last executing test programs: 36m53.012581441s ago: executing program 1 (id=52): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80c01, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80c01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x27) r4 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x9}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r3, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3}) r7 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) (async) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) ioctl$KVM_REGISTER_COALESCED_MMIO(r9, 0x4010ae67, 0x0) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r9, 0x4010ae67, 0x0) ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) (async) ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r10, &(0x7f00000001c0)=0x8100000001, 0x51a8) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x1, 0xffffffffffffffff, 0x1}) r12 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x4) ioctl$KVM_RESET_DIRTY_RINGS(r12, 0xaec7) r13 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x2a) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) (async) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000b80)={0x0, &(0x7f0000000100)=[@hvc={0x32, 0x40, {0x84000015, [0x100000001, 0x8000000040000000, 0xffffffffffffffff, 0xee24, 0xfffffffffffeffff]}}], 0x40}, &(0x7f0000000040)=[@featur1={0x1, 0x4}], 0x1) (async) r14 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000b80)={0x0, &(0x7f0000000100)=[@hvc={0x32, 0x40, {0x84000015, [0x100000001, 0x8000000040000000, 0xffffffffffffffff, 0xee24, 0xfffffffffffeffff]}}], 0x40}, &(0x7f0000000040)=[@featur1={0x1, 0x4}], 0x1) r15 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000b4a000/0x2000)=nil, 0x930, 0x280000f, 0x11, r15, 0x0) ioctl$KVM_RUN(r14, 0xae80, 0x0) 36m42.029950814s ago: executing program 1 (id=54): mmap$KVM_VCPU(&(0x7f0000ff9000/0x4000)=nil, 0x930, 0x300000f, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000000)=0x7) r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_DEVICE_ATTR_vm(r1, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)={0xef000000, 0x1000, 0x2}}) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000140)={0x0, &(0x7f0000000200)=[@hvc={0x32, 0x40, {0xc4000053, [0xfffffffffffffffc, 0x1, 0x1, 0x9d, 0x6]}}], 0x40}, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000fed000/0x3000)=nil, 0x930, 0x0, 0x4030031, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xc, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x20000000) 36m37.644175983s ago: executing program 0 (id=55): syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x4a4106, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2a) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000b80)={0x0, 0x0}, &(0x7f0000000340)=[@featur2={0x1, 0x4}], 0x1) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000140)=@arm64_fw={0x6030000000140000, &(0x7f0000000180)=0x2}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_ARM_VCPU_INIT(0xffffffffffffffff, 0x4020aeae, &(0x7f0000000080)={0x5, 0x1}) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000100)=@arm64_core={0x6030000000100024, &(0x7f0000000000)=0xffffffffffffffff}) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) r7 = ioctl$KVM_CREATE_VM(r6, 0x894c, 0x0) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r9, r10, &(0x7f0000b74000/0x400000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x40}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$arm64(r9, r10, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000880)=[{0x0, 0x0}], 0x1, 0x0, &(0x7f00000008c0)=[@featur2], 0x1) syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000bff000/0x400000)=nil) ioctl$KVM_CREATE_VCPU(r7, 0xb703, 0x0) r11 = openat$kvm(0x0, &(0x7f0000000100), 0x100800, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = eventfd2(0xfffffffa, 0x80001) ioctl$KVM_IOEVENTFD(r12, 0x4040ae79, &(0x7f0000000140)={0x80, 0x50000, 0x0, r13}) ioctl$KVM_REGISTER_COALESCED_MMIO(r12, 0x4010ae67, &(0x7f0000000000)={0x1, 0x37d03030d7a92616}) ioctl$KVM_REGISTER_COALESCED_MMIO(r12, 0x4010ae67, &(0x7f0000000180)={0x10000, 0x4000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r12, 0x4010ae68, &(0x7f0000000280)={0x30000, 0x10d000}) syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000b80), &(0x7f0000000040)=[@featur1={0x1, 0x4}], 0x1) 36m32.008349566s ago: executing program 1 (id=56): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x8, 0x80800) r3 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r6 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r5, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000300)="fb4149dd033b8986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67525673312b01040000000000002627e7000000000000000200", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x12, r5, 0x0) close(0xffffffffffffffff) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x109272, 0x1f01) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40800, 0x0) ioctl$KVM_CREATE_VM(r7, 0x40049409, 0x6) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x48, 0xdddd1000, 0x0, r2}) close(r2) close(r1) 36m25.019046729s ago: executing program 0 (id=57): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101900, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000500)={0x2, 0x1, 0x1000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r5 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x3}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000140)={0x4, 0x0, [{0x1, 0x2, 0x1, 0x0, @adapter={0x7, 0x100000000, 0x8, 0x0, 0x7}}, {0x9, 0x2, 0x1, 0x0, @adapter={0xd4ff, 0x6d39, 0x2, 0x0, 0x7f}}, {0x3, 0x0, 0x1, 0x0, @sint={0x6, 0x8000}}, {0x0, 0x0, 0x0, 0x0, @adapter={0x8f9, 0xe808e8f, 0x3f, 0x7, 0x332ccd89}}]}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x3}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4000ae84, &(0x7f0000000300)={{0x40000, 0x5112230311195ad3, 0x3, 0x81, 0x5b, 0xb, 0x81, 0x8, 0xe, 0x78, 0x3, 0x6}, {0x7f625000, 0xdddd1000, 0x10, 0x81, 0xb, 0x0, 0x0, 0xf2, 0x10, 0xcb, 0x9, 0x98}, {0x40000, 0x100000, 0x10, 0x0, 0xa6, 0x7, 0x2d, 0xf2, 0xa, 0x0, 0x2, 0x4}, {0x26000, 0x54000, 0xa, 0x7e, 0x6, 0x7, 0x5c, 0x9, 0x4, 0x2, 0xe, 0xef}, {0x6000, 0x81c0003, 0x4, 0x1b, 0xf1, 0xa4, 0x0, 0xa, 0x5, 0x2, 0xff}, {0x0, 0x6000, 0x8, 0x7, 0x4, 0x40, 0x8, 0x9, 0x4, 0x9a, 0xd, 0x7}, {0x26000, 0x26000, 0xbd6e87c0ceccddee, 0x9, 0x5, 0x8, 0xf6, 0xa, 0x0, 0x5, 0x8, 0x2}, {0x3000, 0x5000, 0x10, 0x6, 0x2, 0x7f, 0x5, 0x5, 0x4, 0x1, 0x6, 0x81}, {0x80a0000, 0x2}, {0x58000, 0xfffd}, 0x40000000, 0x0, 0x58000, 0x200b8, 0xf, 0x1, 0xdddd0000, [0x4, 0x1, 0x81, 0x2]}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x9b, 0xf, 0x0, 0x5, 0x8, 0x82, 0x46, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x900001, 0x0, 0x0, 0x3, 0xa, 0x8, '\x00', 0x1, 0x93}) write$eventfd(r9, &(0x7f00000001c0)=0x3, 0xfdef) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0x400454c9, 0x40) r11 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000180)={0x0, &(0x7f0000000280)=[@svc={0x122, 0x40, {0x8400000a, [0x6, 0x4, 0x10000, 0xb]}}, @code={0xa, 0x6c, {"001ca00e008008d5007008d520648fd200a0b8f2a10180d2e20180d2c30080d2840180d2020000d400a0800d000028d5000028d560d194d20000b8f2210080d2e20080d2230180d2c40180d2020000d4009c000f00000053"}}, @uexit={0x0, 0x18, 0xa1}, @memwrite={0x6e, 0x30, @generic={0xffffffff, 0x956, 0x8, 0x9}}, @memwrite={0x6e, 0x30, @generic={0x26000, 0x80b, 0x7, 0x8}}, @code={0xa, 0x6c, {"0000000e0008403a000020ca000008d5007008d5000008d5008008d520609dd20000b8f2810180d2c20080d2030180d2840180d2020000d4000028d500c285d20000b8f2210180d2c20080d2a30080d2640180d2020000d4"}}, @msr={0x14, 0x20, {0x603000000013806f, 0xfffffffffffffc01}}, @uexit={0x0, 0x18, 0x4}, @svc={0x122, 0x40, {0xc4000007, [0x7, 0x0, 0x57e9, 0x7]}}, @msr={0x14, 0x20, {0x619dc30deccad9c7, 0x4}}, @mrs={0xbe, 0x18, {0x6030000000138046}}, @its_send_cmd={0xaa, 0x28, {0xb, 0x0, 0x2, 0xa, 0xc, 0x1, 0x3}}, @mrs={0xbe, 0x18, {0x603000000013de92}}, @msr={0x14, 0x20, {0x13a9, 0x8}}, @its_send_cmd={0xaa, 0x28, {0xa, 0x1, 0x1, 0x7, 0x80, 0x0, 0x3}}, @msr={0x14, 0x20, {0x603000000013c529, 0x400}}, @its_send_cmd={0xaa, 0x28, {0xe, 0x0, 0x2, 0x1, 0x3, 0x3ff, 0x1}}, @its_setup={0x82, 0x28, {0x2, 0x0, 0xc2}}, @eret={0xe6, 0x18}], 0x350}, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) 36m20.990810095s ago: executing program 1 (id=58): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x4) ioctl$KVM_ARM_VCPU_INIT(r5, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) ioctl$KVM_SET_ONE_REG(r5, 0x4010aeac, &(0x7f00000000c0)=@arm64_core={0x6030000000100012, &(0x7f0000000040)=0x100}) r6 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f00000001c0)="fb0149dd833be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8faa767969d22627e700", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) r7 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000000)=@arm64_sve={0x60800000001501b7, &(0x7f0000000180)=0x5}) ioctl$KVM_CREATE_VM(r7, 0x401c5820, 0x20000007) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x4) (async) ioctl$KVM_ARM_VCPU_INIT(r5, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) (async) ioctl$KVM_SET_ONE_REG(r5, 0x4010aeac, &(0x7f00000000c0)=@arm64_core={0x6030000000100012, &(0x7f0000000040)=0x100}) (async) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r2, 0x0) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f00000001c0)="fb0149dd833be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8faa767969d22627e700", 0x0, 0x48) (async) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) (async) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000000)=@arm64_sve={0x60800000001501b7, &(0x7f0000000180)=0x5}) (async) ioctl$KVM_CREATE_VM(r7, 0x401c5820, 0x20000007) (async) 36m11.090212754s ago: executing program 1 (id=59): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x28081, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000769000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=[@featur2={0x1, 0x5}], 0x1) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000380)={0x0, &(0x7f0000000100)=[@smc={0x1e, 0x40, {0x84000004, [0x3, 0x3, 0x2, 0x3f8b, 0xf7b0]}}], 0x40}, &(0x7f00000000c0)=[@featur2={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) 