 0x4, 0x5, 0x81]}}, @code={0xa, 0xb4, {"805a96d20040b8f2210180d2a20180d2e30180d2c40080d2020000d4007008d5c0e281d20040b8f2010080d2620180d2830180d2e40080d2020000d400bf96d20000b0f2210180d2a20080d2430180d2a40080d2020000d4801a9bd200e0b0f2010080d2620080d2a30080d2840180d2020000d4008008d50094000f000028d560348dd200c0b0f2410080d2220180d2030180d2640180d2020000d4008008d5"}}, @irq_setup={0x46, 0x18, {0x2, 0x2f}}, @uexit={0x0, 0x18, 0x5}, @irq_setup={0x46, 0x18, {0x4, 0x35a}}, @eret={0xe6, 0x18, 0x100000000}, @svc={0x122, 0x40, {0x84000005, [0x7, 0x6c5, 0x9, 0x10, 0xfffffffffffffff5]}}, @hvc={0x32, 0x40, {0x400, [0x8, 0x6, 0x785, 0x1, 0x5]}}, @mrs={0xbe, 0x18, {0x603000000013c02c}}, @eret={0xe6, 0x18, 0xffffffff}, @smc={0x1e, 0x40, {0x84000053, [0xed2, 0x7fff, 0x80000001, 0x80000001]}}, @eret={0xe6, 0x18, 0xfffffffffffffffd}, @memwrite={0x6e, 0x30, @vgic_gicr={0x8100000, 0x4, 0x4, 0x4}}, @its_setup={0x82, 0x28, {0x0, 0x4, 0x1a8}}, @code={0xa, 0x9c, {"000008d5007008d5000840ba00a8215e409f89d20000b0f2a10080d2220080d2830180d2240180d2020000d4008008d5808992d20060b8f2a10180d2820180d2630180d2640180d2020000d4000028d580fe91d20000b0f2610180d2420080d2230080d2640180d2020000d4a0358cd20080b8f2010080d2c20080d2e30180d2e40180d2020000d4"}}, @hvc={0x32, 0x40, {0x84000023, [0x1, 0xc68, 0x220, 0xffffffffffffffff, 0x4]}}], 0x3d8}, &(0x7f00000004c0)=[@featur1={0x1, 0xdc61fa166650d599}], 0x1) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1d) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000500)={0x6, 0x7}) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000580)=@attr_riscv64=@attr_aplic={0x0, 0x1, @valid=0x2000, &(0x7f0000000540)=0x200}) ioctl$KVM_ARM_VCPU_FINALIZE(r1, 0x4004aec2, &(0x7f00000005c0)=0x5) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r3, 0x4018aee3, &(0x7f0000000640)=@attr_pmu_irq={0x0, 0x0, 0x0, &(0x7f0000000600)=0x3}) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r3, 0x4018aee2, &(0x7f00000006c0)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000680)={0x766, 0x7fff, 0x1}}) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000700)={0x2, 0x0, &(0x7f0000f0d000/0x3000)=nil}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r1, 0xc040aed5, &(0x7f0000000740)={0xddddc000, 0x112000}) r4 = ioctl$KVM_GET_STATS_FD_cpu(r1, 0xaece) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) syz_kvm_vgic_v3_setup(r2, 0x1, 0x200) ioctl$KVM_S390_VCPU_FAULT(r3, 0x4008ae52, &(0x7f0000000780)=0x40) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x34) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f00000007c0)={0x7}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000800), 0x401, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0xa) syz_kvm_setup_cpu$arm64(r2, r3, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000940)=[{0x0, &(0x7f0000000840)=[@smc={0x1e, 0x40, {0x1, [0xe2, 0x1, 0x0, 0x7, 0x7]}}, @mrs={0xbe, 0x18, {0x603000000013e21b}}, @svc={0x122, 0x40, {0x8400000c, [0x5, 0x553, 0x5, 0x8, 0xf]}}, @uexit={0x0, 0x18, 0x7103}, @hvc={0x32, 0x40, {0x80008000, [0x1, 0x9, 0xfffffffffffffffb, 0x8, 0xf2fa0000]}}], 0xf0}], 0x1, 0x0, &(0x7f0000000980)=[@featur1={0x1, 0x10}], 0x1) syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000b00)={0x0, &(0x7f00000009c0)=[@irq_setup={0x46, 0x18, {0x0, 0x144}}, @hvc={0x32, 0x40, {0x84000053, [0xe1b, 0x8, 0x7, 0x5, 0xfff]}}, @mrs={0xbe, 0x18, {0x603000000013e6dd}}, @smc={0x1e, 0x40, {0x4000, [0x0, 0x1, 0x7f, 0x81, 0x1b29]}}, @mrs={0xbe, 0x18, {0x603000000013dea1}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80c0000, 0x8, 0x6, 0x4}}, @msr={0x14, 0x20, {0x603000000013f080, 0x4000000}}], 0x118}, &(0x7f0000000b40)=[@featur2={0x1, 0xaa}], 0x1) ioctl$KVM_ARM_VCPU_FINALIZE(r3, 0x4004aec2, &(0x7f0000000b80)=0x2) r9 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x0, 0x2000005, 0x10010, r1, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r9, 0x20, &(0x7f0000000bc0)="d6ad9ca43db72c2ff024a7fce49b1dc0b586fee40acf5a1073c57571e268d6ad68d107c66a71821168eb5ca26cb5b5a472d30cb8660494a5ba96a0b5fda0015ccd258d87848dcb4d", 0x0, 0x48) ioctl$KVM_IRQ_LINE_STATUS(r8, 0xc008ae67, &(0x7f0000000c40)={0x9, 0x1}) ioctl$KVM_CAP_ARM_USER_IRQ(r6, 0x4068aea3, &(0x7f0000000c80)) syz_kvm_add_vcpu$arm64(r5, &(0x7f0000001140)={0x0, &(0x7f0000000d00)=[@msr={0x14, 0x20, {0x2, 0x6}}, @svc={0x122, 0x40, {0x80000001, [0x8000000000000001, 0xff, 0xb5, 0x4, 0x2]}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x20020, 0x81, 0xb}}, @svc={0x122, 0x40, {0x80003fff, [0x8, 0x3, 0x8, 0x40, 0x2]}}, @smc={0x1e, 0x40, {0x1, [0x1, 0xa4, 0xa, 0x9, 0x9]}}, @msr={0x14, 0x20, {0x603000000013defa, 0x5}}, @code={0xa, 0x3c, {"0088200e0004801a007008d50030202e0000781e008008d50014007f000008d500c0e21e007008d5"}}, @smc={0x1e, 0x40, {0x8000, [0x2, 0x9, 0x9, 0x1, 0x3]}}, @its_setup={0x82, 0x28, {0x4, 0x4, 0x2fa}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x18, 0x3}}, @smc={0x1e, 0x40, {0x84000005, [0xcb8a, 0x5, 0xfffffffffffffffe, 0x8001, 0xb17]}}, @smc={0x1e, 0x40, {0x80000002, [0x8, 0x0, 0x74, 0x3, 0x5]}}, @irq_setup={0x46, 0x18, {0x4, 0x3ab}}, @irq_setup={0x46, 0x18, {0x0, 0x6e}}, @eret={0xe6, 0x18, 0xfffffffffffffff1}, @irq_setup={0x46, 0x18, {0x0, 0xb7}}, @its_setup={0x82, 0x28, {0x0, 0x4, 0x291}}, @mrs={0xbe, 0x18, {0x603000000013e300}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x0, 0x2, 0x10, 0x1, 0x49, 0x1}}, @eret={0xe6, 0x18, 0x10001}, @uexit={0x0, 0x18, 0xffffffff}, @irq_setup={0x46, 0x18, {0x1, 0x3d0}}, @uexit={0x0, 0x18, 0x4}, @its_send_cmd={0xaa, 0x28, {0x3, 0x0, 0x2, 0x6, 0x4, 0x100}}, @svc={0x122, 0x40, {0x0, [0xd, 0x5, 0x7fffffffffffffff, 0x839, 0x5]}}], 0x414}, &(0x7f0000001180)=[@featur2={0x1, 0x10}], 0x1) close(r2) 2m50.59067309s ago: executing program 7 (id=278): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2a) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r3, 0x40a0ae49, &(0x7f0000000180)={0x1fe, 0x4, 0x80a0000, 0x2000, &(0x7f0000c08000/0x2000)=nil, 0x1000, r4}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_GUEST_MEMFD(r6, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3}) r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, r8, 0x3000001, 0x11, r7, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x1, 0xe000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x1000, 0x1}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000001480)={0xc000, 0x0, 0x1}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x4) ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000000)={0x7}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x1, 0x6, 0xe, 0x0, 0x2, 0x3, 0x5, 0x7, 0x7, 0xe1, 0x6, 0x7, 0x0, 0x1, 0x4, 0x9, 0x2, 0x5, 0x5, '\x00', 0x5, 0x800}) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x8800, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000040)={0x60000, 0x3000, 0x1}) ioctl$KVM_CHECK_EXTENSION(r11, 0xae03, 0xf1) r12 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r13, &(0x7f00000001c0)=0x4000000001, 0xfdef) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000280)={0x5, 0x0, [{0x80, 0x3, 0x1, 0x0, @adapter={0x80, 0x200, 0x0, 0x40, 0x6}}, {0x80000001, 0x4, 0x1, 0x0, @irqchip={0x89, 0xbade}}, {0xc, 0x2, 0x1, 0x0, @sint={0x4, 0x1}}, {0xfffff800, 0x3, 0x0, 0x0, @irqchip={0x3f, 0x5}}, {0x1, 0x4, 0x0, 0x0, @irqchip={0x3, 0x200}}]}) 2m35.49101946s ago: executing program 6 (id=279): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_add_vcpu$arm64(0x0, 0x0, 0x0, 0x0) syz_kvm_add_vcpu$arm64(0x0, 0x0, 0x0, 0x0) r5 = syz_kvm_vgic_v3_setup(r3, 0x2, 0x100) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, &(0x7f0000000180)={0x1010020, 0x1}) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000380)={r5, 0x7f, 0x2}) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r6, 0x4360ae82, &(0x7f0000000040)={[0x8, 0x2, 0x7fffffff, 0x2, 0x8, 0x40, 0x7, 0x8a, 0x8, 0xe5ed, 0x8, 0x3, 0xffffffffffffffff, 0x0, 0xdd9, 0x4], 0x0, 0x401}) r7 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000003000/0x1000)=nil, r7, 0x1, 0x2012, r6, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x2000001, 0x5c1fd1b65647af1, r4, 0x0) 2m23.822697652s ago: executing program 7 (id=280): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000000)={0x7}) r5 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000080)={0x0, 0x6000, 0x0, r5}) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f00000000c0)={0x8}) ioctl$KVM_SIGNAL_MSI(r4, 0x4020aea5, &(0x7f0000000000)={0x6000, 0x0, 0x0, 0x1, 0x20000000}) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r7 = eventfd2(0xfffffffa, 0x80001) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000140)={0x80, 0x4, 0x0, r7}) syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000000)={0x1, 0x37d03030d7a92616}) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000180)={0x5000}) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_IRQ_LINE(r9, 0x4008ae61, &(0x7f0000000000)={0x80000000, 0xfffffffe}) r10 = syz_kvm_add_vcpu$arm64(r1, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) r11 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r12 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil) r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000180)={0x0, &(0x7f00000002c0)=[@hvc={0x32, 0x40, {0x84000004, [0x7fffffff, 0x1, 0x0, 0x7f, 0x800]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r13, 0xae80, 0x0) 2m9.092422568s ago: executing program 6 (id=281): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_vgic_v3_setup(r1, 0xff7fffffffffffff, 0x360) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)={0x9000, 0x2000, 0x401, 0x0, 0x7d}) 1m57.884510136s ago: executing program 7 (id=282): r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) (async) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x14) syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x1d) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CAP_ARM_SYSTEM_SUSPEND(r6, 0x4068aea3, &(0x7f00000000c0)) (async) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000000)={0x0, &(0x7f0000000040)=[@smc={0x1e, 0x40, {0x8400000e, [0x99b, 0x100000003, 0x5, 0x101, 0x10]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x2, 0x0, &(0x7f0000000000)=0xf4020000}) (async) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x2, 0x1, &(0x7f0000000000)=0x1100000000000000}) (async) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x81, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r11, 0xae03, 0xf4) ioctl$KVM_CAP_ARM_INJECT_SERROR_ESR(r11, 0x4068aea3, &(0x7f0000000100)) 1m54.99202092s ago: executing program 