last executing test programs: 1h16m25.561733859s ago: executing program 1 (id=115): openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x4400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x4, 0x1, 0x0, 0x1000, &(0x7f0000ee6000/0x1000)=nil}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x26) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x20) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1, 0x16831, 0xffffffffffffffff, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x6819ed28d58b2b5d, 0x0) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000180)={0x0, &(0x7f0000000380)=[@msr={0x14, 0x20, {0x603000000013d801, 0x81}}], 0x20}, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1h16m20.948635252s ago: executing program 0 (id=116): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000000)={0x0, &(0x7f0000000380)=[@hvc={0x32, 0x40, {0xc5000021, [0x1, 0x5, 0x5, 0xfff, 0xdfd5]}}], 0x40}, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000001000/0x2000)=nil, 0x930, 0x2000003, 0x4120932, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r4, 0x80111500, 0x20000000) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) (async) syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000000)={0x0, &(0x7f0000000380)=[@hvc={0x32, 0x40, {0xc5000021, [0x1, 0x5, 0x5, 0xfff, 0xdfd5]}}], 0x40}, 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000001000/0x2000)=nil, 0x930, 0x2000003, 0x4120932, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_CREATE_VM(r4, 0x80111500, 0x20000000) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) 1h16m20.362252152s ago: executing program 1 (id=117): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xec) r1 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r2 = syz_kvm_add_vcpu$arm64(r1, &(0x7f0000000000)={0x0, &(0x7f0000000080)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x9}}, @msr={0x14, 0x20, {0x603000000013df61, 0x8}}], 0x40}, &(0x7f00000000c0)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r2, 0x4018aee1, &(0x7f0000000100)=@attr_pmu_init) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000180)=@arm64_extra={0x603000000013c025, &(0x7f0000000140)=0x7}) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xec) (async) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async) syz_kvm_add_vcpu$arm64(r1, &(0x7f0000000000)={0x0, &(0x7f0000000080)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x9}}, @msr={0x14, 0x20, {0x603000000013df61, 0x8}}], 0x40}, &(0x7f00000000c0)=[@featur1={0x1, 0x8}], 0x1) (async) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r2, 0x4018aee1, &(0x7f0000000100)=@attr_pmu_init) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000180)=@arm64_extra={0x603000000013c025, &(0x7f0000000140)=0x7}) (async) 1h16m15.297902392s ago: executing program 1 (id=118): mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r2 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r2, 0x2000008, 0x10010, r1, 0x0) 1h16m12.436013726s ago: executing program 0 (id=119): ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x2a6102, 0x0) (async) r1 = openat$kvm(0x0, &(0x7f0000000380), 0x2041, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f00000003c0)={0x0, 0x0}, 0x0, 0x0) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) r4 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r3, 0x3, 0x11, r2, 0x40000) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000400)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4a85400005a9610fbff67521cf66f8fd22627e7000000f700000000000000f200", 0x0, 0x48) (async) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000100)={0x8, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r6, 0x4018aee3, &(0x7f0000000140)=@attr_arm64={0x0, 0x4, 0x3, &(0x7f0000000180)=0x8}) (async) r7 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r8 = openat$kvm(0x0, &(0x7f0000000280), 0x101000, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x6) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x40300, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x24) (async) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1, 0x16831, 0xffffffffffffffff, 0x0) r12 = syz_kvm_vgic_v3_setup(r11, 0x3, 0x40) ioctl$KVM_GET_DEVICE_ATTR(r12, 0x4018aee2, &(0x7f00000004c0)=@attr_arm64={0x0, 0x0, 0x5, 0x0}) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r13 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r13, 0x4020aeae, &(0x7f00000002c0)={0x5, 0x18}) (async) ioctl$KVM_GET_ONE_REG(r13, 0x4010aeab, &(0x7f0000000300)=@arm64_core={0x603000000010004c, &(0x7f0000000340)=0x7}) (async) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async) r14 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r15 = syz_kvm_setup_syzos_vm$arm64(r14, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r15, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) (async) ioctl$KVM_GET_STATS_FD_vm(r14, 0xaece) 1h16m9.333285846s ago: executing program 1 (id=120): r0 = openat$kvm(0x0, &(0x7f0000000280), 0x32d041, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000005c0), 0x222000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000600), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000640)={0x7, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000680)=@attr_arm64={0x0, 0x4, 0x0, 0x0}) r6 = eventfd2(0x0, 0x0) r7 = eventfd2(0x8801, 0x800) r8 = eventfd2(0x3ff, 0x0) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f00000006c0)={r8, 0x5, 0x2, r8}) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000700)={r7, 0x1, 0x2, r8}) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000740)={r6, 0x1c7, 0x2, r6}) ioctl$KVM_SET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee1, 0x0) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r9 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000480)={0x0, &(0x7f00000002c0)=[@smc={0x1e, 0x40, {0x200, [0x0, 0x7, 0x8, 0x9, 0x8]}}, @msr={0x14, 0x20, {0x603000000013c289, 0x7}}, @irq_setup={0x46, 0x18, {0x4, 0x58}}, @hvc={0x32, 0x40, {0x2000, [0x4, 0x101, 0x0, 0x2, 0xfff]}}, @msr={0x14, 0x20, {0x603000000013deff, 0xfffffffffffffff9}}, @mrs={0xbe, 0x18, {0x603000000013df18}}, @smc={0x1e, 0x40, {0x3000000, [0x8, 0x2, 0x4c3955ee, 0x800, 0x6]}}, @svc={0x122, 0x40, {0x84000051, [0x0, 0x4, 0x1, 0xb02, 0x6]}}, @irq_setup={0x46, 0x18, {0x1, 0x2bf}}, @eret={0xe6, 0x18, 0x6}], 0x1a0}, &(0x7f00000004c0)=[@featur2={0x1, 0x91}], 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r9, 0xc040aed5, &(0x7f0000000500)={0x7000, 0x1000}) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f00000000c0)={0x8, 0xffffffffffffffff}) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1, 0x16831, 0xffffffffffffffff, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r11, 0x4018aee3, &(0x7f0000000100)=@attr_arm64={0x0, 0x8, 0x3, 0x0}) r12 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000c00000/0x400000)=nil) r15 = syz_kvm_add_vcpu$arm64(r14, &(0x7f0000000240)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r15, 0x4010aeab, &(0x7f0000000540)=@arm64_fw={0x6030000000160003, &(0x7f0000000580)=0x9}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r10, 0x4068aea3, &(0x7f00000001c0)={0xe4, 0x0, 0x4}) ioctl$KVM_RESET_DIRTY_RINGS(r2, 0xaec7) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 1h16m0.579303827s ago: executing program 0 (id=121): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) munmap$KVM_VCPU(0x0, 0x1000000000) r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@its_setup={0x82, 0x28, {0x1, 0x3, 0x4}}, @its_send_cmd={0xaa, 0x28, {0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40000005}}], 0x50}, 0x0, 0x0) r4 = syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) r5 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@its_setup={0x82, 0x28, {0x0, 0x4, 0x2}}], 0x28}, 0x0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r8, 0x4018aee3, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x88000, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x27) syz_kvm_vgic_v3_setup(r10, 0x2, 0x40) r11 = eventfd2(0x10001, 0x80000) r12 = eventfd2(0x10, 0x800) ioctl$KVM_IRQFD(r10, 0x4020ae76, &(0x7f0000000400)={r12, 0x4, 0x2}) ioctl$KVM_IRQFD(r10, 0x4020ae76, &(0x7f00000002c0)={r11, 0xb3, 0x3, r11}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000200)={0x8}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000380)=@attr_other={0x0, 0x1, 0x9, &(0x7f0000000280)=0x5}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r13 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r14 = openat$kvm(0x0, &(0x7f00000003c0), 0x0, 0x0) r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0) syz_kvm_add_vcpu$arm64(0x0, 0x0, 0x0, 0x0) r16 = ioctl$KVM_CREATE_VCPU(r15, 0xae41, 0x1) ioctl$KVM_ARM_VCPU_INIT(r16, 0x4020aeae, &(0x7f0000000480)={0x5, 0x8}) ioctl$KVM_SET_ONE_REG(r16, 0x4010aeac, &(0x7f00000004c0)=@arm64_extra={0x603000000013c028, &(0x7f0000000500)=0x8000000000000001}) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, r13, 0x100000c, 0x10010, r3, 0x0) 1h15m59.227563567s ago: executing program 1 (id=122): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10004, 0x0, 0x2ffc, 0x1000, &(0x7f0000d5b000/0x1000)=nil}) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000a5a000/0x400000)=nil) r3 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000180)={0xfffffffffffffffa, 0x2, 0x4, 0xffffffffffffffff, 0x8a4fa382f1515d0b}) r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x3) ioctl$KVM_ARM_SET_COUNTER_OFFSET(r1, 0x4010aeb5, &(0x7f0000000100)={0x80000001, 0x9}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_ARM_SET_COUNTER_OFFSET(r6, 0x4010aeb5, &(0x7f00000000c0)={0xfffffffffffffded, 0x7}) r7 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000b80)={0x0, &(0x7f0000000040)=[@smc={0x1e, 0x40, {0x80007fff, [0xffffffff, 0x100080001, 0x7, 0x101, 0x13]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2f) ioctl$KVM_CHECK_EXTENSION_VM(r8, 0xae03, 0x800) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10004, 0x0, 0x2ffc, 0x1000, &(0x7f0000d5b000/0x1000)=nil}) (async) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000a5a000/0x400000)=nil) (async) openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000180)={0xfffffffffffffffa, 0x2, 0x4, 0xffffffffffffffff, 0x8a4fa382f1515d0b}) (async) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x3) (async) ioctl$KVM_ARM_SET_COUNTER_OFFSET(r1, 0x4010aeb5, &(0x7f0000000100)={0x80000001, 0x9}) (async) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) ioctl$KVM_ARM_SET_COUNTER_OFFSET(r6, 0x4010aeb5, &(0x7f00000000c0)={0xfffffffffffffded, 0x7}) (async) syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000b80)={0x0, &(0x7f0000000040)=[@smc={0x1e, 0x40, {0x80007fff, [0xffffffff, 0x100080001, 0x7, 0x101, 0x13]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2f) (async) ioctl$KVM_CHECK_EXTENSION_VM(r8, 0xae03, 0x800) (async) 1h15m52.986313051s ago: executing program 0 (id=123): mmap$KVM_VCPU(&(0x7f0000e93000/0x3000)=nil, 0x50000, 0x3, 0x4002031, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x10004, 0x0, 0x2, 0x1000, &(0x7f0000efd000/0x1000)=nil}) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x80403, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) munmap(&(0x7f0000d00000/0x1000)=nil, 0x1000) (async) r5 = ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f0000000200)={0x200001fe0000, 0x3}) mmap$KVM_VCPU(&(0x7f0000f86000/0x4000)=nil, 0x930, 0x1000005, 0x2013, r5, 0x0) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f00000000c0)=@arm64_fp_extra={0x60200000001000d4, &(0x7f0000000100)=0x2174a739}) (async) munmap(&(0x7f0000e94000/0x3000)=nil, 0x3000) (async) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3d) ioctl$KVM_GET_DIRTY_LOG(r6, 0x4010ae42, &(0x7f0000000000)={0x2, 0x0, &(0x7f0000eb3000/0x3000)=nil}) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) (async) ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xe4100, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000d3e000/0x4000)=nil, 0x50000, 0x81d10bef7ad9da20, 0x810, r2, 0x0) (async) close(r6) 1h15m39.108349008s ago: executing program 0 (id=124): r0 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000000)=[@smc={0x1e, 0x40, {0x84000003, [0x0, 0x6, 0x3, 0x93, 0x2]}}], 0x40}, &(0x7f0000000080)=[@featur2={0x1, 0x80}], 0x1) ioctl$KVM_ARM_VCPU_INIT(r0, 0x4020aeae, &(0x7f00000000c0)={0x3, 0x3}) (async) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4000ae84, &(0x7f0000000100)={{0xd000, 0x70000, 0x10, 0x81, 0x6, 0xba, 0x5, 0x20, 0x9, 0x0, 0x81}, {0x1000, 0x100000, 0xe, 0x81, 0x3, 0x4, 0x8, 0x2, 0x3, 0x10, 0xc, 0x8}, {0x2ffc, 0xeeef0000, 0x3, 0x0, 0x7e, 0xa, 0x2, 0x40, 0xb, 0x6, 0x3, 0x3}, {0x80a0000, 0x4000, 0x2, 0x5, 0xf5, 0x5, 0x1, 0x1, 0x7, 0x2, 0xf7, 0x6}, {0x7000, 0x1ff8, 0x3, 0x0, 0xe, 0x8, 0x29, 0xfd, 0x0, 0xff, 0x1, 0x6}, {0x3000, 0x2000, 0x10, 0x40, 0xe4, 0x1, 0x18, 0xfe, 0x4, 0x9, 0x7, 0x6}, {0xffe, 0xffff1000, 0x4, 0x8, 0x3, 0x4, 0xfe, 0x7, 0x2, 0x8, 0x3, 0x8}, {0x1ffc, 0x100000, 0x0, 0x7, 0xe, 0x1, 0x8, 0x3, 0x9, 0x60, 0x9, 0x9}, {0x80a0000, 0x8}, {0x25000, 0xc}, 0x20000006, 0x0, 0x9000, 0x524498, 0x2, 0x8000, 0xf000, [0xb, 0xfffffffffffffffc, 0x5, 0x3]}) (async) ioctl$KVM_RUN(r0, 0xae80, 0x0) (async) ioctl$KVM_GET_VCPU_EVENTS(r0, 0x8040ae9f, &(0x7f0000000240)=@arm64) ioctl$KVM_GET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000280)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0x9}) r1 = syz_kvm_vgic_v3_setup(0xffffffffffffffff, 0x2, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000300)=@attr_arm64={0x0, 0x3, 0x0, &(0x7f00000002c0)}) (async) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r0, 0x4018aee2, &(0x7f0000000380)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000340)={0x3ff, 0x2}}) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r0, 0x4018aee3, &(0x7f00000003c0)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0x8}) (async) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r0, 0x4018aee1, &(0x7f0000000440)=@attr_other={0x0, 0x4f, 0x0, &(0x7f0000000400)=0x7}) ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000480)={0x0, 0x5, 0xffc, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async) ioctl$KVM_SET_SIGNAL_MASK(r0, 0x4004ae8b, &(0x7f00000004c0)={0xa7, "bc6ae12c2b978f4405dd33d5f9ad513e99a577284489755b3e97a8f0c7fe70667bd1c1e770ab1d7a24a531051edb610d8353ccf665992ddc3be02ccf34cd9a80f709702a057edc5309b313eb45164d9cc79b02785b3fa5a6203f419b49cd80c3def2567ba9a2deea569104655679fc6b64f5a7fca020b6d76a96451efd81cd85e36891b2261d13ce71501fa010e7dd071ff606487d81fa8e9bfa3e75a5e1045a96a8b4a10e0d05"}) (async) ioctl$KVM_SET_SIGNAL_MASK(r0, 