last executing test programs: 41m15.702756952s ago: executing program 1 (id=300): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x4000) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_ONE_REG(r5, 0x4010aeac, &(0x7f00000002c0)=@arm64_sys={0x603000000013df11, &(0x7f0000000280)=0x80000001}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r7 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_ARM_VCPU_INIT(r9, 0x4020aeae, &(0x7f0000000100)={0x5, 0x18}) r10 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x1) r13 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r14 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r13, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r14, 0x3, 0x11, r12, 0x0) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r12, 0x0) ioctl$KVM_GET_ONE_REG(r9, 0x4010aeab, &(0x7f0000000140)=@arm64_fw={0x6030000000540002, 0x0}) ioctl$KVM_GET_REGS(r9, 0x8360ae81, &(0x7f00000001c0)) r15 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_GET_STATS_FD_cpu(r15, 0xaece) mmap$KVM_VCPU(&(0x7f0000ffd000/0x1000)=nil, r6, 0x3000000, 0x4010, r9, 0x0) r16 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r17 = syz_kvm_add_vcpu$arm64(r16, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[@msr={0x14, 0x20, {0x603000000013df65}}], 0x20}, &(0x7f0000000280)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r17, 0x4018aee1, &(0x7f00000000c0)=@attr_pmu_init) 41m9.438583393s ago: executing program 1 (id=302): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000100)={0x1002001, 0x21}) r2 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xf) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r6 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r5, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000300)="dd033b8986814d03b14c94a6ab8031d1dfd92f00fdff00010000005a9610fbff6752568d312b0104002627e7020000000000000200", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x3000001, 0x10, r5, 0x0) r7 = eventfd2(0x0, 0x0) close(r7) r8 = eventfd2(0x0, 0x0) close(r8) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x109272, 0x1f01) write$eventfd(r8, &(0x7f0000000180)=0x6, 0x8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x5a241437f412ace9, 0x0) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x0, 0x2000008, 0x13, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x0, 0x400000f, 0x12, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) write$eventfd(r7, &(0x7f0000000100)=0xfffffffffffffffe, 0xfdef) r9 = openat$kvm(0x0, &(0x7f0000000040), 0x20200, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x4) syz_kvm_vgic_v3_setup(r10, 0x3, 0x40) 41m0.850613157s ago: executing program 1 (id=304): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2c8203, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x2a) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_GUEST_MEMFD(r5, 0xc040aed4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r5, 0x40a0ae49, &(0x7f0000000180)={0x1fe, 0x4, 0xeeee0000, 0x2000, &(0x7f0000c08000/0x2000)=nil, 0x1000, r6}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x82880, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) r13 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) mmap$KVM_VCPU(&(0x7f0000c0b000/0x1000)=nil, r13, 0x3, 0x40b2811, r12, 0x6000) r14 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x440800, 0x0) r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0) r16 = ioctl$KVM_CREATE_GUEST_MEMFD(r15, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3}) r17 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, r17, 0x3000001, 0x11, r16, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000240)={0x10000, 0xe000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000100)={0x0, 0x1000, 0x1}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r5, 0x4010ae68, &(0x7f00000000c0)={0x50000, 0xb000}) r18 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0) ioctl$KVM_CREATE_VM(r18, 0xae01, 0x2e) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000340)={0x5000, 0x25000}) 40m58.179161362s ago: executing program 0 (id=305): syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async) r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0x40049409, 0x13) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x7e) mmap$KVM_VCPU(&(0x7f0000dd4000/0x3000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000dd4000/0x3000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000000080)={0xe000, 0x7000, 0x3, 0x0, 0x3}) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000000)={0x76dc8650, 0x4}) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0x40086602, 0x20000000) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r7, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r7, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r7, 0x0) munmap(&(0x7f0000db7000/0x2000)=nil, 0x2000) (async) munmap(&(0x7f0000db7000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async) r9 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000b80)={0x0, 0x0}, 0x0, 0x0) (async) syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000b80)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f00000000c0)={0x1, 0x4, 0x0, 0xffffffffffffffff, 0x1e}) (async) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f00000000c0)={0x1, 0x4, 0x0, 0xffffffffffffffff, 0x1e}) syz_kvm_add_vcpu$arm64(r0, &(0x7f00000005c0)={0x0, &(0x7f0000000640)=[@msr={0x14, 0x20, {0x603000000013e719, 0x5}}, @msr={0x14, 0x20, {0x603000000013e668, 0x1}}, @mrs={0xbe, 0x18, {0x603000000013df79}}, @eret={0xe6, 0x18, 0x9957}, @mrs={0xbe, 0x18, {0x603000000013e64b}}, @hvc={0x32, 0x40, {0x3000000, [0x9, 0x71e, 0x5a8c, 0x3, 0x125]}}, @its_setup={0x82, 0x28, {0x2, 0x3, 0x2bb}}, @its_send_cmd={0xaa, 0x28, {0x5, 0x1, 0x3, 0x6, 0x8, 0x3, 0x4}}, @msr={0x14, 0x20, {0x603000000013e643, 0xc73b}}, @its_setup={0x82, 0x28, {0x2, 0x3, 0x237}}, @its_setup={0x82, 0x28, {0x2, 0x3, 0x2d1}}, @eret={0xe6, 0x18, 0x9}, @hvc={0x32, 0x40, {0x84000014, [0x5, 0x9, 0xfffffffffffffffc, 0x2fc0000000000000, 0xd]}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x1, 0x4, 0x5, 0xfffffff8, 0x3, 0x3}}, @its_send_cmd={0xaa, 0x28, {0x4, 0xfc, 0x4, 0xa, 0xfffffff7, 0x200, 0x2}}, @eret={0xe6, 0x18, 0x5}, @msr={0x14, 0x20, {0x60300000001396a0, 0x4578}}, @mrs={0xbe, 0x18, {0x603000000013e091}}, @smc={0x1e, 0x40, {0xc4000010, [0x4, 0x19, 0x4, 0x1, 0x9]}}, @mrs={0xbe, 0x18, {0x603000000013df71}}, @memwrite={0x6e, 0x30, @generic={0x100000, 0x7c2, 0x5, 0xa}}, @uexit={0x0, 0x18, 0x9}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x88, 0x8001, 0x1}}, @eret={0xe6, 0x18, 0x4}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x8, 0x9, 0xa}}, @hvc={0x32, 0x40, {0x6000000, [0x1, 0x1000, 0x8, 0x2, 0x81]}}, @smc={0x1e, 0x40, {0xc1000052, [0x7, 0xde, 0xe7, 0x48f, 0xd]}}], 0x418}, &(0x7f0000000600)=[@featur2={0x1, 0xc0}], 0x1) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000080)={0x7001, 0x37d03030d7a92616}) openat$kvm(0x0, 0x0, 0x0, 0x0) (async) openat$kvm(0x0, 0x0, 0x0, 0x0) 40m48.934335087s ago: executing program 0 (id=306): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x3}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x9b, 0xf, 0x0, 0x5, 0x8, 0x82, 0x46, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x100001, 0xffc0000, 0x0, 0x3, 0xa, 0x8, '\x00', 0x1, 0x93}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r5, 0x800454dd, 0x800000000000000d) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4000ae84, &(0x7f0000000200)={{0x0, 0x1000, 0x1, 0x3a, 0x0, 0x9, 0xba, 0xc, 0x2, 0x6, 0x0, 0x9}, {0xeeef0000, 0x0, 0xd, 0x1, 0xfc, 0x1, 0x5, 0xc, 0x7, 0x4, 0x6, 0x6}, {0x0, 0xeeee8000, 0x8, 0x9, 0x6, 0x7, 0x3, 0xdb, 0x8, 0x1, 0x1}, {0x2, 0xe000, 0x0, 0x55, 0x7f, 0x80, 0x4, 0x4, 0xa, 0x1, 0x8, 0x9}, {0x6000, 0x0, 0x0, 0x38, 0x0, 0x6, 0x8, 0x1, 0x81, 0x93, 0x7f, 0x8}, {0xdddd1000, 0x41000, 0xd, 0x5, 0x9, 0x5, 0x2, 0x8, 0x81, 0xf, 0x5, 0xfe}, {0xffff1000, 0xb000, 0x14, 0x1, 0x1, 0x7b, 0xfd, 0x9, 0x6a, 0xe, 0x8, 0xd1}, {0xeeef0000, 0x7000, 0x4, 0x3, 0x0, 0x0, 0x7, 0xfa, 0x10, 0x2, 0x2, 0x1}, {0x40000, 0x2}, {0x8000000, 0xc71}, 0x20000002, 0x0, 0x1000, 0x8, 0x8, 0x8000, 0x7000, [0x3, 0x8000000000000000, 0x89, 0x1]}) write$eventfd(r2, &(0x7f00000001c0)=0x3, 0xfdef) 40m47.801485265s ago: executing program 1 (id=307): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x50002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000080)={0x5, 0x1}) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f00000001c0)=@arm64_ccsidr={0x602000000011000d, &(0x7f0000000200)=0x1}) r3 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@mrs={0xbe, 0x18, {0x603000000013c807}}], 0x18}, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = eventfd2(0x5, 0x800) munmap(&(0x7f0000481000/0x1000)=nil, 0x1000) munmap(&(0x7f0000136000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munmap(&(0x7f00007fd000/0x800000)=nil, 0x800000) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000280)={0xd5a1, 0xeeee0000, 0x2, r9, 0xa}) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f00000000c0)={0x8000000008000800, 0x0, 0x8, r9}) 40m42.688932248s ago: executing program 0 (id=308): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000000)={0x80000000, 0xffff}) r2 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x1, r2}) r3 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r5, 0x8927, 0x10000000000000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x208000, 0x0) 40m39.706680491s ago: executing program 1 (id=309): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r3, 0x8030aeb4, &(0x7f0000000040)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x9e, 0x7fffffff, 0x2}}) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f00000000c0)={0x2, 0x3, 0x100000, 0x2000, &(0x7f000000f000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r7, 0x0) syz_kvm_setup_cpu$arm64(r3, r7, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000006c0)=[{0x0, &(0x7f00000002c0)=[@its_setup={0x82, 0x28, {0x3, 0x2, 0x34}}, @its_setup={0x82, 0x28, {0x0, 0x0, 0x16c}}, @eret={0xe6, 0x18, 0x8}, @its_send_cmd={0xaa, 0x28, {0xf, 0x1, 0x0, 0x4, 0x7, 0x0, 0x2}}, @hvc={0x32, 0x40, {0x8400000c, [0x3571, 0x10, 0x0, 0xb, 0x6]}}, @smc={0x1e, 0x40, {0xc5000021, [0x294c, 0xca9, 0x10000, 0xffffffffffffffff, 0x7f]}}, @mrs={0xbe, 0x18, {0x603000000013e289}}, @mrs={0xbe, 0x18, {0x603000000013deb9}}, @smc={0x1e, 0x40, {0x80008000, [0x7fff, 0x10001, 0x9, 0x419, 0xfffffffffffffe01]}}, @eret={0xe6, 0x18, 0x5ad}, @mrs={0xbe, 0x18, {0x603000000013f100}}, @irq_setup={0x46, 0x18, {0x4, 0x19}}, @hvc={0x32, 0x40, {0x80000000, [0x9, 0x4695, 0x8, 0xf, 0x7]}}, @hvc={0x32, 0x40, {0x84000005, [0xb8, 0x4, 0xffffffffffffffff, 0x2, 0x1]}}, @hvc={0x32, 0x40, {0x40000000, [0x7ff, 0x4, 0x100, 0xf, 0x3]}}, @eret={0xe6, 0x18, 0xff}, @eret={0xe6, 0x18, 0x4}, @svc={0x122, 