36m7.872965973s ago: executing program 0 (id=60): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r3, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r7, 0x4018aee3, &(0x7f0000000000)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0xb}) r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffd000/0x1000)=nil, r8, 0x1000003, 0x11, r3, 0x0) r9 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, r9, 0x8, 0x13, r3, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x4000)=nil, r9, 0x0, 0x12, r3, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) 36m2.552952126s ago: executing program 1 (id=61): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0) (async) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) (async, rerun: 64) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x32) (rerun: 64) syz_kvm_vgic_v3_setup(r7, 0x3, 0x320) (async) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r9, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_irq={0x0, 0x0, 0x0, &(0x7f00000000c0)=0x11}) r10 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, r10, 0x3, 0x23ac5f9b426ec4b1, 0xffffffffffffffff, 0x0) (async) r11 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async, rerun: 32) openat$kvm(0x0, 0x0, 0x0, 0x0) (rerun: 32) ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r12, 0x5452, 0x110c230300) (async) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x2000, 0x8, 0xffffffffffffffff, 0x20}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x30000, 0x0) (async, rerun: 64) r13 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) (rerun: 64) r14 = syz_kvm_add_vcpu$arm64(r13, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@msr={0x14, 0x20, {0x603000000013df40, 0x8000}}], 0x20}, 0x0, 0x0) ioctl$KVM_RUN(r14, 0xae80, 0x0) 36m0.579297494s ago: executing program 0 (id=62): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x8080000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x10004, 0x1, 0x41000, 0x1000, &(0x7f0000001000/0x1000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x10004, 0x1, 0x41000, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000/0x3000)=nil}) (async) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000/0x3000)=nil}) eventfd2(0x7, 0x801) 35m54.788939394s ago: executing program 0 (id=63): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$kvm(0x0, &(0x7f0000000280), 0x80401, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f00000001c0)={0x8, 0xffffffffffffffff}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x5, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f00000000c0)={0x0, &(0x7f0000000300)=[@irq_setup={0x46, 0x18, {0x0, 0x321}}, @mrs={0xbe, 0x18, {0x603000000013c085}}, @eret={0xe6, 0x18, 0x80000000}, @hvc={0x32, 0x40, {0x80000000, [0x2, 0xffffffffffffffff, 0x2f0b0000000, 0x800, 0x1ce14014]}}, @msr={0x14, 0x20, {0x603000000013c608, 0x8000000000000001}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xffd0, 0x5}}], 0xd8}, 0x0, 0x0) (async) syz_kvm_vgic_v3_setup(r6, 0x1, 0x100) (async) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000002c0)=@attr_other={0x0, 0x8, 0x108, &(0x7f0000000000)=0xc000000000000000}) (async) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x4, 0x2, 0x0}) (async, rerun: 32) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x181b03, 0x0) (rerun: 32) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0x400454d9, 0x110c23000a) (async) r12 = mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r12, 0x20, &(0x7f0000000100)="746abf250f7959c813e4adfb369b808022e69fe80cfadce4a1259e77bab54ac9749537b3d016bb7f745a6e22d2f9ff443f19467748a3fe02c239457600", 0x0, 0xfffffffffffffec5) (async, rerun: 32) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async, rerun: 32) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0) (async) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x0, 0x5, &(0x7f0000000100)=0x8010000000000001}) close(0x4) (async) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x9) (async) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) (async) ioctl$KVM_SET_DEVICE_ATTR_vm(r1, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)={0xef000000, 0x1000, 0x2}}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x10200, 0x1, 0x58000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) 35m21.540911936s ago: executing program 0 (id=64): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x212082, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0x80111500, 0x20000000) write$eventfd(r1, &(0x7f0000000000), 0xfffffdef) munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_SREGS(r2, 0x4000ae84, &(0x7f0000000380)={{0xeeee0000, 0x3000, 0x8, 0xc, 0x8, 0xe, 0xa2, 0x7, 0x6, 0x4, 0xd4, 0xf}, {0xa000, 0x41000, 0x3, 0xff, 0xb9, 0x9, 0x4, 0x0, 0x5, 0x1, 0xa9, 0x40}, {0xfec00000, 0x80a0000, 0x8, 0x6, 0x26, 0x2, 0x0, 0xe, 0x1, 0x6, 0x6}, {0xfec03002, 0xb000, 0x9, 0x1, 0x5, 0xff, 0x1, 0xe, 0xc, 0xb, 0x1, 0x9d}, {0x70000, 0x50000, 0x10, 0x3, 0x7, 0x8, 0x4, 0x9, 0x9, 0x1, 0x4b, 0x3}, {0xffffffff, 0xe000, 0x9, 0xf4, 0x3, 0x7, 0x5, 0x2, 0x4, 0x7f, 0x60, 0x9}, {0xb000, 0xfec00000, 0x4, 0x43, 0x7, 0xd, 0x6f, 0x0, 0x4, 0x80, 0x3, 0x1}, {0x70000, 0x1ffe, 0x4, 0x7, 0x0, 0x7, 0x9, 0x94, 0x8, 0x80, 0x5, 0x9}, {0xeeee0000, 0xe6}, {0xc000, 0x3}, 0x0, 0x0, 0x2000, 0x102050, 0xa, 0x2000, 0x2, [0x3, 0x7, 0xefd, 0x8]}) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) r3 = openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000100)={0x0, &(0x7f0000000240)}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r5, 0x1, 0x100) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0) (async) r9 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r13, 0x5452, 0x110c230300) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000140)={0xbbfbfe6201889764, 0xffffffffffffffff, 0x1}) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xf, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0) 35m15.632161513s ago: executing program 32 (id=61): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0) (async) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) (async, rerun: 64) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x32) (rerun: 64) syz_kvm_vgic_v3_setup(r7, 0x3, 0x320) (async) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r9, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_irq={0x0, 0x0, 0x0, &(0x7f00000000c0)=0x11}) r10 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, r10, 0x3, 0x23ac5f9b426ec4b1, 0xffffffffffffffff, 0x0) (async) r11 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async, rerun: 32) openat$kvm(0x0, 0x0, 0x0, 0x0) (rerun: 32) ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r12, 0x5452, 0x110c230300) (async) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x2000, 0x8, 0xffffffffffffffff, 0x20}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x30000, 0x0) (async, rerun: 64) r13 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) (rerun: 64) r14 = syz_kvm_add_vcpu$arm64(r13, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@msr={0x14, 0x20, {0x603000000013df40, 0x8000}}], 0x20}, 0x0, 0x0) ioctl$KVM_RUN(r14, 0xae80, 0x0) 34m34.238244556s ago: executing program 33 (id=64): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x212082, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0x80111500, 0x20000000) write$eventfd(r1, &(0x7f0000000000), 0xfffffdef) munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_SREGS(r2, 0x4000ae84, &(0x7f0000000380)={{0xeeee0000, 0x3000, 0x8, 0xc, 0x8, 0xe, 0xa2, 0x7, 0x6, 0x4, 0xd4, 0xf}, {0xa000, 0x41000, 0x3, 0xff, 0xb9, 0x9, 0x4, 0x0, 0x5, 0x1, 0xa9, 0x40}, {0xfec00000, 0x80a0000, 0x8, 0x6, 0x26, 0x2, 0x0, 0xe, 0x1, 0x6, 0x6}, {0xfec03002, 0xb000, 0x9, 0x1, 0x5, 0xff, 0x1, 0xe, 0xc, 0xb, 0x1, 0x9d}, {0x70000, 0x50000, 0x10, 0x3, 0x7, 0x8, 0x4, 0x9, 0x9, 0x1, 0x4b, 0x3}, {0xffffffff, 0xe000, 0x9, 0xf4, 0x3, 0x7, 0x5, 0x2, 0x4, 0x7f, 0x60, 0x9}, {0xb000, 0xfec00000, 0x4, 0x43, 0x7, 0xd, 0x6f, 0x0, 0x4, 0x80, 0x3, 0x1}, {0x70000, 0x1ffe, 0x4, 0x7, 0x0, 0x7, 0x9, 0x94, 0x8, 0x80, 0x5, 0x9}, {0xeeee0000, 0xe6}, {0xc000, 0x3}, 0x0, 0x0, 0x2000, 0x102050, 0xa, 0x2000, 0x2, [0x3, 0x7, 0xefd, 0x8]}) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) r3 = openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000100)={0x0, &(0x7f0000000240)}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r5, 0x1, 0x100) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0) (async) r9 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r13, 0x5452, 0x110c230300) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000140)={0xbbfbfe6201889764, 0xffffffffffffffff, 0x1}) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xf, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0) 10m13.301465281s ago: executing program 3 (id=229): r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_ARM_VCPU_INIT(r4, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) ioctl$KVM_GET_ONE_REG(r4, 0x4010aeab, &(0x7f0000000080)=@arm64_sys={0x603000000013c4f6, &(0x7f0000000100)=0x3}) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x181b03, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r8, 0x400454d4, 0x110c23000a) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r9 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x0, 0x0}) ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) r12 = ioctl$KVM_CREATE_VM(r11, 0x894c, 0x0) ioctl$KVM_CREATE_VCPU(r12, 0x8004b708, 0x0) syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r13 = syz_kvm_add_vcpu$arm64(r0, &(0x7f0000000b80)={0x0, &(0x7f00000002c0)=[@hvc={0x32, 0x40, {0x84000003, [0xa00000000, 0x4, 0x4, 0x9, 0x4d]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r13, 0xae80, 0x0) 9m57.443724721s ago: executing program 3 (id=231): r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = openat$kvm(0x0, &(0x7f0000000040), 0xc8000, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3) openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_ARM_VCPU_INIT(r4, 0x4020aeae, &(0x7f0000000000)={0x5, 0x18}) ioctl$KVM_ARM_VCPU_FINALIZE(r4, 0x4004aec2, &(0x7f0000000180)=0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_ARM_VCPU_INIT(r4, 0x4020aeae, &(0x7f0000000000)={0x5, 0x18}) (async) syz_kvm_vgic_v3_setup(r3, 0x3, 