last executing test programs: 31m46.829757037s ago: executing program 0 (id=39): ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x1, 0xffffffffffffffff}) ioctl$KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, &(0x7f0000000080)=@attr_other={0x0, 0xfffffff7, 0xffffffff, &(0x7f0000000040)=0x7f}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x41c400, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x30) ioctl$KVM_GET_DEVICE_ATTR_vm(r2, 0x4018aee2, &(0x7f0000000140)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2, 0x1}}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) close(r0) ioctl$KVM_CLEAR_DIRTY_LOG(r2, 0xc018aec0, &(0x7f0000000600)={0x4, 0x340, 0x280, &(0x7f0000000200)=[0x1, 0x9, 0x93, 0x4, 0x3ff, 0x6, 0xb, 0x0, 0x5, 0xfffffffffffffffb, 0x160000000000, 0xffffffffffff4e81, 0x6, 0x2, 0x7, 0x79, 0x7d6f, 0x1, 0x5, 0x4, 0x5, 0xd0, 0xfffffffffffffffe, 0x8001, 0x1, 0xfffffffffffffa6a, 0xf92, 0x3, 0x1000, 0x6, 0x9, 0x3, 0x4, 0x5, 0x8, 0x9, 0x7, 0x3, 0x9, 0x401, 0x1, 0x2, 0xe, 0x8000, 0x8cf2, 0x4, 0x7f, 0x8001, 0x2, 0x2cf7, 0x6, 0x10000000, 0x5, 0x2, 0x4, 0xcf, 0xff, 0xfffffffffffffff3, 0x6, 0x5, 0x6, 0x8, 0x3, 0x7fffffff, 0x1c00, 0x0, 0x544a, 0xa, 0x7, 0x26f0, 0x4, 0x80000000, 0xfffffffffffffeff, 0x1, 0x65, 0x4, 0x8, 0x8, 0x9, 0x0, 0x622, 0x5, 0x1, 0x8000, 0x0, 0x6, 0xfffffffffffff6e9, 0x3ff, 0x3, 0xc25, 0x8, 0x9, 0x8, 0x828, 0x3, 0x7, 0x3b21c82, 0x72, 0x7, 0xf, 0x6, 0x80000000, 0x0, 0x7, 0x9, 0x4, 0x4, 0x2, 0x4, 0x8, 0x1, 0x6, 0x8, 0x7, 0xa, 0x2, 0x3, 0x7, 0x5c5, 0x9, 0x0, 0x8, 0xe326, 0x4, 0x0, 0x5, 0x0, 0x9]}) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000640)={0x5, 0x0, [{0x7, 0x3, 0x1, 0x0, @adapter={0x100, 0x3ff, 0x81, 0x67, 0x1}}, {0x0, 0x3, 0x1, 0x0, @irqchip={0x10, 0x1}}, {0x1, 0x2, 0x1, 0x0, @adapter={0x9, 0x1, 0x8, 0x6}}, {0xf336, 0x4, 0x1, 0x0, @sint={0x1000, 0x7}}, {0x7, 0x7, 0x0, 0x0, @msi={0x2, 0x4, 0x1}}]}) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000000780)=@attr_arm64={0x0, 0xe, 0x2, &(0x7f0000000740)=0x800}) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000007c0)={0x1fe, 0x1, 0xd000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2) r8 = mmap$KVM_VCPU(&(0x7f0000f23000/0x3000)=nil, r4, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f0000000800)="c58b2d1355af413c6e6f8b38de63ad9271de8a96059087150049f929921c7f4698b75e98680ce160d30c93f47354146962b2649c4c6bad5e23749294001be8e357087871a60df38b", 0x0, 0x48) r9 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x14) r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil) syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) r11 = mmap$KVM_VCPU(&(0x7f0000fed000/0x1000)=nil, r4, 0x4, 0x8010, 0xffffffffffffffff, 0x0) munmap$KVM_VCPU(r11, 0x0) r12 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x13) ioctl$KVM_CAP_ARM_USER_IRQ(r12, 0x4068aea3, &(0x7f0000000880)) r13 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000ec0)={0x0, &(0x7f0000000900)=[@uexit={0x0, 0x18, 0x9}, @memwrite={0x6e, 0x30, @generic={0x0, 0x8a8, 0x80, 0x1}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x0, 0x3, 0x0, 0x9, 0x401}}, @irq_setup={0x46, 0x18, {0x2, 0xffffff00}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x100, 0x3, 0x8}}, @its_setup={0x82, 0x28, {0x1, 0x4, 0x230}}, @code={0xa, 0xb4, {"0040621ea01299d20000b0f2e10080d2220080d2c30080d2240080d2020000d400cd9cd200c0b0f2010180d2a20180d2a30180d2440080d2020000d4809e99d20000b8f2010180d2620080d2a30180d2c40080d2020000d4007008d50004000ec0b286d200a0b8f2210080d2c20080d2830080d2e40080d2020000d4c0669dd200a0b0f2a10180d2a20080d2230080d2040180d2020000d40004809a000028d5"}}, @its_send_cmd={0xaa, 0x28, {0x4, 0x0, 0x3, 0xc, 0x100, 0x8, 0x3}}, @uexit={0x0, 0x18, 0x6}, @smc={0x1e, 0x40, {0xc4000014, [0x4d, 0x5c, 0x4e2, 0x2, 0x3]}}, @hvc={0x32, 0x40, {0xc4000004, [0x7fffffff, 0x10000, 0x0, 0x4, 0x1]}}, @msr={0x14, 0x20, {0x603000000013e64b, 0x98}}, @smc={0x1e, 0x40, {0x2, [0x8, 0x7, 0x6, 0x24, 0x7]}}, @code={0xa, 0x6c, {"000028d580098bd200c0b0f2410080d2620180d2230180d2a40080d2020000d40034000f008008d50040271e007b88d20040b0f2e10080d2020180d2430180d2a40080d2020000d4007008d5000028d5000000b8008008d5"}}, @msr={0x14, 0x20, {0x603000000013e005, 0x2}}, @its_setup={0x82, 0x28, {0x0, 0x4, 0x3cf}}, @msr={0x14, 0x20, {0x603000000013806f, 0x3615}}, @irq_setup={0x46, 0x18, {0x1, 0x332}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x0, 0x2, 0xf, 0x5, 0x8}}, @code={0xa, 0xb4, {"0058201ec03494d200a0b0f2010180d2420080d2a30080d2040080d2020000d400e4007fa0f69fd200c0b8f2410180d2820080d2030180d2a40080d2020000d40000409300000058a0228cd20060b0f2a10080d2420080d2030080d2a40080d2020000d4a0a594d200a0b0f2a10080d2e20080d2430080d2440180d2020000d400008052404497d20020b0f2410080d2e20180d2230180d2040180d2020000d4"}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x1, 0x2, 0x8, 0x4, 0xe650, 0x2}}, @uexit={0x0, 0x18, 0xffffffffffffffff}, @uexit={0x0, 0x18, 0xc3a}, @eret={0xe6, 0x18, 0x5}, @its_send_cmd={0xaa, 0x28, {0x4, 0x1, 0x4, 0xb, 0x9, 0x1, 0x4}}, @smc={0x1e, 0x40, {0x84000007, [0x7, 0x3, 0xffffffffffffffff, 0x6, 0x2]}}, @hvc={0x32, 0x40, {0xc4000053, [0x9, 0x7fffffff, 0x5, 0x9, 0x9]}}], 0x594}, &(0x7f0000000f00)=[@featur2={0x1, 0x4}], 0x1) ioctl$KVM_GET_ONE_REG(r13, 0x4010aeab, &(0x7f0000000f80)=@arm64_core={0x603000000010004e, &(0x7f0000000f40)=0x3}) syz_kvm_vgic_v3_setup(r7, 0x4, 0x100) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x32) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r12, 0x4068aea3, &(0x7f0000000fc0)) 31m12.851369411s ago: executing program 0 (id=41): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000480), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f00000004c0)={0x0, &(0x7f0000000600)=[@eret={0xe6, 0x18, 0x1}, @svc={0x122, 0x40, {0x80000000, [0x5, 0x5, 0x2, 0xfffffffffffffff4, 0xffd00000]}}, @eret={0xe6, 0x18}, @uexit={0x0, 0x18, 0xf9e}, @its_send_cmd={0xaa, 0x28, {0x4, 0x0, 0x2, 0x3, 0x7, 0x3, 0x2}}, @code={0xa, 0xb4, {"00409f0c0094006f000008d5603199d20020b0f2810080d2a20180d2230080d2040180d2020000d480d28cd20040b8f2810080d2620080d2230080d2a40180d2020000d480c291d20000b0f2a10080d2c20180d2430180d2440180d2020000d40000403d000008d5404d8ed200c0b0f2a10080d2820180d2c30180d2c40180d2020000d4c0e98cd20040b0f2a10080d2e20080d2830080d2e40080d2020000d4"}}, @mrs={0xbe, 0x18, {0x6030000000130205}}, @msr={0x14, 0x20, {0x603000000013c64a, 0x28}}, @hvc={0x32, 0x40, {0xffff, [0x7, 0x3ff, 0x3, 0xffffffffffffffff, 0x9]}}, @irq_setup={0x46, 0x18, {0x0, 0x4e}}, @msr={0x14, 0x20, {0x0, 0x100000001}}, @its_setup={0x82, 0x28, {0x1, 0x3, 0x1db}}, @its_setup={0x82, 0x28, {0x3, 0x0, 0x3fa}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x0, 0x1, 0x5, 0xd741, 0x3, 0x1}}, @hvc={0x32, 0x40, {0x7a007ff0, [0x86, 0x4, 0x800, 0x4, 0x397]}}, @uexit={0x0, 0x18, 0x10}, @svc={0x122, 0x40, {0xc4000053, [0xfffffffffffffc01, 0x8, 0x40, 0x7, 0xc]}}, @mrs={0xbe, 0x18, {0x6030000000138084}}, @smc={0x1e, 0x40, {0xc4000010, [0x0, 0x0, 0x8, 0x6]}}, @its_setup={0x82, 0x28, {0x1, 0x4, 0x80388}}, @msr={0x14, 0x20, {0x603000000013e6cb, 0x7}}], 0x3c4}, &(0x7f0000000580)=[@featur2={0x1, 0x1}], 0x1) ioctl$KVM_GET_ONE_REG(r4, 0x4010aeab, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r4, 0x4018aee1, &(0x7f00000005c0)=@attr_pmu_init) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x2}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x1, 0x80003, 0x10000, 0x0, 0x2, 0x2}}], 0x50}, 0x0, 0x0) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r10, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x1}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x3, 0x40000000, 0x3, 0x0, 0x0, 0x80000002}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r5, 0x1, 0x380) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) r12 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000c00000/0x400000)=nil) r15 = syz_kvm_add_vcpu$arm64(r14, &(0x7f0000000300)={0x0, &(0x7f0000000340)=[@its_setup={0x82, 0x28, {0x10000004, 0x0, 0x3ac}}], 0x28}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r13, 0x3, 0x100) ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000380)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r16, 0x4018aee1, &(0x7f00000003c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000400)=0x8080000}) ioctl$KVM_RUN(r15, 0xae80, 0x0) munmap(&(0x7f0000011000/0xc00000)=nil, 0xc00000) ioctl$KVM_SET_DEVICE_ATTR(r16, 0x4018aee1, &(0x7f0000000440)=@attr_arm64={0x0, 0x4, 0x1, 0x0}) ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 31m3.060199264s ago: executing program 1 (id=43): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x103080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$KVM_VCPU(0x0, 0x50000, 0x2000002, 0x10031, 0xffffffffffffffff, 0x0) (async) r2 = syz_kvm_vgic_v3_setup(r1, 0x1, 0x40) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2c) ioctl$KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, &(0x7f0000000140)=@attr_arm64={0x0, 0x3, 0x6, 0x0}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000080)=@attr_other={0x0, 0x8, 0x400, &(0x7f0000000040)=0x523}) 30m55.860791717s ago: executing program 1 (id=44): mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x9000000) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x100000a, 0x8010, 0xffffffffffffffff, 0x0) 30m54.569499197s ago: executing program 0 (id=45): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000000)={0x0, &(0x7f0000000280)=[@its_setup={0x82, 0x28, {0x1, 0x2, 0x323}}], 0x28}, 0x0, 0x0) r4 = eventfd2(0x1, 0x1) r5 = openat$kvm(0x0, &(0x7f00000000c0), 0x40000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_kvm_add_vcpu$arm64(0x0, 0x0, 0x0, 0x0) r10 = syz_kvm_vgic_v3_setup(r8, 0xffffffffffbffffc, 0x120) ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f0000000300)=@attr_arm64={0x0, 0x0, 0x2, &(0x7f0000000340)=0x8080000}) syz_kvm_vgic_v3_setup(r6, 0x1, 0x100) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000100)={r4, 0x3, 0x2, r4}) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f00000001c0)) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x80c01, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_GUEST_MEMFD(r12, 0xc040aed4, &(0x7f00000003c0)={0x200001fe0000, 0x3}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x2000003, 0x2013, r13, 0x200001fe0000) write$eventfd(r4, &(0x7f0000000240)=0x1000007, 0x8) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) munmap(&(0x7f000046c000/0x4000)=nil, 0x4000) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r14, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000180)=0x8080000}) ioctl$KVM_GET_STATS_FD_cpu(r9, 0xaece) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000200)={0x8090040, 0x0, 0x8, 0x1}) 30m49.500049745s ago: executing program 1 (id=46): openat$kvm(0x0, &(0x7f00000001c0), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r1 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r0, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000200)="fb4149dd033b8986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67525673312b01040000000000002627e7000000000000000200", 0x0, 0xfffffffffffffe73) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x300, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x28) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = mmap$KVM_VCPU(&(0x7f0000e31000/0x2000)=nil, 0x930, 0xa, 0x11, r4, 0x40000) syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000000480)="f610f5b33c962b62c00d0914345792dd23a78cdac1300e5e167ce3c540e94f06530dc539e8c1d98289a14446bb8d486f0060cb76b4abc705083f72adeea32830e92b6c89e7b929ff", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x12, r0, 0x0) r6 = eventfd2(0x2, 0x80001) r7 = openat$kvm(0x0, &(0x7f0000000300), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f0000000340)=@attr_arm64={0x0, 0x2, 0x0, &(0x7f0000000380)=0xf4020000}) close(r6) openat$kvm(0xffffff9c, &(0x7f0000000280), 0x1a17f2, 0x0) write$eventfd(r6, &(0x7f00000002c0)=0x8000000000000, 0x8) r10 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r11 = openat$kvm(0x0, &(0x7f00000000c0), 0x101000, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x2) ioctl$KVM_SET_GUEST_DEBUG_arm64(r13, 0x4208ae9b, &(0x7f0000000540)={0x659aa93486115af1, 0x0, {[0x1, 0x5, 0xffff, 0x8, 0x2, 0x7, 0xff, 0x641, 0x1, 0x53, 0x59, 0x3ff, 0x100000001, 0xcf3b, 0x8, 0x6], [0x8, 0x7, 0x4, 0x6, 0x7, 0x0, 0x4000000042, 0x2, 0x3, 0x1, 0xa, 0x8000000000000001, 0x8, 0x9, 0x8, 0x6], [0x31, 0x53, 0xe, 0x56b0, 0x5, 0x2, 0x4, 0x8, 0x1, 0x1, 0x9, 0xffffffffffffffff, 0x3, 0x9, 0x78], [0xd6ef, 0x9, 0x4, 0x5, 0x3ff, 0x0, 0x0, 0xd, 0x7, 