0x4004ae8b, &(0x7f0000000580)={0x1000, "5530fd61d4394e4dd2065f27aff7e23cc090664eeb713e872fc3dd4f694abc1b871b72a355777ce98985db8884a38c9c792bc46bbbe7568321345d0ceea14594943b6d2542e2eafbfe239427a7e19735cd70dbab7df2a0c7c7566eebc3eb29ffbe4d53b2087d0a79248b6b89a47b2636d419451e81b7b45d733a82b64f47fefe56d0c30dfed2cb48dc517919609b1c0520e9f766db1555f55e73a048039456937deb522fd5d7d23bf760b96857a660f65eb002ea7ce68b2a1f32c2d528eb8cffcd0c8c87e80d2dc373c40f6a8b4cd7d6a84224e4516b0c5a90d2a49125c153f504be5cb0ce660cf307671082a42b6b8de082f58203b3e1aa81f20322dd38999059261d78b6f5b63ab92d74e13bbc030c8b894625c044be146aea84c6d74ea8ec2cd7df64e6661e2afae745bc7dbf0fcec861fb903ef67ca055585a6ee4509330d8d8db13504ac293395b0b5a85663498b5b6da9b1343d01911f8a8b1cf219b1cd62bc116c8778624110b11fd15d75670e705c32f0225e902dc8bf59fc9d6ded65aa766807d885c504f1bc843d2b5c8860d7cb37488936b84e1a9f3deeb30309e0e04b1a7df81ca0ed2a9c0454c173c12fd5e187dc7641cd7192b36b216a8e4fa9bd5d84674f242cac2c7238ad3985207d18ef4fc3305875269a4c92e45ec595a2a7538897d7f47483abca1d95fc0424afe75e9612eaab915a61b525699f1c83228e2fb50c2a85902eac28d4cef5dfc7782afa2c61b94e00dccbd92cb5b372867013386e645771b28abb0098147a5d38b55bd890582f934907b1a8755a45ac62ec4cfa979123984189b93ce004fe9ab2ad88d7aea205674712fc9cdabcb39aa89c8b217aed56190a21f701f58a8b15e5cad3d7aac8707feb6e8ee5b7b47d2f2de8b59a918a67f0f7288b7147943557357011e132267d30c7e85ad28b6e518495dc27ba1f556728e69a875d09abf8266fd0fe9b02f9a80489265419483317517fa5f511021fbd1de406384b5da2e3cdeb914e1f459fe284fb505457e73d1d197a8d8959cf3ceff4e63a3e2bd2ac962f2794421db149ed374a6bbdb05a56db553bf3650a5be3801e6b1766084aafcfae726e22acd77374dd37934ac98b5377b5dc9840f378ad4485853d1dc281d17320ed0a92617d85252d1abfb4f422e439a9ad84ab26e586c8fec3cf88b9d2b810fe8a7b1b951ad2cf3e4050a9eb6ab39e8790450f50630dfd7912e9fa3ab0967ce4536130ed7d8f29375fb8da336f7a6509e8a338ca26012a631f99d2daad83a57a0ba4087e9e80f232064cbe226f9c9d6854b30dd31646d296646d99008ae1d1ab0fe149c16b538278c9f615126a0bc5b9f3c29d00078a620a4599d773eaa5a88e6fe0022811346e4d3bacc58247fb10d1339607b6271e25a789fd1cd8851289a58a5248b0924863a832f0d96c1a85afa01007ef5c9ba9569e247507c2151bcaac7511e4ece6c2355d9ffddad139a52e1f583fcbb7141697917964058376c4e89832e57790c6b905b9bc1f89a0a6e0a718d3845e2af9557999a0b689c28a1ee85e5994d33139d0225a593574be1361c49411189ac0a135686f6cec897eaa5093560fcb4f3bc21c5bfe45dec316e07418f3547699af51d4f0ebc21ab96257e9c7adcf448bd9225594736ac1324824e3301866589ea01fc22943cbbf899e275e275005ed9aac752bae19b9610a73bd3e7c8a478b12b4aec16c9c9ab1081a9cf511ab74c7aa37c8780a5d68c47f9f2867c4c667258a93b279355575b72e1d167d424641557739dc944eed9fd4cf9846e6971f81a20c680609715a42ca5dd31812bc0f710ea2f24633adefb4788e50052c7d4a427a32e6fca3d01953c84928841d7319a0a65f015706ab92e1ddbbecb093ee5315cc3f46ddb6adfbf3ea4b6c5d4d0fcebd15a20f74e68cc4056e66d42965642451beaf3f24c9ee8d71bf3dbf5de31046f243c572341612aff2a7b614d222166fee40bec7e906a1d13b639144f86394f60df6d8172477020b9b770eec56819375226a6b615feb445832f38b050045d1ca8371edb982def06994659ae441c5e5c795154dfdba7294c0f3a39bbb0a2a12cfeb78789033d7f8cc4564f46795020f0a5ebd91d038f2db19e73baf2d22cde1d07a7fa41924a4bb3b9223e98da9b3e5a7094f289d70af3ab34b28d54a7a18819700cb7377bb88723b4067dcc7deedccafd21e0eaa8cb84df3799bec7905adaadd2a5492442b6ae11bb6195a811394eea6afb85c761f7cae258ffea640ff3a3968a56e7cd18f315ee0eccd5665f1fced1fc69c723db8cb84a1391d208befe401e946369b95f15a178e7b4c9077647c026886ce0ad988dba79c03f82b3cd9baca595565d17570eec05df0b51448359f7c788a5c21d17c9e10a2c2254988fb3eefed0a05aba53182459d9db7a19e76d4d9f2d32e329eeeeb4e5d562de44544d51be592d451101a0660ea9fc6ca8c3f132d77467527ca7534b3cad70ed74c515cbfce5eda86c425dd6645eb2983d40052d64829092fb3eb4de876eb2bb210ebd113fb9493fbadc92ec8f41445ac9278f692c9122380123918250cfc487269bcf08941777c45d7128705b6b7f93b04e0da741202a4e854cd50b066c2d42670fe65db3ffc26f2291a6e6a4e0a4f96fd278659cb1aa1c682db009b91ab4aa06e78adfc6e2e699ec87166bb4929c76d25a86d3e5453892d9839c1736b46b4751484d785b30ee5cf51e0346e9969bfe4ebc0b80de01584acaf3c2edac4384c116185356e399e2c6b96c7f962161138f962fe6f63419bb934c06f200fb75cdb66ff71872bcc46989076a4f19b41051c32b6776b450a3651ac3a16bbe7ac4e310bb2efd4192b7e2e9c4c3177305f31e5eb2ddde4d1e228ca3be6af6a359949662e9419e21d59ca16c2a292dbb78cdc860003d6c198a900d291b6106defcca7a000a6cc9bb67e419ac3c3ea21e46a71e0b0077bbc0ae7ff194c8ec9fd90fcf257165dd2c2aafe81a6ce1d09788c528abc61d024e40ce48f24b472d84511b566ef8a1105b91d6a869e29721b4d4bdbf978028f4c455dce7c2d141b70cf5a34e5164062d3434a58a8f5cd58f32add2984913598a9738e356b6b6beede8e59ee981ff0d4160a20b35e92563be08b0fc7818ea2035e725524c6006a24625caa9b2331b4e9570048a988374f362a86ae7af3ed42db7b73ffb29a517229425c8d9f4930491c6141b49a6017d71d18d709e851528931526c4c9387900008da4229f2747b7ee66ccdc1ebe7d46f7d68f507c340eaf4a568e3e4f0880ca5a19dd1391dbab0db54e8e2b73b8d51e2abcc81488f83622c3fc9ea030cf3795538f8adfccb79593d01642b8a69b285dd725c20438c16762b26b0a90ad407a15aa95ae1ff777e4ccd4da148df91787ad27da1914935fb13720307a8823f9e06a0529a305a38247be1bf7fd586d54ac1f436927676022e101b213d47554d0d914a9aa9b381a00dbb0233fe84b38a5c6d84765d48cc542e2f0d286a7fc54b651515314c7c2cab1231fd2ab14ad0739e64d8eb8b1d95d46290575d4685649c22a5df79079de1f53f7901d7b301370e9859b3525db0f5f75f2e1c09c47f21ca2f1cc7033bf3ab423472b40e76b095dabfe336c7f24c683b2b7dde6d45c01f6d952c94de9d68ac549eb7ea763c84a03b8918735aa329224e29fd6742b03deced8d299c0967a42d96c09f251c03d305812b8fb596b028fd2ea154771af6460db323fe6c8cdc81c98ce2451a3508de02d4eaca53ed85027edc0d8e40a40f49e1e0741a20e2db916de0d60bba3e9ece16d3ca51ca9a748eaadc28e4835d7b8abd75ee9740ce3423636869446dfde3e845e6f3dbae441336060c6c6f8b37180b6932af00d06ccb6efe3343b83002e177da5bd98e97208e8858262314b149600f194ca0b27049aad5428aeaa2f33a9090ee0d81f00ed293e4b776967501ab5b31369269f44881e0b79f8e0750023213e522705c7558b78e3bcb2cd0e6760270cbe56beb2a079924acd79b7cd057257d8e7997a4d462bf554be3a041e18355fa2c373a8cfb31c5b720c86b7e7309d88464c85d055446b4e0719c7ee949c0777850769d213b889fe8ea2b719a104ae3e8c821f587837bc581e4450a77e6ea7318fdce8ad1906be1cece20299cd8d33986c6757f4266c5ed742410e153024b8428a1cb1a4d1f9ac348614a142565f5f788f5e47ffbcc09acee87bf79ee947b2e96febc4d984e85093602bd844929ad3c7ff7ace1bd818e820e04a4e946b5bb47bb73a7786289d13160d8c08ca204d4311ee6d4640e94e902c010e7709b05c43081f5edebaedc9aa8861584c53198a8f0300ebb830ffe6aa5cabd0bcdbd04886cb1d920979571a69533bae6dd6ede01275d414f73c0b40592b6ca714a2bc43dadbad21aac4d744d6a4d4731231943b94667213adf94304d9f86ad1817999a8cde47b62ee779cc5772a88bb3c0f1ad5847381e3b267058038adc411546ef788d80a3f825b7221c52193e2e38e3c2526d1707c92947a354fb0f1ae10c4a27042b836773b3f2a8de602d9191bad170782e5f672e22f6aa02b65aec359ffb78ac70ec3d96b9086e6858e62ea81491cef8c983fca9c3a707fc3c0a1ba4eebb0299cdbc7661d8110bee646a136bf58af500f45a05c25771ca3d2455b00bb4e97125625fbbdc6cc2fb4f531d36238950c508f3a818c7ecd1c75d20adee9c21f134bcdfc0fba9416a93e05b2614c8f05f85ed1769d48c24fa163ca2252d8bd119f210177136769de026310da06809456bed2f0ede3e98dfacac4c46e14f04bdc7981aff04779dc394c3ecc22e47263b2f679bdc90b37a368b6cc283e5be73b894b767bfc9131d7a264087f12837b3ec822736adfb0f2d9fca8b84dba75521de8ac555b857434f03a632e52aa23fd35c8acd20dcafe82fd0b946ef83409f3e10a42b40ffa6afddcb442232929f3517b73a0bb38069b45f8c309bea3ddaca73b28c88a97be271bb34953763ddfad83bde7b83d5d35472ebe11a87c1dbd89e244d489d30951cfbc0ec948164f06cc6fa1fda5f671ceb55904c689f04ec4194e5ad67e530279aa6d50585104c5656b0ac207b1ad1e95fc8a88afeec2262593ab9b237054124c2ed8c048773f76e030dee18731ec64126681ada9c851f43cdb15f89e061b16f80c41c848e7936f4dd06d3d9ef60411b2f032320c3933e829ceb52e3e823e0088e79e401dc0d1367b790a5511762c89f1d1a52814aea461aa7e2b8fe185654e458cd29c9dd4ed8ff28ee8644f7ce7e9c1f888e1ea7e68074a15f47eae61549ff246617174a85ae523bdc530f0241738827b4eb043bac25cd6ed05a6e96b299343461da06be5cedf36c09036774eee5c073bb9af2e7fa2272f8ebd476057faf693ad826de89f8e7ef7d7a4905cdc0bb9ffc4b2ec7869747bfeca256e59886c0535a720ea8bac0f7eb1af9a9876c60beb424346a7c0d715c56620b9f572314e89e6fc190c996ed509c75c52034a747f99b3a9534fdceb4984d1e1eb2c789a88115fd02c4ddd5ebe82c79e14aa04ee955698848b0fe4bdb99d4e36928c50eac400216d8449dc4a3fe649755dba279d54b59dd1aaeee2808af48854371bf43277a39c583b832b78be7f682a13814eb47552322e1acd6662985ba4e3dac5ddd12bd8303bd5c22d284b8bebbc78a775281f1eab29eaca2841d098410af84e7b679f14c9b353f0154c39d5df512ccdc85dd50844361f1a492433895489de78e2ccaa74d13b2bf4135cd1"}) (async) r2 = ioctl$KVM_GET_STATS_FD_cpu(r0, 0xaece) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000001600)=@attr_riscv64=@attr_ctrl={0x0, 0x1, 0x1, &(0x7f00000015c0)=0x8}) (async) ioctl$KVM_GET_REGS(r2, 0x8360ae81, &(0x7f0000001640)) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_ARM_SET_DEVICE_ADDR(r3, 0x4010aeab, &(0x7f0000001700)={0x4, 0x26000}) (async) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x2) ioctl$KVM_SIGNAL_MSI(r4, 0x4020aea5, &(0x7f0000001740)={0xffffdffd, 0x4000, 0x10, 0x0, 0x4}) (async) r5 = ioctl$KVM_GET_STATS_FD_cpu(r2, 0xaece) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000001780)={0xa, 0xffffffffffffffff, 0x1}) (async) ioctl$KVM_SET_REGS(r2, 0x4360ae82, &(0x7f00000017c0)={[0xa, 0x3, 0x3, 0x7fff, 0x9, 0x3ff, 0x6, 0x67d1d349, 0x0, 0xb7, 0x9, 0x0, 0x96, 0x101, 0x1, 0x800], 0xffc, 0x80}) (async) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x14) ioctl$KVM_CHECK_EXTENSION_VM(r6, 0xae03, 0xb) (async) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f00000018c0)=@attr_other={0x0, 0x7, 0x2, &(0x7f0000001880)=0x4}) (async) ioctl$KVM_PPC_ALLOCATE_HTAB(r5, 0xc004aea7, &(0x7f0000001900)=0xffffffff) 1h15m36.156416554s ago: executing program 0 (id=125): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000100)={0x2, 0x0, [{0x3, 0x2, 0x1, 0x0, @msi={0x0, 0x3, 0x1, 0x800}}, {0x3, 0x1, 0x0, 0x0, @msi={0x2, 0x7, 0xb, 0x5}}]}) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r6, 0x4018aee1, &(0x7f0000000000)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0x20e4586c}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x34) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_RUN(r6, 0xae80, 0x0) r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, r8, 0x1, 0x16831, 0xffffffffffffffff, 0x0) 1h15m35.471228625s ago: executing program 1 (id=126): syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000340)={0x0, &(0x7f0000000440)=[@its_setup={0x82, 0x28, {0x3, 0x0, 0x13}}, @its_setup={0x82, 0x28, {0x8000000000000043, 0x1, 0x260}}, @irq_setup={0x46, 0x18, {0x0, 0x302}}, @irq_setup={0x46, 0x18, {0x4, 0x3c1}}, @mrs={0xbe, 0x18, {0x603000000013ff10}}, @mrs={0xbe, 0x18, {0x603000000013c802}}, @its_setup={0x82, 0x28, {0x3, 0x4, 0x2f}}, @its_setup={0x82, 0x28, {0x2, 0x0, 0x355}}, @msr={0x14, 0x20, {0x603000000013dee5, 0x4b4f}}, @code={0xa, 0x54, {"007008d5e08d83d200a0b8f2210080d2620080d2230080d2a40180d2020000d4000008d500000090008008d50094004f007008d5000028d5000008d50084007f"}}, @irq_setup={0x46, 0x18, {0x4, 0x40}}], 0x18c}, &(0x7f0000000380)=[@featur1={0x1, 0x34}], 0x1) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000100), 0x80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2e) ioctl$KVM_CAP_HALT_POLL(r2, 0x4068aea3, &(0x7f00000003c0)={0xdf, 0x0, 0x80000000}) syz_kvm_setup_syzos_vm$arm64(r0, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_vgic_v3_setup(r0, 0x1, 0x40) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000180)=@attr_other={0x0, 0x1, 0x304, &(0x7f00000000c0)=0x83}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000140)={0x0, 0x0}, &(0x7f00000001c0)=[@featur1={0x1, 0x8}], 0x1) r8 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000200)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r8, 0x4018aee3, &(0x7f0000000240)=@attr_set_pmu={0x0, 0x0, 0x3, 0x0}) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x0, 0x40032, 0xffffffffffffffff, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000040)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000000)={0x87a, 0x1, 0x1}}) 1h14m50.086015001s ago: executing program 32 (id=125): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000100)={0x2, 0x0, [{0x3, 0x2, 0x1, 0x0, @msi={0x0, 0x3, 0x1, 0x800}}, {0x3, 0x1, 0x0, 0x0, @msi={0x2, 0x7, 0xb, 0x5}}]}) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r6, 0x4018aee1, &(0x7f0000000000)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0x20e4586c}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x34) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_RUN(r6, 0xae80, 0x0) r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, r8, 0x1, 0x16831, 0xffffffffffffffff, 0x0) 1h14m47.209001383s ago: executing program 33 (id=126): syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000340)={0x0, &(0x7f0000000440)=[@its_setup={0x82, 0x28, {0x3, 0x0, 0x13}}, @its_setup={0x82, 0x28, {0x8000000000000043, 0x1, 0x260}}, @irq_setup={0x46, 0x18, {0x0, 0x302}}, @irq_setup={0x46, 0x18, {0x4, 0x3c1}}, @mrs={0xbe, 0x18, {0x603000000013ff10}}, @mrs={0xbe, 0x18, {0x603000000013c802}}, @its_setup={0x82, 0x28, {0x3, 0x4, 0x2f}}, @its_setup={0x82, 0x28, {0x2, 0x0, 0x355}}, @msr={0x14, 0x20, {0x603000000013dee5, 0x4b4f}}, @code={0xa, 0x54, {"007008d5e08d83d200a0b8f2210080d2620080d2230080d2a40180d2020000d4000008d500000090008008d50094004f007008d5000028d5000008d50084007f"}}, @irq_setup={0x46, 0x18, {0x4, 0x40}}], 0x18c}, &(0x7f0000000380)=[@featur1={0x1, 0x34}], 0x1) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000100), 0x80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2e) ioctl$KVM_CAP_HALT_POLL(r2, 0x4068aea3, &(0x7f00000003c0)={0xdf, 0x0, 0x80000000}) syz_kvm_setup_syzos_vm$arm64(r0, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_vgic_v3_setup(r0, 0x1, 0x40) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000180)=@attr_other={0x0, 0x1, 0x304, &(0x7f00000000c0)=0x83}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000140)={0x0, 0x0}, &(0x7f00000001c0)=[@featur1={0x1, 0x8}], 0x1) r8 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000200)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r8, 0x4018aee3, &(0x7f0000000240)=@attr_set_pmu={0x0, 0x0, 0x3, 0x0}) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x0, 0x40032, 0xffffffffffffffff, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000040)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000000)={0x87a, 0x1, 0x1}}) 1h5m29.396094904s ago: executing program 2 (id=158): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_add_vcpu$arm64(0x0, 0x0, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x800005, 0x120) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000140)=0x5) r3 = eventfd2(0x10000, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r3, 0x3}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r3, 0xb16b, 0x2, r3}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x28) ioctl$KVM_CAP_HALT_POLL(r5, 0x4068aea3, &(0x7f0000000080)={0xa8, 0x300, 0x3}) 1h5m13.914608173s ago: executing program 2 (id=160): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x1}) (async, rerun: 64) eventfd2(0xe8, 0x800) (async, rerun: 64) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async, rerun: 32) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80c01, 0x0) (rerun: 32) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r6, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x9, 0x12, r6, 0x0) (async) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000002000/0x400000)=nil) (async, rerun: 32) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x300, 0x0) (rerun: 32) ioctl$KVM_CHECK_EXTENSION_VM(r3, 0xae03, 0xe4) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xc, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x20000000) (async, rerun: 64) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) (rerun: 64) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) (async, rerun: 32) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0xec, 0xa, 0x2d, 0x0, 0x5, 0x6, 0x6, 0x6, 0x48, 0x5, 0xdd, 0x7, 0x0, 0x9, 0x1461, 0x0, 0x9, 0x5, 0x8, '\x00', 0x6, 0x7}) (rerun: 32) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f00000000c0)) 1h4m51.092549554s ago: executing program 2 (id=163): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x1}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe3) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ARM_VCPU_INIT(r4, 0x4020aeae, &(0x7f0000000040)={0x5, 0x18}) ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f0000000080)=@arm64_sve_vls={0x606000000015ffff, 0x0}) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x8, 0xf, 0x0, 0x5, 0x6, 0x6, 0x6, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x9, 0x0, 0x0, 0x3, 0x5, 0x8, '\x00', 0x1, 0x400000000002}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000140)={0x4, 0x0, [{0x1, 0x1, 0x0, 0x0, @adapter={0x8000000000000001, 0x8, 0x2, 0xa, 0x10}}, {0x9, 0x3, 0x0, 0x0, @adapter={0xd4ff}}, {0x0, 0x0, 0x0, 0x0, @msi}, {0x0, 0x0, 0x1, 0x0, @adapter={0x0, 0x5, 0x2, 0x7f, 0xb2d}}]}) write$eventfd(r6, &(0x7f00000001c0)=0x3, 0x50) 1h4m37.229732444s ago: executing program 2 (id=165): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x26) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r4, 0x4018aee1, 0xfffffffffffffffe) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap$KVM_VCPU(0x0, 0x50000, 0x3, 0x13012, r5, 0x0) ioctl$KVM_CREATE_VM(r0, 0x2, 0x31) 1h4m24.958334755s ago: executing program 2 (id=167): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ARM_SET_COUNTER_OFFSET(r1, 0x4010aeab, 0xfffffffffffffffe) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r3, r4, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x20}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r4, 0x4010aeab, &(0x7f0000000180)=@arm64_core={0x603000000010000a, &(0x7f0000000040)=0x1}) 1h4m12.359657544s ago: executing program 2 (id=168): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x32) ioctl$KVM_CAP_HALT_POLL(r2, 0x4068aea3, &(0x7f00000000c0)={0xb6, 0x0, 0xfffffffffffffffa}) r3 = openat$kvm(0x0, &(0x7f00000001c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = syz_kvm_vgic_v3_setup(r4, 0x1, 0x100) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000200)=@attr_arm64={0x0, 0x6, 0x4, &(0x7f0000000240)=0xc}) r6 = ioctl$KVM_CREATE_VM(r1, 0x80111500, 0x20000000) r7 = ioctl$KVM_CREATE_VM(r6, 0x541b, 0x10000000000000) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2e) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0xa2) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0xc3033, 0xffffffffffffffff, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r6, r10, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000140)=[{0x0, 0x0}], 0x1, 0x0, &(0x7f00000003c0)=[@featur1={0x1, 0x18}], 0x1) ioctl$KVM_SET_ONE_REG(r10, 0x4010aeac, &(0x7f0000000180)=@arm64_core={0x6030000000100042}) ioctl$KVM_SIGNAL_MSI(r7, 0x4020aea5, &(0x7f00000002c0)={0x24d000, 0x0, 0x101, 0x1, 0x3}) 1h3m25.768756557s ago: executing program 34 (id=168): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x32) ioctl$KVM_CAP_HALT_POLL(r2, 0x4068aea3, &(0x7f00000000c0)={0xb6, 0x0, 0xfffffffffffffffa}) r3 = openat$kvm(0x0, &(0x7f00000001c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = syz_kvm_vgic_v3_setup(r4, 0x1, 0x100) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000200)=@attr_arm64={0x0, 0x6, 0x4, &(0x7f0000000240)=0xc}) r6 = ioctl$KVM_CREATE_VM(r1, 0x80111500, 0x20000000) r7 = ioctl$KVM_CREATE_VM(r6, 0x541b, 