6 (id=283): r0 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r1 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000600)={0x0, &(0x7f0000000000)=[@code={0xa, 0x9c, {"c09899d20060b8f2810180d2220180d2230080d2840080d2020000d40000c0a8e0378ed20040b0f2e10080d2620080d2a30180d2c40080d2020000d4007008d5206d9dd20020b8f2210180d2820180d2e30180d2640180d2020000d4007008d5007008d5007008d51f00002b805582d20080b0f2210180d2e20080d2a30080d2840080d2020000d4"}}, @mrs={0xbe, 0x18, {0x603000000013c300}}, @svc={0x122, 0x40, {0x1000000, [0x53, 0x0, 0x71, 0x9, 0x400]}}, @eret={0xe6, 0x18, 0x1}, @hvc={0x32, 0x40, {0x84000006, [0x2, 0x2, 0x55dd, 0x0, 0x55]}}, @msr={0x14, 0x20, {0x603000000013defd, 0x2}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xfee4, 0x400}}, @msr={0x14, 0x20, {0x6688, 0x7}}, @code={0xa, 0x9c, {"003c004e60199dd20020b8f2010180d2820180d2230080d2440080d2020000d4000000fa0040200dc08a82d200a0b0f2410180d2220180d2a30080d2e40080d2020000d4007008d5404587d20000b0f2e10080d2420080d2230080d2640080d2020000d460a68dd20080b0f2a10180d2e20080d2e30180d2e40180d2020000d4007008d5008008d5"}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x8, 0x9, 0x1}}, @msr={0x14, 0x20, {0x603000000013c030, 0x2544}}, @irq_setup={0x46, 0x18, {0x0, 0x2ff}}, @mrs={0xbe, 0x18, {0x603000000013c2ab}}, @code={0xa, 0x6c, {"000008d5007008d5000008d5000c803c000008d5007008d5000c202e000028d5e0eb94d200c0b8f2010080d2820080d2430180d2640180d2020000d420588fd200c0b0f2a10180d2e20080d2e30080d2a40180d2020000d4"}}, @irq_setup={0x46, 0x18, {0x3, 0x273}}, @its_setup={0x82, 0x28, {0x4, 0x2, 0x161}}, @smc={0x1e, 0x40, {0x84000010, [0xd5e, 0x57d2, 0xfb6, 0x6, 0xd]}}, @irq_setup={0x46, 0x18, {0x1, 0x19}}, @code={0xa, 0x84, {"e0289ad200e0b0f2810180d2220180d2630080d2640080d2020000d4000c803c007008d50034202e00209dd200e0b0f2010180d2a20080d2230180d2a40080d2020000d40040200d806687d200e0b0f2610180d2420080d2e30180d2440180d2020000d4007008d50038302e000008d5"}}, @msr={0x14, 0x20, {0x603000000013d000, 0x8}}, @svc={0x122, 0x40, {0xc5000021, [0x7, 0x6, 0x8, 0x118, 0x9]}}, @svc={0x122, 0x40, {0x2000000, [0x0, 0xa, 0x5, 0x1, 0x400000]}}, @its_setup={0x82, 0x28, {0x4, 0x1, 0x1db}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x1, 0x1, 0x9, 0x9, 0x5, 0x4}}, @msr={0x14, 0x20, {0x603000000013de93, 0x80000001}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x0, 0x3, 0x5, 0x2, 0x2}}, @uexit={0x0, 0x18, 0x400}, @smc={0x1e, 0x40, {0x100, [0x98aa, 0xffffffffffffffff, 0x5, 0x1, 0x24]}}], 0x5f0}, &(0x7f0000000640)=[@featur2={0x1, 0x40}], 0x1) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, r0, 0x3000012, 0x810, r1, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x2000)=nil, r0, 0x4, 0x12, r1, 0x0) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) munmap(&(0x7f0000f18000/0x4000)=nil, 0x4000) r3 = ioctl$KVM_GET_STATS_FD_cpu(r1, 0xaece) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x15) ioctl$KVM_ARM_PREFERRED_TARGET(r3, 0x8020aeaf, &(0x7f0000000680)) r5 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000ac0)={0x0, &(0x7f00000006c0)=[@msr={0x14, 0x20, {0x603000000013f649, 0x5}}, @hvc={0x32, 0x40, {0x8400000e, [0x10001, 0x5efb8926, 0xc62, 0x8, 0xffff]}}, @code={0xa, 0x84, {"000008d5a08298d200c0b0f2210180d2420180d2630080d2e40180d2020000d4000020d40000009b201794d20060b8f2c10180d2820080d2830180d2640180d2020000d4000008d50014c05a207c8bd200a0b0f2810180d2820180d2630180d2a40180d2020000d400a0200d00f4000f"}}, @its_send_cmd={0xaa, 0x28, {0xb, 0x1, 0x3, 0xa, 0x3, 0x7ff, 0x1}}, @mrs={0xbe, 0x18, {0x603000000013c4d7}}, @uexit={0x0, 0x18, 0x8}, @hvc={0x32, 0x40, {0x40000000, [0x2, 0x3df, 0x1000, 0x8, 0x100000000]}}, @svc={0x122, 0x40, {0x8400000d, [0xe, 0x9, 0x9, 0x100, 0x400]}}, @hvc={0x32, 0x40, {0x3f000000, [0x7, 0x8000, 0x9, 0x8000, 0x5]}}, @its_setup={0x82, 0x28, {0x3, 0x2, 0x22b}}, @svc={0x122, 0x40, {0x84000009, [0x7fffffff, 0x9, 0x4, 0x5, 0x1000]}}, @mrs={0xbe, 0x18, {0x603000000013c4d3}}, @msr={0x14, 0x20, {0x6030000000138066, 0x8}}, @svc={0x122, 0x40, {0x20, [0x4, 0x5, 0x6, 0x8000, 0x9]}}, @irq_setup={0x46, 0x18, {0x4, 0x131}}, @msr={0x14, 0x20, {0x0, 0xd}}, @its_setup={0x82, 0x28, {0x1, 0x3, 0x3c2}}, @its_setup={0x82, 0x28, {0x0, 0x4, 0xad}}, @hvc={0x32, 0x40, {0xc400000e, [0x7, 0x3, 0x7, 0x7, 0x8]}}, @eret={0xe6, 0x18, 0x7}, @msr={0x14, 0x20, {0x603000000013c011, 0x23}}], 0x3dc}, &(0x7f0000000b00)=[@featur1={0x1, 0x44}], 0x1) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x22) ioctl$KVM_SET_GUEST_DEBUG_arm64(r1, 0x4208ae9b, &(0x7f0000000b40)={0x10000, 0x0, {[0x1, 0x5, 0xfffffffffffff970, 0x4, 0xfff, 0x2, 0x2, 0xf, 0x3, 0x5, 0x3, 0x6, 0xc530, 0x4, 0x1, 0xffffffff], [0x0, 0x35, 0x0, 0xfffffffffffff469, 0x9a5, 0x1, 0x3, 0x2, 0x9, 0xa71a, 0x4, 0xc050, 0x101, 0xfffffffffffffff9, 0x100, 0x8000], [0x8, 0x100, 0xffffffff, 0x8, 0xfff, 0x7fff, 0x3, 0x2, 0xe4c, 0x50b, 0x3, 0x100, 0x8, 0xdd8, 0xddce, 0x7], [0x5, 0x8000, 0x10, 0x743, 0x5, 0x1ff, 0x2, 0x3, 0x4, 0x35e5, 0x8001, 0x7, 0xa, 0x8000000000000000, 0x6, 0x800]}}) syz_kvm_setup_cpu$arm64(r3, r5, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000001400)=[{0x0, &(0x7f0000000d80)=[@its_send_cmd={0xaa, 0x28, {0xb, 0x1, 0x1, 0x7, 0x6, 0x0, 0x3}}, @code={0xa, 0xcc, {"008008d540fd85d200a0b8f2410180d2420180d2030080d2640180d2020000d40020c01a800b80d20060b0f2c10080d2820080d2230180d2040080d2020000d4c0c188d20000b8f2810080d2420080d2c30180d2040180d2020000d40040400d603987d200c0b8f2a10180d2a20080d2a30080d2a40080d2020000d4000008d5a0a395d20060b0f2410080d2420180d2e30180d2440080d2020000d4a03c8bd200e0b0f2410180d2e20080d2e30080d2e40080d2020000d4"}}, @uexit={0x0, 0x18, 0x4}, @hvc={0x32, 0x40, {0x8400000d, [0x7, 0x9, 0x4, 0x3ff, 0xffffffffffffffff]}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x0, 0x2, 0x6, 0x7fff, 0x9, 0x4}}, @code={0xa, 0x9c, {"0028201e001296d20060b8f2210180d2a20180d2a30180d2840180d2020000d400a4e00d00005fd600f4a00e008008d5805d9fd20020b0f2a10080d2a20080d2c30180d2440080d2020000d4e09d9cd200e0b0f2410080d2220080d2230080d2e40180d2020000d4007008d580369fd20080b8f2410180d2220180d2430080d2840080d2020000d4"}}, @its_setup={0x82, 0x28, {0x4, 0x4, 0x308}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x4, 0xffffffffffffffff, 0x8}}, @eret={0xe6, 0x18, 0x6}, @svc={0x122, 0x40, {0xc400000e, [0x3, 0x4, 0xb623, 0x2, 0x2]}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80a0000, 0x180, 0x1, 0x10}}, @msr={0x14, 0x20, {0x603000000013e218, 0x4}}, @memwrite={0x6e, 0x30, @generic={0x8000000, 0x5d3, 0x8, 0x3}}, @svc={0x122, 0x40, {0x80000001, [0x5, 0x3, 0x10001, 0x0, 0x200]}}, @irq_setup={0x46, 0x18, {0x0, 0x20b}}, @smc={0x1e, 0x40, {0xc4000001, [0x856, 0x7fff, 0xa, 0xffffffff, 0x3]}}, @hvc={0x32, 0x40, {0x80007fff, [0xb, 0x3, 0x6, 0x8, 0x1adb]}}, @smc={0x1e, 0x40, {0x400, [0x5, 0x0, 0x1000, 0x0, 0x3]}}, @uexit={0x0, 0x18, 0x6da}, @msr={0x14, 0x20, {0x603000000013c62d, 0xad8}}, @its_setup={0x82, 0x28, {0x0, 0x0, 0x328}}, @code={0xa, 0x84, {"009c007f0000403a007008d5607980d20020b0f2210080d2820180d2a30180d2240180d2020000d4a01d8ad20060b8f2e10080d2a20080d2030180d2040180d2020000d4df3003d500a0000d00a0c00c80ae80d20000b8f2410080d2c20180d2c30180d2840180d2020000d41f000071"}}, @its_send_cmd={0xaa, 0x28, {0x4, 0x0, 0x2, 0x1, 0x9, 0x1000000, 0x2}}, @hvc={0x32, 0x40, {0xffff, [0x6, 0x86, 0xfffffffffffffffb, 0x7, 0x7fff]}}, @eret={0xe6, 0x18, 0x80000000}, @its_send_cmd={0xaa, 0x28, {0xd, 0x0, 0x0, 0x9, 0x10, 0x815d, 0x4}}, @uexit={0x0, 0x18, 0x4}, @msr={0x14, 0x20, {0x603000000013df19, 0x3d}}, @mrs={0xbe, 0x18, {0x603000000013e520}}, @its_send_cmd={0xaa, 0x28, {0x4, 0x1, 0x3, 0xd, 0x0, 0xa}}], 0x65c}], 0x1, 0x0, &(0x7f0000001440)=[@featur2], 0x1) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000001480)=@x86={0x4, 0xf, 0x5, 0x0, 0xbeb, 0x0, 0x5, 0xc, 0x8, 0x3, 0xfe, 0x49, 0x0, 0x4, 0x73, 0x0, 0x80, 0x7f, 0x65, '\x00', 0xb, 0xfffffffffffffff9}) ioctl$KVM_GET_DEVICE_ATTR_vm(r4, 0x4018aee2, &(0x7f0000001500)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f00000014c0)={0xffc0, 0x2a, 0x2}}) ioctl$KVM_ASSIGN_SET_MSIX_NR(r3, 0x4008ae73, &(0x7f0000001540)={0x280, 0x6}) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000001580)={0x9, 0x10000, 0x8, r3, 0x6}) eventfd2(0xffff0001, 0x80000) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x2) ioctl$KVM_RESET_DIRTY_RINGS(r4, 0xaec7) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f00000015c0)={0xa, 0xffffffffffffffff, 0x1}) syz_kvm_setup_cpu$arm64(r4, r3, &(0x7f0000a2f000/0x400000)=nil, &(0x7f0000001980)=[{0x0, &(0x7f0000001600)=[@msr={0x14, 0x20, {0x603000000013df4f}}, @msr={0x14, 0x20, {0x603000000013f665, 0x2}}, @svc={0x122, 0x40, {0x8400000f, [0xe01c, 0x8, 0x7, 0x1f, 0x7]}}, @hvc={0x32, 0x40, {0x86000001, [0x958f0000, 0x5, 0x6, 0x4, 0xfffffffffffffff7]}}, @eret={0xe6, 0x18, 0x1}, @svc={0x122, 0x40, {0x84000007, [0xffffffffffffffff, 0x5, 0x1, 0x7, 0x9]}}, @svc={0x122, 0x40, {0xc4000010, [0x0, 0x8000, 0xb5, 0x895e, 0xc]}}, @uexit={0x0, 0x18, 0x2}, @its_setup={0x82, 0x28, {0x2, 0x4, 0x1f7}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x1a00, 0xfff, 0x8}}, @hvc={0x32, 0x40, {0x84000003, [0x81, 0x3, 0x1, 0x8000, 0x5]}}, @irq_setup={0x46, 0x18, {0x1, 0x322}}, @irq_setup={0x46, 0x18, {0x4, 0x1b1}}, @irq_setup={0x46, 0x18, {0x2, 0x4f}}, @smc={0x1e, 0x40, {0x800, [0x6, 0x100000000, 0x4, 0x9, 0x6]}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x0, 0x2, 0x1, 0x4df90bc3, 0xe0000, 0x3}}, @its_setup={0x82, 0x28, {0x4, 0x1, 0x1e0}}, @its_send_cmd={0xaa, 0x28, {0x0, 0x0, 0x4, 0x9, 0x10001, 0x5, 0x4}}, @hvc={0x32, 0x40, {0x6000000, [0x1, 0x5, 0xffffffffffff8000, 0x0, 0x10001]}}, @memwrite={0x6e, 0x30, @generic={0x8080000, 0x34c, 0xffffffff, 0x1}}], 0x378}], 0x1, 0x0, &(0x7f00000019c0)=[@featur2={0x1, 0x1}], 0x1) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, &(0x7f0000001a00)=@arm64) r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x2c) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000001a40)={0x2710, 0x6, 0xeeef0000, 0x2000, &(0x7f0000a3b000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000001a80)={0x10002, 0x2, 0x10000, 0x2000, &(0x7f0000f97000/0x2000)=nil}) ioctl$KVM_RESET_DIRTY_RINGS(r4, 0xaec7) ioctl$KVM_HAS_DEVICE_ATTR_vm(r8, 0x4018aee3, &(0x7f0000001b00)=@attr_other={0x0, 0x2, 0x80, &(0x7f0000001ac0)=0x80000000}) syz_kvm_add_vcpu$arm64(r2, &(0x7f0000002140)={0x0, &(0x7f0000001b40)=[@eret={0xe6, 0x18, 0x2}, @svc={0x122, 0x40, {0xc4000014, [0x2, 0xc99, 0xffff, 0x3d]}}, @uexit={0x0, 0x18, 0x1000}, @its_send_cmd={0xaa, 0x28, {0xa, 0x0, 0x1, 0xb, 0x79de, 0xffff, 0x3}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x0, 