0x80, 0xd, 0xabb, 0xffffffffffffffff, 0x623, 0x1, 0x2]}}) r14 = eventfd2(0x3, 0x0) write$eventfd(r14, &(0x7f0000000000)=0xfffffffffffffffc, 0x8) write$eventfd(r14, &(0x7f0000000180)=0x8c49, 0x8) 30m36.352644135s ago: executing program 0 (id=47): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x163800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) r3 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000640)={0x0, &(0x7f0000000340)=[@uexit={0x0, 0x18, 0x3ff}, @eret={0xe6, 0x18, 0x2}, @eret={0xe6, 0x18, 0x1}, @mrs={0xbe, 0x18, {0x603000000013c112}}, @smc={0x1e, 0x40, {0x84000004, [0x1, 0x1, 0x1, 0x4, 0x6]}}, @memwrite={0x6e, 0x30, @generic={0x4000, 0x115, 0x800, 0x2}}, @its_send_cmd={0xaa, 0x28, {0x5, 0x0, 0x4, 0x0, 0x470, 0x10, 0x3}}, @its_setup={0x82, 0x28, {0x0, 0x0, 0x49}}, @uexit={0x0, 0x18, 0xa9}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80c0000, 0xc00, 0x8, 0x1}}, @irq_setup={0x46, 0x18, {0x0, 0x1fb}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x0, 0x4, 0x2, 0x400, 0x10000000, 0x3}}, @its_send_cmd={0xaa, 0x28, {0xd, 0xfd, 0x3, 0x8, 0x4, 0x7293ec60, 0x1}}, @uexit={0x0, 0x18, 0x7ff}, @eret={0xe6, 0x18, 0x4}, @irq_setup={0x46, 0x18, {0x4, 0x214}}, @mrs={0xbe, 0x18, {0x603000000013e718}}, @code={0xa, 0x84, {"0000589e405f80d20040b8f2010180d2620180d2a30080d2040080d2020000d4008008d5c02088d200c0b8f2a10180d2e20180d2430080d2240180d2020000d40820601e000860fc007489d200c0b8f2010080d2420080d2e30180d2440180d2020000d400000053007008d5007008d5"}}], 0x2b4}, &(0x7f0000000680)=[@featur1={0x1, 0x8a}], 0x1) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r3, 0x4018aee3, &(0x7f0000000700)=@attr_other={0x0, 0xfffffffc, 0x88, &(0x7f00000006c0)=0x100000001}) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_vgic_v3_setup(r5, 0x1, 0x100) ioctl$KVM_GET_DEVICE_ATTR(r6, 0x4018aee2, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x3, 0xffffffffffffffff}) ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) r7 = eventfd2(0x5, 0x80000) r8 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_IRQ_LINE(r9, 0x4008ae61, 0xffffffffffffffff) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x2, 0x3, &(0x7f0000000180)=0x8b31}) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000100)={0x9, 0x8000000, 0x4, r7, 0x7}) r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_ONE_REG(r10, 0x4010aeac, &(0x7f0000000040)=@arm64_fw={0x6030000000140001, &(0x7f0000000000)=0x1ff}) 30m34.104663174s ago: executing program 1 (id=48): munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000040)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f00000000c0)=@arm64_fp_extra={0x60200000001000d4, &(0x7f0000000100)=0x3cc}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r6, &(0x7f00000001c0)=0xffffff7f, 0xff25) 30m25.389789414s ago: executing program 0 (id=49): r0 = openat$kvm(0x0, &(0x7f0000000200), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0xc8, 0x1}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000005c0)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000600)=@x86={0x11, 0x9b, 0xf, 0x0, 0x5, 0x8, 0x82, 0x46, 0x48, 0x86, 0xdd, 0x65, 0x0, 0x100001, 0xffc0000, 0x0, 0x3, 0xa, 0x1, '\x00', 0x1, 0x93}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4000ae84, &(0x7f0000000640)={{0x0, 0x25000, 0x1, 0x6, 0x0, 0x9, 0xba, 0xc, 0x2, 0x6, 0x0, 0xa0}, {0xeeef0000, 0x0, 0x0, 0x1, 0xfc, 0x1, 0x5, 0xc, 0x7, 0x4, 0x6, 0x6}, {0x0, 0xeeee8000, 0x8, 0xb4, 0x6, 0x7, 0x3, 0xdb, 0x8, 0x8, 0x1, 0x2}, {0x2, 0xe000, 0x0, 0x55, 0x7f, 0x80, 0x4, 0x6, 0xa, 0x1, 0x5, 0x9}, {0x6000, 0x0, 0x0, 0x34, 0x0, 0x6, 0x8, 0x1, 0x81, 0x93, 0x7f, 0x8}, {0x1ffc, 0x41000, 0xd, 0x5, 0x9, 0x5, 0x2, 0x8, 0x81, 0xf, 0x3, 0xfe}, {0xffffbff8, 0xb000, 0x14, 0x1, 0x1, 0x7b, 0xfd, 0x9, 0x6c, 0xe, 0x8, 0xd1}, {0xeeef0000, 0x7000, 0x4, 0x3, 0x0, 0x0, 0x7, 0xfa, 0x10, 0x8, 0x2, 0x1}, {0xeefb4000, 0x12}, {0xffc, 0xc71}, 0x20000002, 0x0, 0x1ff8, 0x420000, 0x8, 0x8000, 0x7000, [0x5, 0xff, 0x89, 0x1]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000100)={0xffffffffffffffff, 0xc8}) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000480)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000840)=@x86={0x3, 0x27, 0x6, 0x0, 0x4, 0x9, 0xff, 0x7, 0xc7, 0x43, 0x5, 0x7, 0x0, 0x5, 0x2e, 0xd7, 0x10, 0xaa, 0x7, '\x00', 0x2, 0x100000000000000}) write$eventfd(r6, &(0x7f00000008c0)=0x9, 0x1d) write$eventfd(r3, &(0x7f0000000780)=0x3, 0xfdef) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r2, r7, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000500)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) r8 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x2b) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f00000001c0)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f0000000240)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f00000007c0)}) ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f0000000800)=@attr_riscv64=@attr_ctrl={0x0, 0x1, 0x1, &(0x7f0000000080)=0xfffffffffffffffd}) ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f0000000880)=@attr_arm64={0x0, 0x4, 0x2, 0x0}) ioctl$KVM_SET_ONE_REG(r7, 0x4010aeac, &(0x7f0000000540)=@arm64_fw={0x6030000000140001, &(0x7f0000000580)=0x7}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000280)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f00000002c0)}) 30m24.317417507s ago: executing program 1 (id=50): r0 = mmap$KVM_VCPU(&(0x7f0000dd4000/0x3000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1000001, 0x12, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = eventfd2(0x0, 0x0) close(r3) mmap$KVM_VCPU(&(0x7f0000008000/0x3000)=nil, 0x930, 0x2000004, 0x2011, r3, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0x100, 0x1, r3}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000180)=@x86={0x11, 0x8, 0xf, 0x0, 0x5, 0x6, 0x6, 0x6, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x9, 0x0, 0x0, 0x3, 0x5, 0x8, '\x00', 0x1, 0x400000000002}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f00000001c0)={0x4, 0x0, [{0x1, 0x1, 0x0, 0x0, @sint={0x9, 0x3800000}}, {0x9, 0x3, 0x0, 0x0, @irqchip={0x3, 0x1}}, {0x0, 0x0, 0x0, 0x0, @msi={0x0, 0x0, 0x4}}, {0x0, 0x0, 0x1, 0x0, @adapter={0x0, 0x5, 0xffffffffffffffff, 0x7f, 0xb2d}}]}) write$eventfd(r6, &(0x7f00000002c0)=0x3, 0x50) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(0xffffffffffffffff) mmap$KVM_VCPU(&(0x7f0000e93000/0x3000)=nil, 0x50000, 0x3, 0x4002031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) 30m14.035677021s ago: executing program 0 (id=51): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x28000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x33) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000040)={0x0, 0x0, 0xa}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r2, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x8}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000180)={0xffffffffffffffff, 0xc8}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000200)=@arm64={0xfa, 0xbc, 0x8, '\x00', 0x100}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000240)={0x5000, 0x12000, 0x81}) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000280)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r6, &(0x7f00000002c0)=0x9, 0x1d) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000000140)={0xffffffff, 0xffffffff, 0x4, 0x1}) r7 = openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0x40086602, 0x110e22ffff) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000004c0)={0xffffffffffffffff, 0xc8}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x181900, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0xf) ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000540)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r10, 0x400454de, 0x3b) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r11 = openat$kvm(0x0, &(0x7f0000000300), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, &(0x7f0000000340)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f0000000380)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000400)=0x8080000}) ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f0000000440)=@attr_other={0x0, 0x8, 0x98, &(0x7f0000000480)=0x10}) 30m8.219846502s ago: executing program 1 (id=52): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x3352c2, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000280)={0x0, &(0x7f00000002c0)=[@its_setup={0x82, 0x28, {0x3, 0x1, 0x1}}], 0x28}, 0x0, 0x0) (async) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000300)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000340)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000380)=0x8090000}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) r8 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r7, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48) (async) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r7, 0x0) (async) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r9 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) (async) r10 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000400)=[@mrs={0xbe, 0x18, {0x603000000013c4d7}}, @its_send_cmd={0xaa, 0x28, {0xa, 0x1, 0x3, 0x3, 0x9, 0x10000, 0x3}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x1, 0x3, 0x4, 0xa, 0x5, 0x4}}, @msr={0x14, 0x20, {0x603000000013deb0, 0x2}}, @eret={0xe6, 0x18, 0x8}, @svc={0x122, 0x40, {0x8400000d, [0x58a8af8e, 0x7fffffffffffffff, 0x7258, 0x200, 0x8f]}}, @irq_setup={0x46, 0x18, {0x4, 0x37a}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x0, 0x2, 0xd, 0x81, 0x3}}], 0x120}, 0x0, 0x0) r11 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r9, 0xae04) r12 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r11, 0x3, 0x11, r10, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$arm64(r10, r12, 0x0) (async) r13 = openat$kvm(0x0, &(0x7f00000003c0), 0x200040, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) ioctl$KVM_GET_API_VERSION(r13, 0xae00, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000140)={0x8, 0xffffffffffffffff}) ioctl$KVM_GET_DEVICE_ATTR(r15, 0x4018aee2, &(0x7f0000000180)=@attr_arm64={0x0, 0x0, 0x4, 0x0}) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$arm64(r10, r12, 0xaaaa) ioctl$KVM_RUN(r10, 0xae80, 0x0) 29m27.997283006s ago: executing program 32 (id=51): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x28000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x33) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000040)={0x0, 0x0, 0xa}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r2, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x8}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000180)={0xffffffffffffffff, 0xc8}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000200)=@arm64={0xfa, 0xbc, 0x8, '\x00', 0x100}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000240)={0x5000, 0x12000, 0x81}) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000280)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r6, &(0x7f00000002c0)=0x9, 0x1d) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000000140)={0xffffffff, 0xffffffff, 0x4, 0x1}) r7 = openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0x40086602, 0x110e22ffff) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000004c0)={0xffffffffffffffff, 0xc8}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x181900, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0xf) ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000540)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r10, 0x400454de, 0x3b) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r11 = openat$kvm(0x0, &(0x7f0000000300), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, &(0x7f0000000340)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f0000000380)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000400)=0x8080000}) ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f0000000440)=@attr_other={0x0, 0x8, 0x98, &(0x7f0000000480)=0x10}) 29m21.699957186s ago: executing program 33 (id=52): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x3352c2, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000280)={0x0, &(0x7f00000002c0)=[@its_setup={0x82, 0x28, {0x3, 0x1, 0x1}}], 0x28}, 0x0, 0x0) (async) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000300)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000340)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000380)=0x8090000}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) r8 