0x10000000000000) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2e) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0xa2) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0xc3033, 0xffffffffffffffff, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r6, r10, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000140)=[{0x0, 0x0}], 0x1, 0x0, &(0x7f00000003c0)=[@featur1={0x1, 0x18}], 0x1) ioctl$KVM_SET_ONE_REG(r10, 0x4010aeac, &(0x7f0000000180)=@arm64_core={0x6030000000100042}) ioctl$KVM_SIGNAL_MSI(r7, 0x4020aea5, &(0x7f00000002c0)={0x24d000, 0x0, 0x101, 0x1, 0x3}) 36m10.788348168s ago: executing program 4 (id=375): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000180), 0x103080, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mmap$KVM_VCPU(0x0, 0x50000, 0x2000002, 0x10031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r4 = syz_kvm_vgic_v3_setup(r3, 0x1, 0x40) ioctl$KVM_GET_DEVICE_ATTR(r4, 0x4018aee2, &(0x7f00000001c0)=@attr_arm64={0x0, 0x7, 0x300, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x1fe, 0x3, 0xffff1000, 0x1000, &(0x7f0000b24000/0x1000)=nil}) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x21) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=[@featur1={0x1, 0x8}], 0x1) syz_kvm_vgic_v3_setup(r6, 0x1, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r8, 0x4018aee1, &(0x7f0000000140)=@attr_pmu_irq={0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xcccc0000, 0x1000, &(0x7f0000f15000/0x1000)=nil}) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f00008a8000/0x400000)=nil) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0) 36m9.812511927s ago: executing program 3 (id=376): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000040)="fb4149dd033b8986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67525673312b01040000000000002627e7000000000000000200", 0x0, 0xfffffffffffffe73) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x12, r2, 0x0) r4 = eventfd2(0x2, 0x80001) close(r4) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x1a17f2, 0x0) write$eventfd(r4, &(0x7f0000000100)=0xfffffffffffffffe, 0x8) r6 = eventfd2(0x0, 0x0) close(r6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r7 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x27) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, r7, 0x2000004, 0x2011, r6, 0x0) write$eventfd(r4, &(0x7f00000001c0)=0x8000000000000, 0x8) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0xb) ioctl$KVM_GET_VCPU_MMAP_SIZE(r8, 0xae04) 35m59.487932788s ago: executing program 3 (id=377): mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x8, 0x23ac5f9b426ec4b1, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x25) syz_kvm_setup_syzos_vm$arm64(r0, &(0x7f0000bff000/0x400000)=nil) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2d) r3 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$kvm(0x0, &(0x7f00000004c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r6, 0x4018aee1, &(0x7f0000000500)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000540)={0xef000000, 0x1000, 0x2}}) syz_kvm_vgic_v3_setup(r6, 0x2, 0x0) close(r6) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x17) syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000100)={0x0, 0x0}, 0x0, 0x0) r10 = syz_kvm_vgic_v3_setup(r4, 0xfffffffffffffffd, 0x60) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x6, 0x3, 0x0}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x7, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r11, 0x4018aee3, &(0x7f0000000080)=@attr_other={0x0, 0x7, 0x10001, 0x0}) r12 = openat$kvm(0x0, &(0x7f0000000180), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x1) ioctl$KVM_ARM_VCPU_INIT(r14, 0x4020aeae, &(0x7f00000001c0)={0x5, 0x2}) ioctl$KVM_GET_ONE_REG(r14, 0x4010aeab, &(0x7f0000000200)=@arm64_core={0x6030000000100030, &(0x7f0000000240)=0x1ff}) ioctl$KVM_SET_GUEST_DEBUG_arm64(r14, 0x4208ae9b, &(0x7f0000000280)={0x3, 0x0, {[0x7f, 0xc9, 0x40, 0xb979, 0x80, 0x0, 0x6, 0x6, 0x2, 0x335, 0xbcc, 0x4000000000000, 0x5, 0x400000000, 0x9, 0xffffffffffffffff], [0xafd, 0x7e39, 0x80000000, 0x2, 0x6, 0x4a, 0x200, 0x1, 0x8000000000000000, 0x9, 0x47d, 0xd, 0x9, 0xcd22, 0xfffffffffffff3e6, 0x6], [0x3, 0x10, 0x0, 0x0, 0x9, 0x7ff, 0x0, 0x2, 0x10001, 0x4, 0xff, 0x8, 0x8001, 0x9a, 0x200, 0xfff], [0x0, 0x0, 0x8, 0x0, 0x7, 0xd, 0x5, 0x1, 0x2, 0x7ff, 0x10001, 0x1000, 0x7, 0x1, 0x100000001]}}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0xdc032, 0xffffffffffffffff, 0x0) 35m56.808153115s ago: executing program 4 (id=378): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000f62000/0x3000)=nil, 0x0, 0xb, 0x4010, 0xffffffffffffffff, 0x0) openat$kvm(0x0, &(0x7f00000005c0), 0x22200, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000002000/0x400000)=nil) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000340)={0xffffffffffffffff, 0xc8}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0xfffffffdfffffffc) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f00000003c0)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000400)=@x86={0xe, 0x4c, 0xe, 0x0, 0x0, 0x7f, 0x0, 0x74, 0x23, 0x80, 0x35, 0xfa, 0x0, 0x0, 0x8, 0x3, 0x8, 0x8, 0x6, '\x00', 0xe9, 0x4}) write$eventfd(r4, &(0x7f0000000440)=0x4, 0x4d) openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x5) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000080)={0x5, 0xffffffffffffffff}) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r5, 0x4068aea3, &(0x7f0000000280)={0xa8, 0x0, 0x1}) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000100)}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x29) syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000bc2000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000140)={0x3, 0x3, 0xfec00000, 0x2000, &(0x7f000008a000/0x2000)=nil}) syz_kvm_setup_cpu$arm64(r5, 0xffffffffffffffff, &(0x7f0000001000/0x400000)=nil, &(0x7f0000000180)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0xfffffffffffffe50) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000300)=@attr_other={0x0, 0x8, 0x100, &(0x7f0000000200)=0x8000000000000000}) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000600)=@attr_riscv64=@attr_addr={0x0, 0x1, @imsic=0x3, &(0x7f0000000240)=0x3}) r8 = openat$kvm(0x0, &(0x7f00000004c0), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000500)={0x8, 0xffffffffffffffff}) ioctl$KVM_GET_DEVICE_ATTR(r10, 0x4018aee2, &(0x7f0000000540)=@attr_other={0x0, 0x8, 0x6, 0x0}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 35m48.08771402s ago: executing program 3 (id=379): r0 = openat$kvm(0x0, &(0x7f00000001c0), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000bfe000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000200)={0x0, &(0x7f0000000240)=[@memwrite={0x6e, 0x30, @vgic_gicr={0x80a0000, 0xa4, 0x10000, 0x2}}], 0x30}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x4, 0x100) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r4 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000027000/0x13000)=nil, 0x930, 0x3, 0x4102932, 0xffffffffffffffff, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_ARM_VCPU_INIT(r8, 0x4020aeae, &(0x7f0000000540)={0x5}) (async) ioctl$KVM_SET_ONE_REG(r8, 0x4010aeac, &(0x7f0000000580)=@arm64_sys={0x603000000013c090, &(0x7f00000005c0)=0x5}) (async) r9 = openat$kvm(0x0, &(0x7f0000000440), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000040)={0x4, 0x5, 0xffff1000, 0x2000, &(0x7f0000df5000/0x2000)=nil}) (async) openat$kvm(0x0, 0x0, 0xa00, 0x0) (async) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r10, r11, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000480)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r11, 0x4010aeab, &(0x7f00000004c0)=@arm64_core={0x603000000010000c, &(0x7f0000000500)=0xe06}) syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) (async) syz_kvm_vgic_v3_setup(r5, 0x1, 0x100) (async) r12 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000c00000/0x400000)=nil) r15 = syz_kvm_add_vcpu$arm64(r14, &(0x7f00000002c0)={0x0, &(0x7f0000000300)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x4}}, @its_send_cmd={0xaa, 0x28, {0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40000005}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r13, 0x1, 0x100) (async) ioctl$KVM_RUN(r15, 0xae80, 0x0) 35m42.063813875s ago: executing program 4 (id=380): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x25) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r0, 0x4020aed2, &(0x7f0000000000)={0x2000, 0x8a000, 0x8}) syz_kvm_setup_syzos_vm$arm64(r0, &(0x7f0000c00000/0x400000)=nil) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000180)={0xffffffffffffffff, 0xc8}) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000200)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r3, 0x0, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r4, 0x4018aee1, &(0x7f0000000240)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f00000002c0)={0x14, 0xff}}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000300)={{0x3000, 0x8080000, 0x8, 0x4, 0xc, 0xe6, 0x40, 0x9, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x3, 0x0, 0x42, 0x5, 0x7d, 0x6, 0x36, 0x0, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0x7, 0x6, 0x5, 0x42, 0x8b, 0xff, 0x8, 0x3, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x9, 0x16, 0x88, 0xab, 0x8, 0x9, 0x9, 0xf7, 0x97}, {0xdddd1000, 0xdddd0000, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0x3000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xd000, 0xc000, 0xa, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x81}, {0x7000, 0x30}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0xfec00000, [0x6800000000000000, 0x4, 0x3, 0x8]}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000480)={0xffffffffffffffff, 0xc8, 0x5}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2400, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000500)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) ioctl$KVM_CREATE_VM(r7, 0x400454ce, 0x20000000000f) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, 0x0) write$eventfd(r2, &(0x7f0000000440)=0x9, 0x5d) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0xc2881, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) openat$kvm(0x0, &(0x7f0000000140), 0x101282, 0x0) r10 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_ARM_VCPU_INIT(r12, 0x4020aeae, &(0x7f0000000540)={0x5}) 35m29.298747512s ago: executing program 3 (id=381): r0 = eventfd2(0x8, 0x80800) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x0, r0}) mmap$KVM_VCPU(0x0, 0x50000, 0x2000002, 0x10031, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000bff000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000980)={0x0, 0x0}, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xf20f) ioctl$KVM_CHECK_EXTENSION(r6, 0x5451, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x4f832, 0xffffffffffffffff, 0x1000000) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000040)={0xffffffffffffffff, 0xc8}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(0x0, 0x50000, 0x3, 0x102031, 0xffffffffffffffff, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0x800454dd, 0x16) r11 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) mmap$KVM_VCPU(0x0, 0x50000, 0x3, 0x11, r11, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) r13 = ioctl$KVM_CREATE_VM(r12, 0x894c, 0x0) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xb701, 0x0) ioctl$KVM_CREATE_VCPU(r14, 0xb704, 0x2) ioctl$KVM_SET_DEVICE_ATTR_vm(r10, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000180)={0x9, 0x1}}) 35m26.687690071s ago: executing program 4 (id=382): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x101e40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x28) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000b75000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f0000000000)=[@hvc={0x32, 0x40, {0x84000051, [0x84000051, 0x7, 0x9, 0xc, 0x7fff]}}], 0x40}, 0x0, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x10201, 0x0, &(0x7f0000e14000/0x3000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 35m18.458385514s ago: executing program 4 (id=383): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2081, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000000040)={0x200200001fe0000, 0x3}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x2000003, 0x2013, r3, 0x200001fe0000) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000100)={0xffffffffffffffff, 0xc8, 0x1}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000180)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0xec, 0xa, 0x2d, 0x0, 0x5, 0x6, 0x6, 0x6, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x9, 0x1461, 0x0, 0x9, 0x5, 0x8, '\x00', 0x6, 0x7}) write$eventfd(r6, &(0x7f0000000200)=0x3, 0x36) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8902, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r9 = ioctl$KVM_GET_STATS_FD_vm(r5, 0xaece) r10 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000b80)={0x0, &(0x7f0000000600)=[@irq_setup={0x46, 0x18, {0x4, 0x1ea}}, @mrs={0xbe, 0x18, {0x603000000013e681}}, @msr={0x14, 0x20, {0x603000000013df54, 0x4cc}}, @irq_setup={0x46, 0x18, {0x1, 0x18d}}, @code={0xa, 0xe4, {"404d8cd20060b8f2610180d2420180d2430080d2440180d2020000d4010000d420b18ad20060b8f2610180d2420080d2230080d2440080d2020000d4603d8cd200a0b8f2210080d2e20180d2630180d2e40080d2020000d4a0469cd20080b8f2610180d2c20180d2230180d2840080d2020000d4601490d200e0b0f2410080d2420180d2430180d2040180d2020000d400089fd20040b0f2610080d2820180d2430180d2040180d2020000d400686038c06489d200c0b8f2610180d2820080d2c30080d2e40180d2020000d4007008d5"}}, @memwrite={0x6e, 0x30, @generic={0xd000, 0x2e5, 0x6, 0x6}}, @smc={0x1e, 0x40, {0x84000013, [0x400, 0xf, 0xffffffffffffffff, 0x80000001, 0x3]}}, @eret={0xe6, 0x18}, @its_setup={0x82, 0x28, {0x3, 0x3, 0x5d}}, @eret={0xe6, 0x18, 0x3}, @smc={0x1e, 0x40, {0xffff, [0x2, 0x1, 0x400, 0xffffffffffffffff, 0x5]}}, @its_setup={0x82, 0x28, {0x1, 0x0, 0x30c}}, @hvc={0x32, 0x40, {0x200, [0x3, 0x400, 0x80, 0xffffffff, 0x80]}}, @memwrite={0x6e, 0x30, @generic={0x80a0000, 0x167, 0x4, 0x1}}, @smc={0x1e, 0x40, {0x84000003, [0x9, 0x0, 0x6, 0x4, 0x9]}}, @eret={0xe6, 0x18}, @msr={0x14, 0x20, {0x603000000013e687, 0xffffffffffffffff}}, @uexit={0x0, 0x18, 0x3}, @memwrite={0x6e, 0x30, @generic={0x0, 0x316, 0xd405, 0x8}}, @smc={0x1e, 0x40, {0x80008000, [0x7, 0x5b9, 0x10, 0x8, 0x40]}}, @eret={0xe6, 0x18, 0xcf7}, @uexit={0x0, 0x18, 0xb1e}, @smc={0x1e, 0x40, {0x400, [0x8, 0x2, 0x1165, 0x5, 0x5]}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x90, 0x7, 0x762197b1cb67ecba}}, @smc={0x1e, 0x40, {0x5000000, [0x2, 0x3, 0x3, 0xbfe5, 0x3]}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x1, 0x0, 0xe, 0xf285, 0xf}}, @msr={0x14, 0x20, {0x603000000013c761, 0xd756}}, @svc={0x122, 0x40, {0x84000005, [0x7fffffff, 0x3e9b, 0x1, 0x7, 0xee28]}}], 0x554}, &(0x7f0000000bc0)=[@featur1={0x1, 0x12}], 0x1) syz_kvm_setup_cpu$arm64(r9, r10, &(0x7f0000bfe000/0x400000)=nil, &(0x7f0000000e40)=[{0x0, &(0x7f0000000c00)=[@code={0xa, 0x84, {"007008d5000028d5000008d5a0a780d200c0b0f2a10080d2020180d2230080d2c40180d2020000d4000008d5404781d20060b0f2e10080d2820080d2030080d2240080d2020000d460498cd20020b0f2810180d2620080d2030080d2640180d2020000d40048214e0010601e0028216e"}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xffd0, 0x6, 0x4}}, @mrs={0xbe, 0x18, {0x603000000013df7d}}, @smc={0x1e, 0x40, {0x10, [0xf6, 0xfff, 0x80, 0x3, 0x4]}}, @smc={0x1e, 0x40, {0x8400000d, [0x2, 0x1, 0xffffffffffffba65, 0x4f2, 0x9]}}, @smc={0x1e, 0x40, {0x32000000, [0xd4, 0x64, 0x6, 0x9, 0x5]}}, @irq_setup={0x46, 0x18, {0x2, 0x47}}, @hvc={0x32, 0x40, {0x84000008, [0x9, 0x8, 0x7, 0x8, 0x3]}}, @svc={0x122, 0x40, {0x20, [0x0, 0x8eb7, 0xb8, 0x6, 0x80]}}], 0x224}], 0x1, 0x0, &(0x7f0000000e80)=[@featur1={0x1, 0xc}], 0x1) r11 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r12, 0x4020aeae, &(0x7f0000000280)={0x5, 0x8}) ioctl$KVM_SET_ONE_REG(r12, 0x4010aeac, &(0x7f00000002c0)=@arm64_core={0x6030000000100014, &(0x7f0000000300)=0x40000280}) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x69) r13 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r13, 0x4018aee1, &(0x7f00000005c0)=@attr_other={0x0, 0x1, 0xfffffffffffffffa, 0x0}) 35m17.268402779s ago: executing program 3 (id=384): r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000027000/0x13000)=nil, 0x930, 0x3, 0x4102932, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) mmap$KVM_VCPU(&(0x7f0000c58000/0x1000)=nil, r2, 0x2000003, 0xaf832, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) mmap$KVM_VCPU(0x0, 0x50000, 0x3, 0x13012, r6, 0x0) ioctl$KVM_CREATE_VM(r3, 0x2, 0x31) r7 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r8 = mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, r7, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f0000000240)="fb4149dd033be3ac2cc4a22332fdaa8de0418df24200000000a6ab8031d1dfd92f0000000001ffffffff9610fbff77521ce10d8f6b69d22627e700", 0x0, 