0x180) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r0, &(0x7f0000000b80)={0x0, &(0x7f00000002c0)=[@hvc={0x32, 0x40, {0x8400000a, [0xfffffffffffff801, 0x0, 0xb, 0x10, 0x5]}}, @smc={0x1e, 0x40, {0xc4000011, [0x2, 0x3, 0x8, 0x8, 0xfb]}}, @irq_setup={0x46, 0x18, {0x3, 0x2ec}}, @uexit={0x0, 0x18, 0x5}], 0xb0}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) 9m44.952483139s ago: executing program 3 (id=233): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xcccc0000, 0x1000, &(0x7f0000f15000/0x1000)=nil}) syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f00008a8000/0x400000)=nil) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, r3, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x4}}], 0x28}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r5, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x2, 0x4f832, 0xffffffffffffffff, 0x1000000) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x8, 0x88, &(0x7f0000000000)=0x10}) r9 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$KVM_KVMCLOCK_CTRL(r9, 0xaead) 9m42.604895366s ago: executing program 2 (id=234): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, &(0x7f0000000180)=@attr_arm64={0x0, 0x5, 0x1, &(0x7f0000000100)=0xbff3}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20800, 0x0) 9m36.023604914s ago: executing program 2 (id=235): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1e) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f00000001c0)={0x8}) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000240)=@attr_riscv64=@attr_addr={0x0, 0x1, @aplic, &(0x7f0000000180)=0x4}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@mrs={0xbe, 0x18, {0x603000000013df40}}], 0x18}, &(0x7f0000000100)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r8, 0x4018aee1, &(0x7f0000000140)=@attr_pmu_init) r9 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04) r10 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r9, 0x3, 0x11, r8, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$arm64(r8, r10, 0xffffffffffffffff) r11 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r4, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r11, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, 0x0) r14 = syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000b7c000/0x400000)=nil) r15 = syz_kvm_add_vcpu$arm64(r14, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r15, 0x4018aee1, &(0x7f0000000000)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0x20e4586c}) ioctl$KVM_RUN(r15, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000005000/0x2000)=nil, 0x930, 0x2000001, 0x13, r4, 0x0) r16 = openat$kvm(0x0, &(0x7f0000000040), 0x400, 0x0) ioctl$KVM_CREATE_VM(r16, 0x80086601, 0x20000000) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) 9m23.376500111s ago: executing program 2 (id=236): ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000100)=@attr_other={0x0, 0x8, 0x4}) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000dd4000/0x3000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) r4 = eventfd2(0x0, 0x0) close(r4) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) write$eventfd(r4, &(0x7f0000000180)=0x5, 0xfffffde3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f0000000140)={0x1ff8, 0x102000}) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0) 9m11.319974163s ago: executing program 3 (id=237): r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x29) syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000340)=[@svc={0x122, 0x40, {0x100, [0x9, 0x7030, 0x3, 0x5, 0x3]}}, @code={0xa, 0x6c, {"008008d50044207e0000809a007008d5006c200e007c001b20ec99d20040b8f2810180d2e20180d2230180d2240180d2020000d4a0a19dd20080b0f2810180d2620080d2630080d2640080d2020000d40820601e000008d5"}}], 0xac}, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0xffffffffffffffa7) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101900, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000500)={0x2, 0x1, 0x1000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f0000000140)={0xb6, 0x0, 0x9}) eventfd2(0x5, 0x800) 9m10.183896772s ago: executing program 2 (id=238): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x36) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f0000000080)={0x100000000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r4, 0x40a0ae49, &(0x7f0000000080)={0x1fd, 0x4, 0xdddd0000, 0x2000, &(0x7f0000ffd000/0x2000)=nil, 0x110000, r5}) r6 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f00008e4000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000100)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000bfe000/0x400000)=nil) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x13, r11, 0x0) r12 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000040)={0x0, &(0x7f00000003c0)=[@its_setup={0x82, 0x28, {0x4, 0x0, 0x20e}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80a0000, 0x0, 0x80000000, 0x1}}], 0x58}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r12, 0xae80, 0x0) 9m1.230711592s ago: executing program 3 (id=239): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae03, 0xbb) syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000bff000/0x400000)=nil) (async) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r4, 0xae03, 0xe4) (async) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x4}}], 0x28}, 0x0, 0x0) (async) syz_kvm_vgic_v3_setup(r5, 0x1, 0x100) mmap$KVM_VCPU(&(0x7f0000e88000/0x2000)=nil, 0x50000, 0x2000002, 0x10031, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) (async) munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000) (async) munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000) (async) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x2, 0x4f832, 0xffffffffffffffff, 0x1000000) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x8, 0x88, &(0x7f0000000000)=0x10}) (async) r9 = ioctl$KVM_GET_STATS_FD_cpu(r7, 0xaece) ioctl$KVM_HAS_DEVICE_ATTR_vm(r9, 0x4018aee3, &(0x7f0000000240)=@attr_other={0x0, 0x40, 0x8000000000000001, &(0x7f0000000140)=0x234}) 8m50.173239571s ago: executing program 2 (id=240): r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) munmap(&(0x7f0000011000/0xc00000)=nil, 0xc00000) (async, rerun: 32) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async, rerun: 32) munmap(&(0x7f0000d8f000/0x4000)=nil, 0x4000) (async) munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000) (async) mmap$KVM_VCPU(&(0x7f0000c58000/0x4000)=nil, 0x930, 0x200000a, 0x80031, 0xffffffffffffffff, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000000)={0x802}) (async, rerun: 32) ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, &(0x7f0000000000)={0x9b, 0x7f}) (async, rerun: 32) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x3000000, 0x4d832, 0xffffffffffffffff, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x27) syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) (async) r5 = syz_kvm_add_vcpu$arm64(r0, &(0x7f0000000b80)={0x0, &(0x7f0000000100)}, &(0x7f0000000040)=[@featur1={0x1, 0x9c}], 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) 8m48.193422997s ago: executing program 3 (id=241): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000080)={0x0, 0xffffff6e}) (async, rerun: 32) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x33) (rerun: 32) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f00000000c0)={0x1, 0x0, [{0xc, 0x2, 0x1, 0x0, @msi={0xebb, 0x394c794c, 0x7f, 0x800}}]}) (async, rerun: 64) close(r4) (async, rerun: 64) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x2e) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r6, r7, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000100)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_ONE_REG(r7, 0x4010aeac, &(0x7f0000000140)=@arm64_core={0x603000000010001e, 0x0}) (async) r8 = eventfd2(0xe, 0x1) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000000)={0x4, 0x100000, 0x0, r8, 0x4}) (async, rerun: 64) r9 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0) (rerun: 64) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, 0x0) (async) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_ARM_VCPU_INIT(r11, 0x4020aeae, &(0x7f0000000040)={0x5}) (async, rerun: 32) ioctl$KVM_SET_ONE_REG(r11, 0x4010aeac, &(0x7f0000000100)=@arm64_sys={0x603000000013c119, &(0x7f0000000000)=0xe2}) (async, rerun: 32) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f00000001c0)={0x0, 0xffffffff}) 8m38.296529204s ago: executing program 2 (id=242): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x3}) (async) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4000ae84, &(0x7f0000000200)={{0x0, 0x1000, 0x1, 0x3a, 0x0, 0x9, 0xba, 0xc, 0x2, 0x6, 0x0, 0x9}, {0xeeef0000, 0x0, 0xd, 0x1, 0xfc, 0x1, 0x5, 0xc, 0x7, 0x4, 0x6, 0x6}, {0x0, 0x50000, 0x8, 0x9, 0x6, 0x7, 0x3, 0xdb, 0x8, 0x1, 0x1}, {0x2, 0xe000, 0x0, 0x55, 0x7f, 0x80, 0x4, 0x4, 0xa, 0x1, 0x8, 0x9}, {0x6000, 0x0, 0xd, 0x38, 0x0, 0x6, 0x8, 0x1, 0x81, 0x93, 0x7f, 0x8}, {0xdddd1000, 0x50000, 0xd, 0x5, 0x9, 0x5, 0x2, 0x8, 0x81, 0xf, 0x5, 0xfe}, {0xffff1000, 0xffe, 0x14, 0x1, 0x1, 0x7b, 0xfd, 0x9, 0x6a, 0xe, 0x8, 0xd1}, {0xeeef0000, 0x7000, 0x4, 0x3, 0x0, 0x0, 0x7, 0xfa, 0x10, 0x2, 0x2, 0x1}, {0x40000, 0x2}, {0x8000000, 0xc71}, 0x20000002, 0x0, 0x1000, 0x8, 0x8, 0x8000, 0x7000, [0x3, 0x8000000000000000, 0x89, 0x1]}) write$eventfd(0xffffffffffffffff, 0x0, 0x0) (async) syz_kvm_add_vcpu$arm64(0x0, 0x0, 0x0, 0x0) (async) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000200)={0x3, "e0b52f"}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x8, 0xf, 0x0, 0x5, 0x6, 0x86, 0x6, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x8, '\x00', 0x1, 0x7}) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) openat$kvm(0x0, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, 0x0) (async) openat$kvm(0x0, 0x0, 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000000)={0x802}) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r4, &(0x7f00000001c0), 0xe80) 8m1.976076309s ago: executing program 34 (id=241): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000080)={0x0, 0xffffff6e}) (async, rerun: 32) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x33) (rerun: 32) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f00000000c0)={0x1, 0x0, [{0xc, 0x2, 0x1, 0x0, @msi={0xebb, 