0x40, {0x0, [0x9, 0x10001, 0x6, 0x1, 0x10]}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x1200}}, @irq_setup={0x46, 0x18, {0x0, 0x1c6}}, @code={0xa, 0x84, {"0000402800800048007008d5a07a85d200c0b0f2610080d2c20180d2430180d2040080d2020000d4a02d8fd20060b0f2010080d2e20080d2c30180d2a40180d2020000d4008b83d20060b0f2810180d2c20080d2430080d2a40180d2020000d4007008d5007008d50000805a0068e038"}}], 0x3c4}], 0x1, 0x0, &(0x7f0000000700)=[@featur1={0x1, 0x11}], 0x1) r8 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r8, 0x4008ae6a, &(0x7f0000000080)={0x1, 0x0, [{0x8, 0x1, 0x1, 0x0, @adapter={0xffff, 0x500, 0x5, 0x2, 0x7}}]}) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r9, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r9, 0x4018aee1, &(0x7f0000000000)=@attr_set_pmu={0x0, 0x0, 0x3, 0xfffffffffffffffe}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x10002, 0x0, &(0x7f0000ffd000/0x2000)=nil}) 40m36.642754624s ago: executing program 0 (id=310): r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x29) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0x4b47, 0xfffffffffffffffe) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) r7 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, r6, 0x2, 0x12, r5, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f00000002c0)="fb016bddfb405ee52cc6a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb2070000000000000000000000c20cecfa0a97ab7800", 0x0, 0x48) r8 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000001c0)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4}) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f0000000080)=@attr_other={0x0, 0x8, 0x4, &(0x7f0000000040)=0xfffbfffffffffffa}) openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$kvm(0x0, 0x0, 0x0, 0x0) (async) openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x29) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r4, 0x4b47, 0xfffffffffffffffe) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) (async) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) (async) mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, r6, 0x2, 0x12, r5, 0x0) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f00000002c0)="fb016bddfb405ee52cc6a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb2070000000000000000000000c20cecfa0a97ab7800", 0x0, 0x48) (async) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32) (async) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000001c0)={0x8}) (async) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4}) (async) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f0000000080)=@attr_other={0x0, 0x8, 0x4, &(0x7f0000000040)=0xfffbfffffffffffa}) (async) 40m27.560736731s ago: executing program 1 (id=311): mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x3000004, 0x10, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x0, 0x3000003, 0x4010, 0xffffffffffffffff, 0x9000000) (async) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) (async) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) (async) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc9, 0x3}) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x10000000000) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x34) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r6 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x1800002, 0x11, r5, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f00000001c0)="d601ac24fa0e04683bec0000f4ff8000802346cbd98762c7795582ba3948ecff0900355067d69f9340ebff00040000000100", 0x0, 0x48) (async) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r5, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x40305828, &(0x7f0000000040)=@attr_other={0x0, 0x0, 0xfffffffffffffff7, 0x0}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async) r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0xfffffffffffffff9) (async) r11 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r10, r11, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_ONE_REG(r11, 0x4010aeac, &(0x7f0000000100)=@arm64_sys={0x603000000013df1a, &(0x7f00000000c0)=0x3}) ioctl$KVM_ARM_SET_DEVICE_ADDR(r11, 0x4010aeab, &(0x7f0000000000)={0x1, 0x50000}) (async) munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000) (async) munmap(&(0x7f0000482000/0x2000)=nil, 0x2000) (async) munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000) (async) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x24132, 0xffffffffffffffff, 0x0) (async) openat$kvm(0x0, &(0x7f0000000240), 0x80b42, 0x0) 40m25.220410057s ago: executing program 0 (id=312): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xc020660b, 0xe1) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ce5000/0x1000)=nil, 0x930, 0x6, 0x4102932, 0xffffffffffffffff, 0x0) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) munmap(&(0x7f0000cc9000/0x2000)=nil, 0x2000) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil) 40m19.241011226s ago: executing program 0 (id=313): openat$kvm(0x0, &(0x7f00000001c0), 0x4089c0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x28) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x101e40, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x28) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000b75000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000180)={0x0, &(0x7f0000000000)=[@hvc={0x32, 0x40, {0x84000051, [0x84000051, 0x7, 0x9, 0xc, 0x7fff]}}], 0x40}, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r8 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r7, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f0000000080)="fb01db06033ce3c60100a29ea6ab8031d1dfd92f0000dc0320002c005a9610fbff67521c966f8f1f4408357070c2c7aadaebb20700000000040000000000000100", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r7, 0x0) r9 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0xa00f2, 0x408) ioctl$KVM_CHECK_EXTENSION(r9, 0x541b, 0x5) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x1d) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r11, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) ioctl$KVM_SET_ONE_REG(r11, 0x4010aeac, &(0x7f00000000c0)=@arm64_core={0x6030000000100034, &(0x7f0000000000)=0x80}) r12 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000080)={0x2, 0x2, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x2) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r13, 0x4018aee1, &(0x7f0000000000)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0x20e4586c}) r14 = openat$kvm(0x0, &(0x7f0000000040), 0xe0000, 0x0) r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0) ioctl$KVM_ARM_VCPU_INIT(r7, 0x4020aeae, &(0x7f0000000180)={0x0, 0x13}) r16 = syz_kvm_setup_syzos_vm$arm64(r15, &(0x7f0000c00000/0x400000)=nil) r17 = syz_kvm_add_vcpu$arm64(r16, &(0x7f0000000000)={0x0, &(0x7f0000000040)=[@smc={0x1e, 0x40, {0xc4000003, [0x1000004, 0x100000003, 0x5, 0x101, 0x9]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r17, 0xae80, 0x0) 39m41.220557832s ago: executing program 32 (id=311): mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x3000004, 0x10, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x0, 0x3000003, 0x4010, 0xffffffffffffffff, 0x9000000) (async) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) (async) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) (async) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc9, 0x3}) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x10000000000) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x34) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r6 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x1800002, 0x11, r5, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f00000001c0)="d601ac24fa0e04683bec0000f4ff8000802346cbd98762c7795582ba3948ecff0900355067d69f9340ebff00040000000100", 0x0, 0x48) (async) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r5, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x40305828, &(0x7f0000000040)=@attr_other={0x0, 0x0, 0xfffffffffffffff7, 0x0}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async) r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0xfffffffffffffff9) (async) r11 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r10, r11, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_ONE_REG(r11, 0x4010aeac, &(0x7f0000000100)=@arm64_sys={0x603000000013df1a, &(0x7f00000000c0)=0x3}) ioctl$KVM_ARM_SET_DEVICE_ADDR(r11, 0x4010aeab, &(0x7f0000000000)={0x1, 0x50000}) (async) munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000) (async) munmap(&(0x7f0000482000/0x2000)=nil, 0x2000) (async) munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000) (async) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x24132, 0xffffffffffffffff, 0x0) (async) openat$kvm(0x0, &(0x7f0000000240), 0x80b42, 0x0) 39m32.023236798s ago: executing program 33 (id=313): openat$kvm(0x0, &(0x7f00000001c0), 0x4089c0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x28) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x101e40, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x28) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000b75000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000180)={0x0, &(0x7f0000000000)=[@hvc={0x32, 0x40, {0x84000051, [0x84000051, 0x7, 0x9, 0xc, 0x7fff]}}], 0x40}, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r8 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r7, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f0000000080)="fb01db06033ce3c60100a29ea6ab8031d1dfd92f0000dc0320002c005a9610fbff67521c966f8f1f4408357070c2c7aadaebb20700000000040000000000000100", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r7, 0x0) r9 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0xa00f2, 0x408) ioctl$KVM_CHECK_EXTENSION(r9, 0x541b, 0x5) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x1d) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r11, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) ioctl$KVM_SET_ONE_REG(r11, 0x4010aeac, &(0x7f00000000c0)=@arm64_core={0x6030000000100034, &(0x7f0000000000)=0x80}) r12 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000080)={0x2, 0x2, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x2) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r13, 0x4018aee1, &(0x7f0000000000)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0x20e4586c}) r14 = openat$kvm(0x0, &(0x7f0000000040), 0xe0000, 0x0) r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0) ioctl$KVM_ARM_VCPU_INIT(r7, 0x4020aeae, &(0x7f0000000180)={0x0, 0x13}) r16 = syz_kvm_setup_syzos_vm$arm64(r15, &(0x7f0000c00000/0x400000)=nil) r17 = syz_kvm_add_vcpu$arm64(r16, &(0x7f0000000000)={0x0, &(0x7f0000000040)=[@smc={0x1e, 0x40, {0xc4000003, [0x1000004, 0x100000003, 0x5, 0x101, 0x9]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r17, 0xae80, 0x0) 8m36.443514703s