0xffffffffffffffca) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r10 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r9, 0xae04) mmap$KVM_VCPU(&(0x7f0000fed000/0x3000)=nil, r10, 0x3000002, 0x8a031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) 35m4.224544449s ago: executing program 3 (id=385): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x33) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r2 = openat$kvm(0x0, &(0x7f0000000100), 0x104101, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000180), 0x101000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x20000) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$KVM_CREATE_VM(r2, 0x5452, 0x32) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x1f1642, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0xfffffffffffffffc) r8 = mmap$KVM_VCPU(&(0x7f0000e5e000/0x1000)=nil, 0x0, 0x1000002, 0x10, r7, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000440)={0x4, 0xffffffffffffffff, 0x1}) close(r11) syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f0000000480)="fb4149dd033be3ac2cc4a22332a77b1db08986a14d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000cf0000/0x2000)=nil, 0x930, 0x0, 0x4003012, r0, 0x0) openat$kvm(0x0, &(0x7f0000000000), 0x40200, 0x0) ioctl$KVM_CREATE_VM(r2, 0x40049409, 0x4) r12 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ARM_VCPU_INIT(r12, 0x4020aeae, &(0x7f00000001c0)={0x5, 0x18}) ioctl$KVM_GET_ONE_REG(r7, 0x4010aeab, &(0x7f0000000240)=@riscv64_core={0x8030000000200008, &(0x7f0000000300)=0x9}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000080)={0xffffffffffffffff, 0xc8}) r13 = openat$kvm(0x0, &(0x7f00000000c0), 0x4d04c2, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xc) ioctl$KVM_GET_API_VERSION(r3, 0xae00, 0x0) 35m3.368657874s ago: executing program 4 (id=386): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0xc8}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x20080, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0xeffffffc, 0x801) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000140)={0x200, 0x4000, 0x4, r4, 0x1}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000240)={0xffffffffffffffff, 0xc9, 0x3}) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x3) r7 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000300)={0x4, 0xffffffffffffffff, 0x1}) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) r11 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x1800002, 0x11, r10, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r11, 0x20, &(0x7f0000000340)="d6011813013c360000000000f4ff8000802346cbd98762c7795582ba3948ecff090001000000000000000000040000000100", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r10, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x40305828, &(0x7f00000003c0)=@attr_other={0x0, 0x0, 0xfffffffffffffff7, 0x0}) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000180)={0x3, 0x0, 0x2, r4, 0x3}) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f00000001c0)={0x6, 0x10000, 0x7, r4, 0xc}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0) r12 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2b) ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, &(0x7f00000000c0)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r13, 0x400454da, 0x2f) r14 = openat$kvm(0x0, &(0x7f0000000400), 0x0, 0x0) r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0) r16 = syz_kvm_setup_syzos_vm$arm64(r15, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r16, &(0x7f0000000440)={0x0, 0x0}, 0x0, 0x0) 34m19.528382532s ago: executing program 35 (id=385): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x33) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r2 = openat$kvm(0x0, &(0x7f0000000100), 0x104101, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000180), 0x101000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x20000) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$KVM_CREATE_VM(r2, 0x5452, 0x32) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x1f1642, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0xfffffffffffffffc) r8 = mmap$KVM_VCPU(&(0x7f0000e5e000/0x1000)=nil, 0x0, 0x1000002, 0x10, r7, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000440)={0x4, 0xffffffffffffffff, 0x1}) close(r11) syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f0000000480)="fb4149dd033be3ac2cc4a22332a77b1db08986a14d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000cf0000/0x2000)=nil, 0x930, 0x0, 0x4003012, r0, 0x0) openat$kvm(0x0, &(0x7f0000000000), 0x40200, 0x0) ioctl$KVM_CREATE_VM(r2, 0x40049409, 0x4) r12 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ARM_VCPU_INIT(r12, 0x4020aeae, &(0x7f00000001c0)={0x5, 0x18}) ioctl$KVM_GET_ONE_REG(r7, 0x4010aeab, &(0x7f0000000240)=@riscv64_core={0x8030000000200008, &(0x7f0000000300)=0x9}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000080)={0xffffffffffffffff, 0xc8}) r13 = openat$kvm(0x0, &(0x7f00000000c0), 0x4d04c2, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xc) ioctl$KVM_GET_API_VERSION(r3, 0xae00, 0x0) 34m15.782263988s ago: executing program 36 (id=386): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0xc8}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x20080, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0xeffffffc, 0x801) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000140)={0x200, 0x4000, 0x4, r4, 0x1}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000240)={0xffffffffffffffff, 0xc9, 0x3}) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x3) r7 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000300)={0x4, 0xffffffffffffffff, 0x1}) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) r11 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x1800002, 0x11, r10, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r11, 0x20, &(0x7f0000000340)="d6011813013c360000000000f4ff8000802346cbd98762c7795582ba3948ecff090001000000000000000000040000000100", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r10, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x40305828, &(0x7f00000003c0)=@attr_other={0x0, 0x0, 0xfffffffffffffff7, 0x0}) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000180)={0x3, 0x0, 0x2, r4, 0x3}) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f00000001c0)={0x6, 0x10000, 0x7, r4, 0xc}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0) r12 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2b) ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, &(0x7f00000000c0)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r13, 0x400454da, 0x2f) r14 = openat$kvm(0x0, &(0x7f0000000400), 0x0, 0x0) r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0) r16 = syz_kvm_setup_syzos_vm$arm64(r15, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r16, &(0x7f0000000440)={0x0, 0x0}, 0x0, 0x0) 2m21.02059337s ago: executing program 5 (id=545): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x66) syz_kvm_vgic_v3_setup(r3, 0x3, 0xa0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$arm64(r1, r5, &(0x7f0000000000/0x400000)=nil, &(0x7f0000000280)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) 2m12.8175794s ago: executing program 6 (id=546): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$arm64(r2, 0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee1, 0x0) r3 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000300)={0x0, &(0x7f0000000340)=[@smc={0x1e, 0x40, {0xc4000053, [0x0, 0x4, 0x1, 0x8, 0x8]}}, @its_setup={0x82, 0x28, {0x2, 0x2, 0x37f}}, @svc={0x122, 0x40, {0x84000005, [0x9, 0x7fffffffffffffff, 0x0, 0x8000000000000001]}}, @msr={0x14, 0x20, {0x603000000013deab, 0xff}}, @code={0xa, 0x54, {"0040200e000000c8008008d5008008d5008008d50004809a001399d20060b0f2210080d2820080d2830080d2040180d2020000d4007008d50004201e00004039"}}, @eret={0xe6, 0x18, 0x4}, @eret={0xe6, 0x18, 0x3}, @svc={0x122, 0x40, {0x84000001, [0x3, 0x3, 0x7, 0x37, 0x1f74]}}], 0x18c}, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1, 0x16831, 0xffffffffffffffff, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r9, 0x4018aee3, &(0x7f0000000280)=@attr_arm64={0x0, 0x8, 0x3, 0x0}) ioctl$KVM_CAP_HALT_POLL(r2, 0x4068aea3, &(0x7f00000000c0)={0xdf, 0x0, 0x10000}) ioctl$KVM_CAP_HALT_POLL(r2, 0x4068aea3, &(0x7f0000000200)={0xe1, 0xfdfd, 0x3}) openat$kvm(0x0, &(0x7f0000000500), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1000000000000) r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000540)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r12, 0xc040aed5, &(0x7f0000000580)={0x9000, 0x110000}) close(0xffffffffffffffff) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x4f832, 0xffffffffffffffff, 0x1000000) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r13 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x7f, 0x4, 0x3, 0x0, 0x8, 0x9, 0x8, 0x8b, 0x4, 0x0, 0xf, 0x0, 0x0, 0xebf, 0x6, 0x0, 0xd, 0xfe, 0x3, '\x00', 0x3, 0x8}) ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r14, &(0x7f00000001c0)=0x9, 0x1d) 2m4.973898391s ago: executing program 5 (id=547): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000300), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, 0xffffffffffffffff) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000340), 0xc4401, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) munmap(&(0x7f0000481000/0x1000)=nil, 0x1000) munmap(&(0x7f0000136000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) mmap$KVM_VCPU(&(0x7f0000f7e000/0x3000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) munmap(&(0x7f0000e83000/0x2000)=nil, 0x2000) openat$kvm(0x0, &(0x7f0000000200), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xfffffffffffffffe) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_ARM_VCPU_INIT(r9, 0x4020aeae, &(0x7f0000000240)={0x5, 0x1}) ioctl$KVM_GET_ONE_REG(r9, 0x4010aeab, &(0x7f0000000280)=@arm64_core={0x6030000000100024, &(0x7f00000002c0)=0xffffffffffffffff}) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1000009, 0x16831, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r10 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000100)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r11, 0x4010aeab, &(0x7f0000000140)=@arm64_core={0x603000000010002a, &(0x7f0000000180)=0x5}) r12 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) mmap$KVM_VCPU(&(0x7f0000eef000/0x1000)=nil, r12, 0x1000002, 0x10, r7, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r3, 0x8040aeb6, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x9, 0x7fffffff, 0x2}}) 1m49.49226443s ago: executing program 6 (id=548): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r3, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x81}], 0x1) r4 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013c65d, 0x1ff}}], 0x20}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x3, 0xa0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_vgic_v3_setup(r6, 0xff7fffffffffffff, 0x360) r7 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CAP_DIRTY_LOG_RING_WITH_BITMAP(r8, 0x4068aea3, &(0x7f00000000c0)={0xe1, 0x0, 0x2000}) ioctl$KVM_SIGNAL_MSI(r6, 0x4020aea5, &(0x7f0000000040)={0x9000, 0x2000, 0x401, 0x0, 0x7d}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m47.658868634s ago: executing program 5 (id=549): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = mmap$KVM_VCPU(&(0x7f0000dd4000/0x3000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) eventfd2(0x0, 0x0) r4 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = eventfd2(0xfffffffa, 0x80001) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000300)={0x80, 0x4, 0x0, r6}) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000340)={0x0, 0x4, 0x1, r6, 0x5}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_CAP_PTP_KVM(r1, 0x4068aea3, &(0x7f0000000240)) r8 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, 0x930, 0x280000b, 0x11, r7, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r3, 0x0) r9 = eventfd2(0x0, 0x0) r10 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r11, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f00000001c0)={0xef000000, 0x1000, 0x2}}) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r11, r12, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000200)=[{0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x80}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) close(r9) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) write$eventfd(r9, &(0x7f0000000180)=0x5, 0xfffffde3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0) 1m30.69966036s ago: executing program 6 (id=550): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x40) ioctl$KVM_PPC_ALLOCATE_HTAB(r0, 0xc004aea7, &(0x7f0000000000)=0x2) r1 = ioctl$KVM_GET_STATS_FD_vm(r0, 0xaece) r2 = eventfd2(0x8, 0x800) r3 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r2, 0x80000001, 0x1, r3}) syz_kvm_setup_syzos_vm$arm64(r0, &(0x7f0000bfe000/0x400000)=nil) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x17) r5 = eventfd2(0x5, 0x80001) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000080)={r5, 0x8, 0x1, r1}) syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000bfe000/0x400000)=nil) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f00000000c0)={0x1000, 0x15000}) ioctl$KVM_CAP_DIRTY_LOG_RING(r3, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x72000}) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r3, 0x4068aea3, &(0x7f0000000180)={0xa8, 0x0, 0x1}) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000200)={0x4}) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r0, 0x4068aea3, &(0x7f0000000240)={0xdf, 0x0, 0x10000}) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x12) ioctl$KVM_RESET_DIRTY_RINGS(r6, 0xaec7) syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f00009f0000/0x400000)=nil) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x5) r8 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_arm64(r8, 0x4208ae9b, &(0x7f00000002c0)={0x3, 0x0, {[0x46f, 0x2, 0x5, 0x0, 0x3, 0x0, 0x1, 0x9, 0x4, 0xfffffffffffffffd, 0x5, 0x10, 0x98, 0x9, 0x2ef3cd15, 0x100000001], [0x7, 0xffff, 0x9, 0x716, 0x7f00000, 0x3, 0xffffffff, 0x3, 0x6, 0x1, 0x417, 0x9, 0x40, 0x8001, 0x8, 0x1], [0x6, 0xb, 0xa178, 0x0, 0x2, 0xfffffffffffffffe, 0x5, 0x3, 0x5, 0x20000000, 0x7d, 0x8000, 0x4, 0x8, 0xc, 0xb], [0x10000, 0xff, 0xbe, 0x5, 0x5, 0x3, 0x4, 0x7, 0xb, 0xfffffffffffffffd, 0x343100, 0x4385, 0x7, 0x1ff, 0x200, 0x8]}}) ioctl$KVM_HAS_DEVICE_ATTR_vm(r1, 0x4018aee3, &(0x7f0000000540)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000500)={0x6, 0x2}}) close(r7) ioctl$KVM_GET_DEVICE_ATTR_vm(r0, 0x4018aee2, &(0x7f00000005c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000580)={0x8, 0x3, 0x3}}) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000600)={0x9, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_ONE_REG(r8, 0x4010aeac, &(0x7f0000000680)=@arm64_fp={0x60400000001000d0, &(0x7f0000000640)=0x5f8}) eventfd2(0x3, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000700)={0x5000, 0x80000, 0x1}) 1m26.326017047s ago: executing program 5 (id=551): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0xeeef0000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x2515, 0x0, 0x0, 0x1000, &(0x7f0000fec000/0x1000)=nil}) close(r3) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x29) r7 = ioctl$KVM_CREATE_GUEST_MEMFD(r6, 0xc040aed4, &(0x7f0000000140)={0x1000200001fe0000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r5, 0x40a0ae49, &(0x7f0000000240)={0x4, 0x4, 0x6000, 0x2000, &(0x7f0000ffc000/0x2000)=nil, 0x100000000000000, r7}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x2, 0x0, [{0x0, 0x2, 0x0, 0x0, @sint={0x6, 0x5}}, {0xfff, 0x5, 0x0, 0x0, @adapter={0xe, 0x7, 0x7, 0x3, 0x3ff}}]}) 1m20.258197842s ago: executing program 6 (id=552): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0xc8, 0x1}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000000c0)=@x86={0x11, 0x9, 0xf, 0x0, 0x5, 0x7, 0x6, 0x6, 0x47, 0x50, 0xdd, 0x66, 0x0, 0xce, 0x4, 0x4, 0x3, 0x5, 0x8, '\x00', 0x1, 0x400000000002}) write$eventfd(r2, &(0x7f0000000140)=0x3, 0x50) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x20000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r5, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r5, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000300)={0x8001, 0x55e}}) r6 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000100)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x7fff}}], 0x20}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r7, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1m4.733542932s ago: executing program 5 (id=553): r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2a) close(0xffffffffffffffff) syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r0, &(0x7f0000000040)={0x0, &(0x7f0000000140)=[@hvc={0x32, 0x40, {0x84000004, [0x100000001, 0x8000000000000000, 0xffffffffffffffff, 0xee24, 0xfffffffffffeffff]}}], 