0x394c794c, 0x7f, 0x800}}]}) (async, rerun: 64) close(r4) (async, rerun: 64) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x2e) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r6, r7, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000100)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_ONE_REG(r7, 0x4010aeac, &(0x7f0000000140)=@arm64_core={0x603000000010001e, 0x0}) (async) r8 = eventfd2(0xe, 0x1) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000000)={0x4, 0x100000, 0x0, r8, 0x4}) (async, rerun: 64) r9 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0) (rerun: 64) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, 0x0) (async) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_ARM_VCPU_INIT(r11, 0x4020aeae, &(0x7f0000000040)={0x5}) (async, rerun: 32) ioctl$KVM_SET_ONE_REG(r11, 0x4010aeac, &(0x7f0000000100)=@arm64_sys={0x603000000013c119, &(0x7f0000000000)=0xe2}) (async, rerun: 32) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f00000001c0)={0x0, 0xffffffff}) 7m51.81132995s ago: executing program 35 (id=242): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x3}) (async) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4000ae84, &(0x7f0000000200)={{0x0, 0x1000, 0x1, 0x3a, 0x0, 0x9, 0xba, 0xc, 0x2, 0x6, 0x0, 0x9}, {0xeeef0000, 0x0, 0xd, 0x1, 0xfc, 0x1, 0x5, 0xc, 0x7, 0x4, 0x6, 0x6}, {0x0, 0x50000, 0x8, 0x9, 0x6, 0x7, 0x3, 0xdb, 0x8, 0x1, 0x1}, {0x2, 0xe000, 0x0, 0x55, 0x7f, 0x80, 0x4, 0x4, 0xa, 0x1, 0x8, 0x9}, {0x6000, 0x0, 0xd, 0x38, 0x0, 0x6, 0x8, 0x1, 0x81, 0x93, 0x7f, 0x8}, {0xdddd1000, 0x50000, 0xd, 0x5, 0x9, 0x5, 0x2, 0x8, 0x81, 0xf, 0x5, 0xfe}, {0xffff1000, 0xffe, 0x14, 0x1, 0x1, 0x7b, 0xfd, 0x9, 0x6a, 0xe, 0x8, 0xd1}, {0xeeef0000, 0x7000, 0x4, 0x3, 0x0, 0x0, 0x7, 0xfa, 0x10, 0x2, 0x2, 0x1}, {0x40000, 0x2}, {0x8000000, 0xc71}, 0x20000002, 0x0, 0x1000, 0x8, 0x8, 0x8000, 0x7000, [0x3, 0x8000000000000000, 0x89, 0x1]}) write$eventfd(0xffffffffffffffff, 0x0, 0x0) (async) syz_kvm_add_vcpu$arm64(0x0, 0x0, 0x0, 0x0) (async) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000200)={0x3, "e0b52f"}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x8, 0xf, 0x0, 0x5, 0x6, 0x86, 0x6, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x8, '\x00', 0x1, 0x7}) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) openat$kvm(0x0, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, 0x0) (async) openat$kvm(0x0, 0x0, 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000000)={0x802}) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r4, &(0x7f00000001c0), 0xe80) 1m6.343565961s ago: executing program 4 (id=243): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x2}}], 0x20}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x25) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000040)={0x2, 0x0, [{0xffff, 0x5, 0x0, 0x0, @irqchip={0x586b, 0x3}}, {0x10001, 0x4, 0x0, 0x0, @msi={0x3, 0x0, 0x0, 0xffff}}]}) ioctl$KVM_HAS_DEVICE_ATTR(r6, 0x4018aee3, &(0x7f0000000180)=@attr_riscv64=@attr_imsic={0x0, 0x1, 0x0, &(0x7f0000000280)=0x3}) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_ARM_VCPU_INIT(r7, 0x4020aeae, &(0x7f0000000200)={0x5, 0x1f}) ioctl$KVM_SET_ONE_REG(r7, 0x4010aeac, &(0x7f00000000c0)=@arm64_sys={0x603000000013dce0, &(0x7f0000000000)=0x5}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 47.636224023s ago: executing program 5 (id=244): openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) (async) openat$kvm(0x0, 0x0, 0x0, 0x0) (async) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x81, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r3, 0xae03, 0xf4) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000240)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000180)=0x8080000}) (async) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000200)={0x8090040, 0x0, 0x0, 0x1}) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) (async) munmap(&(0x7f0000988000/0x2000)=nil, 0x2000) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80403, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x2b) ioctl$KVM_REGISTER_COALESCED_MMIO(r8, 0x4010ae67, &(0x7f0000000240)={0x1, 0xe000, 0x1}) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r8, 0x4010ae67, &(0x7f0000000080)={0x3000, 0x1000, 0x1}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r8, 0x4010ae68, &(0x7f0000000040)={0x0, 0x10c000, 0x1}) (async) r9 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) r12 = mmap$KVM_VCPU(&(0x7f0000800000/0x800000)=nil, 0x0, 0x280000b, 0x12, r11, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r12, 0x20, &(0x7f0000000080)="fb0149dd033be3abf408020000f71a0000005a9610fbff67521ce16f8f1f3234702f6ed1963bd2262f00000000000000000200df38000000000000000020001e91114900", 0x0, 0x48) 18.458364327s ago: executing program 36 (id=243): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x2}}], 0x20}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x25) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000040)={0x2, 0x0, [{0xffff, 0x5, 0x0, 0x0, @irqchip={0x586b, 0x3}}, {0x10001, 0x4, 0x0, 0x0, @msi={0x3, 0x0, 0x0, 0xffff}}]}) ioctl$KVM_HAS_DEVICE_ATTR(r6, 0x4018aee3, &(0x7f0000000180)=@attr_riscv64=@attr_imsic={0x0, 0x1, 0x0, &(0x7f0000000280)=0x3}) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_ARM_VCPU_INIT(r7, 0x4020aeae, &(0x7f0000000200)={0x5, 0x1f}) ioctl$KVM_SET_ONE_REG(r7, 0x4010aeac, &(0x7f00000000c0)=@arm64_sys={0x603000000013dce0, &(0x7f0000000000)=0x5}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 37 (id=244): openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) (async) openat$kvm(0x0, 0x0, 0x0, 0x0) (async) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x81, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r3, 0xae03, 0xf4) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000240)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000180)=0x8080000}) (async) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000200)={0x8090040, 0x0, 0x0, 0x1}) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) (async) munmap(&(0x7f0000988000/0x2000)=nil, 0x2000) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80403, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x2b) ioctl$KVM_REGISTER_COALESCED_MMIO(r8, 0x4010ae67, &(0x7f0000000240)={0x1, 0xe000, 0x1}) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r8, 0x4010ae67, &(0x7f0000000080)={0x3000, 0x1000, 0x1}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r8, 0x4010ae68, &(0x7f0000000040)={0x0, 0x10c000, 0x1}) (async) r9 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) r12 = mmap$KVM_VCPU(&(0x7f0000800000/0x800000)=nil, 0x0, 0x280000b, 0x12, r11, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r12, 0x20, &(0x7f0000000080)="fb0149dd033be3abf408020000f71a0000005a9610fbff67521ce16f8f1f3234702f6ed1963bd2262f00000000000000000200df38000000000000000020001e91114900", 0x0, 0x48) kernel console output (not intermixed with test programs): [ 364.066277][ T24] audit: type=1400 audit(363.410:74): avc: denied { read write } for pid=3275 comm="scp" name="null" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 364.067060][ T24] audit: type=1400 audit(363.420:75): avc: denied { open } for pid=3275 comm="scp" path="/dev/null" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 377.456181][ T24] audit: type=1400 audit(376.810:76): avc: denied { read } for pid=3225 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 383.987466][ T24] audit: type=1400 audit(383.310:77): avc: denied { write } for pid=3280 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 387.760425][ T24] audit: type=1400 audit(387.120:78): avc: denied { write } for pid=3283 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 391.177174][ T3225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.599606][ T24] audit: type=1400 audit(399.960:79): avc: denied { write } for pid=3287 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 404.533340][ T24] audit: type=1400 audit(403.890:80): avc: denied { write } for pid=3290 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 415.888733][ T24] audit: type=1400 audit(415.230:81): avc: denied { write } for pid=3296 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 419.612941][ T24] audit: type=1400 audit(418.970:82): avc: denied { write } for pid=3299 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 431.366371][ T24] audit: type=1400 audit(430.700:83): avc: denied { write } for pid=3305 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 435.066222][ T24] audit: type=1400 audit(434.420:84): avc: denied { write } for pid=3308 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 437.511062][ T3225] eql: remember to turn off Van-Jacobson compression on your slave devices [ 445.227941][ T24] audit: type=1400 audit(444.590:85): avc: denied { write } for pid=3313 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 449.265007][ T24] audit: type=1400 audit(448.620:86): avc: denied { write } for pid=3316 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 456.488382][ T24] audit: type=1400 audit(455.820:87): avc: denied { write } for pid=3318 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 461.520815][ T24] audit: type=1400 audit(460.880:88): avc: denied { write } for pid=3321 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 474.982211][ T24] audit: type=1400 audit(474.340:89): avc: denied { write } for pid=3327 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 478.706270][ T24] audit: type=1400 audit(478.040:90): avc: denied { write } for pid=3330 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 484.246213][ T24] audit: type=1400 audit(483.590:91): avc: denied { write } for pid=3332 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 487.932252][ T24] audit: type=1400 audit(487.290:92): avc: denied { write } for pid=3335 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 497.292024][ T24] audit: type=1400 audit(496.650:93): avc: denied { write } for pid=3340 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 500.887087][ T24] audit: type=1400 audit(500.230:94): avc: denied { write } for pid=3343 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 509.909649][ T24] audit: type=1400 audit(509.270:95): avc: denied { write } for pid=3347 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 