ago: executing program 2 (id=584): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x2e) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r3, r4, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000100)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f0000000300)=@arm64_core={0x6030000000100022, &(0x7f0000000080)=0x7}) (async, rerun: 32) r5 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}, 0x0, 0x0) syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000100)={0x0, 0x0}, 0x0, 0x0) (async) syz_kvm_vgic_v3_setup(r1, 0x2, 0x100) r6 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000180)={0x0, &(0x7f0000000380)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x7ffc}}, @msr={0x14, 0x20, {0x603000000013dce0, 0x7ffe}}], 0x40}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async, rerun: 32) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async, rerun: 32) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x1c) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) (async, rerun: 32) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) (async, rerun: 32) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) (async) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) (async) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x9000000) (async) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) (async) r10 = eventfd2(0x5, 0x800) write$eventfd(r10, &(0x7f0000000000)=0xffffffffffffffff, 0x8) (async) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) 8m23.440435682s ago: executing program 2 (id=587): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r1, 0x4068aea3, &(0x7f0000000080)={0xe4, 0x0, 0x37}) r2 = syz_kvm_vgic_v3_setup(r1, 0x3, 0xc0) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x1, &(0x7f0000000100)=0x8}) 8m14.609238701s ago: executing program 2 (id=588): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000100)={0x0, &(0x7f0000000140)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x2, 0x100) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f00003e9000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000b80)={0x0, &(0x7f0000000180)=[@hvc={0x32, 0x0, {0x84000051, [0x9, 0x6, 0x3, 0x603c8354, 0x200]}}], 0xfffffffffffffef1}, &(0x7f00000000c0)=[@featur1={0x1, 0x4}], 0x1) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x9000000) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x80010, 0xffffffffffffffff, 0x0) r6 = eventfd2(0x5, 0x800) write$eventfd(r6, &(0x7f0000000000)=0xffffffffffffffff, 0x8) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000) munmap(&(0x7f0000e76000/0x12000)=nil, 0x12000) mmap$KVM_VCPU(&(0x7f0000f1a000/0x4000)=nil, 0x930, 0x0, 0x9032, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4360ae82, 0x0) mmap$KVM_VCPU(&(0x7f0000fed000/0x3000)=nil, 0x930, 0x0, 0x4030031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) munmap(&(0x7f0000011000/0xc00000)=nil, 0xc00000) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x0, 0x40010, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) 8m10.938998084s ago: executing program 3 (id=589): r0 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000340)={0x0, &(0x7f0000000000)=[@uexit={0x0, 0x18, 0x9708000000000000}, @memwrite={0x6e, 0x30, @generic={0xa000, 0x18f, 0x5}}, @uexit={0x0, 0x18, 0x400}, @irq_setup={0x46, 0x18, {0x3, 0x1ab}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xfffc, 0x101, 0x9}}, @smc={0x1e, 0x40, {0x80003fff, [0x200, 0x6, 0x7, 0x1, 0x5]}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x1000, 0xfffffffffffffffd, 0x2}}, @msr={0x14, 0x20, {0x603000000013804e, 0xd0c4}}, @its_setup={0x82, 0x28, {0x1, 0x3, 0x111}}, @code={0xa, 0x54, {"007008d5000800f860cd91d20020b0f2810080d2620080d2630080d2e40080d2020000d4000008d500a0000f0080401f008008d500a0204e000c00b8007008d5"}}, @hvc={0x32, 0x40, {0x2000000, [0x5, 0x4, 0x0, 0x7, 0x8]}}, @eret={0xe6, 0x18, 0x2}, @code={0xa, 0x84, {"c07596d200c0b0f2810080d2c20180d2230180d2c40180d2020000d400009f0cc0ad98d200e0b8f2a10180d2420180d2230180d2240080d2020000d4008008d5000028d5007008d50018200e00800048000008d5c04c90d200a0b0f2010080d2420180d2630180d2040080d2020000d4"}}, @uexit={0x0, 0x18, 0x3}, @irq_setup={0x46, 0x18, {0x3, 0x316}}, @its_send_cmd={0xaa, 0x28, {0xb, 0x0, 0x3, 0x1, 0x200, 0x4, 0x2}}, @eret={0xe6, 0x18, 0x8}, @smc={0x1e, 0x40, {0x84000014, [0x9, 0xd, 0x3ff, 0x6, 0x3]}}], 0x340}, &(0x7f0000000380)=[@featur1={0x1, 0x40}], 0x1) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f00000003c0)={0x81, 0x30000}) (async) r1 = syz_kvm_vgic_v3_setup(0xffffffffffffffff, 0x4, 0x200) (async, rerun: 32) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1) (rerun: 32) syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000bfd000/0x400000)=nil) (async) ioctl$KVM_RUN(r0, 0xae80, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000400)={0x1, 0x7, 0x200000, 0x2000, &(0x7f0000ffb000/0x2000)=nil, 0x80000000}) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000004c0)={0x41000, 0x14000, 0x1}) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x40200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1d) (async) mmap$KVM_VCPU(&(0x7f0000eba000/0x4000)=nil, 0x0, 0x1, 0x8010, r0, 0x0) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f00000006c0)={0x0, &(0x7f0000000540)=[@uexit={0x0, 0x18, 0x8}, @its_setup={0x82, 0x28, {0x4, 0x2, 0x19b}}, @eret={0xe6, 0x18, 0x5}, @smc={0x1e, 0x40, {0x100, [0x0, 0xcf6, 0x9, 0x8, 0xfffffffffffffff9]}}, @msr={0x14, 0x20, {0x6030000000138005, 0x5}}, @hvc={0x32, 0x40, {0xc4000004, [0x7, 0x8, 0xfffffffffffff23c, 0x5da, 0x6]}}, @hvc={0x32, 0x40, {0x4, [0x6, 0x12, 0x8000000000000001, 0x6, 0x5b50000000000]}}, @uexit={0x0, 0x18, 0x9}, @eret={0xe6, 0x18, 0x8}, @uexit={0x0, 0x18, 0x100000001}], 0x180}, &(0x7f0000000700)=[@featur2={0x1, 0x42}], 0x1) (async) mmap$KVM_VCPU(&(0x7f0000c22000/0x3000)=nil, 0x0, 0x4, 0x8010, r0, 0x0) (async) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000780)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000740)=0x3}) ioctl$KVM_SET_GUEST_DEBUG_arm64(r0, 0x4208ae9b, &(0x7f00000007c0)={0x2, 0x0, {[0x5, 0xfffffffffffffffd, 0x2, 0x800, 0x8, 0x2, 0x21df, 0xea, 0x8, 0x9, 0x5, 0x3, 0xfffffffffffffffb, 0x0, 0x8, 0x2], [0x6, 0x6, 0x23d, 0x6, 0x2, 0x0, 0xf6c, 0x8, 0x3, 0x1, 0xeeec, 0x5, 0x1, 0x6, 0x66df, 0x1], [0xc2f3, 0x10001, 0x6, 0x0, 0xb, 0x8, 0x7, 0xfffffffffffffffc, 0x9, 0x63, 0x6, 0x2, 0x1, 0x6, 0xb1, 0x9], [0x101, 0x0, 0x0, 0x7, 0x3, 0x754, 0xc103, 0x7f, 0x8000, 0x6, 0xd, 0x8, 0xb, 0x6, 0x7, 0x80]}}) (async) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000a00)=@arm64) syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) (async, rerun: 32) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) (rerun: 32) r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x38) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) (async) ioctl$KVM_DIRTY_TLB(r2, 0x4010aeaa, &(0x7f0000000a40)={0x80000000, 0x5}) r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffa000/0x3000)=nil, r8, 0x0, 0x8010, r0, 0x0) (async) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r0, 0x4018aee1, &(0x7f0000000ac0)=@attr_set_pmu={0x0, 0x0, 0x3, &(0x7f0000000a80)=0xffffffff}) syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_ONE_REG(r9, 0x4010aeab, &(0x7f0000000b40)=@riscv64_f={0x8020000005000018, &(0x7f0000000b00)=0x9}) (async) ioctl$KVM_CAP_HALT_POLL(r2, 0x4068aea3, &(0x7f0000000b80)={0xb6, 0x0, 0x100}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000c00), 0x10000, 0x0) 8m2.429677707s ago: executing program 3 (id=590): r0 = openat$kvm(0x0, &(0x7f0000000180), 0x636100, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x1) ioctl$KVM_CREATE_VM(r1, 0x40086602, 0x20000000) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x31) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) r2 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000000)={0x0, &(0x7f0000000540)=[@memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x90, 0xffffffffffffff15, 0x3}}, @mrs={0xbe, 0x18, {0x603000000013e6d7}}, @smc={0x1e, 0x40, {0xc4000014, [0x6, 0x400, 0x4, 0x1, 0x340000000000]}}, @mrs={0xbe, 0x18, {0x603000000013e6c6}}, @irq_setup={0x46, 0x18, {0x0, 0x2a7}}, @its_setup={0x82, 0x28, {0x3, 0x2, 0x290}}, @irq_setup={0x46, 0x18, {0x2, 0xbb}}, @irq_setup={0x46, 0x18, {0x0, 0x12d}}, @msr={0x14, 0x20, {0x603000000013df7f}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x8, 0xa}}, @hvc={0x32, 0x40, {0x8, [0x8, 0x3, 0xaf1, 0x3ff, 0xda7]}}, @smc={0x1e, 0x40, {0x1, [0xd, 0x5, 0x69f3, 0x6, 0x40]}}, @svc={0x122, 0x40, {0x0, [0x10001, 0x11e3, 0x0, 0x7fff, 0x1]}}, @eret={0xe6, 0x18, 0xffffffffffffffff}, @irq_setup={0x46, 0x18, {0x0, 0x25c}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xffd0}}, @its_send_cmd={0xaa, 0x28, {0x5, 0x0, 0x0, 0xf, 0x7f, 0xfffffe00, 0x1}}, @code={0xa, 0x9c, {"402794d20040b0f2e10080d2420180d2a30080d2a40080d2020000d4000008d5e0b288d20000b8f2a10080d2020080d2a30180d2440080d2020000d4007008d5007008d5007008d50004c05a0084205e803284d20020b8f2210180d2e20180d2230080d2840080d2020000d4e0ca88d20000b0f2e10180d2820180d2230180d2840080d2020000d4"}}, @hvc={0x32, 0x40, {0x2000, [0x4, 0x9, 0x4, 0x2]}}, @hvc={0x32, 0x40, {0x1800100, [0x7, 0xa3, 0x4, 0x4, 0x80000001]}}], 0x3c4}, 0x0, 0x0) r4 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) eventfd2(0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000440)={0x4, 0x0, [{0x1, 0x2, 0x1, 0x0, @adapter={0x7, 0x100000000, 0x8, 0x0, 0x7}}, {0x9, 0x2, 0x1, 0x0, @adapter={0xd4ff, 0x6d35, 0x2, 0x0, 0x7f}}, {0x3, 0x0, 0x0, 0x0, @sint={0x9, 0x8000}}, {0x0, 0x0, 0x0, 0x0, @adapter={0x8f7, 0xe808e8f, 0x3f, 0x7, 0x332ccd89}}]}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x3}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4000ae84, &(0x7f0000000300)={{0x40000, 0x5112230311195ad3, 0x3, 0x81, 0x5b, 0xb, 0x81, 0x8, 0xe, 0x78, 0x3, 0x6}, {0x200000, 0xdddd1000, 0x10, 0x81, 0xb, 0x36, 0x0, 0xf2, 0x10, 0xcb, 0x9, 0x98}, {0x40000, 0x100000, 0x10, 0x0, 0xa6, 0x7, 0x2d, 0xf2, 0xa, 0x0, 0xc, 0x4}, {0x26000, 0x54000, 0xa, 0x7e, 0x6, 0x7, 0x5c, 0x9, 0x4, 0x2, 0xe, 0xef}, {0xdddd1000, 0x81c0003, 0x4, 0x1b, 0xf1, 0xa4, 0x0, 0xa, 0x5, 0x2, 0xff}, {0x0, 0x6000, 0x8, 0x7, 0x4, 0x40, 0x8, 0x9, 0x4, 0x9a, 0xd, 0x7}, {0x26000, 0x26000, 0xbd6e87c0ceccddee, 0x9, 0x5, 0x8, 0xf6, 0xa, 0x0, 0x5, 0x8, 0x2}, {0x3000, 0x58000, 0x10, 0x6, 0x2, 0x7f, 0x5, 0x5, 0x4, 0x1, 0x6, 0x81}, {0x80a0000, 0x2}, {0x58000, 0xfffd}, 0x40000000, 0x0, 0x58000, 0x200b8, 0xf, 0x1, 0xdddd0000, [0x4, 0x20001, 0x81, 0x2]}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x9b, 0xf, 0x0, 0x5, 0x8, 0x82, 0x46, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x900001, 0x0, 0x0, 0x3, 0xa, 0x8, '\x00', 0x1, 0x93}) write$eventfd(r8, &(0x7f00000001c0)=0x3, 0xfdef) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r9 = syz_kvm_vgic_v3_setup(r5, 0x4, 