0x40}, &(0x7f0000000180)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0xfffa7000, 0x200000, &(0x7f0000200000/0x200000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000000c0)={0x2710, 0x3, 0x6000, 0x1000, &(0x7f0000d3f000/0x1000)=nil}) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) 1m4.700642656s ago: executing program 6 (id=554): mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x0, 0x1800002, 0x28031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000400)={0x0, 0x4, 0x0, 0x2000, &(0x7f0000e37000/0x2000)=nil, 0x19800}) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1000009, 0x16831, 0xffffffffffffffff, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r5 = openat$kvm(0x0, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000240)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r7, 0x4010aeab, &(0x7f0000000280)=@arm64_sys={0x603000000013d801, &(0x7f00000002c0)=0x1}) r8 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000ab8000/0x400000)=nil) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r9 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CAP_HALT_POLL(r3, 0x4068aea3, &(0x7f0000000300)={0xb6, 0x0, 0x5}) r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_DEVICE_ATTR_vm(r10, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000140)={0xef000004, 0x1, 0x2}}) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x100000c, 0x16831, 0xffffffffffffffff, 0x0) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x1) ioctl$KVM_SET_MP_STATE(r14, 0x4004ae99, 0x0) r15 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@hvc={0x32, 0x40, {0xc4000053, [0xfffffffffffffffc, 0x1, 0x1, 0x9d, 0x6]}}], 0x40}, 0x0, 0x0) ioctl$KVM_RUN(r15, 0xae80, 0x0) syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000000)={0x0, 0x0}, 0x0, 0x0) 51.649253831s ago: executing program 5 (id=555): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000b80)={0x0, &(0x7f0000000080)=[@hvc={0x32, 0x40, {0x84000001, [0x9, 0x8, 0x5, 0x603c8354, 0x200]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1) (async, rerun: 32) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000000)={0x0, 0x100}) (async, rerun: 32) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x33) (async, rerun: 32) r5 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) (rerun: 32) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000340)={0xd290, 0xdddd1000}) (async) ioctl$KVM_CREATE_VM(r5, 0x401c5820, 0x20000000) (async, rerun: 32) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (rerun: 32) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = openat$kvm(0x0, &(0x7f00000004c0), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil) r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000500)={0x0, &(0x7f0000000540)=[@hvc={0x32, 0x0, {0x84000001, [0x9, 0x8, 0x5, 0x603c8354, 0x200]}}], 0x40}, &(0x7f0000000580)=[@featur1={0x1, 0x4}], 0x1) (async, rerun: 64) ioctl$KVM_IRQ_LINE(r9, 0x4008ae61, &(0x7f00000005c0)={0x0, 0x100}) (rerun: 64) ioctl$KVM_RUN(r11, 0xae80, 0x0) (async) ioctl$KVM_CAP_HALT_POLL(r9, 0x4068aea3, &(0x7f0000000600)={0xb6, 0x0, 0x8}) (async, rerun: 32) ioctl$KVM_CAP_HALT_POLL(r7, 0x4068aea3, &(0x7f00000002c0)={0xdf, 0x0, 0x10004}) (rerun: 32) ioctl$KVM_CAP_HALT_POLL(r7, 0x4068aea3, &(0x7f0000000400)={0xe1, 0x0, 0x3}) (async) syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) (async) ioctl$KVM_CLEAR_DIRTY_LOG(r7, 0xc018aec0, &(0x7f0000000480)={0x10000, 0x280, 0x3c0, 0x0}) syz_kvm_vgic_v3_setup(r4, 0x0, 0x200) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f00000000c0)={0xb6, 0x0, 0x5}) (async, rerun: 32) r12 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) (rerun: 32) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r14, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x6030000000138010, 0x8000}}], 0x20}, 0x0, 0x0) 48.60817601s ago: executing program 6 (id=556): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000100)={0x5, 0x18}) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r6 = openat$kvm(0x0, &(0x7f00000001c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000200)={0x0, &(0x7f0000000240)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x2}}], 0x20}, &(0x7f0000000280)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r9, 0x4018aee1, &(0x7f00000002c0)=@attr_pmu_init) r10 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) r11 = openat$kvm(0x0, &(0x7f00000003c0), 0x161681, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r12, r13, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000400)=[{0x0, 0x0}], 0x1, 0x0, &(0x7f0000000440)=[@featur2={0x1, 0x4}], 0x1) syz_kvm_setup_cpu$arm64(r12, r13, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000480)=[{0x0, 0x0, 0x20}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_ARM_VCPU_INIT(r10, 0x4020aeae, &(0x7f0000000300)={0x5, 0x8}) ioctl$KVM_SET_ONE_REG(r10, 0x4010aeac, &(0x7f0000000340)=@arm64_sys={0x603000000013dce0, &(0x7f0000000380)=0x5}) ioctl$KVM_RUN(r9, 0xae80, 0x0) r14 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r14, 0x4010aeab, &(0x7f00000000c0)=@arm64_core={0x6030000000100036, &(0x7f0000000180)=0x3bf}) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000140)=@arm64_fw={0x6030000000540002, 0x0}) 4.391020469s ago: executing program 37 (id=555): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000b80)={0x0, &(0x7f0000000080)=[@hvc={0x32, 0x40, {0x84000001, [0x9, 0x8, 0x5, 0x603c8354, 0x200]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1) (async, rerun: 32) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000000)={0x0, 0x100}) (async, rerun: 32) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x33) (async, rerun: 32) r5 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) (rerun: 32) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000340)={0xd290, 0xdddd1000}) (async) ioctl$KVM_CREATE_VM(r5, 0x401c5820, 0x20000000) (async, rerun: 32) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (rerun: 32) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = openat$kvm(0x0, &(0x7f00000004c0), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil) r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000500)={0x0, &(0x7f0000000540)=[@hvc={0x32, 0x0, {0x84000001, [0x9, 0x8, 0x5, 0x603c8354, 0x200]}}], 0x40}, &(0x7f0000000580)=[@featur1={0x1, 0x4}], 0x1) (async, rerun: 64) ioctl$KVM_IRQ_LINE(r9, 0x4008ae61, &(0x7f00000005c0)={0x0, 0x100}) (rerun: 64) ioctl$KVM_RUN(r11, 0xae80, 0x0) (async) ioctl$KVM_CAP_HALT_POLL(r9, 0x4068aea3, &(0x7f0000000600)={0xb6, 0x0, 0x8}) (async, rerun: 32) ioctl$KVM_CAP_HALT_POLL(r7, 0x4068aea3, &(0x7f00000002c0)={0xdf, 0x0, 0x10004}) (rerun: 32) ioctl$KVM_CAP_HALT_POLL(r7, 0x4068aea3, &(0x7f0000000400)={0xe1, 0x0, 0x3}) (async) syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) (async) ioctl$KVM_CLEAR_DIRTY_LOG(r7, 0xc018aec0, &(0x7f0000000480)={0x10000, 0x280, 0x3c0, 0x0}) syz_kvm_vgic_v3_setup(r4, 0x0, 0x200) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f00000000c0)={0xb6, 0x0, 0x5}) (async, rerun: 32) r12 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) (rerun: 32) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r14, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x6030000000138010, 0x8000}}], 0x20}, 0x0, 0x0) 0s ago: executing program 38 (id=556): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000100)={0x5, 0x18}) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r6 = openat$kvm(0x0, &(0x7f00000001c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000200)={0x0, &(0x7f0000000240)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x2}}], 0x20}, &(0x7f0000000280)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r9, 0x4018aee1, &(0x7f00000002c0)=@attr_pmu_init) r10 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) r11 = openat$kvm(0x0, &(0x7f00000003c0), 0x161681, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r12, r13, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000400)=[{0x0, 0x0}], 0x1, 0x0, &(0x7f0000000440)=[@featur2={0x1, 0x4}], 0x1) syz_kvm_setup_cpu$arm64(r12, r13, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000480)=[{0x0, 0x0, 0x20}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_ARM_VCPU_INIT(r10, 0x4020aeae, &(0x7f0000000300)={0x5, 0x8}) ioctl$KVM_SET_ONE_REG(r10, 0x4010aeac, &(0x7f0000000340)=@arm64_sys={0x603000000013dce0, &(0x7f0000000380)=0x5}) ioctl$KVM_RUN(r9, 0xae80, 0x0) r14 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r14, 0x4010aeab, &(0x7f00000000c0)=@arm64_core={0x6030000000100036, &(0x7f0000000180)=0x3bf}) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000140)=@arm64_fw={0x6030000000540002, 0x0}) kernel console output (not intermixed with test programs): [ 381.765861][ T24] audit: type=1400 audit(380.940:74): avc: denied { read } for pid=3218 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 388.545639][ T24] audit: type=1400 audit(387.760:75): avc: denied { write } for pid=3275 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 393.379368][ T24] audit: type=1400 audit(392.600:76): avc: denied { write } for pid=3278 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 396.829258][ T3218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.054535][ T24] audit: type=1400 audit(404.260:77): avc: denied { write } for pid=3283 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 408.718907][ T24] audit: type=1400 audit(407.940:78): avc: denied { write } for pid=3286 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 420.002399][ T24] audit: type=1400 audit(419.220:79): avc: denied { write } for pid=3291 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 423.679055][ T24] audit: type=1400 audit(422.880:80): avc: denied { write } for pid=3294 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 426.089877][ T3218] eql: remember to turn off Van-Jacobson compression on your slave devices [ 433.594486][ T24] audit: type=1400 audit(432.790:81): avc: denied { write } for pid=3299 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 437.145957][ T24] audit: type=1400 audit(436.340:82): avc: denied { write } for pid=3302 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 448.835637][ T24] audit: type=1400 audit(448.050:83): avc: denied { write } for pid=3308 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 453.505276][ T24] audit: type=1400 audit(452.720:84): avc: denied { write } for pid=3311 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 463.007680][ T24] audit: type=1400 audit(462.190:85): avc: denied { write } for pid=3314 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 466.771985][ T24] audit: type=1400 audit(465.990:86): avc: denied { write } for pid=3317 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 476.716171][ T24] audit: type=1400 audit(475.920:87): avc: denied { write } for pid=3322 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 480.340535][ T24] audit: type=1400 audit(479.560:88): avc: denied { write } for pid=3325 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 487.385997][ T24] audit: type=1400 audit(486.600:89): avc: denied { write } for pid=3328 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 491.015842][ T24] audit: type=1400 audit(490.220:90): avc: denied { write } for pid=3331 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 500.009171][ T24] audit: type=1400 audit(499.180:91): avc: denied { write } for pid=3335 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 503.607457][ T24] audit: type=1400 audit(502.830:92): avc: denied { write } for pid=3338 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 523.458382][ T24] audit: type=1400 audit(522.680:93): avc: denied { write } for pid=3346 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 527.526708][ T24] audit: type=1400 audit(526.740:94): avc: denied { write } for pid=3349 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 548.951948][ T24] audit: type=1400 audit(548.170:95): avc: denied { write } for pid=3358 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 552.695737][ T24] audit: type=1400 audit(551.910:96): avc: denied { write } for pid=3361 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 559.214443][ T24] audit: type=1400 audit(558.430:97): avc: denied { write } for pid=3364 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 563.915144][ T24] audit: type=1400 audit(563.120:98): avc: denied { write } for pid=3367 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:20928' (ED25519) to the list of known hosts. [ 571.045624][ T24] audit: type=1400 audit(570.240:99): avc: denied { name_bind } for pid=3372 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 573.370237][ T24] audit: type=1400 audit(572.590:100): avc: denied { execute } for pid=3373 comm="sh" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 573.428626][ T24] audit: type=1400 audit(572.650:101): avc: denied { execute_no_trans } for pid=3373 comm="sh" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 594.335041][ T24] audit: type=1400 audit(593.550:102): avc: denied { write } for pid=3374 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 596.582578][ T24] audit: type=1400 audit(595.800:103): avc: denied { write } for pid=3377 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 613.929411][ T24] audit: type=1400 audit(613.150:104): avc: denied { mounton } for pid=3373 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 613.972635][ T24] audit: type=1400 audit(613.190:105): avc: denied { mount } for pid=3373 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 614.055343][ T3373] cgroup: Unknown subsys name 'net' [ 614.111999][ T24] audit: type=1400 audit(613.330:106): avc: denied { unmount } for pid=3373 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 614.535399][ T3373] cgroup: Unknown subsys name 'cpuset' [ 614.650787][ T3373] cgroup: Unknown subsys name 'rlimit' [ 615.491208][ T24] audit: type=1400 audit(614.710:107): avc: denied { setattr } for pid=3373 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 615.517182][ T24] audit: type=1400 audit(614.730:108): avc: denied { mounton } for pid=3373 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 615.540680][ T24] audit: type=1400 audit(614.760:109): avc: denied { mount } for pid=3373 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 616.556370][ T3381] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 616.586329][ T24] audit: type=1400 audit(615.780:110): avc: denied { relabelto } for pid=3381 comm="mkswap" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 616.587249][ T24] audit: type=1400 audit(615.800:111): avc: denied { write } for pid=3381 comm="mkswap" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 616.777525][ T24] audit: type=1400 audit(615.990:112): avc: denied { read } for pid=3373 comm="syz-executor" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 616.796845][ T24] audit: type=1400 audit(616.000:113): avc: denied { open } for pid=3373 comm="syz-executor" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 616.851571][ T3373] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 670.844473][ T24] audit: type=1400 audit(670.060:114): avc: denied { execmem } for pid=3382 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 674.307260][ T24] audit: type=1400 audit(673.530:115): avc: denied { read } for pid=3384 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 674.338448][ T24] audit: type=1400 audit(673.530:116): avc: denied { open } for pid=3384 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 674.406955][ T24] audit: type=1400 audit(673.610:117): avc: denied { mounton } for pid=3384 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 674.639208][ T24] audit: type=1400 audit(673.830:118): avc: denied { module_request } for pid=3385 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 675.579826][ T24] audit: type=1400 audit(674.790:119): avc: denied { sys_module } for pid=3384 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 682.068837][ T24] audit: type=1400 audit(681.290:120): avc: denied { create } for pid=3385 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 682.700641][ T24] audit: type=1400 audit(681.910:121): avc: denied { write } for pid=3384 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 682.760101][ T3384] rdma_rxe: Failed to create IPv4 UDP tunnel [ 682.797688][ T24] audit: type=1400 audit(681.980:122): avc: denied { read } for pid=3384 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 682.989891][ T3385] rxe_eth0 speed is unknown, defaulting to 1000 [ 683.095852][ T3385] rxe_eth0 speed is unknown, defaulting to 1000 [ 683.185559][ T3385] rxe_eth0 speed is unknown, defaulting to 1000 [ 691.410846][ T3385] infiniband rxe0: set active [ 691.435902][ T3385] infiniband rxe0: added rxe_eth0 [ 691.729404][ T3380] rxe_eth0 speed is unknown, defaulting to 1000 [ 692.706341][ T3385] RDS/IB: rxe0: added [ 692.710127][ T3385] smc: adding ib device rxe0 with port count 1 [ 