last executing test programs: 1h14m46.589193299s ago: executing program 0 (id=59): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x5000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x10) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x105180, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0x40086602, 0x3) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x185800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x30) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000a21000/0x400000)=nil) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x42042, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000380)={0x1000, 0x11c000, 0x1}) r7 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x4000029) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000300)={0x7}) (async) r9 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000440)={0x0, 0x6000, 0x0, r9}) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r8, 0x4010ae67, &(0x7f00000000c0)={0x2000, 0x1a000, 0x4}) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f00000004c0)={0x8}) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r10 = openat$kvm(0x0, &(0x7f0000000500), 0x8280, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, 0x0) (async, rerun: 32) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) (rerun: 32) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r12, 0x0) (async) ioctl$KVM_SIGNAL_MSI(r8, 0x4020aea5, &(0x7f0000000540)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f00000003c0)={0xc000, 0x11000, 0x1}) (async) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r6, 0x4010ae68, &(0x7f0000000400)={0x17000, 0x206000, 0x1}) syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000000)={0x0, &(0x7f0000000580)}, 0x0, 0x0) (async) eventfd2(0x8, 0x80801) 1h14m46.378372735s ago: executing program 1 (id=60): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x1, 0x3, 0xdddd1000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x26e8, 0x3, 0xe000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) ioctl$KVM_HAS_DEVICE_ATTR_vm(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000340)=@attr_other={0x0, 0x6, 0x5, 0x0}) ioctl$KVM_CREATE_DEVICE(r1, 0xc018aec0, &(0x7f0000000380)={0x1}) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x37) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r5 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) r6 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000ac0)={0x0, &(0x7f0000000b40)=[@hvc={0x32, 0x40, {0x2000000, [0x0, 0x6, 0x6, 0x3, 0x7]}}, @smc={0x1e, 0x40, {0x84000006, [0x9, 0xe, 0xffffffffffff938a, 0x80, 0x6]}}, @msr={0x14, 0x20, {0x603000000013c213, 0x1}}, @its_setup={0x82, 0x28, {0x4, 0x1, 0x366}}, @smc={0x1e, 0x40, {0x8000801d, [0x8, 0xfffffffffffffff9, 0x8, 0x4, 0x8]}}, @hvc={0x32, 0x40, {0x8400000a, [0x40, 0x2, 0x8, 0x4, 0x1ff]}}, @mrs={0xbe, 0x18, {0x603000000013c212}}, @msr={0x14, 0x20, {0x603000000013dee6, 0x47}}, @msr={0x14, 0x20, {0x603000000013e609, 0x3}}, @msr={0x14, 0x20, {0x603000000013da21, 0x6}}, @code={0xa, 0x6c, {"007008d5000020aa000008d5807080d20060b8f2c10180d2a20180d2e30080d2440180d2020000d40000801a002c205e00e4007f007008d5df3003d5203b8bd20000b8f2a10080d2820180d2a30180d2e40180d2020000d4"}}, @code={0xa, 0x84, {"007008d5000008d5408f91d200a0b8f2810180d2220180d2030080d2840080d2020000d4e0b39fd20020b0f2210180d2c20180d2a30080d2c40080d2020000d40004c078000028d5604a89d200c0b0f2e10080d2e20080d2c30180d2040180d2020000d40024200e0000005e000008d5"}}, @smc={0x1e, 0x40, {0xbc003fb2, [0x20000604, 0x7, 0x85, 0x2d0d, 0x7]}}, @mrs={0xbe, 0x18, {0x603000000013da29}}, @eret={0xe6, 0x18, 0x838}, @code={0xa, 0x6c, {"a08289d20080b0f2e10180d2220080d2430180d2e40080d2020000d47f2003d50008c03800c8a05e00c8217e00608dd200a0b0f2010080d2820080d2630080d2e40180d2020000d4000028d5008008d5007008d5007008d5"}}, @smc={0x1e, 0x40, {0x80003fff, [0x7ff, 0x7ff, 0xf5, 0x3ff, 0x8]}}, @smc={0x1e, 0x40, {0x84000051, [0x6, 0x7, 