0x100) ioctl$KVM_HAS_DEVICE_ATTR(r9, 0x4018aee3, &(0x7f0000000140)=@attr_riscv64=@attr_aplic={0x0, 0x1, @any=0x800, &(0x7f0000000100)=0x17ccfd88}) r10 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x0, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$arm64(r3, r10, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$arm64(r3, r10, 0xaaaa) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$arm64(r3, r10, 0xffffffffffffffff) 8m0.421036859s ago: executing program 2 (id=591): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) r2 = openat$kvm(0x0, &(0x7f0000000140), 0x40002, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000180)={0x0, &(0x7f0000000080)=[@hvc={0x32, 0x40, {0x8600ff01, [0x7fffffff, 0x101, 0xfb4, 0x1, 0x8]}}], 0x40}, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x380, 0x0}) 7m38.678799373s ago: executing program 3 (id=592): munmap$KVM_VCPU(0x0, 0x100000000) r0 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000280)={0x0, &(0x7f0000000000)=[@code={0xa, 0x54, {"007008d500a0000d007008d500c8a00e000008d5000008d500a8302e007008d5007008d5c0759dd20060b8f2010080d2620080d2230080d2240180d2020000d4"}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0xe00, 0xffffffff7fffffff, 0x2}}, @mrs={0xbe, 0x18, {0x603000000013df71}}, @smc={0x1e, 0x40, {0x1000000, [0x2, 0xe, 0x7, 0xe]}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x1, 0x0, 0x9, 0x401, 0x7, 0x1}}, @msr={0x14, 0x20, {0x603000000013c649, 0x1}}, @svc={0x122, 0x40, {0x84000013, [0x8, 0xe7cd, 0x5, 0x401, 0x7]}}, @hvc={0x32, 0x40, {0xc4000053, [0x2, 0x3, 0x95, 0x5, 0x9]}}, @mrs={0xbe, 0x18, {0x603000000013da10}}, @msr={0x14, 0x20, {0x603000000013def6, 0x14000000000000}}, @eret={0xe6, 0x18}, @irq_setup={0x46, 0x18, {0x2, 0xf9}}, @mrs={0xbe, 0x18, {0x603000000013c4c8}}, @smc={0x1e, 0x40, {0xb15861df1f7edbfe, [0x8000000000000000, 0x91b, 0xffff, 0x6ec, 0x9]}}], 0x264}, &(0x7f00000002c0)=[@featur1={0x1, 0x10}], 0x1) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x3000006, 0x11, r0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x9000000) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x2000001, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x0) 7m34.619477483s ago: executing program 2 (id=593): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CAP_HALT_POLL(r6, 0x4068aea3, &(0x7f00000001c0)={0xb6, 0x0, 0x7fffffff}) (async) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x18, {"7f2003d5"}}], 0x18}, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r6, 0xc008ae67, &(0x7f0000000100)={0x0, 0x81}) (async) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r11, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) ioctl$KVM_SET_ONE_REG(r11, 0x4010aeac, &(0x7f00000000c0)=@arm64_sys={0x603000000013c00a, &(0x7f0000000000)=0x7}) r12 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r13 = syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil) r14 = syz_kvm_add_vcpu$arm64(r13, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@msr={0x14, 0x20, {0x603000000013df40, 0x8000}}], 0x20}, &(0x7f0000000100)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r14, 0x4018aee1, &(0x7f0000000140)=@attr_pmu_init) ioctl$KVM_RUN(r14, 0xae80, 0x0) (async) ioctl$KVM_SET_MP_STATE(r14, 0x4004ae99, &(0x7f0000000080)=0x6) (async) ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f0000000000)={0x80000000, 0xffff}) 7m32.948711557s ago: executing program 3 (id=594): r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = syz_kvm_add_vcpu$arm64(r0, &(0x7f0000000140)={0x0, &(0x7f0000000000)=[@uexit={0x0, 0x18, 0x3}, @mrs={0xbe, 0x18, {0x603000000013c4cf}}, @code={0xa, 0x9c, {"008008d5803a93d20000b8f2610180d2c20180d2030080d2040180d2020000d4c07a95d200a0b0f2010080d2220080d2630180d2c40180d2020000d40020c00d0054c01a208085d200e0b8f2c10180d2a20080d2830080d2840080d2020000d40000200e007008d5008008d5c0cf97d20080b8f2a10080d2220180d2230180d2840180d2020000d4"}}, @smc={0x1e, 0x40, {0xceca868de8a0d3, [0x0, 0x5, 0xe, 0x2, 0x7]}}], 0x10c}, &(0x7f0000000180)=[@featur2], 0x1) r2 = eventfd2(0x26a, 0x801) (async) r3 = eventfd2(0x6, 0x80800) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000001c0)={r2, 0x1, 0x1, r3}) (async) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000240)=@riscv64_d={0x8030000006000010, &(0x7f0000000200)=0x8}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x81, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x8) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) (async) r6 = ioctl$KVM_GET_STATS_FD_vm(r5, 0xaece) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f00000002c0)={0xeeee0000, 0x112000}) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) (async) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x17) (async) write$eventfd(r6, &(0x7f0000000300)=0x6, 0x8) (async) r8 = eventfd2(0x9b0, 0x1) write$eventfd(r8, &(0x7f0000000340)=0x6de1, 0x8) ioctl$KVM_GET_STATS_FD_vm(r5, 0xaece) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r6, 0x4010ae68, &(0x7f0000000380)={0xeeee0000, 0x101000, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f00000003c0)={0x1fd, 0x4, 0xeeee8000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) syz_kvm_vgic_v3_setup(r7, 0x1, 0x40) (async) eventfd2(0x101, 0x800) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000400)={0x0, 0x8000000, 0x8, r2}) (async) ioctl$KVM_GET_VCPU_MMAP_SIZE(r6, 0xae04) ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r6, 0x4068aea3, &(0x7f0000000440)={0xe4, 0x0, 0x7}) (async) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r5, 0x4068aea3, &(0x7f00000004c0)={0xdf, 0x0, 0xc000}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) r9 = syz_kvm_add_vcpu$arm64(r0, &(0x7f0000000600)={0x0, &(0x7f0000000580)=[@hvc={0x32, 0x40, {0x800, [0x6, 0x800, 0x50000, 0x2, 0xe]}}, @irq_setup={0x46, 0x18, {0x2, 0xee}}, @its_setup={0x82, 0x28, {0x4, 0x3, 0x313}}], 0x80}, &(0x7f0000000640)=[@featur2={0x1, 0x20}], 0x1) mmap$KVM_VCPU(&(0x7f0000eec000/0x1000)=nil, 0x0, 0x2000003, 0x4010, r9, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) (async) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000680)={0x800, 0x7000, 0x1, r2, 0x8}) 7m26.609298771s ago: executing program 3 (id=595): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0xd, 0x1, 0xb, 0x0, 0xb5c, 0x6, 0x6, 0x9, 0x8, 0x89, 0x2f, 0x2, 0x0, 0x6, 0x6, 0x9, 0x3, 0x27, 0x0, '\x00', 0x12, 0x6}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r2, &(0x7f00000001c0)=0x7ffffff, 0xe80) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0xfffffffffffffffc) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0xd, 0x8, 0xb, 0x0, 0x2, 0x6, 0x6, 0x6, 0x48, 0x88, 0xf5, 0x9, 0x0, 0x9, 0x6, 0xa, 0x3, 0x8, 0x0, '\x00', 0x10, 0x6}) write$eventfd(r9, &(0x7f00000001c0)=0x9, 0x1d) mmap$KVM_VCPU(&(0x7f0000c58000/0x1000)=nil, r4, 0x2000003, 0xaf832, 0xffffffffffffffff, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) mmap$KVM_VCPU(&(0x7f0000ebf000/0x1000)=nil, r4, 0xa, 0x1c013, r10, 0x0) mmap$KVM_VCPU(&(0x7f0000ebf000/0x4000)=nil, r4, 0x8, 0x4000010, r10, 0x0) 7m22.784479934s ago: executing program 2 (id=596): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r4 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x2b) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x5) r7 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, r7, 0x2, 0x12, r6, 0x0) syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f000000f000/0x400000)=nil) mmap$KVM_VCPU(&(0x7f0000010000/0x4000)=nil, r7, 0x100000a, 0x12, r6, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r2, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)={0xef000000, 0x1000, 0x2}}) r8 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000140)={0x0, &(0x7f0000000000)=[@smc={0x1e, 0x40, {0x84000052, [0x0, 0x1, 0x2, 0x9, 0x6]}}, @smc={0x1e, 0x40, {0x86000001, [0xffffffffffffff37, 0x6, 0x2, 0x5, 0x5]}}], 0x80}, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r11 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r10, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r11, 0x20, &(0x7f0000000240)="fb0149dd833be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8faa767969d22627e700", 0x0, 0x48) r12 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x11) r14 = syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000c00000/0x400000)=nil) r15 = syz_kvm_add_vcpu$arm64(r14, &(0x7f0000000180)={0x0, &(0x7f00000002c0)=[@hvc={0x32, 0x40, {0xc4000012, [0x80000000, 0x1, 0x0, 0x7f, 0x800]}}], 0xfffffffffffffffb}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r15, 0xae80, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r16 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0) r17 = ioctl$KVM_CREATE_VM(r16, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r17, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xd7, 0x80000001}) r18 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r18, 0xae01, 0x0) 7m16.127136706s ago: executing program 3 (id=597): r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_ARM_SYSTEM_SUSPEND(r2, 0x4068aea3, &(0x7f0000000180)) r3 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r4, 0xae03, 0x42) ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000000080)={0x100000000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000080)={0x1fd, 0x4, 0x50000, 0x2000, &(0x7f0000ffd000/0x2000)=nil, 0x810000}) (async, rerun: 64) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x34) (rerun: 64) r5 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r5, 0x0, 0x0, 0x0) (async) r6 = syz_kvm_add_vcpu$arm64(r0, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) r7 = openat$kvm(0x0, &(0x7f0000000080), 0x2a040, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0xd8) (async) close(0x4) close(r6) ioctl$KVM_RESET_DIRTY_RINGS(r2, 0xaec7) (async, rerun: 32) ioctl$KVM_RUN(r6, 0xae80, 0x0) (rerun: 32) 6m36.582927896s ago: executing program 34 (id=596): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r4 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x2b) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x5) r7 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, r7, 0x2, 0x12, r6, 0x0) syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f000000f000/0x400000)=nil) mmap$KVM_VCPU(&(0x7f0000010000/0x4000)=nil, r7, 0x100000a, 0x12, r6, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r2, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)={0xef000000, 0x1000, 0x2}}) r8 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000140)={0x0, &(0x7f0000000000)=[@smc={0x1e, 0x40, {0x84000052, [0x0, 0x1, 0x2, 0x9, 0x6]}}, @smc={0x1e, 0x40, {0x86000001, [0xffffffffffffff37, 0x6, 0x2, 0x5, 0x5]}}], 0x80}, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r11 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r10, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r11, 