692.711400][ T3385] smc: ib device rxe0 port 1 has no pnetid [ 692.726226][ T3380] rxe_eth0 speed is unknown, defaulting to 1000 [ 692.817161][ T3385] rxe_eth0 speed is unknown, defaulting to 1000 [ 702.430335][ T3380] rxe_eth0 speed is unknown, defaulting to 1000 [ 705.160167][ T3385] rxe_eth0 speed is unknown, defaulting to 1000 [ 706.715625][ T24] audit: type=1400 audit(705.910:123): avc: denied { write } for pid=3424 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 710.756666][ T24] audit: type=1400 audit(709.950:124): avc: denied { write } for pid=3432 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 712.556456][ T3384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 712.852579][ T3384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 724.087992][ T3384] hsr_slave_0: entered promiscuous mode [ 724.116278][ T3384] hsr_slave_1: entered promiscuous mode [ 730.321946][ T3385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 730.551420][ T3385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 731.879275][ T24] audit: type=1400 audit(731.100:125): avc: denied { create } for pid=3384 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 731.929523][ T24] audit: type=1400 audit(731.150:126): avc: denied { write } for pid=3384 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 731.976358][ T24] audit: type=1400 audit(731.180:127): avc: denied { read } for pid=3384 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 732.079418][ T3384] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 732.241685][ T3384] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 732.298119][ T3384] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 732.428221][ T3384] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 732.470899][ T3384] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 732.620198][ T3384] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 732.687024][ T3384] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 732.846938][ T3384] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 743.992815][ T3385] hsr_slave_0: entered promiscuous mode [ 744.018372][ T3385] hsr_slave_1: entered promiscuous mode [ 744.039148][ T3385] debugfs: 'hsr0' already exists in 'hsr' [ 744.040494][ T3385] Cannot create hsr debugfs directory [ 745.150488][ T3384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 752.506132][ T3385] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 752.690025][ T3385] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 752.760817][ T3385] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 752.927379][ T3385] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 753.005071][ T3385] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 753.160609][ T3385] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 753.220085][ T3385] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 753.386682][ T3385] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 771.600377][ T3385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 798.508981][ T3384] veth0_vlan: entered promiscuous mode [ 799.078542][ T3384] veth1_vlan: entered promiscuous mode [ 800.942272][ T3384] veth0_macvtap: entered promiscuous mode [ 801.229797][ T3384] veth1_macvtap: entered promiscuous mode [ 803.187074][ T3495] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.188856][ T3495] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.189536][ T3495] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.190156][ T3495] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.410033][ T24] audit: type=1400 audit(804.630:128): avc: denied { mount } for pid=3384 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 805.535005][ T24] audit: type=1400 audit(804.740:129): avc: denied { mounton } for pid=3384 comm="syz-executor" path="/syzkaller.SUroIP/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 805.632296][ T24] audit: type=1400 audit(804.850:130): avc: denied { mount } for pid=3384 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 805.834975][ T24] audit: type=1400 audit(805.020:131): avc: denied { mounton } for pid=3384 comm="syz-executor" path="/syzkaller.SUroIP/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 805.896660][ T24] audit: type=1400 audit(805.100:132): avc: denied { mounton } for pid=3384 comm="syz-executor" path="/syzkaller.SUroIP/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3770 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 806.321568][ T24] audit: type=1400 audit(805.510:133): avc: denied { unmount } for pid=3384 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 806.471357][ T24] audit: type=1400 audit(805.690:134): avc: denied { mounton } for pid=3384 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1548 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 806.565957][ T24] audit: type=1400 audit(805.770:135): avc: denied { mount } for pid=3384 comm="syz-executor" name="/" dev="gadgetfs" ino=3771 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 809.736870][ T24] audit: type=1400 audit(808.950:136): avc: denied { mounton } for pid=3384 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 809.766273][ T24] audit: type=1400 audit(808.980:137): avc: denied { mount } for pid=3384 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 810.581878][ T3384] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 811.816368][ T24] audit: type=1400 audit(811.010:138): avc: denied { read } for pid=3384 comm="syz-executor" name="loop1" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 811.817187][ T24] audit: type=1400 audit(811.020:139): avc: denied { open } for pid=3384 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 811.821021][ T24] audit: type=1400 audit(811.020:140): avc: denied { ioctl } for pid=3384 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=637 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 819.242207][ T24] audit: type=1400 audit(818.460:141): avc: denied { read write } for pid=3550 comm="syz.1.2" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 819.330672][ T24] audit: type=1400 audit(818.550:142): avc: denied { open } for pid=3550 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 819.885795][ T24] audit: type=1400 audit(819.010:143): avc: denied { ioctl } for pid=3550 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 824.349689][ T3385] veth0_vlan: entered promiscuous mode [ 825.060989][ T3385] veth1_vlan: entered promiscuous mode [ 828.077768][ T3385] veth0_macvtap: entered promiscuous mode [ 828.549188][ T3385] veth1_macvtap: entered promiscuous mode [ 831.237686][ T2185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.298292][ T3427] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.299087][ T3427] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.299676][ T3427] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.035483][ T24] audit: type=1400 audit(832.250:144): avc: denied { append } for pid=3558 comm="syz.1.3" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 851.781500][ T24] audit: type=1400 audit(851.000:145): avc: denied { write } for pid=3573 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 859.150017][ T24] audit: type=1400 audit(858.340:146): avc: denied { write } for pid=3582 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 867.841356][ T24] audit: type=1400 audit(866.980:147): avc: denied { execute } for pid=3586 comm="syz.0.7" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=4324 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 983.716563][ T24] audit: type=1400 audit(982.930:148): avc: denied { map } for pid=3665 comm="syz.1.28" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 983.799338][ T24] audit: type=1400 audit(982.940:149): avc: denied { execute } for pid=3665 comm="syz.1.28" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 988.741383][ T24] audit: type=1400 audit(987.820:150): avc: denied { create } for pid=3668 comm="syz.1.29" anonclass=[kvm-gmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1019.177693][ T24] audit: type=1400 audit(1018.360:151): avc: denied { setattr } for pid=3688 comm="syz.1.35" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1031.958341][ T24] audit: type=1400 audit(1031.160:152): avc: denied { mmap_zero } for pid=3697 comm="syz.0.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 1076.272673][ T24] audit: type=1400 audit(1075.490:153): avc: denied { write } for pid=3730 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1085.908231][ T24] audit: type=1400 audit(1085.100:154): avc: denied { write } for pid=3739 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1172.402289][ T24] audit: type=1400 audit(1171.610:155): avc: denied { map } for pid=3812 comm="syz.0.65" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=8017 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1172.601530][ T24] audit: type=1400 audit(1171.730:156): avc: denied { read } for pid=3812 comm="syz.0.65" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=8017 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1279.718201][ T3895] kvm [3895]: Failed to find VMA for hva 0x20d8d000 [ 1341.752988][ T3941] KVM: debugfs: duplicate directory 3941-7 [ 1424.615867][ T4001] kvm [4001]: Failed to find VMA for hva 0x20c01000 [ 1425.520419][ T4007] kvm [4007]: Failed to find VMA for hva 0x20c01000 [ 1537.772684][ T4049] rxe_eth0 speed is unknown, defaulting to 1000 [ 1546.736526][ T4052] rxe_eth0 speed is unknown, defaulting to 1000 [ 1571.006111][ T24] audit: type=1400 audit(1570.180:157): avc: denied { write } for pid=4072 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1576.786693][ T24] audit: type=1400 audit(1576.000:158): avc: denied { write } for pid=4078 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1594.382023][ T4049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1594.761799][ T3495] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1595.299433][ T4049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1596.052324][ T3495] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1597.392006][ T3495] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1598.326570][ T3495] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1609.402510][ T3495] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1609.488492][ T3495] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1609.557261][ T3495] bond0 (unregistering): Released all slaves [ 1614.071227][ T4052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1614.712695][ T4052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1625.257786][ T3495] hsr_slave_0: left promiscuous mode [ 1625.351834][ T3495] hsr_slave_1: left promiscuous mode [ 1625.929992][ T3495] veth1_macvtap: left promiscuous mode [ 1625.931207][ T3495] veth0_macvtap: left promiscuous mode [ 1625.966350][ T3495] veth1_vlan: left promiscuous mode [ 1625.987403][ T3495] veth0_vlan: left promiscuous mode [ 1630.404501][ T24] audit: type=1400 audit(1629.620:159): avc: denied { write } for pid=4118 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1634.501096][ T24] audit: type=1400 audit(1633.680:160): avc: denied { write } for pid=4121 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1643.160823][ T3218] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1645.591010][ T4049] hsr_slave_0: entered promiscuous mode [ 1645.682553][ T4049] hsr_slave_1: entered promiscuous mode [ 1648.736972][ T3495] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1649.886160][ T3495] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1650.788341][ T3495] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1652.167289][ T3495] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1660.450279][ T24] audit: type=1400 audit(1659.670:161): avc: denied { write } for pid=4134 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1662.316400][ T4052] hsr_slave_0: entered promiscuous mode [ 1662.368868][ T4052] hsr_slave_1: entered promiscuous mode [ 1662.436489][ T4052] debugfs: 'hsr0' already exists in 'hsr' [ 1662.436880][ T4052] Cannot create hsr debugfs directory [ 1665.127872][ T24] audit: type=1400 audit(1664.320:162): avc: denied { write } for pid=4140 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1669.169942][ T3495] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1669.260326][ T3495] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1669.311001][ T3495] bond0 (unregistering): Released all slaves [ 1670.358251][ T3218] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1673.402400][ T4049] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1673.862642][ T4049] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1674.098265][ T4049] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1674.521115][ T4049] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1674.681441][ T4049] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1675.122292][ T4049] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1676.977073][ T4049] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1677.321151][ T4049] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1685.669176][ T3495] hsr_slave_0: left promiscuous mode [ 1685.775721][ T3495] hsr_slave_1: left promiscuous mode [ 1686.152941][ T3495] veth1_macvtap: left promiscuous mode [ 1686.185833][ T3495] veth0_macvtap: left promiscuous mode [ 1686.188020][ T3495] veth1_vlan: left promiscuous mode [ 1686.189251][ T3495] veth0_vlan: left promiscuous mode [ 1688.909723][ T24] audit: type=1400 audit(1688.120:163): avc: denied { write } for pid=4153 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1693.971881][ T24] audit: type=1400 audit(1693.190:164): avc: denied { write } for pid=4156 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1703.847459][ T3218] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1709.305383][ T4052] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1709.561135][ T4052] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1709.648451][ T4052] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1709.826355][ T4052] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1709.892213][ T4052] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1710.139417][ T4052] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1710.235540][ T4052] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1710.536453][ T4052] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1717.835162][ T24] audit: type=1400 audit(1717.030:165): avc: denied { write } for pid=4173 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1724.007610][ T24] audit: type=1400 audit(1723.210:166): avc: denied { write } for pid=4181 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1724.062627][ T4049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1728.795001][ T3218] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1731.181766][ T4052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1744.346641][ T24] audit: type=1400 audit(1743.550:167): avc: denied { write } for pid=4197 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1753.450745][ T24] audit: type=1400 audit(1752.650:168): avc: denied { write } for pid=4205 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1758.959535][ T3218] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1771.244815][ T24] audit: type=1400 audit(1770.460:169): avc: denied { write } for pid=4219 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1777.115464][ T24] audit: type=1400 audit(1776.330:170): avc: denied { write } for pid=4229 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1781.280848][ T3218] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1786.585558][ T24] audit: type=1400 audit(1785.800:171): avc: denied { write } for pid=4237 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1793.297141][ T24] audit: type=1400 audit(1792.510:172): avc: denied { write } for pid=4246 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1812.467625][ T4049] veth0_vlan: entered promiscuous mode [ 1813.521035][ T4049] veth1_vlan: entered promiscuous mode [ 1817.006347][ T4049] veth0_macvtap: entered promiscuous mode [ 1817.199420][ T24] audit: type=1400 audit(1816.410:173): avc: denied { write } for pid=4263 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1817.728693][ T4049] veth1_macvtap: entered promiscuous mode [ 1820.540575][ T4191] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1820.562165][ T4190] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1820.587528][ T4109] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1820.592520][ T4109] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1823.551346][ T4052] veth0_vlan: entered promiscuous mode [ 1824.895518][ T24] audit: type=1400 audit(1824.090:174): avc: denied { write } for pid=4268 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1825.069894][ T4052] veth1_vlan: entered promiscuous mode [ 1828.142629][ T4052] veth0_macvtap: entered promiscuous