0x6, 0x9, 0x8]}}, @hvc={0x32, 0x40, {0x84000014, [0x10001, 0x9, 0x6, 0x2, 0x7]}}, @msr={0x14, 0x20, {0x603000000013c021, 0x6}}, @hvc={0x32, 0x40, {0x80000081, [0x2, 0x5, 0x7b8f, 0x1, 0x6]}}, @eret={0xe6, 0x18, 0xc29}, @code={0xa, 0x9c, {"803a8ad20020b8f2010080d2820080d2030180d2640180d2020000d4007008d50000200d007008d5000028d50060bf0de0e19ad200a0b8f2410080d2a20080d2230180d2a40080d2020000d4401e84d20040b8f2210180d2420080d2e30180d2a40180d2020000d4c0f29cd200a0b0f2c10080d2020180d2c30080d2c40180d2020000d4000028d5"}}, @irq_setup={0x46, 0x18, {0x2, 0x239}}, @its_send_cmd={0xaa, 0x28, {0x5, 0x1, 0x0, 0xa, 0x0, 0x7, 0x3}}, @msr={0x14, 0x20, {0x6030000000138045, 0xfffffffffffffff7}}, @smc={0x1e, 0x40, {0x84000009, [0x9, 0xffffffffffffffff, 0x392e, 0x9, 0xa3]}}, @uexit={0x0, 0x18, 0x6}], 0x618}, &(0x7f0000000b00)=[@featur1={0x1, 0x40}], 0x1) (rerun: 32) mmap$KVM_VCPU(&(0x7f0000dc3000/0x3000)=nil, 0x50000, 0x1, 0x10031, r6, 0x0) (async, rerun: 64) openat$kvm(0x0, 0x0, 0x80, 0x0) (async, rerun: 64) syz_kvm_setup_cpu$arm64(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r3, 0x4068aea3, &(0x7f0000000400)={0xa8, 0x0, 0x2}) mmap$KVM_VCPU(0x0, 0x50000, 0x2000002, 0x10031, 0xffffffffffffffff, 0x0) (async) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x29) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x5) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r8, 0x4018aee2, &(0x7f0000000100)=@attr_irq_timer={0x0, 0x1, 0x1, 0x0}) (async) r9 = syz_kvm_add_vcpu$arm64(r4, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_MP_STATE(r9, 0x4004ae99, &(0x7f0000000200)=0xa) (async) ioctl$KVM_PRE_FAULT_MEMORY(r9, 0xc040aed5, &(0x7f0000000240)={0x9000, 0x110000}) (async) r10 = openat$kvm(0x0, &(0x7f00000004c0), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CLEAR_DIRTY_LOG(r11, 0xc018aec0, 0xfffffffffffffffe) munmap$KVM_VCPU(0x0, 0x1000000000) (async) ioctl$KVM_ARM_PREFERRED_TARGET(0xffffffffffffffff, 0x8020aeaf, &(0x7f0000000480)) 1h14m40.188163785s ago: executing program 0 (id=61): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r2 = openat$kvm(0x0, &(0x7f0000000300), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000180), 0x8280, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r6, 0x4018aee2, &(0x7f0000000480)=@attr_pvtime_ipa={0x0, 0x2, 0xfdfd, 0xfc}) r7 = openat$kvm(0x0, &(0x7f0000000340), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r8, 0xc040aed4, &(0x7f0000000380)={0x8, 0x3}) r9 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f00000003c0)={0x0, &(0x7f0000000400)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x2}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x1, 0x80003, 0x10000, 0x0, 0x2, 0x2}}], 0x50}, 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r12 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r12, &(0x7f00000004c0)={0x0, 0x0}, 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r14 = syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r14, &(0x7f0000000000)={0x0, &(0x7f0000000a80)=[@svc={0x122, 0x40, {0xc4000011, [0xc8, 0x3, 0xfffffffffffffffe, 0x3, 0x100]}}, @its_setup={0x82, 0x28, {0x3, 0x2, 0xce}}, @smc={0x1e, 0x40, {0x31000000, [0x6c5, 0x5, 0x8, 0x7ff, 0x9]}}, @its_setup={0x82, 0x28, {0x0, 0x4, 0x1b6}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x1, 0x4, 0x8, 0x8, 0x0, 0x2}}, @mrs={0xbe, 0x18, {0x6030000000138012}}, @hvc={0x32, 0x40, {0x80003fff, [0xee5d, 0x8, 0x1, 0x5169, 0x8000]}}, @its_setup={0x82, 0x28, {0x4, 0x4, 0x1c0}}, @mrs={0xbe, 0x18, {0x603000000013c109}}, @code={0xa, 0x54, {"5e02342e007008d5007008d5008008d5c0a580d20000b8f2210080d2a20080d2430080d2a40180d2020000d4000008d50094005fe00300b2000028d5007008d5"}}, @msr={0x14, 0x20, {0x603000000013c019, 0x80000000}}, @hvc={0x32, 0x40, {0x80000000, [0x1, 0x8, 0x3, 0x3, 0x2]}}, @mrs={0xbe, 0x18, {0x603000000013c510}}, @uexit={0x0, 0x18, 0x4}, @msr={0x14, 0x20, {0x7c5, 0x6}}, @its_setup={0x82, 0x28, {0x4, 0x1, 0x132}}, @hvc={0x32, 0x40, {0x40, [0x400, 