514.555211][ T24] audit: type=1400 audit(513.890:96): avc: denied { write } for pid=3350 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 534.198190][ T24] audit: type=1400 audit(533.560:97): avc: denied { write } for pid=3358 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 537.923155][ T24] audit: type=1400 audit(537.280:98): avc: denied { write } for pid=3361 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 553.924630][ T24] audit: type=1400 audit(553.280:99): avc: denied { write } for pid=3368 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 559.045241][ T24] audit: type=1400 audit(558.400:100): avc: denied { write } for pid=3371 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:62331' (ED25519) to the list of known hosts. [ 566.386269][ T24] audit: type=1400 audit(565.730:101): avc: denied { name_bind } for pid=3376 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 569.165243][ T24] audit: type=1400 audit(568.500:102): avc: denied { write } for pid=3377 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 569.192454][ T24] audit: type=1400 audit(568.550:103): avc: denied { execute } for pid=3378 comm="sh" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 569.241214][ T24] audit: type=1400 audit(568.600:104): avc: denied { execute_no_trans } for pid=3378 comm="sh" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 573.210866][ T24] audit: type=1400 audit(572.570:105): avc: denied { write } for pid=3381 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 610.245915][ T24] audit: type=1400 audit(609.600:106): avc: denied { mounton } for pid=3378 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 610.281675][ T24] audit: type=1400 audit(609.640:107): avc: denied { mount } for pid=3378 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 610.359240][ T3378] cgroup: Unknown subsys name 'net' [ 610.411378][ T24] audit: type=1400 audit(609.770:108): avc: denied { unmount } for pid=3378 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 610.815672][ T3378] cgroup: Unknown subsys name 'cpuset' [ 610.940204][ T3378] cgroup: Unknown subsys name 'rlimit' [ 611.727827][ T24] audit: type=1400 audit(611.080:109): avc: denied { setattr } for pid=3378 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 611.749918][ T24] audit: type=1400 audit(611.110:110): avc: denied { mounton } for pid=3378 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 611.773066][ T24] audit: type=1400 audit(611.130:111): avc: denied { mount } for pid=3378 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 612.758169][ T3386] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 612.773315][ T24] audit: type=1400 audit(612.120:112): avc: denied { relabelto } for pid=3386 comm="mkswap" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 612.798922][ T24] audit: type=1400 audit(612.160:113): avc: denied { write } for pid=3386 comm="mkswap" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 612.990229][ T24] audit: type=1400 audit(612.350:114): avc: denied { read } for pid=3378 comm="syz-executor" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 613.010344][ T24] audit: type=1400 audit(612.350:115): avc: denied { open } for pid=3378 comm="syz-executor" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 613.059575][ T3378] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 666.556426][ T24] audit: type=1400 audit(665.910:116): avc: denied { execmem } for pid=3387 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 669.971704][ T24] audit: type=1400 audit(669.330:117): avc: denied { read } for pid=3390 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 670.009172][ T24] audit: type=1400 audit(669.350:118): avc: denied { open } for pid=3389 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 670.056171][ T24] audit: type=1400 audit(669.410:119): avc: denied { mounton } for pid=3390 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 670.262303][ T24] audit: type=1400 audit(669.620:120): avc: denied { module_request } for pid=3389 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 670.300313][ T24] audit: type=1400 audit(669.660:121): avc: denied { module_request } for pid=3390 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 671.247169][ T24] audit: type=1400 audit(670.600:122): avc: denied { sys_module } for pid=3389 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 692.389738][ T3389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 692.638904][ T3389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 692.870470][ T3390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 693.369885][ T3390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 707.749019][ T3389] hsr_slave_0: entered promiscuous mode [ 707.780388][ T3389] hsr_slave_1: entered promiscuous mode [ 708.902122][ T3390] hsr_slave_0: entered promiscuous mode [ 708.938446][ T3390] hsr_slave_1: entered promiscuous mode [ 708.968650][ T3390] debugfs: 'hsr0' already exists in 'hsr' [ 708.969969][ T3390] Cannot create hsr debugfs directory [ 714.313150][ T24] audit: type=1400 audit(713.660:123): avc: denied { create } for pid=3389 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 714.367271][ T24] audit: type=1400 audit(713.720:124): avc: denied { write } for pid=3389 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 714.405954][ T24] audit: type=1400 audit(713.760:125): avc: denied { read } for pid=3389 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 714.557962][ T3389] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 714.787923][ T3389] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 714.861644][ T3389] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 715.085498][ T3389] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 715.151266][ T3389] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 715.257092][ T3389] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 715.505004][ T3389] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 715.677703][ T3389] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 717.008064][ T3390] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 717.165382][ T3390] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 717.281349][ T3390] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 717.389729][ T3390] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 717.466282][ T3390] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 717.577479][ T3390] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 717.637226][ T3390] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 717.768113][ T3390] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 728.692034][ T3389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 730.898629][ T3390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 779.941520][ T3389] veth0_vlan: entered promiscuous mode [ 780.517473][ T3389] veth1_vlan: entered promiscuous mode [ 782.447714][ T3389] veth0_macvtap: entered promiscuous mode [ 782.878887][ T3389] veth1_macvtap: entered promiscuous mode [ 783.378558][ T3390] veth0_vlan: entered promiscuous mode [ 784.187452][ T3390] veth1_vlan: entered promiscuous mode [ 785.108455][ T3438] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.110888][ T3438] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.111565][ T3438] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.112181][ T3438] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.543169][ T3390] veth0_macvtap: entered promiscuous mode [ 787.823122][ T24] audit: type=1400 audit(787.180:126): avc: denied { mount } for pid=3389 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 788.011695][ T3390] veth1_macvtap: entered promiscuous mode [ 788.071915][ T24] audit: type=1400 audit(787.430:127): avc: denied { mounton } for pid=3389 comm="syz-executor" path="/syzkaller.87pXO2/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 788.263066][ T24] audit: type=1400 audit(787.620:128): avc: denied { mount } for pid=3389 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 788.463081][ T24] audit: type=1400 audit(787.800:129): avc: denied { mounton } for pid=3389 comm="syz-executor" path="/syzkaller.87pXO2/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 788.569113][ T24] audit: type=1400 audit(787.920:130): avc: denied { mounton } for pid=3389 comm="syz-executor" path="/syzkaller.87pXO2/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 789.306994][ T24] audit: type=1400 audit(788.630:131): avc: denied { unmount } for pid=3389 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 789.515948][ T24] audit: type=1400 audit(788.870:132): avc: denied { mounton } for pid=3389 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1544 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 789.699902][ T24] audit: type=1400 audit(789.060:133): avc: denied { mount } for pid=3389 comm="syz-executor" name="/" dev="gadgetfs" ino=3718 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 790.040718][ T24] audit: type=1400 audit(789.400:134): avc: denied { mount } for pid=3389 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 790.126378][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.127073][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.127556][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.128076][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.185739][ T24] audit: type=1400 audit(789.540:135): avc: denied { mounton } for pid=3389 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 791.772481][ T3389] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 792.976565][ T24] kauditd_printk_skb: 1 callbacks suppressed [ 792.976910][ T24] audit: type=1400 audit(792.330:137): avc: denied { read write } for pid=3389 comm="syz-executor" name="loop1" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 793.044833][ T24] audit: type=1400 audit(792.370:138): avc: denied { open } for pid=3389 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 793.071253][ T24] audit: type=1400 audit(792.430:139): avc: denied { ioctl } for pid=3389 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=637 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 801.651466][ T24] audit: type=1400 audit(801.000:140): avc: denied { read } for pid=3539 