0x3, 0x4}}, @its_send_cmd={0xaa, 0x28, {0x4, 0x1, 0x1, 0x0, 0x5, 0xe}}, @its_setup={0x82, 0x28, {0x2, 0x4, 0x390}}, @code={0xa, 0x84, {"80fe9dd20000b8f2a10080d2e20080d2030180d2040080d2020000d4e05494d20000b0f2e10080d2820180d2230180d2640080d2020000d400c8a12e007008d5c06088d20080b0f2810180d2820080d2c30180d2240080d2020000d400409f0c00000058008008d5007008d50034207e"}}, @its_setup={0x82, 0x28, {0x3, 0x0, 0x1a1}}, @svc={0x122, 0x40, {0x805e, [0x9, 0x3, 0x8001, 0xb, 0x7]}}, @mrs={0xbe, 0x18, {0x603000000013c660}}, @irq_setup={0x46, 0x18, {0x0, 0x103}}, @code={0xa, 0x9c, {"40908fd200c0b0f2010080d2620080d2e30180d2c40180d2020000d440948ad200e0b8f2c10180d2e20180d2830080d2040080d2020000d4007008d5007008d5007008d5209b90d20060b8f2210080d2c20180d2630180d2640180d2020000d4000028d520798cd20040b8f2010180d2c20180d2230080d2640180d2020000d4007008d500d4a07e"}}, @code={0xa, 0xb4, {"0010206ea08a88d20060b0f2610180d2620180d2030080d2e40180d2020000d4e03692d20080b0f2810180d2020180d2630180d2640080d2020000d40060004fc0978ed200e0b0f2010080d2420080d2430180d2240080d2020000d440b19ad200e0b8f2210180d2620180d2230080d2440180d2020000d4008008d5c0d390d20040b8f2e10180d2220080d2430080d2240080d2020000d4007008d50004c0da"}}, @code={0xa, 0x84, {"0070204e1f0000f1008008d5e0b781d20000b0f2010180d2620080d2a30180d2440180d2020000d4000028d5407e96d20020b8f2010180d2020080d2230180d2240080d2020000d4001ca02e008008d500709f0c40d399d200c0b8f2810080d2a20180d2030180d2a40080d2020000d4"}}, @its_send_cmd={0xaa, 0x28, {0x5, 0x0, 0x4, 0x1, 0x1, 0x7fff, 0x4}}, @smc={0x1e, 0x40, {0x31000000, [0x1, 0xc0, 0xffffffffa664d608, 0x9]}}, @hvc={0x32, 0x40, {0xc4000003, [0x1, 0x4, 0x7, 0x400]}}, @its_send_cmd={0xaa, 0x28, {0x4, 0x1, 0x0, 0xd, 0x7, 0x81, 0x3}}, @its_setup={0x82, 0x28, {0x3, 0x0, 0x1cb}}, @eret={0xe6, 0x18, 0x2632}, @hvc={0x32, 0x40, {0xc5000021, [0x4, 0x9f, 0xef4, 0x5, 0xe]}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x10, 0xa0, 0xf}}, @uexit={0x0, 0x18, 0x2}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x54, 0x7f}}, @msr={0x14, 0x20, {0x603000000013805f, 0x2}}], 0x5f0}, &(0x7f0000002180)=[@featur2={0x1, 0x24}], 0x1) 1m39.767985818s ago: executing program 6 (id=284): syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000000)="ea7921a51316d775f3efca87ebd6bb730cbe057a58411431fcd986a8b76cc4f92c91806208be643e8da3c7cf3b9ef9c8bd40f82c72cab92a346e35c400062e2224a0edc7177c6f06", 0x0, 0x48) r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000001c0)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x5, 0x104, &(0x7f0000000080)=0x8000000000000000}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000280)=@attr_arm64={0x0, 0x4, 0x2, 0x0}) munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0x80111500, 0x20000000) r3 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32) r4 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x2, 0x0, &(0x7f0000000000)=0x8}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r8 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil) r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x2}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x1, 0x80000, 0x10000, 0x0, 0x2, 0x2}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r9, 0x1, 0x100) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0) 1m36.239413446s ago: executing program 7 (id=285): munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x7, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x2, &(0x7f0000000200)=0x400a000000}) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000240)=@attr_arm64={0x0, 0x0, 0x5, &(0x7f0000000280)=0x40400000080a0000}) syz_kvm_add_vcpu$arm64(r0, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0) r4 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32) r5 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0) syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) 1m10.493567334s ago: executing program 6 (id=286): r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000027000/0x13000)=nil, 0x930, 0x3, 0x4102932, 0xffffffffffffffff, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x22200, 0x0) (async) r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x4d) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x2c) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) (async) r7 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) (async) r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil) r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) r11 = syz_kvm_vgic_v3_setup(r8, 0x4, 0x220) ioctl$KVM_RUN(r10, 0xae80, 0x0) (async) ioctl$KVM_HAS_DEVICE_ATTR(r11, 0x4018aee3, &(0x7f0000000240)=@attr_other={0x0, 0x6, 0x0, 0x0}) ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, &(0x7f0000000100)=@arm64_fw={0x6030000000140005, &(0x7f0000000000)=0xfffffffffffffffd}) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, r1, 0x1000002, 0x28031, r6, 0x0) ioctl$KVM_GET_STATS_FD_vm(r8, 0xaece) (async) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) (async) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000002000/0x400000)=nil) 1m6.281684411s ago: executing program 7 (id=287): r0 = openat$kvm(0x0, &(0x7f0000000040), 0xe0000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000000)={0x0, &(0x7f0000000040)=[@smc={0x1e, 0x40, {0xc4000003, [0x1000004, 0x100000003, 0x5, 0x101, 0x9]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r6, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r6, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000300)={0x8001, 0x855e, 0x1}}) syz_kvm_add_vcpu$arm64(0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x4c301, 0x0) r8 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x34) r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil) r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x2}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x1, 0x80000, 0x10000, 0x0, 0x0, 0x2}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r9, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r12, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r11, 0xae80, 0x0) r13 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r14 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r15, 0xc00caee0, 0x0) r16 = ioctl$KVM_CREATE_VCPU(r15, 0xae41, 0x0) ioctl$KVM_ARM_VCPU_INIT(r16, 0x4020aeae, &(0x7f0000000340)={0x5}) ioctl$KVM_SET_ONE_REG(r16, 0x4010aeac, &(0x7f00000001c0)=@arm64_core={0x6030000000100026, &(0x7f0000000200)=0x6f48}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) 48.874318032s ago: executing program 6 (id=288): munmap$KVM_VCPU(0x0, 0x0) openat$kvm(0x0, 0xfffffffffffffffe, 0x0, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r4, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x81}], 0x1) r5 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000180)={0x0, &(0x7f00000001c0)}, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x78) syz_kvm_add_vcpu$arm64(r3, 0x0, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x3, 0xa0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 19.177737352s ago: executing program 38 (id=287): r0 = openat$kvm(0x0, &(0x7f0000000040), 0xe0000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000000)={0x0, &(0x7f0000000040)=[@smc={0x1e, 0x40, {0xc4000003, [0x1000004, 0x100000003, 0x5, 0x101, 0x9]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r6, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r6, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000300)={0x8001, 0x855e, 0x1}}) syz_kvm_add_vcpu$arm64(0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x4c301, 0x0) r8 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x34) r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil) r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x2}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x1, 0x80000, 0x10000, 0x0, 0x0, 0x2}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r9, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r12, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r11, 0xae80, 0x0) r13 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r14 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r15, 0xc00caee0, 0x0) r16 = ioctl$KVM_CREATE_VCPU(r15, 0xae41, 0x0) ioctl$KVM_ARM_VCPU_INIT(r16, 0x4020aeae, &(0x7f0000000340)={0x5}) ioctl$KVM_SET_ONE_REG(r16, 0x4010aeac, &(0x7f00000001c0)=@arm64_core={0x6030000000100026, &(0x7f0000000200)=0x6f48}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) 0s ago: executing program 39 (id=288): munmap$KVM_VCPU(0x0, 0x0) openat$kvm(0x0, 0xfffffffffffffffe, 0x0, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r4, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x81}], 0x1) r5 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000180)={0x0, &(0x7f00000001c0)}, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x78) syz_kvm_add_vcpu$arm64(r3, 0x0, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x3, 0xa0) ioctl$KVM_RUN(r5, 0xae80, 0x0) kernel console output (not intermixed with test programs): [ 385.967798][ T24] audit: type=1400 audit(385.140:74): avc: denied { read } for pid=3209 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 395.429271][ T24] audit: type=1400 audit(394.600:75): avc: denied { write } for pid=3267 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 400.731384][ T24] audit: type=1400 audit(399.920:76): avc: denied { write } for pid=3270 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 403.861734][ T3209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.797843][ T24] audit: type=1400 audit(411.950:77): avc: denied { write } for pid=3275 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 416.839386][ T24] audit: type=1400 audit(416.020:78): avc: denied { write } for pid=3278 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 428.972908][ T24] audit: type=1400 audit(428.160:79): avc: denied { write } for pid=3283 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 432.804015][ T24] audit: type=1400 audit(431.990:80): avc: denied { write } for pid=3286 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 442.996408][ T24] audit: type=1400 audit(442.180:81): avc: denied { write } for pid=3291 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 446.648682][ T24] audit: type=1400 audit(445.820:82): avc: denied { write } for pid=3294 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 449.171657][ T3209] eql: remember to turn off Van-Jacobson compression on your slave devices [ 459.421685][ T24] audit: type=1400 audit(458.610:83): avc: denied { write } for pid=3299 