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r7, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48) (async) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r7, 0x0) (async) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r9 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) (async) r10 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000400)=[@mrs={0xbe, 0x18, {0x603000000013c4d7}}, @its_send_cmd={0xaa, 0x28, {0xa, 0x1, 0x3, 0x3, 0x9, 0x10000, 0x3}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x1, 0x3, 0x4, 0xa, 0x5, 0x4}}, @msr={0x14, 0x20, {0x603000000013deb0, 0x2}}, @eret={0xe6, 0x18, 0x8}, @svc={0x122, 0x40, {0x8400000d, [0x58a8af8e, 0x7fffffffffffffff, 0x7258, 0x200, 0x8f]}}, @irq_setup={0x46, 0x18, {0x4, 0x37a}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x0, 0x2, 0xd, 0x81, 0x3}}], 0x120}, 0x0, 0x0) r11 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r9, 0xae04) r12 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r11, 0x3, 0x11, r10, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$arm64(r10, r12, 0x0) (async) r13 = openat$kvm(0x0, &(0x7f00000003c0), 0x200040, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) ioctl$KVM_GET_API_VERSION(r13, 0xae00, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000140)={0x8, 0xffffffffffffffff}) ioctl$KVM_GET_DEVICE_ATTR(r15, 0x4018aee2, &(0x7f0000000180)=@attr_arm64={0x0, 0x0, 0x4, 0x0}) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$arm64(r10, r12, 0xaaaa) ioctl$KVM_RUN(r10, 0xae80, 0x0) 12m6.151020632s ago: executing program 3 (id=144): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x16) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x1ff8, 0x209000}) r2 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000040)={0x0, &(0x7f0000000080)=[@its_setup={0x82, 0x28, {0x3, 0x4, 0x2}}, @its_setup={0x82, 0x28, {0x4, 0x1, 0x28c}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r3, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000100)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f00000002c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000380)=0x8080000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 11m58.189057765s ago: executing program 2 (id=146): openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1000009, 0x16831, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r1, 0x8040aeb6, &(0x7f0000000080)=@attr_other={0x0, 0x3, 0x81, 0x0}) ioctl$KVM_SET_DEVICE_ATTR_vm(0xffffffffffffffff, 0x8040aeb6, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x0, 0x0}) 11m56.640196322s ago: executing program 3 (id=147): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000040)={0x0, &(0x7f0000000080)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x2}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x1, 0x80000, 0x10000, 0x0, 0x200, 0x2}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r2, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000b7b000/0x400000)=nil) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r8, 0x4018aee1, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 11m51.917607402s ago: executing program 2 (id=148): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x482000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r1, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x16, 0x4, 0x1}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$kvm(0x0, &(0x7f00000001c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x29) r7 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000240)={0x0, &(0x7f0000000280)=[@uexit={0x0, 0x18, 0x1f95}, @svc={0x122, 0x40, {0x100, [0x9, 0x7030, 0x3, 0x5, 0x3]}}, @code={0xa, 0x6c, {"008008d50044207e0000809a007008d5006c200e007c001b20ec99d20040b8f2810180d2e20180d2230180d2240180d2020000d4a0a19dd20080b0f2810180d2620080d2630080d2640080d2020000d40820601e000008d5"}}], 0xc4}, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_CAP_ARM_USER_IRQ(r4, 0x4068aea3, &(0x7f0000000440)) r9 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x0, 0x3, 0x11, r8, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r9, 0x20, &(0x7f0000000380)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0xffffffffffffffa7) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r8, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x202, 0x2, 0x1, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_ARM_VCPU_INIT(r7, 0x4020aeae, &(0x7f0000000100)={0x1, 0x83}) syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000bfe000/0x400000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1ebfff000d69313ee6321e554d14b410c047070000000000ad41db5cdd77bf52f70000010000804fb0148f00000000e5a46fafec810000000000000100000000000080000000000000"], 0x40}], 0x1, 0x0, 0x0, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r10, 0xae03, 0x1e) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11m45.331711119s ago: executing program 3 (id=149): r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x5) r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, r5, 0x2, 0x12, r4, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000000000)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0x20e4586c}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000040)={0xffffffffffffffff, 0xc8}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r8, 0x800454df, 0x110e22fffb) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x900c0, 0x0) 11m39.971029401s ago: executing program 2 (id=150): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r3, 0x0) mmap$KVM_VCPU(&(0x7f0000e04000/0x2000)=nil, 0x930, 0x1, 0x11, r3, 0x0) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, r4, 0x8, 0x13, r3, 0x0) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, r4, 0x200000a, 0x13, r3, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x7ac9ba663ad5f650, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000040)={0x1, 0x104000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f00000000c0)={0x3000, 0x34000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r6, 0x4010ae68, &(0x7f0000000100)={0xd000, 0x99000, 0x1}) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) 11m31.133280084s ago: executing program 3 (id=151): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x2a) syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@hvc={0x32, 0x40, {0x86000001, [0x100000001, 0x77, 0xffffffffffffffff, 0xee24, 0xfffffffffffeffff]}}], 0x40}, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r7 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000180)={0x8}) r9 = ioctl$KVM_GET_STATS_FD_cpu(r6, 0xaece) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f00000001c0)={0x1, 0xeee89ff8, 0x8, r9, 0x3}) r10 = syz_kvm_vgic_v3_setup(r1, 0x3, 0x40) ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f0000000300)=@attr_other={0x0, 0x6, 0x382bc649, &(0x7f0000000080)=0x7}) 11m28.627044962s ago: executing program 2 (id=152): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000280)={0xffffffffffffffff, 0xc8, 0x0, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000300)={0x4, 0xffffffffffffffff, 0x1}) r5 = ioctl$KVM_CREATE_VM(r4, 0x894c, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xb702, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x20) ioctl$KVM_GET_DEVICE_ATTR_vm(r6, 0x4018aee2, &(0x7f0000000180)=@attr_other={0x0, 0x9, 0x3, &(0x7f0000000140)=0x4}) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f00000001c0)={0x5, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000240)=@attr_other={0x0, 0x0, 0xb58, &(0x7f0000000200)=0x4}) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r10, 0xc040aed4, 0xfffffffffffffffe) r11 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r11, r12, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r12, 0x4010aeac, &(0x7f0000000100)=@arm64_sys={0x603000000013df1a, &(0x7f00000000c0)=0x3}) 11m14.987767895s ago: executing program 3 (id=153): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000000340)={0x200001ef8000}) (async) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000040)={0xffffffffffffffff, 0xd7}) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x7a) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r6 = openat$kvm(0x0, &(0x7f0000000180), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) r8 = openat$kvm(0x0, &(0x7f0000000200), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_ARM_SET_COUNTER_OFFSET(r9, 0x4010aeb5, &(0x7f0000000380)={0x1}) syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000bff000/0x400000)=nil) (async) ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f00000001c0)={0xa}) r10 = openat$kvm(0x0, &(0x7f00000003c0), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil) r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=[@featur1={0x1, 0x8}], 0x1) syz_kvm_vgic_v3_setup(r11, 0x3, 0x320) (async) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r13, 0x4018aee1, &(0x7f0000000480)=@attr_pmu_irq={0x0, 0x0, 0x0, &(0x7f00000004c0)=0x11}) (async) r14 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) r15 = mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x0, 0x8010, r14, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r15, 0x20, &(0x7f0000000240)="f30138dd56bf00e2004b584bd92e00000f00000000000100010000020000000083f402000000235acbd98700000000000200", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xc, 0x11, r14, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f00000002c0)={0x7, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_DEVICE_ATTR(r16, 0x40305828, &(0x7f0000000300)=@attr_arm64={0x0, 0x4, 0x1, 0x0}) (async) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000080)={0x0, 0x4, 0x100000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil, 0x1000010000000, r3}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) 11m10.994394722s ago: executing program 2 (id=154): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xb) r2 = openat$kvm(0x0, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x2e) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000240)=0xa) syz_kvm_setup_cpu$arm64(r3, r4, &(0x7f000010e000/0x400000)=nil, &(0x7f0000000280)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x4000000034) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0xfffffffffffffffe) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xc0189436, 0x1ffffffc) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xe) ioctl$KVM_CREATE_GUEST_MEMFD(r8, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3}) r9 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r7, 0xae04) mmap$KVM_VCPU(&(0x7f0000f2f000/0x1000)=nil, r9, 0x2000003, 0x2013, r4, 0xff010000) syz_kvm_setup_cpu$arm64(r8, 0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil, &(0x7f0000000940)=[{0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="22010000000000004000000000000000010000c400000000018000000000000009000000000000000100000000000000960000ab000000000800000000000000"], 0x40}], 0x1, 0x0, 0x0, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_IRQFD(r11, 0x4020ae76, &(0x7f0000000480)={0xffffffffffffffff, 0x43}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000080)=@x86={0x7f, 0x4, 0x3, 0x0, 0x800, 0x9, 0xd, 0x8b, 0x4, 0x0, 0xf, 0xfe, 0x0, 0x2, 0x7ff, 0x0, 0xd, 0xfe, 0xa, '\x00', 0x0, 0xb}) ioctl$KVM_CAP_ARM_USER_IRQ(r11, 0x4068aea3, &(0x7f00000002c0)) ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff, 0x1}) openat$kvm(0x0, &(0x7f0000000340), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x10) r13 = syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r13, &(0x7f0000000380)={0x0, &(0x7f00000003c0)=[@smc={0x1e, 0x40, {0x83d5dca6b7156f7e, [0x84000001, 0xa, 0x0, 0x6, 0x10]}}], 0x40}, &(0x7f0000000400)=[@featur1={0x1, 0x4}], 0x1) 11m0.558997246s ago: executing program 3 (id=155): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x20) r1 = syz_kvm_setup_syzos_vm$arm64(r0, &(0x7f00009d7000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r1, &(0x7f00000006c0)={0x0, &(0x7f0000000ec0)=[@hvc={0x32, 0x40, {0x8400000c, [0x0, 0x3, 0x3, 0x8, 0x10001]}}, @msr={0x14, 0x20, {0x603000000013e6cf, 0x5}}, @smc={0x1e, 0x40, {0x40, [0x8, 0x3, 0x9cb6, 0xffffffff, 0x3fb]}}, @svc={0x122, 0x40, {0x1000, [0x3ff800000000000, 0x9, 0x8c, 0x1, 0x6]}}, @hvc={0x32, 0x40, {0xc400000d, [0x7fffffffffffffff, 0xffff, 0x4, 0x8, 0x9]}}, @its_setup={0x82, 0x28, {0xfffffffffffffffe, 0x1, 0x268}}, @its_send_cmd={0xaa, 0x28, {0xa, 0x0, 0x1, 0x1, 0x5, 0x8b0f}}, @msr={0x14, 0x20, {0x603000000013c012, 0x1}}, @irq_setup={0x46, 0x18, {0xfffffffe, 0x15e}}, @uexit={0x0, 