comm="syz.1.2" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 801.691115][ T24] audit: type=1400 audit(801.050:141): avc: denied { open } for pid=3539 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 801.852650][ T24] audit: type=1400 audit(801.210:142): avc: denied { ioctl } for pid=3539 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 813.953238][ T24] audit: type=1400 audit(813.290:143): avc: denied { setattr } for pid=3549 comm="syz.0.3" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 817.081477][ T24] audit: type=1400 audit(816.440:144): avc: denied { write } for pid=3550 comm="syz.1.4" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 845.014697][ T24] audit: type=1400 audit(844.360:145): avc: denied { ioctl } for pid=3564 comm="syz.0.8" path="net:[4026531833]" dev="nsfs" ino=4026531833 ioctlcmd=0x5828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 851.983313][ T24] audit: type=1400 audit(851.330:146): avc: denied { append } for pid=3568 comm="syz.0.10" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 866.467221][ T24] audit: type=1400 audit(865.810:147): avc: denied { execute } for pid=3580 comm="syz.0.12" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=4530 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 876.367374][ T24] audit: type=1400 audit(875.710:148): avc: denied { create } for pid=3588 comm="syz.1.14" anonclass=[kvm-gmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 876.477484][ T24] audit: type=1400 audit(875.830:149): avc: denied { map } for pid=3588 comm="syz.1.14" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=4617 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 876.569808][ T24] audit: type=1400 audit(875.930:150): avc: denied { read } for pid=3588 comm="syz.1.14" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=4617 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 969.470254][ T24] audit: type=1400 audit(968.790:151): avc: denied { write } for pid=3645 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 977.289381][ T24] audit: type=1400 audit(976.650:152): avc: denied { write } for pid=3653 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1029.636359][ T3682] kvm [3682]: Failed to find VMA for hva 0x21016000 [ 1113.250065][ T24] audit: type=1400 audit(1112.610:153): avc: denied { map } for pid=3734 comm="syz.1.52" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1113.306854][ T24] audit: type=1400 audit(1112.660:154): avc: denied { execute } for pid=3734 comm="syz.1.52" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1250.796328][ T3789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1251.276681][ T3789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1279.348491][ T3789] hsr_slave_0: entered promiscuous mode [ 1279.420445][ T3789] hsr_slave_1: entered promiscuous mode [ 1279.465619][ T3789] debugfs: 'hsr0' already exists in 'hsr' [ 1279.466025][ T3789] Cannot create hsr debugfs directory [ 1282.659559][ T3438] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1283.948011][ T3438] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1285.711142][ T3438] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1286.972041][ T3438] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1304.378469][ T3438] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1304.867330][ T3438] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1305.067013][ T3438] bond0 (unregistering): Released all slaves [ 1308.390311][ T3438] hsr_slave_0: left promiscuous mode [ 1308.466881][ T3438] hsr_slave_1: left promiscuous mode [ 1309.076287][ T3438] veth1_macvtap: left promiscuous mode [ 1309.077489][ T3438] veth0_macvtap: left promiscuous mode [ 1309.079398][ T3438] veth1_vlan: left promiscuous mode [ 1309.081032][ T3438] veth0_vlan: left promiscuous mode [ 1333.271883][ T3789] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1333.932019][ T3789] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1334.022351][ T3789] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1334.507221][ T3789] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1334.563029][ T3789] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1334.938859][ T3789] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1335.136448][ T3789] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1335.400649][ T3789] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1346.996778][ T24] audit: type=1400 audit(1346.310:155): avc: denied { write } for pid=3856 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1354.055502][ T24] audit: type=1400 audit(1353.360:156): avc: denied { write } for pid=3868 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1358.777277][ T3789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1359.351110][ T3225] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1361.980457][ T3816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1362.279173][ T3816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1373.796592][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.508655][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1377.448465][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1379.217602][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1380.571118][ T24] audit: type=1400 audit(1379.930:157): avc: denied { write } for pid=3883 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1389.008489][ T24] audit: type=1400 audit(1388.350:158): avc: denied { write } for pid=3891 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1395.790339][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1395.892378][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1395.946701][ T12] bond0 (unregistering): Released all slaves [ 1396.469907][ T3225] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1396.847720][ T12] hsr_slave_0: left promiscuous mode [ 1396.884681][ T12] hsr_slave_1: left promiscuous mode [ 1397.203194][ T12] veth1_macvtap: left promiscuous mode [ 1397.219526][ T12] veth0_macvtap: left promiscuous mode [ 1397.221181][ T12] veth1_vlan: left promiscuous mode [ 1397.222358][ T12] veth0_vlan: left promiscuous mode [ 1413.401625][ T3816] hsr_slave_0: entered promiscuous mode [ 1413.478739][ T3816] hsr_slave_1: entered promiscuous mode [ 1421.497974][ T24] audit: type=1400 audit(1420.850:159): avc: denied { write } for pid=3905 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1426.740441][ T3816] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1426.896030][ T24] audit: type=1400 audit(1426.230:160): avc: denied { write } for pid=3911 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1427.196174][ T3816] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1427.300047][ T3816] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1427.649389][ T3816] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1427.741679][ T3816] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1428.010009][ T3816] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1428.081949][ T3816] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1428.397376][ T3816] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1432.600314][ T3225] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1447.482816][ T24] audit: type=1400 audit(1446.840:161): avc: denied { write } for pid=3932 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1452.218693][ T3816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1454.165727][ T24] audit: type=1400 audit(1453.450:162): avc: denied { write } for pid=3940 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1458.348704][ T3225] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1470.305960][ T24] audit: type=1400 audit(1469.660:163): avc: denied { write } for pid=3956 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1475.457092][ T3789] veth0_vlan: entered promiscuous mode [ 1476.151856][ T3789] veth1_vlan: entered promiscuous mode [ 1478.004874][ T24] audit: type=1400 audit(1477.360:164): avc: denied { write } for pid=3962 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1478.781404][ T3789] veth0_macvtap: entered promiscuous mode [ 1479.239563][ T3789] veth1_macvtap: entered promiscuous mode [ 1482.090180][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1482.097158][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1482.137852][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1482.160975][ T3446] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1483.539294][ T3225] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1502.082920][ T24] audit: type=1400 audit(1501.440:165): avc: denied { write } for pid=3977 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1512.034480][ T24] audit: type=1400 audit(1511.390:166): avc: denied { write } for pid=3984 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1517.950752][ T3225] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1530.358964][ T24] audit: type=1400 audit(1529.720:167): avc: denied { write } for pid=3996 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1533.578631][ T4000] kvm [4000]: Failed to find VMA for hva 0x20c01000 [ 1538.450503][ T24] audit: type=1400 audit(1537.810:168): avc: denied { write } for pid=4005 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1543.505502][ T24] audit: type=1400 audit(1542.850:169): avc: denied { mmap_zero } for pid=4009 comm="syz.2.