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 464.228949][ T24] audit: type=1400 audit(463.380:84): avc: denied { write } for pid=3302 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 475.729025][ T24] audit: type=1400 audit(474.910:85): avc: denied { write } for pid=3307 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 479.658071][ T24] audit: type=1400 audit(478.840:86): avc: denied { write } for pid=3310 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 485.200166][ T24] audit: type=1400 audit(484.380:87): avc: denied { write } for pid=3312 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 488.872142][ T24] audit: type=1400 audit(488.060:88): avc: denied { write } for pid=3315 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 501.047845][ T24] audit: type=1400 audit(500.230:89): avc: denied { write } for pid=3321 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 504.727677][ T24] audit: type=1400 audit(503.900:90): avc: denied { write } for pid=3324 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 512.497889][ T24] audit: type=1400 audit(511.640:91): avc: denied { write } for pid=3327 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 517.618819][ T24] audit: type=1400 audit(516.790:92): avc: denied { write } for pid=3330 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 537.027816][ T24] audit: type=1400 audit(536.200:93): avc: denied { write } for pid=3338 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 540.903026][ T24] audit: type=1400 audit(540.070:94): avc: denied { write } for pid=3341 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 556.499076][ T24] audit: type=1400 audit(555.680:95): avc: denied { write } for pid=3348 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 560.270321][ T24] audit: type=1400 audit(559.450:96): avc: denied { write } for pid=3351 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 571.038892][ T24] audit: type=1400 audit(570.210:97): avc: denied { write } for pid=3355 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 575.857954][ T24] audit: type=1400 audit(575.030:98): avc: denied { write } for pid=3358 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 587.518979][ T24] audit: type=1400 audit(586.690:99): avc: denied { write } for pid=3361 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 591.319354][ T24] audit: type=1400 audit(590.480:100): avc: denied { write } for pid=3364 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:26337' (ED25519) to the list of known hosts. [ 607.921792][ T24] audit: type=1400 audit(607.110:101): avc: denied { name_bind } for pid=3368 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 609.259220][ T24] audit: type=1400 audit(608.440:102): avc: denied { execute } for pid=3369 comm="sh" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 609.283971][ T24] audit: type=1400 audit(608.470:103): avc: denied { execute_no_trans } for pid=3369 comm="sh" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 638.907960][ T24] audit: type=1400 audit(638.090:104): avc: denied { mounton } for pid=3369 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 638.988157][ T24] audit: type=1400 audit(638.150:105): avc: denied { mount } for pid=3369 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 639.139769][ T3369] cgroup: Unknown subsys name 'net' [ 639.250234][ T24] audit: type=1400 audit(638.420:106): avc: denied { unmount } for pid=3369 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 639.878766][ T3369] cgroup: Unknown subsys name 'cpuset' [ 640.083694][ T3369] cgroup: Unknown subsys name 'rlimit' [ 640.983659][ T24] audit: type=1400 audit(640.170:107): avc: denied { setattr } for pid=3369 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 641.011887][ T24] audit: type=1400 audit(640.190:108): avc: denied { mounton } for pid=3369 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 641.029368][ T24] audit: type=1400 audit(640.210:109): avc: denied { mount } for pid=3369 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 642.036524][ T3372] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 642.063012][ T24] audit: type=1400 audit(641.240:110): avc: denied { relabelto } for pid=3372 comm="mkswap" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 642.088660][ T24] audit: type=1400 audit(641.270:111): avc: denied { write } for pid=3372 comm="mkswap" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 642.272664][ T24] audit: type=1400 audit(641.460:112): avc: denied { read } for pid=3369 comm="syz-executor" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 642.291820][ T24] audit: type=1400 audit(641.470:113): avc: denied { open } for pid=3369 comm="syz-executor" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 642.342169][ T3369] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 700.548873][ T24] audit: type=1400 audit(699.730:114): avc: denied { execmem } for pid=3373 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 704.800678][ T24] audit: type=1400 audit(703.990:115): avc: denied { read } for pid=3376 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 704.819680][ T24] audit: type=1400 audit(704.000:116): avc: denied { open } for pid=3375 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 704.895433][ T24] audit: type=1400 audit(704.050:117): avc: denied { mounton } for pid=3376 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 705.114438][ T24] audit: type=1400 audit(704.300:119): avc: denied { module_request } for pid=3376 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 705.126312][ T24] audit: type=1400 audit(704.290:118): avc: denied { module_request } for pid=3375 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 706.091411][ T24] audit: type=1400 audit(705.260:120): avc: denied { sys_module } for pid=3376 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 727.873736][ T3375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 728.134577][ T3375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 728.370545][ T3376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 728.815880][ T3376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 740.156172][ T3375] hsr_slave_0: entered promiscuous mode [ 740.200367][ T3375] hsr_slave_1: entered promiscuous mode [ 741.370138][ T3376] hsr_slave_0: entered promiscuous mode [ 741.404063][ T3376] hsr_slave_1: entered promiscuous mode [ 741.434976][ T3376] debugfs: 'hsr0' already exists in 'hsr' [ 741.449126][ T3376] Cannot create hsr debugfs directory [ 746.972132][ T24] audit: type=1400 audit(746.160:121): avc: denied { create } for pid=3375 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 747.032102][ T24] audit: type=1400 audit(746.170:122): avc: denied { write } for pid=3375 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 747.091778][ T24] audit: type=1400 audit(746.280:123): avc: denied { read } for pid=3375 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 747.274942][ T3375] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 747.590818][ T3375] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 747.695417][ T3375] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 747.893203][ T3375] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 747.992175][ T3375] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 748.133138][ T3375] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 748.328339][ T3375] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 748.393486][ T3375] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 749.940605][ T3376] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 750.150581][ T3376] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 750.212323][ T3376] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 750.387454][ T3376] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 750.494338][ T3376] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 750.673203][ T3376] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 750.724704][ T3376] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 750.880061][ T3376] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 764.942478][ T3375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 768.302900][ T3376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 815.844222][ T3375] veth0_vlan: entered promiscuous mode [ 816.361350][ T3375] veth1_vlan: entered promiscuous mode [ 818.289141][ T3375] veth0_macvtap: entered promiscuous mode [ 818.960005][ T3375] veth1_macvtap: entered promiscuous mode [ 819.850773][ T3376] veth0_vlan: entered promiscuous mode [ 821.170205][ T3376] veth1_vlan: entered promiscuous mode [ 822.720307][ T3414] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.818532][ T3414] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.819752][ T3414] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.835144][ T3414] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.485515][ T3376] veth0_macvtap: entered promiscuous mode [ 826.379143][ T3376] veth1_macvtap: entered promiscuous mode [ 826.537714][ T24] audit: type=1400 audit(825.640:124): avc: denied { mount } for pid=3375 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 826.868737][ T24] audit: type=1400 audit(826.050:125): avc: denied { mounton } for pid=3375 comm="syz-executor" path="/syzkaller.R1VPwX/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 827.041153][ T24] audit: type=1400 audit(826.220:126): avc: denied { mount } for pid=3375 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 827.529369][ T24] audit: type=1400 audit(826.710:127): avc: denied { mounton } for pid=3375 comm="syz-executor" path="/syzkaller.R1VPwX/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 827.681328][ T24] audit: type=1400 audit(826.860:128): avc: denied { mounton } for pid=3375 comm="syz-executor" path="/syzkaller.R1VPwX/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 828.719467][ T24] audit: type=1400 audit(827.890:129): avc: denied { unmount } for pid=3375 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 829.185245][ T24] audit: type=1400 audit(828.320:130): avc: denied { mounton } for pid=3375 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1548 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 829.368848][ T24] audit: type=1400 audit(828.480:131): avc: denied { mount } for pid=3375 comm="syz-executor" name="/" dev="gadgetfs" ino=3765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 829.740181][ T47] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.749827][ T47] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.839535][ T47] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.840637][ T47] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.967558][ T24] audit: type=1400 audit(829.140:132): avc: denied { mount } for pid=3375 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 830.239346][ T24] audit: type=1400 audit(829.410:133): avc: denied { mounton } for pid=3375 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 832.731019][ T3375] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 834.071689][ T24] kauditd_printk_skb: 1 callbacks suppressed [ 834.100019][ T24] audit: type=1400 audit(833.260:135): avc: denied { read write } for pid=3375 comm="syz-executor" name="loop1" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 834.158066][ T24] audit: type=1400 audit(833.340:136): avc: denied { open } for pid=3375 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 834.203232][ T24] audit: type=1400 audit(833.390:137): avc: denied { ioctl } for pid=3375 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=639 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 843.228422][ T24] audit: type=1400 audit(842.400:138): avc: denied { read } for pid=3527 comm="syz.1.2" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 843.290441][ T24] audit: type=1400 audit(842.460:139): avc: denied { open } for pid=3527 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 843.864434][ T24] audit: type=1400 audit(843.050:140): avc: denied { ioctl } for pid=3527 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 847.630842][ T24] audit: type=1400 audit(846.770:141): avc: denied { execute } for pid=3527 comm="syz.1.2" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=3910 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 855.266039][ T24] audit: type=1400 audit(854.450:142): avc: denied { write } for pid=3537 comm="syz.1.4" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 863.341328][ T24] audit: type=1400 audit(862.490:143): avc: denied { append } for pid=3539 comm="syz.0.5" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 934.710033][ T47] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.985205][ T47] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 937.965971][ T47] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.122983][ T47] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.435629][ T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 954.610974][ T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 954.718011][ T47] bond0 (unregistering): Released all slaves [ 956.459598][ T47] hsr_slave_0: left promiscuous mode [ 956.842519][ T47] hsr_slave_1: left promiscuous mode [ 957.723312][ T47] veth1_macvtap: left promiscuous mode [ 957.739193][ T47] veth0_macvtap: left promiscuous mode [ 957.764129][ T47] veth1_vlan: left promiscuous mode [ 957.799397][ T47] veth0_vlan: left promiscuous mode [ 975.024823][ T47] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.064468][ T47] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.260836][ T47] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.401557][ T47] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.738944][ T24] audit: type=1400 audit(981.920:144): avc: denied { write } for pid=3587 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 987.669040][ T24] audit: type=1400 audit(986.850:145): avc: denied { write } for pid=3594 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 991.479729][ T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 991.545576][ T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 991.600951][ T47] bond0 (unregistering): Released all slaves [ 992.168985][ T3209] 8021q: adding VLAN 0 to HW filter on device eth1 [ 992.354774][ T47] hsr_slave_0: left promiscuous mode [ 992.399260][ T47] hsr_slave_1: left promiscuous mode [ 992.535498][ T47] veth1_macvtap: left promiscuous mode [ 992.544651][ T47] veth0_macvtap: left promiscuous mode [ 992.555239][ T47] veth1_vlan: left promiscuous mode [ 992.564077][ T47] veth0_vlan: left promiscuous mode [ 1009.190175][ T24] audit: type=1400 audit(1008.350:146): avc: denied { write } for pid=3598 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1014.619225][ T24] audit: type=1400 audit(1013.760:147): avc: denied { write } for pid=3608 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1025.392657][ T24] audit: type=1400 audit(1024.580:148): avc: denied { write } for pid=3624 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1029.802350][ T24] audit: type=1400 audit(1028.980:149): avc: denied { write } for pid=3633 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1030.665553][ T3562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1031.331447][ T3562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1032.562076][ T3209] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1032.694734][ T3565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1032.881111][ T3565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1041.904034][ T24] audit: type=1400 audit(1041.090:150): avc: denied { write } for pid=3645 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1046.497775][ T24] audit: type=1400 audit(1045.630:151): avc: denied { write } for pid=3654 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1049.609065][ T3209] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1049.763291][ T3562] hsr_slave_0: entered promiscuous mode [ 1049.788251][ T3562] hsr_slave_1: entered promiscuous mode [ 1051.422590][ T3565] hsr_slave_0: entered promiscuous mode [ 1051.481249][ T3565] hsr_slave_1: entered promiscuous mode [ 1051.558504][ T3565] debugfs: 'hsr0' already exists in 'hsr' [ 1051.568241][ T3565] Cannot create hsr debugfs directory [ 1057.620135][ T24] audit: type=1400 audit(1056.790:152): avc: denied { write } for pid=3663 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1061.353129][ T24] audit: type=1400 audit(1060.530:153): avc: denied { write } for pid=3667 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1063.328976][ T3562] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1063.702755][ T3562] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1063.878769][ T3562] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1064.275788][ T3562] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1064.415127][ T3209] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1064.609242][ T3562] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1065.041928][ T3562] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1065.710085][ T3562] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1065.899993][ T3562] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1069.991447][ T3565] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1070.471922][ T3565] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1070.545842][ T3565] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1071.014974][ T3565] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1071.169216][ T3565] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1071.559390][ T3565] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1071.662741][ T3565] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1072.041894][ T3565] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1082.069438][ T24] audit: type=1400 audit(1081.250:154): avc: denied { write } for pid=3690 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1089.122579][ T24] audit: type=1400 audit(1088.270:155): avc: denied { write } for pid=3700 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1091.915298][ T3562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1093.474316][ T3209] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1097.433498][ T3565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1107.152325][ T24] audit: type=1400 audit(1106.290:156): avc: denied { write } for pid=3711 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1114.872720][ T24] audit: type=1400 audit(1114.060:157): avc: denied { write } for pid=3720 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1120.533813][ T3209] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1135.969021][ T24] audit: type=1400 audit(1135.050:158): avc: denied { write } for pid=3733 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1144.133008][ T24] audit: type=1400 audit(1143.300:159): avc: denied { write } for pid=3743 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1149.593726][ T3209] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1162.468435][ T24] audit: type=1400 audit(1161.550:160): avc: denied { write } for pid=3759 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1169.578414][ T24] audit: type=1400 audit(1168.760:161): avc: denied { write } for pid=3768 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1174.191306][ T3209] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1180.945907][ T3562] veth0_vlan: entered promiscuous mode [ 1181.723728][ T3562] veth1_vlan: entered promiscuous mode [ 1184.939161][ T3562] veth0_macvtap: entered promiscuous mode [ 1185.603143][ T3562] veth1_macvtap: entered promiscuous mode [ 1189.088395][ T3565] veth0_vlan: entered promiscuous mode [ 1190.992220][ T3414] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1191.028072][ T3414] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1191.034391][ T3414] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1191.035279][ T3414] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1191.564741][ T3565] veth1_vlan: entered promiscuous mode [ 1198.011131][ T3565] veth0_macvtap: entered promiscuous mode [ 1198.921110][ T3565] veth1_macvtap: entered promiscuous mode [ 1203.089083][ T33] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1203.118249][ T21] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1203.119356][ T21] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1203.120074][ T21] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.370957][ T24] audit: type=1400 audit(1226.530:162): avc: denied { write } for pid=3803 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1237.222919][ T24] audit: type=1400 audit(1236.390:163): avc: denied { write } for pid=3812 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1261.263675][ T24] audit: type=1400 audit(1260.410:164): avc: denied { write } for pid=3826 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1273.158661][ T24] audit: type=1400 