0x20, &(0x7f0000000240)="fb0149dd833be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8faa767969d22627e700", 0x0, 0x48) r12 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x11) r14 = syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000c00000/0x400000)=nil) r15 = syz_kvm_add_vcpu$arm64(r14, &(0x7f0000000180)={0x0, &(0x7f00000002c0)=[@hvc={0x32, 0x40, {0xc4000012, [0x80000000, 0x1, 0x0, 0x7f, 0x800]}}], 0xfffffffffffffffb}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r15, 0xae80, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r16 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0) r17 = ioctl$KVM_CREATE_VM(r16, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r17, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xd7, 0x80000001}) r18 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r18, 0xae01, 0x0) 6m28.751914447s ago: executing program 35 (id=597): r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_ARM_SYSTEM_SUSPEND(r2, 0x4068aea3, &(0x7f0000000180)) r3 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r4, 0xae03, 0x42) ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000000080)={0x100000000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000080)={0x1fd, 0x4, 0x50000, 0x2000, &(0x7f0000ffd000/0x2000)=nil, 0x810000}) (async, rerun: 64) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x34) (rerun: 64) r5 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r5, 0x0, 0x0, 0x0) (async) r6 = syz_kvm_add_vcpu$arm64(r0, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) r7 = openat$kvm(0x0, &(0x7f0000000080), 0x2a040, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0xd8) (async) close(0x4) close(r6) ioctl$KVM_RESET_DIRTY_RINGS(r2, 0xaec7) (async, rerun: 32) ioctl$KVM_RUN(r6, 0xae80, 0x0) (rerun: 32) 19.509382971s ago: executing program 4 (id=598): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f00000000c0)={0x0, &(0x7f0000000500)=[@mrs={0xbe, 0x18, {0x60300000001383ce}}, @msr={0x14, 0x20, {0x6030000000130204}}, @its_send_cmd={0xaa, 0x28, {0x0, 0x0, 0x1, 0xc, 0xff, 0x4, 0x1}}], 0x60}, 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x1}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) r9 = ioctl$KVM_CREATE_VM(r8, 0x894c, 0x2) ioctl$KVM_CREATE_VCPU(r9, 0x8008b705, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r1, 0x4068aea3, &(0x7f0000000100)={0xef, 0x0, 0x7}) r10 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000080)={0x0, &(0x7f0000000600)=[@mrs={0xbe, 0x18, {0x603000000013c006}}], 0x18}, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) r12 = openat$kvm(0x0, &(0x7f0000000040), 0x20200, 0x0) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) r14 = syz_kvm_vgic_v3_setup(r13, 0x3, 0x40) ioctl$KVM_SET_DEVICE_ATTR(r14, 0x4018aee1, &(0x7f0000000240)=@attr_riscv64=@attr_imsic={0x0, 0x1, 0x4b8, &(0x7f0000000000)=0xfffffffe}) r15 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r15, 0xae01, 0x0) close(0x4) munmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000) 13.219641196s ago: executing program 5 (id=599): r0 = mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000240)="37e68986ad644f5dc57bbc1ff382863b67f3eee57a32ec911d95f88f3dd8ea716e4a29cefbd440b2ecf83f57baf33b0c97182970a47ef45c954e42f2055384921830f6e273d2eb30", 0x0, 0x2a2019ac5ed2a1ef) r1 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x400000000002) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, 0xfffffffffffffffe) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000100)="746abf250f7959c813e4adfb369b808022e69fe80cfadce4a1259e77bab54ac9749537b3d016bb7f745a6e22d2f9ff443f19467748a3fe02c239457600", 0x0, 0x48) 0s ago: executing program 5 (id=600): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x1, 0x6000, 0x9fff, 0xffffffffffffffff, 0x8}) r2 = openat$kvm(0x0, &(0x7f0000000140), 0x400, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(r4, 0x4010aeab, &(0x7f0000000000)={0x7fffffff, 0x8000001}) (async) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000100)={0x9, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x0, 0x3}) (async) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000080)=@attr_arm64={0x0, 0x0, 0x2, &(0x7f0000000240)}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) (async) r8 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) (async) r9 = syz_kvm_vgic_v3_setup(r5, 0x2, 0x480) ioctl$KVM_GET_DEVICE_ATTR(r9, 0x4018aee2, &(0x7f00000001c0)=@attr_arm64={0x0, 0x1, 0x0, &(0x7f0000000180)=0x8}) r10 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x4) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_ARM_VCPU_INIT(r11, 0x4020aeae, &(0x7f0000000080)={0x5, 0x1}) (async) ioctl$KVM_SET_ONE_REG(r11, 0x4010aeac, &(0x7f0000000140)=@arm64_core={0x603000000010004a, &(0x7f0000000100)=0x1}) (async) ioctl$KVM_ARM_VCPU_INIT(r7, 0x4020aeae, &(0x7f0000000000)={0x5, 0x4}) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) kernel console output (not intermixed with test programs): [ 349.781744][ T24] audit: type=1400 audit(349.000:76): avc: denied { read } for pid=3211 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 356.061649][ T24] audit: type=1400 audit(355.280:77): avc: denied { write } for pid=3269 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 360.738699][ T24] audit: type=1400 audit(359.940:78): avc: denied { write } for pid=3272 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 363.235320][ T3211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.250076][ T24] audit: type=1400 audit(370.470:79): avc: denied { write } for pid=3278 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 374.878500][ T24] audit: type=1400 audit(374.090:80): avc: denied { write } for pid=3281 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 387.150923][ T24] audit: type=1400 audit(386.320:81): avc: denied { write } for pid=3286 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 391.868535][ T24] audit: type=1400 audit(391.080:82): avc: denied { write } for pid=3289 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 401.618518][ T24] audit: type=1400 audit(400.790:83): avc: denied { write } for pid=3294 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 405.088810][ T24] audit: type=1400 audit(404.290:84): avc: denied { write } for pid=3297 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 407.400570][ T3211] eql: remember to turn off Van-Jacobson compression on your slave devices [ 414.359092][ T24] audit: type=1400 audit(413.580:85): avc: denied { write } for pid=3302 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 417.817894][ T24] audit: type=1400 audit(417.030:86): avc: denied { write } for pid=3305 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 427.916949][ T24] audit: type=1400 audit(427.130:87): avc: denied { write } for pid=3310 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 431.417301][ T24] audit: type=1400 audit(430.620:88): avc: denied { write } for pid=3313 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 440.477301][ T24] audit: type=1400 audit(439.660:89): avc: denied { write } for pid=3318 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 444.017705][ T24] audit: type=1400 audit(443.230:90): avc: denied { write } for pid=3321 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 450.387259][ T24] audit: type=1400 audit(449.600:91): avc: denied { write } for pid=3323 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 455.104705][ T24] audit: type=1400 audit(454.320:92): avc: denied { write } for pid=3326 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 464.234756][ T24] audit: type=1400 audit(463.450:93): avc: denied { write } for pid=3330 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 467.687364][ T24] audit: type=1400 audit(466.900:94): avc: denied { write } for pid=3333 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 481.757381][ T24] audit: type=1400 audit(480.940:95): avc: denied { write } for pid=3340 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 485.237686][ T24] audit: type=1400 audit(484.440:96): avc: denied { write } for pid=3343 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 507.627310][ T24] audit: type=1400 audit(506.830:97): avc: denied { write } for pid=3352 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 512.378671][ T24] audit: type=1400 audit(511.540:98): avc: denied { write } for pid=3355 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 519.350495][ T24] audit: type=1400 audit(518.570:99): avc: denied { write } for pid=3358 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 522.850598][ T24] audit: type=1400 audit(522.050:100): avc: denied { write } for pid=3361 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:14494' (ED25519) to the list of known hosts. [ 552.322576][ T24] audit: type=1400 audit(551.540:101): avc: denied { name_bind } for pid=3366 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 553.081451][ T24] audit: type=1400 audit(552.300:102): avc: denied { execute } for pid=3367 comm="sh" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 553.100997][ T24] audit: type=1400 audit(552.310:103): avc: denied { execute_no_trans } for pid=3367 comm="sh" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 578.262840][ T24] audit: type=1400 audit(577.480:104): avc: denied { mounton } for pid=3367 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 578.300905][ T24] audit: type=1400 audit(577.510:105): avc: denied { mount } for pid=3367 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 578.377004][ T3367] cgroup: Unknown subsys name 'net' [ 578.431080][ T24] audit: type=1400 audit(577.650:106): avc: denied { unmount } for pid=3367 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 578.764234][ T3367] cgroup: Unknown subsys name 'cpuset' [ 578.870776][ T3367] cgroup: Unknown subsys name 'rlimit' [ 579.652672][ T24] audit: type=1400 audit(578.870:107): avc: denied { setattr } for pid=3367 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 579.673146][ T24] audit: type=1400 audit(578.890:108): avc: denied { mounton } for pid=3367 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 579.698366][ T24] audit: type=1400 audit(578.910:109): avc: denied { mount } for pid=3367 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 580.635856][ T3370] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 580.654980][ T24] audit: type=1400 audit(579.870:110): avc: denied { relabelto } for pid=3370 comm="mkswap" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 580.680558][ T24] audit: type=1400 audit(579.890:111): avc: denied { write } for pid=3370 comm="mkswap" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 580.833271][ T24] audit: type=1400 audit(580.050:112): avc: denied { read } for pid=3367 comm="syz-executor" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 580.853850][ T24] audit: type=1400 audit(580.060:113): avc: denied { open } for pid=3367 comm="syz-executor" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 580.894598][ T3367] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 632.781943][ T24] audit: type=1400 audit(632.000:114): avc: denied { execmem } for pid=3371 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 636.998480][ T24] audit: type=1400 audit(636.210:115): avc: denied { read } for pid=3373 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 637.022864][ T24] audit: type=1400 audit(636.240:116): avc: denied { open } for pid=3374 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 637.099519][ T24] audit: type=1400 audit(636.300:117): avc: denied { mounton } for pid=3374 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 637.305057][ T24] audit: type=1400 audit(636.520:118): avc: denied { module_request } for pid=3374 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 637.325078][ T24] audit: type=1400 audit(636.540:119): avc: denied { module_request } for pid=3373 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 638.214794][ T24] audit: type=1400 audit(637.430:120): avc: denied { sys_module } for pid=3373 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 658.402157][ T3373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 658.472263][ T3374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 658.544373][ T3373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 658.752243][ T3374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 669.404136][ T3373] hsr_slave_0: entered promiscuous mode [ 669.451131][ T3373] hsr_slave_1: entered promiscuous mode [ 670.211723][ T3374] hsr_slave_0: entered promiscuous mode [ 670.240443][ T3374] hsr_slave_1: entered promiscuous mode [ 670.271150][ T3374] debugfs: 'hsr0' already exists in 'hsr' [ 670.277775][ T3374] Cannot create hsr debugfs directory [ 675.398299][ T24] audit: type=1400 audit(674.610:121): avc: denied { create } for pid=3373 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 675.428129][ T24] audit: type=1400 audit(674.630:122): avc: denied { write } for pid=3373 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 675.495138][ T24] audit: type=1400 audit(674.710:123): avc: denied { read } for pid=3373 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 675.622418][ T3373] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 675.889015][ T3373] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 676.010279][ T3373] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 676.261765][ T3373] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 676.340553][ T3373] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 676.449557][ T3373] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 676.628938][ T3373] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 676.733238][ T3373] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 678.054359][ T3374] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 678.163505][ T3374] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 678.219630][ T3374] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 678.320155][ T3374] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 678.355642][ T3374] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 678.489517][ T3374] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 678.579117][ T3374] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 678.731432][ T3374] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 688.890032][ T3373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 691.405690][ T3374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 736.820775][ T3373] veth0_vlan: entered promiscuous mode [ 737.192925][ T3373] veth1_vlan: entered promiscuous mode [ 738.964250][ T3373] veth0_macvtap: entered promiscuous mode [ 739.174097][ T3374] veth0_vlan: entered promiscuous mode [ 739.473298][ T3373] veth1_macvtap: entered promiscuous mode [ 740.042277][ T3374] veth1_vlan: entered promiscuous mode [ 741.521927][ T2173] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.541019][ T2173] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.544842][ T2173] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.553594][ T2173] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.521356][ T3374] veth0_macvtap: entered promiscuous mode [ 743.132224][ T3374] veth1_macvtap: entered promiscuous mode [ 743.948993][ T24] audit: type=1400 audit(743.100:124): avc: denied { mount } for pid=3373 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 744.104612][ T24] audit: type=1400 audit(743.320:125): avc: denied { mounton } for pid=3373 comm="syz-executor" path="/syzkaller.sPu9xP/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 744.413964][ T24] audit: type=1400 audit(743.630:126): avc: denied { mount } for pid=3373 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 744.753103][ T24] audit: type=1400 audit(743.960:127): avc: denied { mounton } for pid=3373 comm="syz-executor" path="/syzkaller.sPu9xP/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 744.839205][ T24] audit: type=1400 audit(744.050:128): avc: denied { mounton } for pid=3373 comm="syz-executor" path="/syzkaller.sPu9xP/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 745.228512][ T40] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.232695][ T40] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.270846][ T40] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.271999][ T40] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.414102][ T24] audit: type=1400 audit(744.630:129): avc: denied { unmount } for pid=3373 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 745.553343][ T24] audit: type=1400 audit(744.770:130): avc: denied { mounton } for pid=3373 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1544 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 745.702495][ T24] audit: type=1400 audit(744.920:131): avc: denied { mount } for pid=3373 comm="syz-executor" name="/" dev="gadgetfs" ino=3710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 746.042102][ T24] audit: type=1400 audit(745.260:132): avc: denied { mount } for pid=3373 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 746.132475][ T24] audit: type=1400 audit(745.330:133): avc: denied { mounton } for pid=3373 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 747.455185][ T3373] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 758.181646][ T24] kauditd_printk_skb: 4 callbacks suppressed [ 758.229397][ T24] audit: type=1400 audit(757.400:138): avc: denied { execute } for pid=3525 comm="syz.1.2" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=3755 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 760.491992][ T24] audit: type=1400 audit(759.710:139): avc: denied { read } for pid=3525 comm="syz.1.2" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 760.558172][ T24] audit: type=1400 audit(759.770:140): avc: denied { open } for pid=3525 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 760.624318][ T24] audit: type=1400 audit(759.840:141): avc: denied { ioctl } for pid=3525 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae04 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 770.675194][ T24] audit: type=1400 audit(769.840:142): avc: denied { write } for pid=3538 comm="syz.0.4" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 798.128670][ T24] audit: type=1400 audit(797.340:143): avc: denied { append } for pid=3554 comm="syz.0.10" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 814.277911][ T24] audit: type=1400 audit(813.400:144): avc: denied { write } for pid=3566 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 823.071129][ T24] audit: type=1400 audit(822.200:145): avc: denied { write } for pid=3572 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 928.942364][ T24] audit: type=1400 audit(928.040:146): avc: denied { create } for pid=3656 comm="syz.0.41" anonclass=[kvm-gmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 929.088965][ T24] audit: type=1400 audit(928.260:147): avc: denied { map } for pid=3656 comm="syz.0.41" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=5759 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 929.113382][ T24] audit: type=1400 audit(928.330:148): avc: denied { read } for pid=3656 comm="syz.0.41" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=5759 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1080.054021][ T24] audit: type=1400 audit(1079.270:149): avc: denied { execute } for pid=3737 comm="syz.0.68" path=2F33322F10FBFF67525673312B0104 dev="tmpfs" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1139.632376][ T24] audit: type=1400 audit(1138.840:150): avc: denied { mmap_zero } for pid=3783 comm="syz.1.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 1229.868807][ T24] audit: type=1400 audit(1229.080:151): avc: denied { ioctl } for pid=3857 comm="syz.0.105" path="net:[4026532627]" dev="nsfs" ino=4026532627 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1247.857519][ T24] audit: type=1400 audit(1247.060:152): avc: denied { map } for pid=3864 comm="syz.0.107" path="pipe:[2703]" dev="pipefs" ino=2703 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1271.134641][ T24] audit: type=1400 audit(1270.350:153): avc: denied { setattr } for pid=3878 comm="syz.0.110" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1289.828513][ T24] audit: type=1400 audit(1289.040:154): avc: denied { write } for pid=3888 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1296.957224][ T24] audit: type=1400 audit(1296.170:155): avc: denied { write } for pid=3899 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1710.449668][ T24] audit: type=1400 audit(1709.650:156): avc: denied { write } for pid=4184 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1717.822302][ T24] audit: type=1400 audit(1716.960:157): avc: denied { write } for pid=4193 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1942.449067][ T24] audit: type=1400 audit(1941.660:158): avc: denied { map } for pid=4348 comm="syz.0.257" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1948.935516][ T24] audit: type=1400 audit(1948.150:159): avc: denied { execute } for pid=4357 comm="syz.1.260" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1955.269202][ T24] audit: type=1400 audit(1954.450:160): avc: denied { write } for pid=4361 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1962.390927][ T24] audit: type=1400 audit(1961.600:161): avc: denied { write } for pid=4371 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2013.450255][ T4410] kvm [4410]: Failed to find VMA for hva 0x20c01000 [ 2013.652543][ T4410] kvm [4410]: Failed to find VMA for hva 0x20c01000 [ 2269.631812][ T4531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2269.854896][ T4531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2286.555292][ T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2288.121464][ T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2290.452259][ T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2291.050698][ T4541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2291.348249][ T4541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2292.445890][ T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2295.931905][ T4531] hsr_slave_0: entered promiscuous mode [ 2296.022032][ T4531] hsr_slave_1: entered promiscuous mode [ 2296.055575][ T4531] debugfs: 'hsr0' already exists in 'hsr' [ 2296.118354][ T4531] Cannot create hsr debugfs directory [ 2307.215869][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2307.313731][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2307.362783][ T49] bond0 (unregistering): Released all slaves [ 2308.961590][ T49] hsr_slave_0: left promiscuous mode [ 2309.140996][ T49] hsr_slave_1: left promiscuous mode [ 2309.572524][ T49] veth1_macvtap: left promiscuous mode [ 2309.599602][ T49] veth0_macvtap: left promiscuous mode [ 2309.609773][ T49] veth1_vlan: left promiscuous mode [ 2309.618479][ T49] veth0_vlan: left promiscuous mode [ 2312.413182][ T24] audit: type=1400 audit(2311.630:162): avc: denied { write } for pid=4600 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2315.722455][ T24] audit: type=1400 audit(2314.940:163): avc: denied { write } for pid=4603 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2323.283430][ T3211] 8021q: adding VLAN 0 to HW filter on device eth1 [ 2327.672259][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2328.752738][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2329.881606][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2331.314948][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2334.622671][ T24] audit: type=1400 audit(2333.800:164): avc: denied { write } for pid=4612 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2335.835441][ T4541] hsr_slave_0: entered promiscuous mode [ 2335.894754][ T4541] hsr_slave_1: entered promiscuous mode [ 2336.258649][ T4531] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2336.449053][ T4531] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2336.505063][ T4531] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2336.661682][ T4531] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2337.605349][ T4531] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2337.829956][ T4531] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2338.365260][ T4531] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2338.690429][ T4531] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2340.028601][ T24] audit: type=1400 audit(2339.220:165): avc: denied { write } for pid=4618 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2345.074032][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2345.142578][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2345.204474][ T49] bond0 (unregistering): Released all slaves [ 2346.312848][ T3211] 8021q: adding VLAN 0 to HW filter on device eth2 [ 2346.600700][ T49] hsr_slave_0: left promiscuous mode [ 2346.661423][ T49] hsr_slave_1: left promiscuous mode [ 2346.889754][ T49] veth1_macvtap: left promiscuous mode [ 2346.892986][ T49] veth0_macvtap: left promiscuous mode [ 2346.904566][ T49] veth1_vlan: left promiscuous mode [ 2346.914616][ T49] veth0_vlan: left promiscuous mode [ 2369.173456][ T4541] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2369.393927][ T4541] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2369.515506][ T4541] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2369.684773][ T4541] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2369.775583][ T4541] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2369.992072][ T4541] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2370.073570][ T4541] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2370.308587][ T4541] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2373.120647][ T24] audit: type=1400 audit(2372.320:166): avc: denied { write } for pid=4635 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2378.674383][ T24] audit: type=1400 audit(2377.870:167): avc: denied { write } for pid=4649 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2379.312280][ T4531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2382.880215][ T3211] 8021q: adding VLAN 0 to HW filter on device eth3 [ 2387.398980][ T24] audit: type=1400 audit(2386.540:168): avc: denied { write } for pid=4656 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2389.024988][ T4541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2393.197806][ T24] audit: type=1400 audit(2392.410:169): avc: denied { write } for pid=4663 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2409.025682][ T24] audit: type=1400 audit(2408.240:170): avc: denied { write } for pid=4677 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2415.750301][ T24] audit: type=1400 audit(2414.960:171): avc: denied { write } for pid=4684 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2420.530953][ T3211] 8021q: adding VLAN 0 to HW filter on device eth4 [ 2432.588446][ T24] audit: type=1400 audit(2431.800:172): avc: denied { write } for pid=4701 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2437.773298][ T24] audit: type=1400 audit(2436.990:173): avc: denied { write } for pid=4710 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2442.031555][ T3211] 8021q: adding VLAN 0 to HW filter on device eth5 [ 2452.594987][ T24] audit: type=1400 audit(2451.810:174): avc: denied { write } for pid=4724 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2454.461480][ T4531] veth0_vlan: entered promiscuous mode [ 2455.159180][ T4531] veth1_vlan: entered promiscuous mode [ 2457.584352][ T4531] veth0_macvtap: entered promiscuous mode [ 2458.042883][ T4531] veth1_macvtap: entered promiscuous mode [ 2459.889493][ T24] audit: type=1400 audit(2459.100:175): avc: denied { write } for pid=4733 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2460.677985][ T2173] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2460.690998][ T2173] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2460.692017][ T2173] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2460.692774][ T2173] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2464.813135][ T3211] 8021q: adding VLAN 0 to HW filter on device eth6 [ 2466.361064][ T4541] veth0_vlan: entered promiscuous mode [ 2467.359739][ T4541] veth1_vlan: entered promiscuous mode [ 2470.374150][ T4541] veth0_macvtap: entered promiscuous mode [ 2471.104113][ T4541] veth1_macvtap: entered promiscuous mode [ 2474.745454][ T2173] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2474.788190][ T2173] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2474.789277][ T2173] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2474.790042][ T2173] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2490.439175][ T24] audit: type=1400 audit(2489.590:176): avc: denied { write } for pid=4744 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2500.277372][ T24] audit: type=1400 audit(2499.480:177): avc: denied { write } for pid=4758 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2505.933915][ T3211] 8021q: adding VLAN 0 to HW filter on device eth7 [ 2525.259200][ T24] audit: type=1400 audit(2524.400:178): avc: denied { write } for pid=4774 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2533.982203][ T24] audit: type=1400 audit(2533.110:179): avc: denied { write } for pid=4785 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2540.504546][ T3211] 8021q: adding VLAN 0 to HW filter on device eth8 [ 2559.107696][ T24] audit: type=1400 audit(2558.260:180): avc: denied { write } for pid=4798 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2563.218607][ T24] audit: type=1400 audit(2562.420:181): avc: denied { write } for pid=4801 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2609.231717][ T24] audit: type=1400 audit(2608.360:182): avc: denied { write } for pid=4838 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2619.217986][ T24] audit: type=1400 audit(2618.360:183): avc: denied { write } for pid=4847 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2633.760587][ T24] audit: type=1400 audit(2632.960:184): avc: denied { write } for pid=4854 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2641.887310][ T24] audit: type=1400 audit(2641.100:185): avc: denied { write } for pid=4865 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2657.224399][ T24] audit: type=1400 audit(2656.440:186): avc: denied { write } for pid=4871 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2667.205810][ T24] audit: type=1400 audit(2666.400:187): avc: denied { write } for pid=4884 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2700.539975][ T24] audit: type=1400 audit(2699.750:188): avc: denied { write } for pid=4909 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2709.347735][ T24] audit: type=1400 audit(2708.560:189): avc: denied { write } for pid=4918 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2725.592160][ T24] audit: type=1400 audit(2724.780:190): avc: denied { write } for pid=4930 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2735.792069][ T24] audit: type=1400 audit(2735.010:191): avc: denied { write } for pid=4941 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2755.314672][ T24] audit: type=1400 audit(2754.530:192): avc: denied { write } for pid=4958 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2763.848635][ T24] audit: type=1400 audit(2763.060:193): avc: denied { write } for pid=4968 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2779.055730][ T24] audit: type=1400 audit(2778.270:194): avc: denied { write } for pid=4974 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2786.348937][ T24] audit: type=1400 audit(2785.540:195): avc: denied { write } for pid=4977 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2858.812560][ T24] audit: type=1400 audit(2858.020:196): avc: denied { write } for pid=5015 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2867.457907][ T24] audit: type=1400 audit(2866.660:197): avc: denied { write } for pid=5026 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3052.831119][ T5138] kvm [5138]: Failed to find VMA for hva 0x20dd8000 [ 3108.400630][ T5174] kvm [5174]: Failed to find VMA for hva 0x20d8d000 [ 3293.270808][ T24] audit: type=1400 audit(3292.380:198): avc: denied { write } for pid=5277 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3301.387599][ T24] audit: type=1400 audit(3300.570:199): avc: denied { write } for pid=5286 