0x18, 0x6}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x80}}, @msr={0x14, 0x20, {0x603000000013e03a, 0x200000000000000}}, @mrs={0xbe, 0x18, {0x6943}}, @uexit={0x0, 0x18, 0x9}, @mrs={0xbe, 0x18, {0x603000000013c4f6}}, @mrs={0xbe, 0x18, {0x603000000013c085}}, @its_setup={0x82, 0x28, {0x0, 0x3, 0x8e}}, @irq_setup={0x46, 0x18, {0x1, 0xbe}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x100, 0x5, 0x3}}, @hvc={0x32, 0x40, {0x32000000, [0x3, 0x8, 0x6, 0x7, 0x2]}}, @its_setup={0x82, 0x28, {0x2, 0x1, 0x16d}}, @hvc={0x32, 0x40, {0x3000000, [0x7, 0xa, 0x100]}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xffd0, 0x0, 0x12}}, @hvc={0x32, 0x40, {0xc5000021, [0x3, 0x1, 0x2, 0x8948, 0xfffffffffffffff4]}}, @msr={0x14, 0x20, {0x603000000013c109, 0x5}}, @uexit={0x0, 0x18, 0x4}, @smc={0x1e, 0x40, {0x84000053, [0x80000001, 0x9, 0x5, 0x800]}}, @msr={0x14, 0x20, {0x603000000013e721, 0xd0}}, @svc={0x122, 0x40, {0x8400000d, [0x4209, 0x7fffffffffffffff, 0x5, 0x1, 0x2]}}], 0x4d0}, &(0x7f0000000700)=[@featur1={0x1, 0x8}], 0x1) (async) r2 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xc0189436, 0x172) r3 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) r5 = openat$kvm(0x0, &(0x7f0000000840), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000880)={0x0, &(0x7f00000008c0)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x3, 0x40000000, 0x10000, 0x0, 0x0, 0x80000002}}], 0x50}, 0x0, 0x0) (async) syz_kvm_vgic_v3_setup(r6, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000940)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f0000000980)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f00000009c0)=0x8080000}) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) r10 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r10, 0x4010ae67, &(0x7f0000000140)={0x1, 0x37d03030d7a92616}) ioctl$KVM_REGISTER_COALESCED_MMIO(r10, 0x4010ae67, &(0x7f0000000180)={0xeeee0000}) (async) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil) r14 = syz_kvm_add_vcpu$arm64(r13, &(0x7f0000000780)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r14, 0x4010aeab, &(0x7f00000007c0)=@arm64_core={0x6030000000100042, &(0x7f0000000800)=0xffffffffffffffff}) (async) r15 = syz_kvm_add_vcpu$arm64(r3, &(0x7f00000001c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_RUN(r15, 0xae80, 0x0) (async) r16 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r17 = ioctl$KVM_CREATE_VM(r16, 0xae01, 0x34) syz_kvm_setup_syzos_vm$arm64(r17, &(0x7f0000c00000/0x400000)=nil) (async) ioctl$KVM_CREATE_VCPU(r17, 0xae41, 0x1) 10m51.611952022s ago: executing program 2 (id=156): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 32) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) (async, rerun: 32) mmap$KVM_VCPU(&(0x7f0000027000/0x13000)=nil, 0x930, 0x3, 0x4102932, 0xffffffffffffffff, 0x0) (async, rerun: 64) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (rerun: 64) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r2, 0x4068aea3, &(0x7f0000000180)={0xef, 0x0, 0x7}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ARM_VCPU_INIT(r3, 0x4020aeae, &(0x7f0000000200)={0x5}) (async) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000240)=@arm64_sys={0x603000000013c807, &(0x7f0000000280)=0x2}) (async) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x17) (async, rerun: 64) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8800, 0x0) (rerun: 64) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0xf0) (async) r6 = eventfd2(0x9fa, 0x800) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f00000000c0)={0xc6a, 0xdddd1000, 0x8, r6, 0x7}) (async, rerun: 32) syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000bfd000/0x400000)=nil) (async, rerun: 32) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x28081, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xf) (async) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) mmap$KVM_VCPU(0x0, 0x0, 0x2000002, 0x10031, r3, 0x0) (async, rerun: 64) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x3) (rerun: 64) ioctl$KVM_ARM_VCPU_INIT(r11, 0x4020aeae, &(0x7f0000000400)={0x5, 0x8}) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r11, 0x4010aeab, &(0x7f0000000440)=@arm64_ccsidr={0x6020000000110004, 0x0}) (async) r12 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000769000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000300)={0x0, &(0x7f0000000340)=[@smc={0x1e, 0x40, {0x84000004, [0xffffffffffffffff, 0x0, 0x2, 0x3f8b, 0xf7b0]}}], 0x40}, &(0x7f0000000380)=[@featur2={0x1, 0x4}], 0x1) 10m13.953295036s ago: executing program 34 (id=155): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x20) r1 = syz_kvm_setup_syzos_vm$arm64(r0, &(0x7f00009d7000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r1, &(0x7f00000006c0)={0x0, &(0x7f0000000ec0)=[@hvc={0x32, 0x40, {0x8400000c, [0x0, 0x3, 0x3, 0x8, 0x10001]}}, @msr={0x14, 0x20, {0x603000000013e6cf, 0x5}}, @smc={0x1e, 0x40, {0x40, [0x8, 0x3, 0x9cb6, 0xffffffff, 0x3fb]}}, @svc={0x122, 0x40, {0x1000, [0x3ff800000000000, 0x9, 0x8c, 0x1, 0x6]}}, @hvc={0x32, 0x40, {0xc400000d, [0x7fffffffffffffff, 0xffff, 0x4, 0x8, 0x9]}}, @its_setup={0x82, 0x28, {0xfffffffffffffffe, 0x1, 0x268}}, @its_send_cmd={0xaa, 0x28, {0xa, 0x0, 0x1, 0x1, 0x5, 0x8b0f}}, @msr={0x14, 0x20, {0x603000000013c012, 0x1}}, @irq_setup={0x46, 0x18, {0xfffffffe, 0x15e}}, @uexit={0x0, 0x18, 0x6}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x80}}, @msr={0x14, 0x20, {0x603000000013e03a, 0x200000000000000}}, @mrs={0xbe, 0x18, {0x6943}}, @uexit={0x0, 0x18, 0x9}, @mrs={0xbe, 0x18, {0x603000000013c4f6}}, @mrs={0xbe, 0x18, {0x603000000013c085}}, @its_setup={0x82, 0x28, {0x0, 0x3, 0x8e}}, @irq_setup={0x46, 0x18, {0x1, 0xbe}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x100, 0x5, 0x3}}, @hvc={0x32, 0x40, {0x32000000, [0x3, 0x8, 0x6, 0x7, 0x2]}}, @its_setup={0x82, 0x28, {0x2, 0x1, 0x16d}}, @hvc={0x32, 0x40, {0x3000000, [0x7, 0xa, 0x100]}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xffd0, 0x0, 0x12}}, @hvc={0x32, 0x40, {0xc5000021, [0x3, 0x1, 0x2, 0x8948, 0xfffffffffffffff4]}}, @msr={0x14, 0x20, {0x603000000013c109, 0x5}}, @uexit={0x0, 0x18, 0x4}, @smc={0x1e, 0x40, {0x84000053, [0x80000001, 0x9, 0x5, 0x800]}}, @msr={0x14, 0x20, {0x603000000013e721, 0xd0}}, @svc={0x122, 0x40, {0x8400000d, [0x4209, 0x7fffffffffffffff, 0x5, 0x1, 0x2]}}], 0x4d0}, &(0x7f0000000700)=[@featur1={0x1, 0x8}], 0x1) (async) r2 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xc0189436, 0x172) r3 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) r5 = openat$kvm(0x0, &(0x7f0000000840), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000880)={0x0, &(0x7f00000008c0)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x3, 0x40000000, 0x10000, 0x0, 0x0, 0x80000002}}], 0x50}, 0x0, 0x0) (async) syz_kvm_vgic_v3_setup(r6, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000940)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f0000000980)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f00000009c0)=0x8080000}) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) r10 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r10, 0x4010ae67, &(0x7f0000000140)={0x1, 0x37d03030d7a92616}) ioctl$KVM_REGISTER_COALESCED_MMIO(r10, 0x4010ae67, &(0x7f0000000180)={0xeeee0000}) (async) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil) r14 = syz_kvm_add_vcpu$arm64(r13, &(0x7f0000000780)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r14, 0x4010aeab, &(0x7f00000007c0)=@arm64_core={0x6030000000100042, &(0x7f0000000800)=0xffffffffffffffff}) (async) r15 = syz_kvm_add_vcpu$arm64(r3, &(0x7f00000001c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_RUN(r15, 0xae80, 0x0) (async) r16 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r17 = ioctl$KVM_CREATE_VM(r16, 0xae01, 0x34) syz_kvm_setup_syzos_vm$arm64(r17, &(0x7f0000c00000/0x400000)=nil) (async) ioctl$KVM_CREATE_VCPU(r17, 0xae41, 0x1) 10m4.738386684s ago: executing program 35 (id=156): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 32) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) (async, rerun: 32) mmap$KVM_VCPU(&(0x7f0000027000/0x13000)=nil, 0x930, 0x3, 0x4102932, 0xffffffffffffffff, 0x0) (async, rerun: 64) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (rerun: 64) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r2, 0x4068aea3, &(0x7f0000000180)={0xef, 0x0, 0x7}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ARM_VCPU_INIT(r3, 0x4020aeae, &(0x7f0000000200)={0x5}) (async) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000240)=@arm64_sys={0x603000000013c807, &(0x7f0000000280)=0x2}) (async) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x17) (async, rerun: 64) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8800, 0x0) (rerun: 64) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0xf0) (async) r6 = eventfd2(0x9fa, 0x800) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f00000000c0)={0xc6a, 0xdddd1000, 0x8, r6, 0x7}) (async, rerun: 32) syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000bfd000/0x400000)=nil) (async, rerun: 32) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x28081, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xf) (async) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) mmap$KVM_VCPU(0x0, 0x0, 0x2000002, 0x10031, r3, 0x0) (async, rerun: 64) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x3) (rerun: 64) ioctl$KVM_ARM_VCPU_INIT(r11, 0x4020aeae, &(0x7f0000000400)={0x5, 0x8}) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r11, 0x4010aeab, &(0x7f0000000440)=@arm64_ccsidr={0x6020000000110004, 0x0}) (async) r12 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000769000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000300)={0x0, &(0x7f0000000340)=[@smc={0x1e, 0x40, {0x84000004, [0xffffffffffffffff, 0x0, 0x2, 0x3f8b, 0xf7b0]}}], 0x40}, &(0x7f0000000380)=[@featur2={0x1, 0x4}], 0x1) 1m24.761766942s ago: executing program 5 (id=158): munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0x80111500, 0x20000000) r1 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32) r2 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vm(r0, 0x4018aee3, &(0x7f0000000080)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x3, 0x4fa1}}) munmap$KVM_VCPU(r2, 0x1) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) 1m24.520658332s ago: executing program 4 (id=157): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000dd4000/0x3000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) mmap$KVM_VCPU(0x0, 0x50000, 0x2000002, 0x10031, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10200, 0x6, 0x1000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0) r4 = eventfd2(0x0, 0x0) close(r4) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) write$eventfd(r4, &(0x7f0000000180)=0x5, 0xfffffde3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0) ioctl$KVM_CAP_HALT_POLL(0xffffffffffffffff, 0x4068aea3, 0x0) 1m7.649972286s ago: executing program 4 (id=159): openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) (async) r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) munmap$KVM_VCPU(0x0, 0x1000000000) (async) munmap$KVM_VCPU(0x0, 0x1000000000) mmap$KVM_VCPU(&(0x7f0000001000/0x2000)=nil, 0x930, 0x2000003, 0x4120932, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r4, 0x80111500, 0x20000000) r5 = openat$kvm(0x0, &(0x7f0000000000), 0x103080, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) r8 = syz_kvm_vgic_v3_setup(r6, 0x1, 0x40) ioctl$KVM_GET_DEVICE_ATTR(r8, 0x4018aee2, &(0x7f0000000040)=@attr_arm64={0x0, 0x7, 0x3, 0x0}) syz_kvm_add_vcpu$arm64(r3, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x81}], 0x1) (async) syz_kvm_add_vcpu$arm64(r3, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x81}], 0x1) syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013c65d, 0x3}}], 0x20}, 0x0, 0x0) (async) r9 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013c65d, 0x3}}], 0x20}, 0x0, 0x0) r10 = ioctl$KVM_GET_STATS_FD_cpu(r7, 0xaece) ioctl$KVM_PPC_ALLOCATE_HTAB(r10, 0xc004aea7, &(0x7f0000000080)=0x8) syz_kvm_vgic_v3_setup(r1, 0x3, 0xa0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34) 1m2.367601828s ago: executing program 5 (id=160): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xf) ioctl$KVM_SET_DEVICE_ATTR_vm(r3, 0x4018aee1, &(0x7f00000000c0)=@attr_other={0x0, 0x7ff, 0x1, &(0x7f0000000100)=0x9}) r4 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000140)={0x0, &(0x7f0000000000)=[@irq_setup={0x46, 0x18, {0x2, 