audit(1272.310:165): avc: denied { write } for pid=3837 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1287.148064][ T24] audit: type=1400 audit(1286.240:166): avc: denied { setattr } for pid=3848 comm="syz.3.20" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1297.541409][ T24] audit: type=1400 audit(1296.730:167): avc: denied { write } for pid=3853 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1308.335673][ T24] audit: type=1400 audit(1307.500:168): avc: denied { write } for pid=3859 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1329.684828][ T24] audit: type=1400 audit(1328.850:169): avc: denied { write } for pid=3870 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1340.801089][ T24] audit: type=1400 audit(1339.950:170): avc: denied { write } for pid=3884 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1366.439174][ T24] audit: type=1400 audit(1365.620:171): avc: denied { write } for pid=3904 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1377.642270][ T24] audit: type=1400 audit(1376.750:172): avc: denied { write } for pid=3916 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1404.352209][ T24] audit: type=1400 audit(1403.510:173): avc: denied { write } for pid=3934 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1413.522083][ T24] audit: type=1400 audit(1412.680:174): avc: denied { write } for pid=3943 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1437.932626][ T24] audit: type=1400 audit(1437.050:175): avc: denied { write } for pid=3954 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1449.899031][ T24] audit: type=1400 audit(1449.010:176): avc: denied { write } for pid=3962 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1471.740557][ T24] audit: type=1400 audit(1470.910:177): avc: denied { write } for pid=3972 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1481.942663][ T24] audit: type=1400 audit(1480.990:178): avc: denied { write } for pid=3983 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1488.568493][ T24] audit: type=1400 audit(1487.650:179): avc: denied { map } for pid=3986 comm="syz.3.45" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1488.620261][ T24] audit: type=1400 audit(1487.800:180): avc: denied { execute } for pid=3986 comm="syz.3.45" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1567.939251][ T24] audit: type=1400 audit(1567.030:181): avc: denied { write } for pid=4033 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1578.485369][ T24] audit: type=1400 audit(1577.670:182): avc: denied { write } for pid=4042 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1710.541963][ T4107] kvm [4107]: Failed to find VMA for hva 0x20abb000 [ 1710.598984][ T4114] kvm [4114]: Failed to find VMA for hva 0x20c47000 [ 1776.244968][ T24] audit: type=1400 audit(1775.430:183): avc: denied { execute } for pid=4145 comm="syz.2.91" path=2F34312F10FBFF67525673312B0104 dev="tmpfs" ino=225 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1857.664675][ T24] audit: type=1400 audit(1856.850:184): avc: denied { write } for pid=4194 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1869.026243][ T24] audit: type=1400 audit(1868.190:185): avc: denied { write } for pid=4202 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1978.714702][ T24] audit: type=1400 audit(1977.890:186): avc: denied { create } for pid=4260 comm="syz.2.124" anonclass=[kvm-gmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1979.180689][ T24] audit: type=1400 audit(1978.270:187): avc: denied { map } for pid=4260 comm="syz.2.124" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=11805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1979.258853][ T24] audit: type=1400 audit(1978.350:188): avc: denied { read } for pid=4260 comm="syz.2.124" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=11805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2193.772510][ T24] audit: type=1400 audit(2192.920:189): avc: denied { write } for pid=4386 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2203.122201][ T24] audit: type=1400 audit(2202.300:190): avc: denied { write } for pid=4398 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2258.099333][ T24] audit: type=1400 audit(2257.280:191): avc: denied { mmap_zero } for pid=4428 comm="syz.2.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 2550.341996][ T4583] kvm [4583]: Failed to find VMA for hva 0x20c01000 [ 2702.774266][ T3783] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2705.062990][ T3783] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2706.643856][ T3783] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2709.313810][ T3783] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2725.010215][ T3783] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2725.145504][ T3783] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2725.201906][ T3783] bond0 (unregistering): Released all slaves [ 2727.202135][ T3783] hsr_slave_0: left promiscuous mode [ 2727.278829][ T3783] hsr_slave_1: left promiscuous mode [ 2727.613629][ T3783] veth1_macvtap: left promiscuous mode [ 2727.615249][ T3783] veth0_macvtap: left promiscuous mode [ 2727.622551][ T3783] veth1_vlan: left promiscuous mode [ 2727.632610][ T3783] veth0_vlan: left promiscuous mode [ 2742.725611][ T4617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2743.173637][ T4617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2747.056414][ T3783] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2748.601815][ T3783] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2749.870840][ T3783] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2751.353823][ T3783] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2757.303984][ T4623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2758.439308][ T4623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2759.398551][ T24] audit: type=1400 audit(2758.580:192): avc: denied { write } for pid=4674 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2768.237670][ T24] audit: type=1400 audit(2767.340:193): avc: denied { write } for pid=4682 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2775.184051][ T3783] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2775.272443][ T3783] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2775.344173][ T3783] bond0 (unregistering): Released all slaves [ 2775.879411][ T3209] 8021q: adding VLAN 0 to HW filter on device eth9 [ 2776.552126][ T3783] hsr_slave_0: left promiscuous mode [ 2776.735387][ T3783] hsr_slave_1: left promiscuous mode [ 2777.261795][ T3783] veth1_macvtap: left promiscuous mode [ 2777.265266][ T3783] veth0_macvtap: left promiscuous mode [ 2777.289158][ T3783] veth1_vlan: left promiscuous mode [ 2777.309987][ T3783] veth0_vlan: left promiscuous mode [ 2795.442149][ T4617] hsr_slave_0: entered promiscuous mode [ 2795.536312][ T4617] hsr_slave_1: entered promiscuous mode [ 2803.535571][ T24] audit: type=1400 audit(2802.720:194): avc: denied { write } for pid=4698 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2805.526142][ T4623] hsr_slave_0: entered promiscuous mode [ 2805.579893][ T4623] hsr_slave_1: entered promiscuous mode [ 2805.617612][ T4623] debugfs: 'hsr0' already exists in 'hsr' [ 2805.620568][ T4623] Cannot create hsr debugfs directory [ 2807.776034][ T24] audit: type=1400 audit(2806.900:195): avc: denied { write } for pid=4701 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2811.824737][ T3209] 8021q: adding VLAN 0 to HW filter on device eth10 [ 2811.844921][ T4617] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2812.094007][ T4617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2812.592426][ T4617] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2812.790763][ T4617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2813.507915][ T4617] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2813.719020][ T4617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2814.212324][ T4617] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2814.461727][ T4617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2818.443093][ T24] audit: type=1400 audit(2817.600:196): avc: denied { write } for pid=4706 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2826.263167][ T4623] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2826.672887][ T4623] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2826.736020][ T4623] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2827.248011][ T24] audit: type=1400 audit(2826.400:197): avc: denied { write } for pid=4718 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2827.338854][ T4623] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2827.561493][ T4623] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2827.951418][ T4623] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2828.102618][ T4623] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2828.444023][ T4623] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2846.704381][ T4617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2850.118051][ T24] audit: type=1400 audit(2849.220:198): avc: denied { write } for pid=4737 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2855.704998][ T4623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2858.172563][ T24] audit: type=1400 audit(2857.330:199): avc: denied { write } for pid=4745 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2863.423777][ T3209] 8021q: adding VLAN 0 to HW filter on device eth11 [ 2884.002477][ T24] audit: type=1400 audit(2883.160:200): avc: denied { write } for pid=4759 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2893.197757][ T24] audit: type=1400 audit(2892.380:201): avc: denied { write } for pid=4769 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2899.644622][ T3209] 8021q: adding VLAN 0 to HW filter on device eth12 [ 2914.643668][ T24] audit: type=1400 audit(2913.830:202): avc: denied { write } for pid=4785 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2922.158873][ T24] audit: type=1400 audit(2921.330:203): avc: denied { write } for pid=4794 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2927.312826][ T3209] 8021q: adding VLAN 0 to HW filter on device eth13 [ 2945.744527][ T24] audit: type=1400 audit(2944.920:204): avc: denied { write } for pid=4810 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2955.628449][ T24] audit: type=1400 audit(2954.800:205): avc: denied { write } for pid=4820 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2962.364829][ T3209] 8021q: adding VLAN 0 to HW filter on device eth14 [ 2971.331693][ T4617] veth0_vlan: entered promiscuous mode [ 2972.413329][ T4617] veth1_vlan: entered promiscuous mode [ 2975.545137][ T4617] veth0_macvtap: entered promiscuous mode [ 2976.198636][ T4617] veth1_macvtap: entered promiscuous mode [ 2979.449630][ T4646] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2979.464482][ T4646] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2979.489232][ T4646] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2979.513627][ T4646] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2980.730975][ T24] audit: type=1400 audit(2979.910:206): avc: denied { write } for pid=4834 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2983.829516][ T4623] veth0_vlan: entered promiscuous mode [ 2985.410159][ T4623] veth1_vlan: entered promiscuous mode [ 2989.199998][ T4623] veth0_macvtap: entered promiscuous mode [ 2989.249953][ T24] audit: type=1400 audit(2988.410:207): avc: denied { write } for pid=4840 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2989.764400][ T4623] veth1_macvtap: entered promiscuous mode [ 2994.463940][ T3783] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2994.608983][ T3783] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2994.665333][ T2158] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2994.999121][ T2158] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2998.393002][ T3209] 8021q: adding VLAN 0 to HW filter on device eth15 [ 3034.099111][ T24] audit: type=1400 audit(3033.270:208): avc: denied { write } for pid=4856 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3045.614832][ T24] audit: type=1400 audit(3044.800:209): avc: denied { write } for pid=4867 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3053.963025][ T3209] 8021q: adding VLAN 0 to HW filter on device eth16 [ 3100.288201][ T24] audit: type=1400 audit(3099.370:210): avc: denied { write } for pid=4896 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3111.434981][ T24] audit: type=1400 audit(3110.600:211): avc: denied { write } for pid=4904 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3139.259207][ T24] audit: type=1400 audit(3138.410:212): avc: denied { write } for pid=4915 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3152.413331][ T24] audit: type=1400 audit(3151.570:213): avc: denied { write } for pid=4924 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3181.160472][ T24] audit: type=1400 audit(3180.290:214): avc: denied { write } for pid=4934 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3191.528297][ T24] audit: type=1400 audit(3190.680:215): avc: denied { write } for pid=4939 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3239.082350][ T24] audit: type=1400 audit(3238.250:216): avc: denied { write } for pid=4965 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3250.850182][ T24] audit: type=1400 audit(3249.910:217): avc: denied { write } for pid=4973 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3272.318684][ T24] audit: type=1400 audit(3271.490:218): avc: denied { write } for pid=4981 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3282.318784][ T24] audit: type=1400 audit(3281.430:219): avc: denied { write } for pid=4992 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3294.904702][ T4938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3295.631691][ T4938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3309.187956][ T24] audit: type=1400 audit(3308.350:220): avc: denied { write } for pid=5006 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3314.441419][ T4949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3314.960640][ T4949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3321.517790][ T24] audit: type=1400 audit(3320.640:221): avc: denied { write } for pid=5016 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3342.315166][ T47] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3344.405784][ T47] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3347.975800][ T47] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3349.269599][ T4938] hsr_slave_0: entered promiscuous mode [ 3349.383055][ T4938] hsr_slave_1: entered promiscuous mode [ 3349.479941][ T4938] debugfs: 'hsr0' already exists in 'hsr' [ 3349.499836][ T4938] Cannot create hsr debugfs directory [ 3350.171175][ T47] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3351.219859][ T24] audit: type=1400 audit(3350.380:222): avc: denied { write } for pid=5027 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3362.555404][ T24] audit: type=1400 audit(3361.740:223): avc: denied { write } for pid=5037 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3378.821045][ T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3379.541017][ T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3380.179581][ T47] bond0 (unregistering): Released all slaves [ 3382.403759][ T47] hsr_slave_0: left promiscuous mode [ 3382.482634][ T47] hsr_slave_1: left promiscuous mode [ 3382.689007][ T47] veth1_macvtap: left promiscuous mode [ 3382.692299][ T47] veth0_macvtap: left promiscuous mode [ 3382.745014][ T47] veth1_vlan: left promiscuous mode [ 3382.760561][ T47] veth0_vlan: left promiscuous mode [ 3404.571966][ T4949] hsr_slave_0: entered promiscuous mode [ 3404.624399][ T4949] hsr_slave_1: entered promiscuous mode [ 3404.723395][ T4949] debugfs: 'hsr0' already exists in 'hsr' [ 3404.728020][ T4949] Cannot create hsr debugfs directory [ 3405.554515][ T24] audit: type=1400 audit(3404.730:224): avc: denied { write } for pid=5045 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3409.812503][ T4266] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3411.893696][ T4266] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3413.809112][ T24] audit: type=1400 audit(3412.930:225): avc: denied { write } for pid=5050 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3414.239498][ T4266] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3417.446042][ T4266] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3422.308560][ T4938] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 3422.835953][ T4938] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 3424.440108][ T4938] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 3424.918983][ T4938] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3425.049630][ T4938] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 3425.361975][ T4938] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 3427.123578][ T4938] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 3427.421164][ T4938] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 3442.286057][ T4266] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3442.442275][ T4266] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3442.562800][ T4266] bond0 (unregistering): Released all slaves [ 3443.984147][ T4266] hsr_slave_0: left promiscuous mode [ 3444.031469][ T4266] hsr_slave_1: left promiscuous mode [ 3444.304098][ T4266] veth1_macvtap: left promiscuous mode [ 3444.317315][ T4266] veth0_macvtap: left promiscuous mode [ 3444.322365][ T4266] veth1_vlan: left promiscuous mode [ 3444.334702][ T4266] veth0_vlan: left promiscuous mode [ 3467.774309][ T4949] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 3468.278424][ T4949] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 3468.400083][ T4949] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 3468.749799][ T4949] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3468.862703][ T4949] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 3469.136297][ T4949] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 3469.326046][ T4949] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 3469.624999][ T4949] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 3482.695858][ T24] audit: type=1400 audit(3481.880:226): avc: denied { write } for pid=5077 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3492.805526][ T4938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3493.313557][ T24] audit: type=1400 audit(3492.420:227): avc: denied { write } for pid=5086 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3501.050018][ T3209] 8021q: adding VLAN 0 to HW filter on device eth17 [ 3503.992682][ T4949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3526.590063][ T24] audit: type=1400 audit(3525.750:228): avc: denied { write } for pid=5102 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3537.718384][ T24] audit: type=1400 audit(3536.870:229): avc: denied { write } for pid=5110 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3545.181709][ T3209] 8021q: adding VLAN 0 to HW filter on device eth18 [ 3568.078038][ T24] audit: type=1400 audit(3567.240:230): avc: denied { write } for pid=5125 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3577.350732][ T24] audit: type=1400 audit(3576.510:231): avc: denied { write } for pid=5136 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3583.454994][ T3209] 8021q: adding VLAN 0 to HW filter on device eth19 [ 3591.814568][ T24] audit: type=1400 audit(3591.000:232): avc: denied { write } for pid=5144 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3602.078279][ T24] audit: type=1400 audit(3601.240:233): avc: denied { write } for pid=5154 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3635.071942][ T24] audit: type=1400 audit(3634.250:234): avc: denied { write } for pid=5173 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3641.307344][ T4938] veth0_vlan: entered promiscuous mode [ 3642.509942][ T4938] veth1_vlan: entered promiscuous mode [ 3645.083168][ T24] audit: type=1400 audit(3644.250:235): avc: denied { write } for pid=5182 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3646.260271][ T4938] veth0_macvtap: entered promiscuous mode [ 3646.772949][ T4938] veth1_macvtap: entered promiscuous mode [ 3650.598101][ T4646] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3650.619380][ T4646] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3650.661671][ T2158] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3650.858558][ T2158] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3652.711018][ T3209] 8021q: adding VLAN 0 to HW filter on device eth20 [ 3654.711016][ T4949] veth0_vlan: entered promiscuous mode [ 3657.237307][ T4949] veth1_vlan: entered promiscuous mode [ 3662.757286][ T4949] veth0_macvtap: entered promiscuous mode [ 3663.871746][ T4949] veth1_macvtap: entered promiscuous mode [ 3669.249636][ T4980] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3669.290733][ T2158] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3669.415709][ T4685] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3669.432000][ T4685] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3682.450713][ T24] audit: type=1400 audit(3681.620:236): avc: denied { write } for pid=5189 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3696.540554][ T24] audit: type=1400 audit(3695.700:237): avc: denied { write } for pid=5200 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3705.233688][ T3209] 8021q: adding VLAN 0 to HW filter on device eth21 [ 3737.878536][ T24] audit: type=1400 audit(3737.050:238): avc: denied { write } for pid=5215 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3753.578464][ T24] audit: type=1400 audit(3752.730:239): avc: denied { write } for pid=5230 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3764.151589][ T3209] 8021q: adding VLAN 0 to HW filter on device eth22 [ 3796.141476][ T24] audit: type=1400 audit(3795.210:240): avc: denied { write } for pid=5249 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3812.227997][ T24] audit: type=1400 audit(3811.360:241): avc: denied { write } for pid=5259 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3822.493957][ T3209] 8021q: adding VLAN 0 to HW filter on device eth23 [ 3840.229021][ T24] audit: type=1400 audit(3839.360:242): avc: denied { write } for pid=5268 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3853.641098][ T24] audit: type=1400 audit(3852.800:243): avc: denied { write } for pid=5278 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3892.858869][ T24] audit: type=1400 audit(3891.980:244): avc: denied { write } for pid=5292 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3907.748199][ T24] audit: type=1400 audit(3906.880:245): avc: denied { write } for pid=5303 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3918.479135][ T3209] 8021q: adding VLAN 0 to HW filter on device eth24 [ 3992.779796][ T24] audit: type=1400 audit(3991.940:246): avc: denied { write } for pid=5341 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4008.280874][ T24] audit: type=1400 audit(4007.440:247): avc: denied { write } for pid=5350 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4053.758897][ T24] audit: type=1400 audit(4052.920:248): avc: denied { write } for pid=5366 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4069.759375][ T24] audit: type=1400 audit(4068.940:249): avc: denied { write } for pid=5376 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4101.861709][ T24] audit: type=1400 audit(4101.000:250): avc: denied { write } for pid=5386 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4117.719187][ T24] audit: type=1400 audit(4116.750:251): avc: denied { write } for pid=5399 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4141.308364][ T24] audit: type=1400 audit(4140.470:252): avc: denied { write } for pid=5410 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4155.681109][ T24] audit: type=1400 audit(4154.850:253): avc: denied { write } for pid=5416 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4213.858505][ T24] audit: type=1400 audit(4212.940:254): avc: denied { write } for pid=5433 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4228.017838][ T24] audit: type=1400 audit(4227.170:255): avc: denied { write } for pid=5447 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4278.816196][ T24] audit: type=1400 audit(4277.990:256): avc: denied { write } for pid=5465 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4293.121447][ T24] audit: type=1400 audit(4292.300:257): avc: denied { write } for pid=5478 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4310.366139][ T5424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4310.859102][ T5424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4319.581726][ T24] audit: type=1400 audit(4318.750:258): avc: denied { write } for pid=5488 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4333.453938][ T5434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4333.940960][ T24] audit: type=1400 audit(4333.090:259): avc: denied { write } for pid=5498 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4334.168951][ T5434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4365.409074][ T24] audit: type=1400 audit(4364.580:260): avc: denied { write } for pid=5509 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4371.481792][ T5424] hsr_slave_0: entered promiscuous mode [ 4371.583279][ T5424] hsr_slave_1: entered promiscuous mode [ 4377.688426][ T24] audit: type=1400 audit(4376.830:261): avc: denied { write } for pid=5516 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4399.581795][ T5434] hsr_slave_0: entered promiscuous mode [ 4399.750222][ T5434] hsr_slave_1: entered promiscuous mode [ 4399.898996][ T5434] debugfs: 'hsr0' already exists in 'hsr' [ 4399.907772][ T5434] Cannot create hsr debugfs directory [ 4413.229845][ T24] audit: type=1400 audit(4412.260:262): avc: denied { write } for pid=5523 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4418.329069][ T5424] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 4418.924123][ T5424] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 4420.902367][ T5424] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 4421.363481][ T5424] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 4424.623690][ T5424] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 4425.071737][ T5424] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 4425.849914][ T24] audit: type=1400 audit(4425.030:263): avc: denied { write } for pid=5529 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4427.654593][ T5424] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 4428.035444][ T5424] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 4444.313493][ T5434] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 4445.075254][ T5434] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 4445.429748][ T5434] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 4446.355054][ T5434] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 4446.578782][ T5434] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 4447.180482][ T5434] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 4447.383391][ T5434] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 4448.083866][ T5434] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 4483.962406][ T5424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4497.024357][ T5434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4590.735682][ T26] INFO: task syz.6.288:5412 blocked for more than 430 seconds. [ 4590.763113][ T26] Not tainted syzkaller #0 [ 4590.819187][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 4590.840495][ T26] task:syz.6.288 state:D stack:0 pid:5412 tgid:5412 ppid:4938 task_flags:0x400040 flags:0x00000011 [ 4590.842693][ T26] Call trace: [ 4590.843269][ T26] __switch_to+0x5e0/0xb70 (T) [ 4590.845544][ T26] __schedule+0x1e0c/0x38cc [ 4590.846062][ T26] schedule+0x1b4/0x274 [ 4591.029154][ T26] schedule_timeout+0x68/0x1e4 [ 4591.041071][ T26] wait_for_completion+0x1b8/0x414 [ 4591.042307][ T26] __synchronize_srcu+0x1c8/0x208 [ 4591.042878][ T26] synchronize_srcu+0x668/0x8dc [ 4591.043414][ T26] mmu_notifier_unregister+0x33c/0x444 [ 4591.043933][ T26] kvm_put_kvm+0x69c/0xbbc [ 4591.044443][ T26] kvm_vm_release+0x58/0x78 [ 4591.044935][ T26] __fput+0x4ac/0x978 [ 4591.045406][ T26] ____fput+0x20/0x30 [ 4591.045829][ T26] task_work_run+0x1b8/0x250 [ 4591.046364][ T26] exit_to_user_mode_loop+0x110/0x188 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 4591.160594][ T26] el0_svc+0x18c/0x240 [ 4591.161296][ T26] el0t_64_sync_handler+0x84/0x12c [ 4591.161805][ T26] el0t_64_sync+0x198/0x19c [ 4591.194289][ T26] [ 4591.194289][ T26] Showing all locks held in the system: [ 4591.248450][ T26] 1 lock held by khungtaskd/26: [ 4591.284955][ T26] #0: ffff800087e43358 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x4c/0x188 [ 4591.319875][ T26] 3 locks held by kworker/u4:3/33: [ 4591.320434][ T26] 3 locks held by kworker/u4:5/2158: [ 4591.320837][ T26] 2 locks held by getty/3238: [ 4591.321213][ T26] #0: 45f00000127da0a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 4591.322992][ T26] #1: 7fff80008cb8b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x314/0x11f8 [ 4591.324710][ T26] 2 locks held by syz-executor/3369: [ 4591.325642][ T26] 3 locks held by kworker/u4:7/4266: [ 4591.326024][ T26] 2 locks held by kworker/u4:1/4461: [ 4591.326356][ T26] #0: eef000000d036140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x958/0x154c [ 4591.510786][ T26] #1: ffff8000a3007ce8 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x978/0x154c [ 4591.512602][ T26] 2 locks held by kworker/u4:9/4685: [ 4591.512985][ T26] #0: eef000000d036140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x958/0x154c [ 4591.514662][ T26] #1: ffff80008e967ce8 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x978/0x154c [ 4591.516359][ T26] 3 locks held by kworker/u4:11/4761: [ 4591.670075][ T26] 3 locks held by kworker/u4:13/5165: [ 4591.670561][ T26] 2 locks held by syz.7.287/5404: [ 4591.670896][ T26] 3 locks held by kworker/u4:6/5437: [ 4591.671252][ T26] 3 locks held by kworker/u4:14/5467: [ 4591.671601][ T26] 1 lock held by modprobe/5589: [ 4591.671904][ T26] 4 locks held by modprobe/5590: [ 4591.674551][ T26] [ 4591.674879][ T26] ============================================= [ 4591.674879][ T26] [ 4591.676411][ T26] Kernel panic - not syncing: hung_task: blocked tasks [ 4591.686312][ T26] CPU: 0 UID: 0 PID: 26 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT [ 4591.688009][ T26] Hardware name: linux,dummy-virt (DT) [ 4591.689081][ T26] Call trace: [ 4591.689992][ T26] show_stack+0x2c/0x3c (C) [ 4591.691121][ T26] __dump_stack+0x30/0x40 [ 4591.692214][ T26] dump_stack_lvl+0x30/0x12c [ 4591.693316][ T26] dump_stack+0x1c/0x28 [ 4591.694346][ T26] vpanic+0x4cc/0x844 [ 4591.695259][ T26] vpanic+0x0/0x844 [ 4591.696151][ T26] hung_task_panic+0x0/0x2c [ 4591.697165][ T26] kthread+0x4cc/0x514 [ 4591.698152][ T26] ret_from_fork+0x10/0x20 [ 4591.700026][ T26] Kernel Offset: disabled [ 4591.700902][ T26] CPU features: 0x00000000,0034600b,f7c647a1,057ffe1f [ 4591.702189][ T26] Memory Limit: none [ 4591.704557][ T26] Rebooting in 86400 seconds..