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 1551.797415][ T3816] veth0_vlan: entered promiscuous mode [ 1552.946275][ T3816] veth1_vlan: entered promiscuous mode [ 1556.918401][ T3816] veth0_macvtap: entered promiscuous mode [ 1557.676979][ T3816] veth1_macvtap: entered promiscuous mode [ 1561.706071][ T3882] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1561.717494][ T48] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1561.718178][ T48] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1561.718728][ T48] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1564.507253][ T24] audit: type=1400 audit(1563.830:170): avc: denied { write } for pid=4018 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1575.579337][ T24] audit: type=1400 audit(1574.920:171): avc: denied { write } for pid=4026 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1578.179226][ T4025] kvm [4025]: Failed to find VMA for hva 0x20d8a000 [ 1583.120722][ T3225] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1604.535409][ T24] audit: type=1400 audit(1603.890:172): avc: denied { write } for pid=4047 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1616.086391][ T24] audit: type=1400 audit(1615.410:173): avc: denied { write } for pid=4056 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1624.319969][ T3225] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1661.874954][ T24] audit: type=1400 audit(1661.230:174): avc: denied { write } for pid=4083 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1672.277381][ T24] audit: type=1400 audit(1671.640:175): avc: denied { write } for pid=4092 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1704.135970][ T24] audit: type=1400 audit(1703.480:176): avc: denied { write } for pid=4107 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1713.042489][ T24] audit: type=1400 audit(1712.400:177): avc: denied { write } for pid=4116 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1742.246071][ T24] audit: type=1400 audit(1741.590:178): avc: denied { write } for pid=4136 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1753.905435][ T24] audit: type=1400 audit(1753.230:179): avc: denied { write } for pid=4146 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1776.400332][ T24] audit: type=1400 audit(1775.690:180): avc: denied { write } for pid=4159 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1785.965040][ T24] audit: type=1400 audit(1785.300:181): avc: denied { write } for pid=4169 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1815.518738][ T24] audit: type=1400 audit(1814.880:182): avc: denied { write } for pid=4184 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1825.527012][ T24] audit: type=1400 audit(1824.860:183): avc: denied { write } for pid=4195 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1851.719522][ T24] audit: type=1400 audit(1851.060:184): avc: denied { write } for pid=4210 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1862.842697][ T24] audit: type=1400 audit(1862.200:185): avc: denied { write } for pid=4218 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1887.610373][ T24] audit: type=1400 audit(1886.970:186): avc: denied { write } for pid=4229 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1896.846475][ T24] audit: type=1400 audit(1896.200:187): avc: denied { write } for pid=4238 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1919.570071][ T24] audit: type=1400 audit(1918.900:188): avc: denied { write } for pid=4253 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1930.819670][ T24] audit: type=1400 audit(1930.170:189): avc: denied { write } for pid=4264 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1950.070852][ T24] audit: type=1400 audit(1949.430:190): avc: denied { write } for pid=4273 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1959.104843][ T24] audit: type=1400 audit(1958.450:191): avc: denied { write } for pid=4280 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2203.562696][ T24] audit: type=1400 audit(2202.920:192): avc: denied { execute } for pid=4401 comm="syz.3.153" path=2F33392F10FBFF67525673312B0104 dev="tmpfs" ino=214 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2213.228979][ T24] audit: type=1400 audit(2212.540:193): avc: denied { write } for pid=4406 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2224.680435][ T24] audit: type=1400 audit(2224.020:194): avc: denied { write } for pid=4414 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2359.002701][ T24] audit: type=1400 audit(2358.360:195): avc: denied { map } for pid=4479 comm="syz.3.174" path="pipe:[8210]" dev="pipefs" ino=8210 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 2413.345352][ T24] audit: type=1400 audit(2412.700:196): avc: denied { write } for pid=4507 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2419.555410][ T24] audit: type=1400 audit(2418.820:197): avc: denied { write } for pid=4510 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2779.157296][ T4698] kvm [4698]: Failed to find VMA for hva 0x20a71000 [ 2788.349131][ T24] audit: type=1400 audit(2787.570:198): avc: denied { write } for pid=4701 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2797.599610][ T24] audit: type=1400 audit(2796.960:199): avc: denied { write } for pid=4713 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2903.433370][ T3925] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2905.252707][ T3925] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2906.780050][ T3925] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2908.169182][ T3925] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2924.471461][ T3925] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2924.672419][ T3925] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2924.768726][ T3925] bond0 (unregistering): Released all slaves [ 2928.349621][ T3925] hsr_slave_0: left promiscuous mode [ 2928.425241][ T3925] hsr_slave_1: left promiscuous mode [ 2928.662876][ T3925] veth1_macvtap: left promiscuous mode [ 2928.671733][ T3925] veth0_macvtap: left promiscuous mode [ 2928.694967][ T3925] veth1_vlan: left promiscuous mode [ 2928.696430][ T3925] veth0_vlan: left promiscuous mode [ 2955.762157][ T4728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2957.026522][ T4728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2972.385885][ T24] audit: type=1400 audit(2971.720:200): avc: denied { write } for pid=4785 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2972.907921][ T4736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2974.188182][ T4736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2979.133064][ T24] audit: type=1400 audit(2978.490:201): avc: denied { write } for pid=4790 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2984.032738][ T3225] 8021q: adding VLAN 0 to HW filter on device eth9 [ 2988.766719][ T4728] hsr_slave_0: entered promiscuous mode [ 2988.841059][ T4728] hsr_slave_1: entered promiscuous mode [ 2988.947010][ T4728] debugfs: 'hsr0' already exists in 'hsr' [ 2988.947389][ T4728] Cannot create hsr debugfs directory [ 3003.935617][ T24] audit: type=1400 audit(3003.280:202): avc: denied { write } for pid=4805 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3011.446450][ T4736] hsr_slave_0: entered promiscuous mode [ 3011.560445][ T4736] hsr_slave_1: entered promiscuous mode [ 3011.696277][ T4736] debugfs: 'hsr0' already exists in 'hsr' [ 3011.696697][ T4736] Cannot create hsr debugfs directory [ 3012.615663][ T24] audit: type=1400 audit(3011.970:203): avc: denied { write } for pid=4811 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3019.609492][ T3225] 8021q: adding VLAN 0 to HW filter on device eth10 [ 3021.050121][ T4728] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 3021.312599][ T4728] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 3021.856141][ T4728] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 3022.136963][ T4728] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3022.202485][ T4728] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 3022.478832][ T4728] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 3023.042940][ T4728] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 3023.336322][ T4728] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 3036.840430][ T4736] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 3037.272570][ T4736] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 3037.452731][ T4736] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 3037.918722][ T4736] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3038.099994][ T4736] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 3038.588072][ T4736] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 3038.869232][ T4736] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 3039.326429][ T4736] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 3042.575030][ T24] audit: type=1400 audit(3041.930:204): avc: denied { write } for pid=4826 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3052.326143][ T24] audit: type=1400 audit(3051.670:205): avc: denied { write } for pid=4842 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3060.019475][ T3225] 8021q: adding VLAN 0 to HW filter on device eth11 [ 3062.767306][ T4728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3075.500199][ T4736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3087.229849][ T24] audit: type=1400 audit(3086.540:206): avc: denied { write } for pid=4857 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3098.875008][ T24] audit: type=1400 audit(3098.230:207): avc: denied { write } for pid=4866 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3106.126660][ T3225] 8021q: adding VLAN 0 to HW filter on device eth12 [ 3166.816944][ T24] audit: type=1400 audit(3166.160:208): avc: denied { write } for pid=4905 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3177.066335][ T24] audit: type=1400 audit(3176.420:209): avc: denied { write } for pid=4916 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3196.847543][ T24] audit: type=1400 audit(3196.190:210): avc: denied { write } for pid=4926 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3209.945489][ T24] audit: type=1400 audit(3209.270:211): avc: denied { write } for pid=4936 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3227.315230][ T4728] veth0_vlan: entered promiscuous mode [ 3228.304560][ T4728] veth1_vlan: entered promiscuous mode [ 3231.105015][ T24] audit: type=1400 audit(3230.460:212): avc: denied { write } for pid=4948 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3232.602244][ T4728] veth0_macvtap: entered promiscuous mode [ 3233.302153][ T4728] veth1_macvtap: entered promiscuous mode [ 3238.035762][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3238.036543][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3238.037174][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3238.037768][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3244.386826][ T24] audit: type=1400 audit(3243.710:213): avc: denied { write } for pid=4954 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3245.077994][ T4736] veth0_vlan: entered promiscuous mode [ 3247.766320][ T4736] veth1_vlan: entered promiscuous mode [ 3252.967317][ T4736] veth0_macvtap: entered promiscuous mode [ 3254.307474][ T4736] veth1_macvtap: entered promiscuous mode [ 3260.036805][ T4746] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3260.130032][ T4746] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3260.143343][ T50] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3260.688790][ T4294] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3274.149773][ T24] audit: type=1400 audit(3273.510:214): avc: denied { write } for pid=4960 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3284.689205][ T24] audit: type=1400 audit(3284.050:215): avc: denied { write } for pid=4969 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3298.297600][ T24] audit: type=1400 audit(3297.620:216): avc: denied { write } for pid=4972 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3308.089460][ T24] audit: type=1400 audit(3307.430:217): avc: denied { write } for pid=4976 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3402.311172][ T4979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3402.651969][ T4979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3414.591602][ T4986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3414.962032][ T4986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3441.853307][ T4979] hsr_slave_0: entered promiscuous mode [ 3441.949463][ T4979] hsr_slave_1: entered promiscuous mode [ 3442.085575][ T4979] debugfs: 'hsr0' already exists in 'hsr' [ 3442.086005][ T4979] Cannot create hsr debugfs directory [ 3456.739470][ T4986] hsr_slave_0: entered promiscuous mode [ 3456.798819][ T4986] hsr_slave_1: entered promiscuous mode [ 3456.849246][ T4986] debugfs: 'hsr0' already exists in 'hsr' [ 3456.849656][ T4986] Cannot create hsr debugfs directory [ 3469.087218][ T4979] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 3469.316350][ T4979] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 3470.967542][ T4979] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 3471.268707][ T4979] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3471.900650][ T4979] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 3472.281477][ T4979] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 3473.276564][ T4979] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 3473.441273][ T4979] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 3484.930252][ T4986] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 3485.421149][ T4986] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 3485.502869][ T4986] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 3486.179223][ T4986] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3486.341193][ T4986] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 3486.969045][ T4986] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 3487.191987][ T4986] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 3487.682804][ T4986] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 3517.511298][ T4979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3528.322406][ T4986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3549.515475][ T24] audit: type=1400 audit(3548.820:218): avc: denied { write } for pid=5078 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3565.439827][ T24] audit: type=1400 audit(3564.790:219): avc: denied { write } for pid=5086 comm="rm" name="hook-state" dev="tmpfs" ino=42 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3695.737065][ T4979] veth0_vlan: entered promiscuous mode [ 3697.121455][ T4979] veth1_vlan: entered promiscuous mode [ 3701.626217][ T4979] veth0_macvtap: entered promiscuous mode [ 3702.256640][ T26] INFO: task syz.4.243:4957 blocked for more than 430 seconds. [ 3702.259403][ T26] Not tainted syzkaller #0 [ 3702.259935][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3702.260248][ T26] task:syz.4.243 state:D stack:0 pid:4957 tgid:4957 ppid:4728 task_flags:0x400040 flags:0x00000011 [ 3702.262944][ T26] Call trace: [ 3702.263281][ T26] __switch_to+0x5e4/0xb74 (T) [ 3702.446754][ T26] __schedule+0x1e0c/0x38cc [ 3702.447371][ T26] schedule+0x1b4/0x274 [ 3702.447742][ T26] schedule_timeout+0x68/0x1e4 [ 3702.448035][ T26] wait_for_completion+0x1b8/0x414 [ 3702.448294][ T26] __synchronize_srcu+0x1c8/0x208 [ 3702.448658][ T26] synchronize_srcu+0x668/0x8dc [ 3702.449024][ T26] mmu_notifier_unregister+0x33c/0x444 [ 3702.449374][ T26] kvm_put_kvm+0x69c/0xbbc [ 3702.449721][ T26] kvm_vm_release+0x58/0x78 [ 3702.450020][ T26] __fput+0x4ac/0x978 [ 3702.450357][ T26] ____fput+0x20/0x30 [ 3702.450669][ T26] task_work_run+0x1b8/0x250 [ 3702.450984][ T26] exit_to_user_mode_loop+0x110/0x188 [ 3702.451297][ T26] el0_svc+0x18c/0x240 [ 3702.451562][ T26] el0t_64_sync_handler+0x68/0xdc [ 3702.451861][ T26] el0t_64_sync+0x198/0x19c [ 3702.502040][ T4979] veth1_macvtap: entered promiscuous mode SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 3702.605376][ T26] [ 3702.605376][ T26] Showing all locks held in the system: [ 3702.605850][ T26] locks held by khungtaskd/26: 1, last CPU#0: [ 3702.606171][ T26] #0: ffff800087fce618 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x4c/0x188 [ 3702.607739][ T26] locks held by kworker/u4:5/50: 3, last CPU#0: [ 3702.607974][ T26] #0: 10f000000d034140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b4 [ 3702.608789][ T26] #1: ffff80008e177ce8 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b4 [ 3702.609562][ T26] #2: 45f000001f323258 (&devlink->lock_key#4){+.+.}-{4:4}, at: devl_trylock+0x24/0x34 [ 3702.610743][ T26] locks held by getty/3253: 2, on CPU#0: [ 3702.610959][ T26] #0: b4f00000123ae0a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 3702.611720][ T26] #1: 00ff80008cd2b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x314/0x11f8 [ 3702.612486][ T26] locks held by sshd-session/3376: 1, last CPU#0: [ 3702.612682][ T26] #0: 2cf000001296b460 (&pipe->mutex){+.+.}-{4:4}, at: anon_pipe_read+0xd8/0xd8c [ 3702.789051][ T26] locks held by kworker/u4:1/3438: 2, on CPU#0: [ 3702.789405][ T26] #0: 10f000000d034140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b4 [ 3702.790328][ T26] #1: ffff80008ff87ce8 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b4 [ 3702.791142][ T26] locks held by kworker/u4:3/3840: 2, last CPU#0: [ 3702.791329][ T26] #0: 12f000000d033d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b4 [ 3702.792072][ T26] #1: ffff80008e4e7ce8 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b4 [ 3702.792865][ T26] locks held by kworker/u4:6/4294: 3, last CPU#0: [ 3702.793077][ T26] #0: 10f000000d034140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b4 [ 3703.036199][ T26] #1: ffff80008f5d7ce8 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b4 [ 3703.037031][ T26] #2: 0af0000029d02258 (&devlink->lock_key#7){+.+.}-{4:4}, at: devl_trylock+0x24/0x34 [ 3703.037897][ T26] locks held by kworker/0:3/4336: 3, on CPU#0: [ 3703.038132][ T26] #0: 05f000000d017d40 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b4 [ 3703.038921][ T26] #1: ffff80008f697ce8 (netdev_work){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b4 [ 3703.039641][ T26] #2: ffff8000882c43b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c [ 3703.040395][ T26] locks held by kworker/u4:7/4448: 3, last CPU#0: [ 3703.040578][ T26] #0: 10f000000d034140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b4 [ 3703.041328][ T26] #1: ffff80008ece7ce8 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b4 [ 3703.042073][ T26] #2: 45f000001f323258 (&devlink->lock_key#4){+.+.}-{4:4}, at: devl_trylock+0x24/0x34 [ 3703.042946][ T26] locks held by syz.3.241/4715: 2, last CPU#0: [ 3703.043135][ T26] #0: ffff80008801bf70 (srcu){.+.+}-{0:0}, at: __mmu_notifier_release+0x4e8/0x87c [ 3703.216239][ T26] #1: 34f000001f6fb530 (&kvm->srcu){.+.+}-{0:0}, at: kvm_mmu_notifier_release+0x50/0xc4 [ 3703.217100][ T26] locks held by kworker/u4:2/4746: 3, last CPU#0: [ 3703.217295][ T26] #0: 10f000000d034140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b4 [ 3703.218035][ T26] #1: ffff80008fe87ce8 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b4 [ 3703.218847][ T26] #2: 6df000001ef18258 (&devlink->lock_key#2){+.+.}-{4:4}, at: devl_trylock+0x24/0x34 [ 3703.219739][ T26] locks held by syz-executor/4979: 1, last CPU#0: [ 3703.219935][ T26] #0: ffff8000882c43b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x9e4/0x1b0c [ 3703.220705][ T26] locks held by kworker/u4:12/5062: 3, on CPU#0: [ 3703.220911][ T26] #0: 6af0000012140140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b4 [ 3703.221643][ T26] #1: ffff80008f2a7ce8 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b4 [ 3703.222427][ T26] #2: ffff8000882c43b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c [ 3703.223163][ T26] locks held by kworker/u4:13/5088: 2, last CPU#0: [ 3703.223342][ T26] #0: 12f000000d033d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b4 [ 3703.408667][ T26] #1: ffff80008f127ce8 ((gc_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b4 [ 3703.409446][ T26] locks held by modprobe/5144: 1, last CPU#0: [ 3703.409652][ T26] #0: bff000001f262d78 (&mm->mmap_lock){++++}-{4:4}, at: do_mprotect_pkey+0x204/0xb70 [ 3703.481066][ T26] [ 3703.481212][ T26] ============================================= [ 3703.481212][ T26] [ 3703.482041][ T26] Kernel panic - not syncing: hung_task: blocked tasks [ 3703.487483][ T26] CPU: 0 UID: 0 PID: 26 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT [ 3703.488855][ T26] Hardware name: linux,dummy-virt (DT) [ 3703.489687][ T26] Call trace: [ 3703.490412][ T26] show_stack+0x2c/0x3c (C) [ 3703.491321][ T26] __dump_stack+0x30/0x40 [ 3703.492197][ T26] dump_stack_lvl+0x30/0x12c [ 3703.493085][ T26] dump_stack+0x1c/0x28 [ 3703.493931][ T26] vpanic+0x4cc/0x844 [ 3703.494715][ T26] vpanic+0x0/0x844 [ 3703.495430][ T26] hung_task_panic+0x0/0x2c [ 3703.496321][ T26] kthread+0x4cc/0x514 [ 3703.497175][ T26] ret_from_fork+0x10/0x20 [ 3703.498972][ T26] Kernel Offset: disabled [ 3703.499637][ T26] CPU features: 0x0,00000000,00d1802f,df188f42,0afff61f [ 3703.500588][ T26] Memory Limit: none [ 3703.502852][ T26] Rebooting in 86400 seconds..