0x2ca}}, @irq_setup={0x46, 0x18, {0x4, 0x5f}}], 0x30}, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 48.245596077s ago: executing program 5 (id=161): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) (async) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) mmap$KVM_VCPU(&(0x7f0000ec1000/0x3000)=nil, 0x930, 0x9, 0x9032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8}) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f00000000c0)=@attr_other={0x0, 0xfff, 0x1}) (async) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f00000000c0)=@attr_other={0x0, 0xfff, 0x1}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x5, 0x0, &(0x7f00000006c0)=0x3}) 20.089221804s ago: executing program 36 (id=159): openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) (async) r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) munmap$KVM_VCPU(0x0, 0x1000000000) (async) munmap$KVM_VCPU(0x0, 0x1000000000) mmap$KVM_VCPU(&(0x7f0000001000/0x2000)=nil, 0x930, 0x2000003, 0x4120932, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r4, 0x80111500, 0x20000000) r5 = openat$kvm(0x0, &(0x7f0000000000), 0x103080, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) r8 = syz_kvm_vgic_v3_setup(r6, 0x1, 0x40) ioctl$KVM_GET_DEVICE_ATTR(r8, 0x4018aee2, &(0x7f0000000040)=@attr_arm64={0x0, 0x7, 0x3, 0x0}) syz_kvm_add_vcpu$arm64(r3, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x81}], 0x1) (async) syz_kvm_add_vcpu$arm64(r3, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x81}], 0x1) syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013c65d, 0x3}}], 0x20}, 0x0, 0x0) (async) r9 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013c65d, 0x3}}], 0x20}, 0x0, 0x0) r10 = ioctl$KVM_GET_STATS_FD_cpu(r7, 0xaece) ioctl$KVM_PPC_ALLOCATE_HTAB(r10, 0xc004aea7, &(0x7f0000000080)=0x8) syz_kvm_vgic_v3_setup(r1, 0x3, 0xa0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34) 0s ago: executing program 37 (id=161): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) (async) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) mmap$KVM_VCPU(&(0x7f0000ec1000/0x3000)=nil, 0x930, 0x9, 0x9032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8}) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f00000000c0)=@attr_other={0x0, 0xfff, 0x1}) (async) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f00000000c0)=@attr_other={0x0, 0xfff, 0x1}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x5, 0x0, &(0x7f00000006c0)=0x3}) kernel console output (not intermixed with test programs): [ 420.613654][ T24] audit: type=1400 audit(419.730:74): avc: denied { read } for pid=3218 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 427.867304][ T24] audit: type=1400 audit(426.980:75): avc: denied { write } for pid=3275 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 431.916645][ T24] audit: type=1400 audit(430.980:76): avc: denied { write } for pid=3278 comm="rm" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 434.602129][ T3218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.750919][ T24] audit: type=1400 audit(440.870:77): avc: denied { write } for pid=3283 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 445.869912][ T24] audit: type=1400 audit(444.990:78): avc: denied { write } for pid=3286 comm="rm" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 455.203102][ T24] audit: type=1400 audit(454.320:79): avc: denied { write } for pid=3290 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 459.055050][ T24] audit: type=1400 audit(458.170:80): avc: denied { write } for pid=3293 comm="rm" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 475.188140][ T24] audit: type=1400 audit(474.290:81): avc: denied { write } for pid=3298 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 479.257301][ T24] audit: type=1400 audit(478.330:82): avc: denied { write } for pid=3301 comm="rm" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 481.863145][ T3218] eql: remember to turn off Van-Jacobson compression on your slave devices [ 491.707924][ T24] audit: type=1400 audit(490.820:83): avc: denied { write } for pid=3307 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 495.527447][ T24] audit: type=1400 audit(494.630:84): avc: denied { write } for pid=3310 comm="rm" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 510.382998][ T24] audit: type=1400 audit(509.500:85): avc: denied { write } for pid=3317 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 514.276805][ T24] audit: type=1400 audit(513.390:86): avc: denied { write } for pid=3320 comm="rm" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 520.186278][ T24] audit: type=1400 audit(519.300:87): avc: denied { write } for pid=3322 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 525.278161][ T24] audit: type=1400 audit(524.390:88): avc: denied { write } for pid=3325 comm="rm" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 533.957893][ T24] audit: type=1400 audit(533.070:89): avc: denied { write } for pid=3328 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 538.768044][ T24] audit: type=1400 audit(537.860:90): avc: denied { write } for pid=3331 comm="rm" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 548.699016][ T24] audit: type=1400 audit(547.820:91): avc: denied { write } for pid=3335 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 552.827756][ T24] audit: type=1400 audit(551.890:92): avc: denied { write } for pid=3338 comm="rm" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 558.239267][ T24] audit: type=1400 audit(557.360:93): avc: denied { write } for pid=3340 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 562.217897][ T24] audit: type=1400 audit(561.330:94): avc: denied { write } for pid=3343 comm="rm" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 587.090581][ T24] audit: type=1400 audit(586.210:95): avc: denied { write } for pid=3355 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 592.367056][ T24] audit: type=1400 audit(591.480:96): avc: denied { write } for pid=3358 comm="rm" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 604.257996][ T24] audit: type=1400 audit(603.370:97): avc: denied { write } for pid=3362 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 608.304588][ T24] audit: type=1400 audit(607.420:98): avc: denied { write } for pid=3365 comm="rm" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 620.307686][ T24] audit: type=1400 audit(619.390:99): avc: denied { write } for pid=3369 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 625.646563][ T24] audit: type=1400 audit(624.760:100): avc: denied { write } for pid=3372 comm="rm" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:26984' (ED25519) to the list of known hosts. [ 634.172737][ T24] audit: type=1400 audit(633.290:101): avc: denied { name_bind } for pid=3377 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 636.153854][ T24] audit: type=1400 audit(635.270:102): avc: denied { execute } for pid=3378 comm="sh" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 636.193202][ T24] audit: type=1400 audit(635.310:103): avc: denied { execute_no_trans } for pid=3378 comm="sh" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 673.137407][ T24] audit: type=1400 audit(672.250:104): avc: denied { mounton } for pid=3378 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 673.174765][ T24] audit: type=1400 audit(672.290:105): avc: denied { mount } for pid=3378 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 673.258730][ T3378] cgroup: Unknown subsys name 'net' [ 673.320383][ T24] audit: type=1400 audit(672.440:106): avc: denied { unmount } for pid=3378 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 673.759845][ T3378] cgroup: Unknown subsys name 'cpuset' [ 673.879734][ T3378] cgroup: Unknown subsys name 'rlimit' [ 674.732707][ T24] audit: type=1400 audit(673.850:107): avc: denied { setattr } for pid=3378 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 674.759059][ T24] audit: type=1400 audit(673.870:108): avc: denied { mounton } for pid=3378 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 674.779156][ T24] audit: type=1400 audit(673.900:109): avc: denied { mount } for pid=3378 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 675.824903][ T3381] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 675.849631][ T24] audit: type=1400 audit(674.960:110): avc: denied { relabelto } for pid=3381 comm="mkswap" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 675.874070][ T24] audit: type=1400 audit(674.990:111): avc: denied { write } for pid=3381 comm="mkswap" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 676.071085][ T24] audit: type=1400 audit(675.180:112): avc: denied { read } for pid=3378 comm="syz-executor" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 676.098271][ T24] audit: type=1400 audit(675.190:113): avc: denied { open } for pid=3378 comm="syz-executor" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 676.156062][ T3378] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 734.108043][ T24] audit: type=1400 audit(733.220:114): avc: denied { execmem } for pid=3382 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 737.870671][ T24] audit: type=1400 audit(736.990:116): avc: denied { read } for pid=3384 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 737.891447][ T24] audit: type=1400 audit(736.980:115): avc: denied { open } for pid=3385 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 737.967681][ T24] audit: type=1400 audit(737.080:117): avc: denied { mounton } for pid=3384 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 738.214530][ T24] audit: type=1400 audit(737.330:118): avc: denied { module_request } for pid=3384 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 739.222914][ T24] audit: type=1400 audit(738.340:119): avc: denied { sys_module } for pid=3385 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 746.230604][ T24] audit: type=1400 audit(745.300:120): avc: denied { create } for pid=3384 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 746.881745][ T24] audit: type=1400 audit(746.000:121): avc: denied { write } for pid=3384 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 747.029101][ T3385] rdma_rxe: Failed to create IPv4 UDP tunnel [ 747.039278][ T24] audit: type=1400 audit(746.150:122): avc: denied { read } for pid=3385 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 747.121271][ T3384] rxe_eth0 speed is unknown, defaulting to 1000 [ 747.218901][ T3384] rxe_eth0 speed is unknown, defaulting to 1000 [ 747.303899][ T3384] rxe_eth0 speed is unknown, defaulting to 1000 [ 756.069091][ T937] rxe_eth0 speed is unknown, defaulting to 1000 [ 756.116684][ T3384] infiniband rxe0: set active [ 756.117233][ T3384] infiniband rxe0: added rxe_eth0 [ 757.543930][ T3384] RDS/IB: rxe0: added [ 757.588434][ T3384] smc: adding ib device rxe0 with port count 1 [ 757.589940][ T3384] smc: ib device rxe0 port 1 has no pnetid [ 757.594416][ T937] rxe_eth0 speed is unknown, defaulting to 1000 [ 757.689490][ T3384] rxe_eth0 speed is unknown, defaulting to 1000 [ 766.342165][ T937] rxe_eth0 speed is unknown, defaulting to 1000 [ 766.421296][ T3384] rxe_eth0 speed is unknown, defaulting to 1000 [ 771.666928][ T24] audit: type=1400 audit(770.770:123): avc: denied { write } for pid=3427 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 776.326614][ T24] audit: type=1400 audit(775.420:124): avc: denied { write } for pid=3433 comm="rm" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 777.363090][ T3385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 777.904887][ T3385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 791.951318][ T3385] hsr_slave_0: entered promiscuous mode [ 791.980383][ T3385] hsr_slave_1: entered promiscuous mode [ 799.192464][ T3384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 799.429762][ T3384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 800.550278][ T24] audit: type=1400 audit(799.640:125): avc: denied { create } for pid=3385 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 800.574311][ T24] audit: type=1400 audit(799.690:126): avc: denied { write } for pid=3385 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 800.627201][ T24] audit: type=1400 audit(799.740:127): avc: denied { read } for pid=3385 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 800.760257][ T3385] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 800.966901][ T3385] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 