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3531.212773][ T5414] kvm [5414]: Failed to find VMA for hva 0x20c79000 [ 3658.921661][ T24] audit: type=1400 audit(3658.140:200): avc: denied { write } for pid=5501 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3667.303933][ T24] audit: type=1400 audit(3666.500:201): avc: denied { write } for pid=5514 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3907.463855][ T5658] KVM: debugfs: duplicate directory 5658-17 [ 4186.240250][ T24] audit: type=1400 audit(4185.460:202): avc: denied { write } for pid=5825 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4189.739566][ T24] audit: type=1400 audit(4188.940:203): avc: denied { write } for pid=5828 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4214.489485][ T4537] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4216.069008][ T4537] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4217.723088][ T4537] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4219.433058][ T4537] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4239.459664][ T4537] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 4240.095277][ T4537] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 4240.545498][ T4537] bond0 (unregistering): Released all slaves [ 4242.004226][ T4537] hsr_slave_0: left promiscuous mode [ 4242.146999][ T4537] hsr_slave_1: left promiscuous mode [ 4242.607725][ T4537] veth1_macvtap: left promiscuous mode [ 4242.611155][ T4537] veth0_macvtap: left promiscuous mode [ 4242.631930][ T4537] veth1_vlan: left promiscuous mode [ 4242.641466][ T4537] veth0_vlan: left promiscuous mode [ 4275.384388][ T24] audit: type=1400 audit(4274.600:204): avc: denied { write } for pid=5857 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4282.519150][ T24] audit: type=1400 audit(4281.720:205): avc: denied { write } for pid=5862 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4288.405265][ T3211] 8021q: adding VLAN 0 to HW filter on device eth9 [ 4304.268302][ T24] audit: type=1400 audit(4303.470:206): avc: denied { write } for pid=5877 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4311.059067][ T24] audit: type=1400 audit(4310.240:207): avc: denied { write } for pid=5888 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4315.533916][ T3211] 8021q: adding VLAN 0 to HW filter on device eth10 [ 4315.825675][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4316.120379][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4321.758305][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4322.013811][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4336.170485][ T24] audit: type=1400 audit(4335.330:208): avc: denied { write } for pid=5906 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4344.019820][ T24] audit: type=1400 audit(4343.200:209): avc: denied { write } for pid=5916 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4348.002284][ T5832] hsr_slave_0: entered promiscuous mode [ 4348.131768][ T5832] hsr_slave_1: entered promiscuous mode [ 4348.155781][ T5832] debugfs: 'hsr0' already exists in 'hsr' [ 4348.261461][ T5832] Cannot create hsr debugfs directory [ 4349.873321][ T3211] 8021q: adding VLAN 0 to HW filter on device eth11 [ 4356.513968][ T5839] hsr_slave_0: entered promiscuous mode [ 4356.621828][ T5839] hsr_slave_1: entered promiscuous mode [ 4356.688466][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 4356.708399][ T5839] Cannot create hsr debugfs directory [ 4368.079838][ T24] audit: type=1400 audit(4367.290:210): avc: denied { write } for pid=5925 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4374.248057][ T24] audit: type=1400 audit(4373.450:211): avc: denied { write } for pid=5929 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4375.331725][ T5832] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 4375.939430][ T5832] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 4376.171186][ T5832] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 4376.645140][ T5832] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 4376.785485][ T5832] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 4377.181951][ T5832] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 4377.449057][ T5832] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 4377.979816][ T5832] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 4380.113852][ T3211] 8021q: adding VLAN 0 to HW filter on device eth12 [ 4383.933163][ T5839] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 4384.479332][ T5839] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 4384.525576][ T5839] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 4385.059336][ T5839] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 4385.188746][ T5839] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 4385.651227][ T5839] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 4385.850910][ T5839] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 4386.181724][ T5839] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 4414.554161][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4419.400040][ T24] audit: type=1400 audit(4418.580:212): avc: denied { write } for pid=5965 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4422.192535][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4430.467853][ T24] audit: type=1400 audit(4429.680:213): avc: denied { write } for pid=5973 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4453.242724][ T24] audit: type=1400 audit(4452.420:214): avc: denied { write } for pid=5986 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4463.619849][ T24] audit: type=1400 audit(4462.780:215): avc: denied { write } for pid=5995 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4486.699139][ T24] audit: type=1400 audit(4485.900:216): avc: denied { write } for pid=6007 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4495.835250][ T24] audit: type=1400 audit(4495.050:217): avc: denied { write } for pid=6017 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4512.581567][ T24] audit: type=1400 audit(4511.800:218): avc: denied { write } for pid=6028 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4522.318502][ T24] audit: type=1400 audit(4521.530:219): avc: denied { write } for pid=6038 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4551.967748][ T24] audit: type=1400 audit(4551.130:220): avc: denied { write } for pid=6054 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4558.780633][ T5832] veth0_vlan: entered promiscuous mode [ 4559.688821][ T5832] veth1_vlan: entered promiscuous mode [ 4561.812661][ T24] audit: type=1400 audit(4561.030:221): avc: denied { write } for pid=6063 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4564.150046][ T5832] veth0_macvtap: entered promiscuous mode [ 4565.118264][ T5839] veth0_vlan: entered promiscuous mode [ 4565.400145][ T5832] veth1_macvtap: entered promiscuous mode [ 4567.350834][ T5839] veth1_vlan: entered promiscuous mode [ 4570.289679][ T5834] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 4570.303077][ T5834] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 4570.318898][ T5834] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 4570.352569][ T5834] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 4573.181721][ T5839] veth0_macvtap: entered promiscuous mode [ 4573.878981][ T5839] veth1_macvtap: entered promiscuous mode [ 4578.328213][ T4693] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 4578.330445][ T4693] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 4578.340967][ T4693] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 4578.367991][ T4693] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 4612.463840][ T26] INFO: task syz.2.596:5817 blocked for more than 430 seconds. [ 4612.512554][ T26] Not tainted syzkaller #0 [ 4612.518164][ T26] Blocked by coredump. [ 4612.547024][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 4612.548098][ T26] task:syz.2.596 state:D stack:0 pid:5817 tgid:5817 ppid:4531 task_flags:0x40004c flags:0x00000018 [ 4612.551213][ T26] Call trace: [ 4612.551742][ T26] __switch_to+0x5e0/0xb70 (T) [ 4612.553918][ T26] __schedule+0x1e0c/0x38cc [ 4612.554480][ T26] schedule+0x1b4/0x274 [ 4612.554926][ T26] schedule_timeout+0x68/0x1e4 [ 4612.555419][ T26] wait_for_completion+0x1b8/0x414 [ 4612.667010][ T26] __synchronize_srcu+0x1c8/0x208 [ 4612.685271][ T26] synchronize_srcu+0x668/0x8dc [ 4612.713317][ T26] mmu_notifier_unregister+0x33c/0x444 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 4612.747672][ T26] kvm_put_kvm+0x69c/0xbbc [ 4612.751280][ T26] kvm_vcpu_release+0x70/0x9c [ 4612.752056][ T26] __fput+0x4ac/0x978 [ 4612.752562][ T26] ____fput+0x20/0x30 [ 4612.753019][ T26] task_work_run+0x1b8/0x250 [ 4612.753571][ T26] do_exit+0x890/0x23d8 [ 4612.754025][ T26] do_group_exit+0x288/0x2ac [ 4612.754529][ T26] __arm64_sys_exit_group+0x40/0x48 [ 4612.755001][ T26] invoke_syscall+0x94/0x1ec [ 4612.755565][ T26] el0_svc_common+0x120/0x2f4 [ 4612.840066][ T26] do_el0_svc+0x58/0x74 [ 4612.840736][ T26] el0_svc+0x64/0x240 [ 4612.851662][ T26] el0t_64_sync_handler+0x84/0x12c [ 4612.876927][ T26] el0t_64_sync+0x198/0x19c [ 4612.911197][ T26] [ 4612.911197][ T26] Showing all locks held in the system: [ 4612.921283][ T26] 1 lock held by khungtaskd/26: [ 4612.930390][ T26] #0: ffff800087e73598 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x4c/0x188 [ 4612.981328][ T26] 1 lock held by klogd/3174: [ 4612.994025][ T26] 2 locks held by getty/3243: [ 4612.994706][ T26] #0: e8f00000124a60a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 4613.012658][ T26] #1: 2fff80008cbbb2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x314/0x11f8 [ 4613.014483][ T26] 2 locks held by syz-executor/3367: [ 4613.014871][ T26] 2 locks held by syz.3.597/5823: [ 4613.015247][ T26] 3 locks held by kworker/u4:11/5968: [ 4613.052168][ T26] [ 4613.063341][ T26] ============================================= [ 4613.063341][ T26] [ 4613.121521][ T26] Kernel panic - not syncing: hung_task: blocked tasks [ 4613.125161][ T26] CPU: 0 UID: 0 PID: 26 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT [ 4613.126809][ T26] Hardware name: linux,dummy-virt (DT) [ 4613.127832][ T26] Call trace: [ 4613.128616][ T26] show_stack+0x2c/0x3c (C) [ 4613.129698][ T26] __dump_stack+0x30/0x40 [ 4613.130699][ T26] dump_stack_lvl+0x30/0x12c [ 4613.131730][ T26] dump_stack+0x1c/0x28 [ 4613.132639][ T26] vpanic+0x4cc/0x844 [ 4613.133518][ T26] vpanic+0x0/0x844 [ 4613.134393][ T26] hung_task_panic+0x0/0x2c [ 4613.135356][ T26] kthread+0x4cc/0x514 [ 4613.136309][ T26] ret_from_fork+0x10/0x20 [ 4613.138132][ T26] Kernel Offset: disabled [ 4613.138969][ T26] CPU features: 0x00000000,00d1802f,df1847a1,057ffe1f [ 4613.140223][ T26] Memory Limit: none [ 4613.142539][ T26] Rebooting in 86400 seconds..