mode [ 1828.665120][ T4052] veth1_macvtap: entered promiscuous mode [ 1830.142520][ T3218] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1831.902134][ T4113] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1832.009945][ T4071] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1832.017642][ T4071] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1832.018319][ T4071] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1847.235577][ T24] audit: type=1400 audit(1846.440:175): avc: denied { write } for pid=4279 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1856.901373][ T24] audit: type=1400 audit(1856.120:176): avc: denied { write } for pid=4293 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1863.796264][ T3218] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1873.656763][ T24] audit: type=1400 audit(1872.830:177): avc: denied { write } for pid=4301 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1884.179163][ T24] audit: type=1400 audit(1883.390:178): avc: denied { write } for pid=4311 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1934.602403][ T24] audit: type=1400 audit(1933.800:179): avc: denied { write } for pid=4346 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1945.745444][ T24] audit: type=1400 audit(1944.960:180): avc: denied { write } for pid=4359 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1965.434457][ T24] audit: type=1400 audit(1964.640:181): avc: denied { write } for pid=4373 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1974.608428][ T24] audit: type=1400 audit(1973.750:182): avc: denied { write } for pid=4383 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2012.011428][ T24] audit: type=1400 audit(2011.220:183): avc: denied { write } for pid=4400 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2020.526666][ T24] audit: type=1400 audit(2019.730:184): avc: denied { write } for pid=4411 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2038.005375][ T24] audit: type=1400 audit(2037.100:185): avc: denied { write } for pid=4420 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2047.995951][ T24] audit: type=1400 audit(2047.150:186): avc: denied { write } for pid=4435 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2080.787106][ T24] audit: type=1400 audit(2079.960:187): avc: denied { write } for pid=4459 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2089.809160][ T24] audit: type=1400 audit(2089.030:188): avc: denied { write } for pid=4468 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2107.076923][ T24] audit: type=1400 audit(2106.290:189): avc: denied { write } for pid=4482 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2117.427195][ T24] audit: type=1400 audit(2116.550:190): avc: denied { write } for pid=4487 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2129.208196][ T4496] KVM: debugfs: duplicate directory 4496-4 [ 2137.944348][ T24] audit: type=1400 audit(2137.150:191): avc: denied { write } for pid=4504 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2147.325131][ T24] audit: type=1400 audit(2146.520:192): avc: denied { write } for pid=4515 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2166.185199][ T24] audit: type=1400 audit(2165.400:193): avc: denied { write } for pid=4524 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2176.185898][ T24] audit: type=1400 audit(2175.400:194): avc: denied { write } for pid=4527 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2213.407272][ T4541] kvm [4541]: Failed to find VMA for hva 0x20d8d000 [ 2221.380973][ T50] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2223.709392][ T50] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2225.431665][ T50] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2227.182199][ T50] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2229.551429][ T4535] rxe_eth0 speed is unknown, defaulting to 1000 [ 2251.008118][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2251.301199][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2251.528864][ T50] bond0 (unregistering): Released all slaves [ 2275.972661][ T50] hsr_slave_0: left promiscuous mode [ 2276.100269][ T50] hsr_slave_1: left promiscuous mode [ 2276.187656][ T24] audit: type=1400 audit(2275.380:195): avc: denied { write } for pid=4570 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2276.816170][ T50] veth1_macvtap: left promiscuous mode [ 2276.816937][ T50] veth0_macvtap: left promiscuous mode [ 2276.818520][ T50] veth1_vlan: left promiscuous mode [ 2276.819737][ T50] veth0_vlan: left promiscuous mode [ 2286.464473][ T24] audit: type=1400 audit(2285.640:196): avc: denied { write } for pid=4580 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2311.952184][ T3218] 8021q: adding VLAN 0 to HW filter on device eth9 [ 2334.332511][ T24] audit: type=1400 audit(2333.540:197): avc: denied { write } for pid=4603 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2343.755051][ T24] audit: type=1400 audit(2342.970:198): avc: denied { write } for pid=4614 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2345.692957][ T4535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2346.086757][ T4535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2350.192312][ T3218] 8021q: adding VLAN 0 to HW filter on device eth10 [ 2370.109435][ T24] audit: type=1400 audit(2369.320:199): avc: denied { write } for pid=4630 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2377.164287][ T24] audit: type=1400 audit(2376.360:200): avc: denied { write } for pid=4639 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2380.801988][ T4535] hsr_slave_0: entered promiscuous mode [ 2380.949532][ T4535] hsr_slave_1: entered promiscuous mode [ 2382.519247][ T3218] 8021q: adding VLAN 0 to HW filter on device eth11 [ 2401.818797][ T4535] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2402.281577][ T4535] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2402.428539][ T4535] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2402.805717][ T4535] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2402.862150][ T4535] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2403.271880][ T4535] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2403.500472][ T4535] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2403.841429][ T4535] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2407.542137][ T24] audit: type=1400 audit(2406.760:201): avc: denied { write } for pid=4655 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2418.517988][ T24] audit: type=1400 audit(2417.640:202): avc: denied { write } for pid=4670 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2425.324824][ T3218] 8021q: adding VLAN 0 to HW filter on device eth12 [ 2436.032206][ T4535] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2447.481004][ T24] audit: type=1400 audit(2446.680:203): avc: denied { write } for pid=4686 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2457.106924][ T24] audit: type=1400 audit(2456.320:204): avc: denied { write } for pid=4697 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2494.786674][ T24] audit: type=1400 audit(2493.980:205): avc: denied { write } for pid=4722 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2503.227160][ T24] audit: type=1400 audit(2502.410:206): avc: denied { write } for pid=4734 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2523.292672][ T24] audit: type=1400 audit(2522.510:207): avc: denied { write } for pid=4746 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2534.316211][ T24] audit: type=1400 audit(2533.490:208): avc: denied { write } for pid=4757 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2553.396218][ T24] audit: type=1400 audit(2552.530:209): avc: denied { write } for pid=4766 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2561.590112][ T24] audit: type=1400 audit(2560.800:210): avc: denied { write } for pid=4776 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2574.165892][ T4535] veth0_vlan: entered promiscuous mode [ 2575.636148][ T4535] veth1_vlan: entered promiscuous mode [ 2576.169251][ T24] audit: type=1400 audit(2575.390:211): avc: denied { write } for pid=4785 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2580.009150][ T4535] veth0_macvtap: entered promiscuous mode [ 2581.069164][ T4535] veth1_macvtap: entered promiscuous mode [ 2585.095421][ T4071] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2585.195772][ T4190] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2585.359371][ T42] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2585.360174][ T42] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2589.537359][ T24] audit: type=1400 audit(2588.740:212): avc: denied { write } for pid=4793 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2699.250454][ T24] audit: type=1400 audit(2698.360:213): avc: denied { ioctl } for pid=4855 comm="syz.4.209" path="net:[4026532661]" dev="nsfs" ino=4026532661 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2957.460521][ T24] audit: type=1400 audit(2956.670:214): avc: denied { write } for pid=5003 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2969.291131][ T24] audit: type=1400 audit(2968.410:215): avc: denied { write } for pid=5015 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3043.864757][ T24] audit: type=1400 audit(3043.070:216): avc: denied { execute } for pid=5052 comm="syz.3.262" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=21367 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 3454.778974][ T24] audit: type=1400 audit(3454.000:217): avc: denied { write } for pid=5276 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3464.222558][ T24] audit: type=1400 audit(3463.400:218): avc: denied { write } for pid=5282 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3578.388009][ T24] audit: type=1400 audit(3577.590:219): avc: denied { execute } for pid=5336 comm="syz.4.338" path=2F37312FFF67521CD66F8F1F447D3570707CD24B7EEBB207 dev="tmpfs" ino=374 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 3639.889559][ T5375] kvm [5375]: Failed to find VMA for hva 0x20dc9000 [ 3672.928787][ T24] audit: type=1400 audit(3672.140:220): avc: denied { map } for pid=5394 comm="syz.4.351" path="pipe:[15431]" dev="pipefs" ino=15431 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 3918.814962][ T24] audit: type=1400 audit(3918.010:221): avc: denied { write } for pid=5520 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3925.835052][ T24] audit: type=1400 audit(3925.050:222): avc: denied { write } for pid=5523 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3985.535714][ T5527] rxe_eth0 speed is unknown, defaulting to 1000 [ 4000.714982][ T5530] rxe_eth0 speed is unknown, defaulting to 1000 [ 4009.208093][ T4191] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4010.639709][ T4191] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4011.738991][ T4191] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4013.147843][ T4191] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4033.538119][ T4191] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 4033.831590][ T4191] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 4034.070180][ T4191] bond0 (unregistering): Released all slaves [ 4053.117523][ T4191] hsr_slave_0: left promiscuous mode [ 4053.207424][ T4191] hsr_slave_1: left promiscuous mode [ 4053.564621][ T4191] veth1_macvtap: left promiscuous mode [ 4053.565404][ T4191] veth0_macvtap: left promiscuous mode [ 4053.567009][ T4191] veth1_vlan: left promiscuous mode [ 4053.568203][ T4191] veth0_vlan: left promiscuous mode [ 4057.084431][ T24] audit: type=1400 audit(4056.210:223): avc: denied { write } for pid=5561 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4062.126249][ T24] audit: type=1400 audit(4061.320:224): avc: denied { write } for pid=5564 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4074.178965][ T3218] 8021q: adding VLAN 0 to HW filter on device eth13 [ 4079.612117][ T5545] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4081.911132][ T5545] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4083.788740][ T5545] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4085.666216][ T5545] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4100.238316][ T24] audit: type=1400 audit(4099.440:225): avc: denied { write } for pid=5584 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4106.910190][ T24] audit: type=1400 audit(4106.070:226): avc: denied { write } for pid=5590 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4109.171107][ T5545] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 4109.358748][ T5545] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 4109.506932][ T5545] bond0 (unregistering): Released all slaves [ 4111.144443][ T5527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4113.132907][ T3218] 8021q: adding VLAN 0 to HW filter on device eth14 [ 4113.520355][ T5527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4125.897160][ T5545] hsr_slave_0: left promiscuous mode [ 4125.976250][ T5545] hsr_slave_1: left promiscuous mode [ 4126.366967][ T5545] veth1_macvtap: left promiscuous mode [ 4126.367746][ T5545] veth0_macvtap: left promiscuous mode [ 4126.369341][ T5545] veth1_vlan: left promiscuous mode [ 4126.370562][ T5545] veth0_vlan: left promiscuous mode [ 4132.750842][ T24] audit: type=1400 audit(4131.970:227): avc: denied { write } for pid=5603 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4137.877725][ T24] audit: type=1400 audit(4137.090:228): avc: denied { write } for pid=5606 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4152.529929][ T3218] 8021q: adding VLAN 0 to HW filter on device eth15 [ 4154.210823][ T5530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4154.735672][ T5530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4170.391239][ T24] audit: type=1400 audit(4169.600:229): avc: denied { write } for pid=5620 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4172.118729][ T5527] hsr_slave_0: entered promiscuous mode [ 4172.235257][ T5527] hsr_slave_1: entered promiscuous mode [ 4176.806193][ T24] audit: type=1400 audit(4175.960:230): avc: denied { write } for pid=5628 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4181.138088][ T3218] 8021q: adding VLAN 0 to HW filter on device eth16 [ 4181.460932][ T5530] hsr_slave_0: entered promiscuous mode [ 4181.502260][ T5530] hsr_slave_1: entered promiscuous mode [ 4181.571113][ T5530] debugfs: 'hsr0' already exists in 'hsr' [ 4181.571493][ T5530] Cannot create hsr debugfs directory [ 4190.682589][ T5527] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 4191.051801][ T5527] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 4191.787661][ T5527] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 4192.007101][ T5527] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 4192.619719][ T5527] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 4192.865889][ T5527] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 4193.744968][ T5527] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 4193.961881][ T5527] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 4195.167076][ T24] audit: type=1400 audit(4194.380:231): avc: denied { write } for pid=5635 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4201.881921][ T5530] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 4202.388245][ T5530] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 4202.530601][ T5530] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 4203.000242][ T5530] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 4203.195979][ T5530] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 4203.606271][ T5530] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 4203.766093][ T5530] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 4204.158667][ T5530] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 4204.526011][ T24] audit: type=1400 audit(4203.740:232): avc: denied { write } for pid=5647 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4211.771538][ T3218] 8021q: adding VLAN 0 to HW filter on device eth17 [ 4229.875645][ T5527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4233.778426][ T24] audit: type=1400 audit(4233.000:233): avc: denied { write } for pid=5668 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4237.759413][ T5530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4243.196571][ T24] audit: type=1400 audit(4242.370:234): avc: denied { write } for pid=5676 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4249.086171][ T3218] 8021q: adding VLAN 0 to HW filter on device eth18 [ 4258.340918][ T24] audit: type=1400 audit(4257.560:235): avc: denied { write } for pid=5685 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4270.995188][ T24] audit: type=1400 audit(4270.210:236): avc: denied { write } for pid=5692 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4293.205416][ T24] audit: type=1400 audit(4292.400:237): avc: denied { write } for pid=5703 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4302.145739][ T24] audit: type=1400 audit(4301.350:238): avc: denied { write } for pid=5714 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4326.795989][ T24] audit: type=1400 audit(4325.980:239): avc: denied { write } for pid=5729 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4337.164537][ T24] audit: type=1400 audit(4336.350:240): avc: denied { write } for pid=5740 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4344.231579][ T3218] 8021q: adding VLAN 0 to HW filter on device eth19 [ 4366.937607][ T24] audit: type=1400 audit(4366.160:241): avc: denied { write } for pid=5756 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4372.900921][ T5527] veth0_vlan: entered promiscuous mode [ 4374.232509][ T5527] veth1_vlan: entered promiscuous mode [ 4376.537269][ T24] audit: type=1400 audit(4375.700:242): avc: denied { write } for pid=5766 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4377.774118][ T5527] veth0_macvtap: entered promiscuous mode [ 4378.477231][ T5527] veth1_macvtap: entered promiscuous mode [ 4382.531716][ T5530] veth0_vlan: entered promiscuous mode [ 4383.450464][ T3218] 8021q: adding VLAN 0 to HW filter on device eth20 [ 4385.159554][ T4191] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 4385.160380][ T4191] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 4385.161029][ T4191] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 4385.161643][ T4191] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 4385.229166][ T5530] veth1_vlan: entered promiscuous mode [ 4394.017466][ T5530] veth0_macvtap: entered promiscuous mode [ 4395.426571][ T5530] veth1_macvtap: entered promiscuous mode [ 4399.996980][ T5577] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 4400.019732][ T5532] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 4400.024457][ T4191] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 4400.025082][ T4191] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 4447.016449][ T24] audit: type=1400 audit(4446.200:243): avc: denied { write } for pid=5793 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4460.337250][ T24] audit: type=1400 audit(4459.520:244): avc: denied { write } for pid=5802 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4496.638618][ T24] audit: type=1400 audit(4495.840:245): avc: denied { write } for pid=5820 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4509.927261][ T24] audit: type=1400 audit(4509.130:246): avc: denied { write } for pid=5828 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4544.275998][ T24] audit: type=1400 audit(4543.490:247): avc: denied { write } for pid=5842 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4556.537735][ T24] audit: type=1400 audit(4555.750:248): avc: denied { write } for pid=5852 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4594.234850][ T24] audit: type=1400 audit(4593.450:249): avc: denied { write } for pid=5866 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4607.615860][ T24] audit: type=1400 audit(4606.790:250): avc: denied { write } for pid=5878 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4634.738880][ T24] audit: type=1400 audit(4633.960:251): avc: denied { write } for pid=5892 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4648.406842][ T24] audit: type=1400 audit(4647.610:252): avc: denied { write } for pid=5903 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4693.486104][ T24] audit: type=1400 audit(4692.700:253): avc: denied { write } for pid=5927 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4707.495877][ T24] audit: type=1400 audit(4706.690:254): avc: denied { write } for pid=5936 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4737.125435][ T24] audit: type=1400 audit(4736.180:255): avc: denied { write } for pid=5949 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4751.251307][ T24] audit: type=1400 audit(4750.410:256): avc: denied { write } for pid=5962 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4781.177542][ T24] audit: type=1400 audit(4780.370:257): avc: denied { write } for pid=5974 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4792.021298][ T24] audit: type=1400 audit(4791.240:258): avc: denied { write } for pid=5981 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5081.848230][ T24] audit: type=1400 audit(5081.050:259): avc: denied { write } for pid=6113 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5093.434413][ T24] audit: type=1400 audit(5092.510:260): avc: denied { write } for pid=6122 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5296.015522][ T24] audit: type=1400 audit(5295.170:261): avc: denied { write } for pid=6224 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5309.865604][ T24] audit: type=1400 audit(5309.070:262): avc: denied { write } for pid=6234 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5775.558885][ T24] audit: type=1400 audit(5774.760:263): avc: denied { write } for pid=6446 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5790.165106][ T24] audit: type=1400 audit(5789.370:264): avc: denied { write } for pid=6457 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5965.922647][ T6527] KVM: debugfs: duplicate directory 6527-6 [ 6025.776754][ T24] audit: type=1400 audit(6024.980:265): avc: denied { write } for pid=6540 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6038.566419][ T24] audit: type=1400 audit(6037.770:266): avc: denied { write } for pid=6551 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6056.711923][ T6541] rxe_eth0 speed is unknown, defaulting to 1000 [ 6076.036531][ T6544] rxe_eth0 speed is unknown, defaulting to 1000 [ 6143.930019][ T6541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 6145.788533][ T6541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 6165.908025][ T6544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 6167.271563][ T6544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 6186.242266][ T6541] hsr_slave_0: entered promiscuous mode [ 6186.382823][ T6541] hsr_slave_1: entered promiscuous mode [ 6186.497224][ T6541] debugfs: 'hsr0' already exists in 'hsr' [ 6186.497646][ T6541] Cannot create hsr debugfs directory [ 6213.202481][ T6544] hsr_slave_0: entered promiscuous mode [ 6213.468886][ T6544] hsr_slave_1: entered promiscuous mode [ 6213.600521][ T6544] debugfs: 'hsr0' already exists in 'hsr' [ 6213.600921][ T6544] Cannot create hsr debugfs directory [ 6219.622680][ T6541] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 6220.237108][ T6541] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 6221.698012][ T6541] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 6222.060968][ T6541] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 6222.857096][ T6541] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 6223.186916][ T6541] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 6224.701924][ T6541] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 6225.141175][ T6541] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 6241.872264][ T6544] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 6242.597834][ T6544] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 6242.748191][ T6544] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 6243.109528][ T6544] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 6243.212951][ T6544] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 6243.860865][ T6544] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 6244.128116][ T6544] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 6244.750433][ T6544] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 6276.032149][ T6541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 6290.886231][ T6544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 6454.178261][ T24] audit: type=1400 audit(6453.400:267): avc: denied { write } for pid=6696 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6469.940071][ T24] audit: type=1400 audit(6469.110:268): avc: denied { write } for pid=6708 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6475.027084][ T6541] veth0_vlan: entered promiscuous mode [ 6476.757369][ T6541] veth1_vlan: entered promiscuous mode [ 6482.012335][ T6541] veth0_macvtap: entered promiscuous mode [ 6483.128915][ T6541] veth1_macvtap: entered promiscuous mode [ 6488.995365][ T6702] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 6489.028887][ T6525] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 6489.036838][ T6256] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 6489.037571][ T6256] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 6493.072741][ T6544] veth0_vlan: entered promiscuous mode [ 6497.306681][ T6544] veth1_vlan: entered promiscuous mode [ 6503.992554][ T6544] veth0_macvtap: entered promiscuous mode [ 6505.136203][ T6544] veth1_macvtap: entered promiscuous mode [ 6511.030228][ T4705] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 6511.112595][ T5500] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 6511.245387][ T5500] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 6511.246159][ T5500] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 6511.341696][ T26] INFO: task syz.6.556:6530 blocked for more than 430 seconds. [ 6511.342554][ T26] Not tainted syzkaller #0 [ 6511.342788][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 6511.344263][ T26] task:syz.6.556 state:D stack:0 pid:6530 tgid:6530 ppid:5530 task_flags:0x400040 flags:0x00000011 [ 6511.347068][ T26] Call trace: [ 6511.347406][ T26] __switch_to+0x5e4/0xb74 (T) [ 6511.348725][ T26] __schedule+0x1e0c/0x38a4 [ 6511.349137][ T26] schedule+0x1b4/0x274 [ 6511.349471][ T26] schedule_timeout+0x68/0x1e4 [ 6511.349801][ T26] wait_for_completion+0x1bc/0x418 [ 6511.350133][ T26] __synchronize_srcu+0x1cc/0x20c [ 6511.350425][ T26] synchronize_srcu+0x668/0x8dc [ 6511.350691][ T26] mmu_notifier_unregister+0x33c/0x444 [ 6511.350986][ T26] kvm_put_kvm+0x69c/0xbbc [ 6511.351333][ T26] kvm_vm_release+0x58/0x78 [ 6511.351615][ T26] __fput+0x4b0/0x97c [ 6511.351963][ T26] ____fput+0x20/0x30 [ 6511.352295][ T26] task_work_run+0x1b8/0x254 [ 6511.352596][ T26] exit_to_user_mode_loop+0x110/0x188 [ 6511.352958][ T26] el0_svc+0x18c/0x240 [ 6511.605607][ T26] el0t_64_sync_handler+0x68/0xdc [ 6511.606161][ T26] el0t_64_sync+0x198/0x19c [ 6511.607695][ T26] [ 6511.607695][ T26] Showing all locks held in the system: [ 6511.608070][ T26] locks held by khungtaskd/26: 1, last CPU#0: [ 6511.608326][ T26] #0: ffff800088a7e858 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x4c/0x188 [ 6511.609879][ T26] locks held by kworker/u4:3/42: 3, last CPU#0: [ 6511.610112][ T26] #0: 98f000000dc34140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b8 [ 6511.610948][ T26] #1: ffff80008dbe7ce8 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b8 [ 6511.611739][ T26] #2: 3ff000001fa6a258 (&devlink->lock_key){+.+.}-{4:4}, at: devl_trylock+0x24/0x34 [ 6511.612687][ T26] locks held by getty/3248: 2, on CPU#0: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 6511.612895][ T26] #0: e3f00000134760a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x40/0x50 [ 6511.766695][ T26] #1: 09ff80008d7db2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x314/0x11f8 [ 6511.767583][ T26] locks held by sshd-session/3372: 4, last CPU#0: [ 6511.767783][ T26] #0: b6f0000017dbc0e0 (sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_sendmsg+0x30/0x64 [ 6511.768623][ T26] #1: ffff800088a7e858 (rcu_read_lock){....}-{1:3}, at: __ip_queue_xmit+0x8c/0x1940 [ 6511.769431][ T26] #2: ffff800088a7e858 (rcu_read_lock){....}-{1:3}, at: ip_output+0x80/0x480 [ 6511.770219][ T26] #3: ffff800088a7e858 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0xa9c/0x178c [ 6511.771026][ T26] locks held by syz-executor/3373: 2, last CPU#0: [ 6511.771220][ T26] #0: 34f0000017da76f8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0xf4/0xb64 [ 6511.771977][ T26] #1: ffff800088a7e858 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x50/0x22c [ 6511.772758][ T26] locks held by kworker/u4:6/4109: 2, on CPU#0: [ 6511.772976][ T26] #0: 98f000000dc34140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b8 [ 6511.916057][ T26] #1: ffff80008df97ce8 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b8 [ 6511.916896][ T26] locks held by kworker/u4:7/4705: 3, last CPU#0: [ 6511.917116][ T26] #0: 98f000000dc34140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b8 [ 6511.917945][ T26] #1: ffff80008f9c7ce8 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b8 [ 6511.918714][ T26] #2: a4f00000274f9a58 (&devlink->lock_key#8){+.+.}-{4:4}, at: devl_trylock+0x24/0x34 [ 6511.919790][ T26] locks held by kworker/0:2/5416: 3, last CPU#0: [ 6511.920020][ T26] #0: aff000000dc17d40 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b8 [ 6511.920764][ T26] #1: ffff80008f9f7ce8 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b8 [ 6511.921574][ T26] #2: 30f0000029639a50 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x188/0x3f0 [ 6511.922422][ T26] locks held by kworker/u4:1/5500: 3, last CPU#0: [ 6511.922606][ T26] #0: 98f000000dc34140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b8 [ 6512.167185][ T26] #1: ffff8000a0057ce8 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b8 [ 6512.168030][ T26] #2: a4f00000274f9a58 (&devlink->lock_key#8){+.+.}-{4:4}, at: devl_trylock+0x24/0x34 [ 6512.168957][ T26] locks held by kworker/u4:8/5532: 3, last CPU#0: [ 6512.169173][ T26] #0: 98f000000dc34140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b8 [ 6512.170006][ T26] #1: ffff8000a0537ce8 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b8 [ 6512.170771][ T26] #2: 4ef000002048ca58 (&devlink->lock_key#2){+.+.}-{4:4}, at: devl_trylock+0x24/0x34 [ 6512.171672][ T26] locks held by kworker/u4:11/5577: 3, last CPU#0: [ 6512.171881][ T26] #0: 98f000000dc34140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b8 [ 6512.172631][ T26] #1: ffff80008f3d7ce8 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b8 [ 6512.324660][ T26] #2: 5ff0000020a2a258 (&devlink->lock_key#4){+.+.}-{4:4}, at: devl_trylock+0x24/0x34 [ 6512.325733][ T26] locks held by kworker/u4:4/6525: 3, last CPU#0: [ 6512.325966][ T26] #0: 98f000000dc34140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b8 [ 6512.326717][ T26] #1: ffff8000a16c7ce8 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b8 [ 6512.327497][ T26] #2: 9cf0000018f13a58 (&devlink->lock_key#6){+.+.}-{4:4}, at: devl_trylock+0x24/0x34 [ 6512.328381][ T26] locks held by syz.5.555/6526: 2, last CPU#0: [ 6512.328564][ T26] #0: ffff800088acc330 (srcu){.+.+}-{0:0}, at: __mmu_notifier_release+0x4e8/0x87c [ 6512.329461][ T26] #1: b4f0000020a89518 (&kvm->srcu){.+.+}-{0:0}, at: kvm_mmu_notifier_release+0x50/0xc4 [ 6512.330330][ T26] locks held by syz-executor/6541: 1, on CPU#0: [ 6512.330527][ T26] #0: ffff800088b1f928 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_mount_permission+0x254/0x688 [ 6512.331329][ T26] locks held by syz-executor/6544: 1, on CPU#0: [ 6512.331514][ T26] #0: ffff800088d70bf8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x9e4/0x1b0c [ 6512.332358][ T26] locks held by kworker/u4:14/6702: 3, last CPU#0: [ 6512.332545][ T26] #0: 98f000000dc34140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: __schedule+0x364/0x38a4 [ 6512.536399][ T26] #1: fff0000074c0c248 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x6c/0x6e8 [ 6512.537342][ T26] #2: fff0000074c0dcd8 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x5cc/0xe90 [ 6512.538263][ T26] locks held by modprobe/6716: 2, last CPU#0: [ 6512.538465][ T26] #0: 6df0000013a1e1f8 (&mm->mmap_lock){++++}-{4:4}, at: do_mprotect_pkey+0x204/0xb70 [ 6512.539264][ T26] #1: ffff800088a7e858 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x50/0x22c [ 6512.645085][ T26] [ 6512.645333][ T26] ============================================= [ 6512.645333][ T26] [ 6512.646191][ T26] Kernel panic - not syncing: hung_task: blocked tasks [ 6512.651400][ T26] CPU: 0 UID: 0 PID: 26 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 6512.653267][ T26] Hardware name: linux,dummy-virt (DT) [ 6512.654401][ T26] Call trace: [ 6512.655285][ T26] show_stack+0x2c/0x3c (C) [ 6512.656474][ T26] __dump_stack+0x30/0x40 [ 6512.657523][ T26] dump_stack_lvl+0x30/0x12c [ 6512.658625][ T26] dump_stack+0x1c/0x28 [ 6512.659667][ T26] vpanic+0x4cc/0x844 [ 6512.660622][ T26] vpanic+0x0/0x844 [ 6512.661432][ T26] hung_task_panic+0x0/0x2c [ 6512.662222][ T26] kthread+0x4cc/0x514 [ 6512.663084][ T26] ret_from_fork+0x10/0x20 [ 6512.665062][ T26] Kernel Offset: disabled [ 6512.665986][ T26] CPU features: 0x0,00000000,00d1802f,df188f42,0afff61f [ 6512.667319][ T26] Memory Limit: none [ 6512.669744][ T26] Rebooting in 86400 seconds..