801.028972][ T3385] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 801.128528][ T3385] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 801.184752][ T3385] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 801.380357][ T3385] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 801.458332][ T3385] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 801.659970][ T3385] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 814.243143][ T3384] hsr_slave_0: entered promiscuous mode [ 814.282189][ T3384] hsr_slave_1: entered promiscuous mode [ 814.307248][ T3384] debugfs: 'hsr0' already exists in 'hsr' [ 814.310503][ T3384] Cannot create hsr debugfs directory [ 814.435050][ T3385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 823.598450][ T3384] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 823.812322][ T3384] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 823.900724][ T3384] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 824.068438][ T3384] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 824.094389][ T3384] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 824.268509][ T3384] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 824.334277][ T3384] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 824.424862][ T3384] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 844.440783][ T3384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 873.401275][ T3385] veth0_vlan: entered promiscuous mode [ 874.022309][ T3385] veth1_vlan: entered promiscuous mode [ 876.669110][ T3385] veth0_macvtap: entered promiscuous mode [ 877.050052][ T3385] veth1_macvtap: entered promiscuous mode [ 879.990645][ T3509] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.991756][ T3509] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.992292][ T3509] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.992850][ T3509] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.618525][ T24] audit: type=1400 audit(879.720:128): avc: denied { write } for pid=3540 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 882.921466][ T24] audit: type=1400 audit(882.030:129): avc: denied { mount } for pid=3385 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 883.139875][ T24] audit: type=1400 audit(882.190:130): avc: denied { mounton } for pid=3385 comm="syz-executor" path="/syzkaller.caJrlr/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 883.278240][ T24] audit: type=1400 audit(882.390:131): avc: denied { mount } for pid=3385 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 883.777446][ T24] audit: type=1400 audit(882.860:132): avc: denied { mounton } for pid=3385 comm="syz-executor" path="/syzkaller.caJrlr/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 883.892764][ T24] audit: type=1400 audit(883.010:133): avc: denied { mounton } for pid=3385 comm="syz-executor" path="/syzkaller.caJrlr/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3771 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 884.458440][ T24] audit: type=1400 audit(883.530:134): avc: denied { unmount } for pid=3385 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 884.690177][ T24] audit: type=1400 audit(883.800:135): avc: denied { mounton } for pid=3385 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1548 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 884.792927][ T24] audit: type=1400 audit(883.910:136): avc: denied { mount } for pid=3385 comm="syz-executor" name="/" dev="gadgetfs" ino=3772 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 887.572784][ T24] audit: type=1400 audit(886.670:137): avc: denied { write } for pid=3548 comm="rm" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 890.256667][ T24] audit: type=1400 audit(889.370:138): avc: denied { mounton } for pid=3385 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 890.357311][ T24] audit: type=1400 audit(889.460:139): avc: denied { mount } for pid=3385 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 892.213449][ T3385] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 893.939326][ T24] audit: type=1400 audit(893.050:140): avc: denied { read } for pid=3385 comm="syz-executor" name="loop0" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 893.963740][ T24] audit: type=1400 audit(893.080:141): avc: denied { open } for pid=3385 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 894.040508][ T24] audit: type=1400 audit(893.150:142): avc: denied { ioctl } for pid=3385 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=636 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 905.589051][ T24] audit: type=1400 audit(904.680:143): avc: denied { read } for pid=3556 comm="syz.0.1" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 905.690414][ T24] audit: type=1400 audit(904.790:144): avc: denied { open } for pid=3556 comm="syz.0.1" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 906.281471][ T24] audit: type=1400 audit(905.400:145): avc: denied { ioctl } for pid=3556 comm="syz.0.1" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 907.991824][ T24] audit: type=1400 audit(907.110:146): avc: denied { append } for pid=3556 comm="syz.0.1" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 908.129226][ T24] audit: type=1400 audit(907.180:147): avc: denied { map } for pid=3556 comm="syz.0.1" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 908.159140][ T24] audit: type=1400 audit(907.270:148): avc: denied { execute } for pid=3556 comm="syz.0.1" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 911.888785][ T3384] veth0_vlan: entered promiscuous mode [ 912.539248][ T3384] veth1_vlan: entered promiscuous mode [ 915.094715][ T3384] veth0_macvtap: entered promiscuous mode [ 915.610451][ T3384] veth1_macvtap: entered promiscuous mode [ 918.058095][ T48] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.178058][ T20] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.277384][ T3429] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.280667][ T3509] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.804404][ T24] audit: type=1400 audit(936.890:149): avc: denied { write } for pid=3575 comm="syz.1.2" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 972.532349][ T24] audit: type=1400 audit(971.570:150): avc: denied { create } for pid=3584 comm="syz.1.7" anonclass=[kvm-gmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 981.821872][ T24] audit: type=1400 audit(980.930:151): avc: denied { execute } for pid=3592 comm="syz.1.9" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=4406 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1040.922689][ T24] audit: type=1400 audit(1040.040:152): avc: denied { mmap_zero } for pid=3630 comm="syz.1.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 1183.714753][ T3716] kvm [3716]: Failed to find VMA for hva 0x20c01000 [ 1201.743627][ T3725] kvm [3725]: Failed to find VMA for hva 0x20c01000 [ 1306.519354][ T3763] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1307.494480][ T3763] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1308.386592][ T3763] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1309.551976][ T3763] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1309.818272][ T3752] rxe_eth0 speed is unknown, defaulting to 1000 [ 1328.254660][ T3763] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1328.720195][ T3763] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1328.860309][ T3763] bond0 (unregistering): Released all slaves [ 1333.659117][ T3759] rxe_eth0 speed is unknown, defaulting to 1000 [ 1345.042509][ T3763] hsr_slave_0: left promiscuous mode [ 1345.108053][ T3763] hsr_slave_1: left promiscuous mode [ 1345.531242][ T3763] veth1_macvtap: left promiscuous mode [ 1345.532534][ T3763] veth0_macvtap: left promiscuous mode [ 1345.561012][ T3763] veth1_vlan: left promiscuous mode [ 1345.563014][ T3763] veth0_vlan: left promiscuous mode [ 1347.001658][ T24] audit: type=1400 audit(1346.100:153): avc: denied { write } for pid=3781 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1352.777158][ T24] audit: type=1400 audit(1351.830:154): avc: denied { write } for pid=3784 comm="rm" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1364.232854][ T3218] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1368.084135][ T3763] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1369.379999][ T3763] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1370.494695][ T3763] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1371.644793][ T3763] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1379.138798][ T24] audit: type=1400 audit(1378.190:155): avc: denied { write } for pid=3794 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1386.447687][ T24] audit: type=1400 audit(1385.550:156): avc: denied { write } for pid=3804 comm="rm" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1390.834034][ T3763] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1391.137251][ T3763] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1391.241693][ T3763] bond0 (unregistering): Released all slaves [ 1392.964064][ T3218] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1407.125115][ T3763] hsr_slave_0: left promiscuous mode [ 1407.197159][ T3763] hsr_slave_1: left promiscuous mode [ 1407.520250][ T3763] veth1_macvtap: left promiscuous mode [ 1407.521112][ T3763] veth0_macvtap: left promiscuous mode [ 1407.522823][ T3763] veth1_vlan: left promiscuous mode [ 1407.524085][ T3763] veth0_vlan: left promiscuous mode [ 1408.953600][ T24] audit: type=1400 audit(1408.070:157): avc: denied { write } for pid=3817 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1412.634337][ T24] audit: type=1400 audit(1411.750:158): avc: denied { write } for pid=3821 comm="rm" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1422.674147][ T3218] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1423.784816][ T3752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1424.274650][ T3752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1433.177754][ T3759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1433.879407][ T3759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1434.161947][ T24] audit: type=1400 audit(1433.280:159): avc: denied { write } for pid=3834 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1440.227948][ T24] audit: type=1400 audit(1439.270:160): avc: denied { write } for pid=3841 comm="rm" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1444.879273][ T3218] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1448.614436][ T3752] hsr_slave_0: entered promiscuous mode [ 1448.741355][ T3752] hsr_slave_1: entered promiscuous mode [ 1459.037124][ T24] audit: type=1400 audit(1458.100:161): avc: denied { write } for pid=3856 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1460.849760][ T3759] hsr_slave_0: entered promiscuous mode [ 1460.908918][ T3759] hsr_slave_1: entered promiscuous mode [ 1460.948857][ T3759] debugfs: 'hsr0' already exists in 'hsr' [ 1460.949287][ T3759] Cannot create hsr debugfs directory [ 1463.379246][ T24] audit: type=1400 audit(1462.460:162): avc: denied { write } for pid=3860 comm="rm" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1464.358949][ T3752] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1464.620598][ T3752] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1465.611234][ T3752] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1465.772887][ T3752] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1466.129583][ T3752] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1466.308163][ T3752] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1466.670963][ T3752] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1466.839379][ T3752] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1467.174740][ T3218] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1472.220403][ T24] audit: type=1400 audit(1471.330:163): avc: denied { write } for pid=3871 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1476.378561][ T3759] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1476.554995][ T3759] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1476.691440][ T3759] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1476.928134][ T3759] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1477.039715][ T3759] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1477.280762][ T3759] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1477.363749][ T3759] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1477.669031][ T3759] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1479.399462][ T24] audit: type=1400 audit(1478.510:164): avc: denied { write } for pid=3877 comm="rm" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1493.642145][ T3752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1499.054049][ T24] audit: type=1400 audit(1498.160:165): avc: denied { write } for pid=3896 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1502.064953][ T3759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1509.017295][ T24] audit: type=1400 audit(1508.120:166): avc: denied { write } for pid=3907 comm="rm" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1514.771684][ T3218] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1536.149226][ T24] audit: type=1400 audit(1535.260:167): avc: denied { write } for pid=3923 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1543.104359][ T24] audit: type=1400 audit(1542.210:168): avc: denied { write } for pid=3933 comm="rm" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1547.938344][ T3218] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1562.476577][ T24] audit: type=1400 audit(1561.570:169): avc: denied { write } for pid=3948 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1571.281030][ T24] audit: type=1400 audit(1570.370:170): avc: denied { write } for pid=3958 comm="rm" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1577.863349][ T3218] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1591.754057][ T24] audit: type=1400 audit(1590.870:171): avc: denied { write } for pid=3969 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1596.481308][ T3752] veth0_vlan: entered promiscuous mode [ 1597.412047][ T3752] veth1_vlan: entered promiscuous mode [ 1599.914420][ T24] audit: type=1400 audit(1598.980:172): avc: denied { write } for pid=3979 comm="rm" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1600.611907][ T3752] veth0_macvtap: entered promiscuous mode [ 1601.149461][ T3752] veth1_macvtap: entered promiscuous mode [ 1604.769822][ T48] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1604.770697][ T48] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1604.771360][ T48] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1604.772026][ T48] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1605.920314][ T3759] veth0_vlan: entered promiscuous mode [ 1608.324281][ T3759] veth1_vlan: entered promiscuous mode [ 1612.790556][ T3759] veth0_macvtap: entered promiscuous mode [ 1613.277894][ T3759] veth1_macvtap: entered promiscuous mode [ 1616.652959][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1616.847766][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1616.987553][ T3393] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1617.006679][ T3769] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1657.890834][ T24] audit: type=1400 audit(1657.010:173): avc: denied { write } for pid=4011 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1669.163918][ T24] audit: type=1400 audit(1668.240:174): avc: denied { write } for pid=4021 comm="rm" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1694.932824][ T24] audit: type=1400 audit(1694.050:175): avc: denied { write } for pid=4037 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1706.389176][ T24] audit: type=1400 audit(1705.480:176): avc: denied { write } for pid=4047 comm="rm" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1744.092083][ T24] audit: type=1400 audit(1743.170:177): avc: denied { write } for pid=4066 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1756.496517][ T24] audit: type=1400 audit(1755.520:178): avc: denied { write } for pid=4080 comm="rm" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1775.604228][ T24] audit: type=1400 audit(1774.720:179): avc: denied { write } for pid=4089 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1786.398101][ T24] audit: type=1400 audit(1785.500:180): avc: denied { write } for pid=4099 comm="rm" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1807.297887][ T24] audit: type=1400 audit(1806.320:181): avc: denied { write } for pid=4111 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1819.230988][ T24] audit: type=1400 audit(1818.310:182): avc: denied { write } for pid=4122 comm="rm" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1844.747420][ T24] audit: type=1400 audit(1843.820:183): avc: denied { write } for pid=4136 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1853.230513][ T24] audit: type=1400 audit(1852.330:184): avc: denied { write } for pid=4146 comm="rm" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1873.010030][ T24] audit: type=1400 audit(1872.120:185): avc: denied { write } for pid=4156 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1885.562593][ T24] audit: type=1400 audit(1884.670:186): avc: denied { write } for pid=4169 comm="rm" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2004.848096][ T24] audit: type=1400 audit(2003.960:187): avc: denied { write } for pid=4238 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2015.758816][ T24] audit: type=1400 audit(2014.850:188): avc: denied { write } for pid=4247 comm="rm" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2075.781923][ T4289] kvm [4289]: Failed to find VMA for hva 0x20d8d000 [ 2395.878276][ T24] audit: type=1400 audit(2394.990:189): avc: denied { write } for pid=4457 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2405.118623][ T24] audit: type=1400 audit(2404.150:190): avc: denied { write } for pid=4469 comm="rm" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2463.249514][ T4474] rxe_eth0 speed is unknown, defaulting to 1000 [ 2484.273933][ T4481] rxe_eth0 speed is unknown, defaulting to 1000 [ 2537.310935][ T4474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2538.889041][ T4474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2554.952908][ T4481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2555.974080][ T4481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2572.089393][ T4474] hsr_slave_0: entered promiscuous mode [ 2572.173514][ T4474] hsr_slave_1: entered promiscuous mode [ 2572.229790][ T4474] debugfs: 'hsr0' already exists in 'hsr' [ 2572.230190][ T4474] Cannot create hsr debugfs directory [ 2593.261747][ T4481] hsr_slave_0: entered promiscuous mode [ 2593.388863][ T4481] hsr_slave_1: entered promiscuous mode [ 2593.507595][ T4481] debugfs: 'hsr0' already exists in 'hsr' [ 2593.507995][ T4481] Cannot create hsr debugfs directory [ 2602.898207][ T4474] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2603.337671][ T4474] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2605.170817][ T4474] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2605.593441][ T4474] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2606.682815][ T4474] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2607.170829][ T4474] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2608.200029][ T4474] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2608.609659][ T4474] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2624.078740][ T4481] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2624.703080][ T4481] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2624.857250][ T4481] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2625.444043][ T4481] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2625.647742][ T4481] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2626.060475][ T4481] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2626.231233][ T4481] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2626.612060][ T4481] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2642.301313][ T3904] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2645.429733][ T3904] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2648.215051][ T3904] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2650.680406][ T3904] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2675.622885][ T3904] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2676.125091][ T3904] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2676.357763][ T3904] bond0 (unregistering): Released all slaves [ 2680.708742][ T4474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2688.814790][ T4481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2701.030468][ T3904] hsr_slave_0: left promiscuous mode [ 2701.180701][ T3904] hsr_slave_1: left promiscuous mode [ 2701.856903][ T3904] veth1_macvtap: left promiscuous mode [ 2701.857773][ T3904] veth0_macvtap: left promiscuous mode [ 2701.859761][ T3904] veth1_vlan: left promiscuous mode [ 2701.861333][ T3904] veth0_vlan: left promiscuous mode [ 2704.347204][ T24] audit: type=1400 audit(2703.450:191): avc: denied { write } for pid=4582 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2713.214501][ T24] audit: type=1400 audit(2712.320:192): avc: denied { write } for pid=4587 comm="rm" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2735.290527][ T3218] 8021q: adding VLAN 0 to HW filter on device eth9 [ 2741.842042][ T3906] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2743.943355][ T3906] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2745.601325][ T3906] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2747.402480][ T3906] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2759.517442][ T24] audit: type=1400 audit(2758.590:193): avc: denied { write } for pid=4597 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2768.746345][ T24] audit: type=1400 audit(2767.800:194): avc: denied { write } for pid=4604 comm="rm" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2772.421468][ T3906] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2773.112660][ T3906] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2773.872223][ T3906] bond0 (unregistering): Released all slaves [ 2775.702540][ T3218] 8021q: adding VLAN 0 to HW filter on device eth10 [ 2801.531710][ T3906] hsr_slave_0: left promiscuous mode [ 2801.667690][ T3906] hsr_slave_1: left promiscuous mode [ 2802.252643][ T3906] veth1_macvtap: left promiscuous mode [ 2802.253489][ T3906] veth0_macvtap: left promiscuous mode [ 2802.357165][ T3906] veth1_vlan: left promiscuous mode [ 2802.370104][ T3906] veth0_vlan: left promiscuous mode [ 2805.501889][ T24] audit: type=1400 audit(2804.570:195): avc: denied { write } for pid=4614 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2811.909103][ T24] audit: type=1400 audit(2811.020:196): avc: denied { write } for pid=4619 comm="rm" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2830.874342][ T3218] 8021q: adding VLAN 0 to HW filter on device eth11 [ 2842.656587][ T24] audit: type=1400 audit(2841.760:197): avc: denied { write } for pid=4623 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2852.210263][ T24] audit: type=1400 audit(2851.320:198): avc: denied { write } for pid=4632 comm="rm" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2872.466695][ T24] audit: type=1400 audit(2871.520:199): avc: denied { write } for pid=4648 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2880.359599][ T24] audit: type=1400 audit(2879.460:200): avc: denied { write } for pid=4659 comm="rm" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2886.671439][ T3218] 8021q: adding VLAN 0 to HW filter on device eth12 [ 2913.738032][ T24] audit: type=1400 audit(2912.820:201): avc: denied { write } for pid=4677 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2921.893115][ T24] audit: type=1400 audit(2920.950:202): avc: denied { write } for pid=4688 comm="rm" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2923.140079][ T4481] veth0_vlan: entered promiscuous mode [ 2923.777918][ T4474] veth0_vlan: entered promiscuous mode [ 2924.932174][ T4481] veth1_vlan: entered promiscuous mode [ 2925.899965][ T4474] veth1_vlan: entered promiscuous mode [ 2928.015084][ T3218] 8021q: adding VLAN 0 to HW filter on device eth13 [ 2930.963820][ T4481] veth0_macvtap: entered promiscuous mode [ 2931.161642][ T4474] veth0_macvtap: entered promiscuous mode [ 2932.178144][ T4481] veth1_macvtap: entered promiscuous mode [ 2932.340854][ T4474] veth1_macvtap: entered promiscuous mode [ 2937.931665][ T48] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2938.014492][ T4550] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2938.026905][ T4550] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2938.027758][ T4550] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2938.377721][ T48] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2938.600793][ T3393] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2938.601659][ T3393] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2938.602297][ T3393] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2952.332206][ T24] audit: type=1400 audit(2951.450:203): avc: denied { write } for pid=4694 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2963.226769][ T24] audit: type=1400 audit(2962.310:204): avc: denied { write } for pid=4701 comm="rm" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2972.023611][ T3218] 8021q: adding VLAN 0 to HW filter on device eth14 [ 3001.287797][ T24] audit: type=1400 audit(3000.400:205): avc: denied { write } for pid=4724 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3013.292566][ T24] audit: type=1400 audit(3012.410:206): avc: denied { write } for pid=4733 comm="rm" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3020.293559][ T3218] 8021q: adding VLAN 0 to HW filter on device eth15 [ 3041.693503][ T24] audit: type=1400 audit(3040.770:207): avc: denied { write } for pid=4738 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3052.701739][ T24] audit: type=1400 audit(3051.820:208): avc: denied { write } for pid=4745 comm="rm" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3060.113958][ T3218] 8021q: adding VLAN 0 to HW filter on device eth16 [ 3072.517589][ T24] audit: type=1400 audit(3071.600:209): avc: denied { write } for pid=4751 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3080.072585][ T4740] rxe_eth0 speed is unknown, defaulting to 1000 [ 3085.739604][ T24] audit: type=1400 audit(3084.850:210): avc: denied { write } for pid=4761 comm="rm" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3105.898999][ T24] audit: type=1400 audit(3105.000:211): avc: denied { write } for pid=4766 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3109.652535][ T4750] rxe_eth0 speed is unknown, defaulting to 1000 [ 3114.769480][ T24] audit: type=1400 audit(3113.800:212): avc: denied { write } for pid=4770 comm="rm" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3193.112899][ T24] audit: type=1400 audit(3192.230:213): avc: denied { write } for pid=4801 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3199.814939][ T4740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3201.871112][ T4740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3204.389204][ T24] audit: type=1400 audit(3203.400:214): avc: denied { write } for pid=4810 comm="rm" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3229.753565][ T4750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3231.362799][ T4750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3244.168930][ T24] audit: type=1400 audit(3243.280:215): avc: denied { write } for pid=4826 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3256.667420][ T24] audit: type=1400 audit(3255.690:216): avc: denied { write } for pid=4835 comm="rm" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3256.882300][ T4740] hsr_slave_0: entered promiscuous mode [ 3257.110246][ T4740] hsr_slave_1: entered promiscuous mode [ 3280.959824][ T24] audit: type=1400 audit(3280.070:217): avc: denied { write } for pid=4841 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3290.909092][ T4750] hsr_slave_0: entered promiscuous mode [ 3291.149529][ T4750] hsr_slave_1: entered promiscuous mode [ 3291.204000][ T4750] debugfs: 'hsr0' already exists in 'hsr' [ 3291.204423][ T4750] Cannot create hsr debugfs directory [ 3292.007024][ T24] audit: type=1400 audit(3291.010:218): avc: denied { write } for pid=4847 comm="rm" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3299.179861][ T4740] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 3299.781146][ T4740] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 3299.994318][ T4740] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 3300.550259][ T4740] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3302.511888][ T4740] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 3303.070041][ T4740] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 3305.243402][ T4740] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 3306.282396][ T4740] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 3323.613695][ T24] audit: type=1400 audit(3322.730:219): avc: denied { write } for pid=4861 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3332.650318][ T4750] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 3333.351861][ T4750] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 3333.620169][ T4750] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 3334.271304][ T4750] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3334.432291][ T4750] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 3335.153139][ T4750] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 3335.418152][ T4750] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 3336.101384][ T4750] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 3340.239456][ T24] audit: type=1400 audit(3339.320:220): avc: denied { write } for pid=4868 comm="rm" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3366.471479][ T4740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3375.329662][ T24] audit: type=1400 audit(3374.420:221): avc: denied { write } for pid=4888 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3389.682092][ T4750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3392.508245][ T24] audit: type=1400 audit(3391.610:222): avc: denied { write } for pid=4896 comm="rm" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3418.909047][ T24] audit: type=1400 audit(3417.950:223): avc: denied { write } for pid=4904 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3435.963789][ T24] audit: type=1400 audit(3435.080:224): avc: denied { write } for pid=4913 comm="rm" name="hook-state" dev="tmpfs" ino=37 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3458.001809][ T26] INFO: task syz.5.161:4726 blocked for more than 430 seconds. [ 3458.002681][ T26] Not tainted syzkaller #0 [ 3458.002952][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3458.003261][ T26] task:syz.5.161 state:D stack:0 pid:4726 tgid:4726 ppid:4481 task_flags:0x400040 flags:0x00000011 [ 3458.167580][ T26] Call trace: [ 3458.168019][ T26] __switch_to+0x5e4/0xb74 (T) [ 3458.169436][ T26] __schedule+0x1e0c/0x38a4 [ 3458.169850][ T26] schedule+0x1b4/0x274 [ 3458.170169][ T26] schedule_timeout+0x68/0x1e4 [ 3458.170559][ T26] wait_for_completion+0x1bc/0x418 [ 3458.170884][ T26] __synchronize_srcu+0x1cc/0x20c [ 3458.171182][ T26] synchronize_srcu+0x668/0x8dc [ 3458.171488][ T26] mmu_notifier_unregister+0x33c/0x444 [ 3458.171779][ T26] kvm_put_kvm+0x69c/0xbbc [ 3458.172151][ T26] kvm_vm_release+0x58/0x78 [ 3458.172481][ T26] __fput+0x4b0/0x97c [ 3458.172832][ T26] ____fput+0x20/0x30 [ 3458.173216][ T26] task_work_run+0x1b8/0x254 [ 3458.173594][ T26] exit_to_user_mode_loop+0x110/0x188 [ 3458.173961][ T26] el0_svc+0x18c/0x240 [ 3458.174312][ T26] el0t_64_sync_handler+0x68/0xdc [ 3458.174701][ T26] el0t_64_sync+0x198/0x19c [ 3458.399085][ T26] [ 3458.399085][ T26] Showing all locks held in the system: [ 3458.399548][ T26] locks held by khungtaskd/26: 1, last CPU#0: [ 3458.399836][ T26] #0: ffff800088a7e858 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x4c/0x188 [ 3458.401520][ T26] locks held by kworker/u4:4/48: 3, last CPU#0: [ 3458.401759][ T26] #0: 95f000000dc34140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b8 [ 3458.402668][ T26] #1: ffff80008dc97ce8 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b8 [ 3458.403550][ T26] #2: b6f000001fb2ca58 (&devlink->lock_key#3){+.+.}-{4:4}, at: devl_trylock+0x24/0x34 [ 3458.404788][ T26] locks held by klogd/3181: 1, last CPU#0: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 3458.405033][ T26] #0: fff0000074c21ea0 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x364/0x38a4 [ 3458.627912][ T26] locks held by getty/3246: 2, on CPU#0: [ 3458.628166][ T26] #0: 67f000001342e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x40/0x50 [ 3458.629131][ T26] #1: 03ff80008d7db2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x314/0x11f8 [ 3458.630031][ T26] locks held by sshd-session/3377: 1, last CPU#0: [ 3458.630249][ T26] #0: 19f00000169ac0e0 (sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_sendmsg+0x30/0x64 [ 3458.631142][ T26] locks held by syz-executor/3378: 2, last CPU#0: [ 3458.631341][ T26] #0: 75f0000017d94cf8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0xf4/0xb64 [ 3458.632125][ T26] #1: ffff800088a7e858 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x50/0x22c [ 3458.633024][ T26] locks held by kworker/u4:0/3393: 2, on CPU#0: [ 3458.633258][ T26] #0: 95f000000dc34140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b8 [ 3458.634089][ T26] #1: ffff80008fe17ce8 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b8 [ 3458.634917][ T26] locks held by kworker/u4:8/3904: 2, last CPU#0: [ 3458.958754][ T26] #0: d9f000000dc33d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b8 [ 3458.959932][ T26] #1: ffff80008f5f7ce8 ((gc_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b8 [ 3458.960860][ T26] locks held by kworker/u4:6/4550: 3, last CPU#0: [ 3458.961130][ T26] #0: 95f000000dc34140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b8 [ 3458.961958][ T26] #1: ffff8000a3a57ce8 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b8 [ 3458.962823][ T26] #2: 15f000001f310258 (&devlink->lock_key#5){+.+.}-{4:4}, at: devl_trylock+0x24/0x34 [ 3458.963796][ T26] locks held by kworker/u4:12/4568: 3, last CPU#0: [ 3458.963999][ T26] #0: 95f000000dc34140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b8 [ 3458.964819][ T26] #1: ffff8000a3a27ce8 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: psi_task_switch+0x6c/0x6e8 [ 3459.077880][ T26] #2: fff0000074c0dcd8 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x5cc/0xe90 [ 3459.078849][ T26] locks held by syz.4.159/4714: 2, last CPU#0: [ 3459.079071][ T26] #0: ffff800088acc330 (srcu){.+.+}-{0:0}, at: __mmu_notifier_release+0x4e8/0x87c [ 3459.079989][ T26] #1: 1cf0000017f05518 (&kvm->srcu){.+.+}-{0:0}, at: kvm_mmu_notifier_release+0x50/0xc4 [ 3459.080940][ T26] locks held by kworker/u4:1/4854: 3, last CPU#0: [ 3459.081184][ T26] #0: 95f000000dc34140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b8 [ 3459.082013][ T26] #1: ffff80008fc87ce8 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b8 [ 3459.082847][ T26] #2: ebf000001fb30258 (&devlink->lock_key#4){+.+.}-{4:4}, at: devl_trylock+0x24/0x34 [ 3459.083835][ T26] locks held by kworker/u4:2/4881: 2, on CPU#0: [ 3459.084040][ T26] #0: 95f000000dc34140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b8 [ 3459.084856][ T26] #1: ffff80008fd27ce8 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b8 [ 3459.347998][ T26] locks held by kworker/u4:11/4899: 3, last CPU#0: [ 3459.348245][ T26] #0: 95f000000dc34140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b8 [ 3459.349110][ T26] #1: ffff80008ffa7ce8 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b8 [ 3459.349966][ T26] #2: b6f0000027a44258 (&devlink->lock_key#6){+.+.}-{4:4}, at: devl_trylock+0x24/0x34 [ 3459.350942][ T26] locks held by modprobe/4923: 1, last CPU#0: [ 3459.351158][ T26] #0: 26f0000025da6c78 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x12c/0x3cc [ 3459.352191][ T26] [ 3459.352324][ T26] ============================================= [ 3459.352324][ T26] [ 3459.353176][ T26] Kernel panic - not syncing: hung_task: blocked tasks [ 3459.367490][ T26] CPU: 0 UID: 0 PID: 26 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 3459.369235][ T26] Hardware name: linux,dummy-virt (DT) [ 3459.370255][ T26] Call trace: [ 3459.371151][ T26] show_stack+0x2c/0x3c (C) [ 3459.372304][ T26] __dump_stack+0x30/0x40 [ 3459.373247][ T26] dump_stack_lvl+0x30/0x12c [ 3459.374327][ T26] dump_stack+0x1c/0x28 [ 3459.375328][ T26] vpanic+0x4cc/0x844 [ 3459.376253][ T26] vpanic+0x0/0x844 [ 3459.377189][ T26] hung_task_panic+0x0/0x2c [ 3459.378198][ T26] kthread+0x4cc/0x514 [ 3459.379251][ T26] ret_from_fork+0x10/0x20 [ 3459.381168][ T26] Kernel Offset: disabled [ 3459.382007][ T26] CPU features: 0x0,00000000,00d1802f,df188f42,0afff61f [ 3459.383279][ T26] Memory Limit: none [ 3459.385651][ T26] Rebooting in 86400 seconds..