0x6, 0x7ff, 0x66, 0x2]}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80a0000, 0x200, 0x8000000000000001, 0x6}}, @irq_setup={0x46, 0x18, {0x1, 0x312}}], 0x344}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r3, 0x0, 0x380) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f00000005c0)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r15, 0x4018aee1, &(0x7f0000000600)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000640)=0x8080000}) ioctl$KVM_RUN(r10, 0xae80, 0x0) r16 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r17 = ioctl$KVM_CREATE_VM(r16, 0xae01, 0x25) ioctl$KVM_CREATE_DEVICE(r17, 0xc00caee0, &(0x7f00000000c0)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r18, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000140)}) ioctl$KVM_CREATE_VCPU(r17, 0xae41, 0x0) 1h14m29.805606459s ago: executing program 1 (id=62): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$arm64(r2, 0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000000c0)={0x4, 0xffffffffffffffff, 0x1}) r4 = ioctl$KVM_CREATE_VM(r3, 0x894c, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xb701, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0x8008b70d, 0x2) ioctl$KVM_GET_ONE_REG(r5, 0x4010aeab, &(0x7f0000000140)=@arm64_fp={0x60400000001000c1, &(0x7f0000000100)=0x81}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, 0x0) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000b80)={0x0, &(0x7f0000000040)=[@smc={0x1e, 0x40, {0xc4000004, [0x40000099a, 0x4, 0x9, 0x89, 0xffffffffffffffff]}}], 0x40}, &(0x7f0000000bc0)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) 1h14m28.31827151s ago: executing program 0 (id=63): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x5, 0x1, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1, 0x16831, 0xffffffffffffffff, 0x0) (async) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_GUEST_MEMFD(r5, 0xc040aed4, &(0x7f0000000680)={0x200001fe0000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r5, 0x40a0ae49, &(0x7f00000006c0)={0x1fe, 0x4, 0xeeee8000, 0x2000, &(0x7f0000000000/0x2000)=nil, 0x0, r6}) (async) ioctl$KVM_SET_USER_MEMORY_REGION2(r5, 0x40a0ae49, &(0x7f0000000780)={0x2710, 0x4, 0x100000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil, 0x8000, r6}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000540)={0x10000, 0xc0, 0x2c0, &(0x7f0000000140)=[0x7, 0x10001, 0x0, 0x6, 0x4, 0xc49, 0x1ff, 0x7fffffff, 0x8, 0x1000, 0xf, 0x14, 0x9, 0x5, 0x0, 0x2, 0x10, 0xfffffffffffffffa, 0x7fffffff, 0x100000000, 0xcb, 0x5, 0xc4, 0x5, 0x80, 0x73c0, 0x88, 0x8000000000000001, 0x3, 0xc, 0x7fffffffffffffff, 0x0, 0x3, 0x401, 0x1000, 0x6, 0x5, 0x7ff, 0x6, 0x8, 0xf, 0xffff, 0x7, 0x8000000000000001, 0x5, 0x6f, 0xe19, 0x40, 0x2b9, 0x4000000000000, 0x8, 0x3, 0x3, 0x7, 0x91f, 0x7fff, 0x8, 0x7, 0xdf72bb9, 0x3, 0x4ea, 0x6, 0x3, 0x8000, 0x0, 0x10000, 0x700, 0x10, 0x2, 0x7fffffffffffffff, 0xcb0, 0x5, 0x2, 0x6, 0x7f, 0xd4, 0xb01e, 0x58, 0x13309df6, 0x1, 0x1ff, 0x0, 0x7, 0x100000000, 0xffffffff, 0x1, 0x3ff, 0x0, 0x4, 0xffffffffffffff1d, 0x5a8, 0x825, 0x6, 0xa883, 0x2, 0x80000000, 0xe5, 0x0, 0x3d9, 0xffffffffffffffff, 0x7fffffffffffffff, 0x3, 0x6, 0x100, 0x2a59, 0x400, 0x100000000, 0xffffffff80000001, 0x3, 0x0, 0x3, 0x6, 0xc4, 0x9, 0x100, 0x81, 0x9, 0x0, 0x4, 0x7, 0x3585, 0x100, 0xe, 0x2, 0x5, 0x80000000, 0x9, 0x7]}) (async) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) openat$kvm(0x0, &(0x7f0000000580), 0x0, 0x0) (async) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async) r8 = syz_kvm_vgic_v3_setup(r7, 0x3, 0x40) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f00000005c0)=@attr_other={0x0, 0x6, 0x382bc649, &(0x7f0000000600)=0x7}) (async) mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0) 1h14m22.843558311s ago: executing program 1 (id=64): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x82880, 0x0) close(0x5) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) openat$kvm(0x0, 0x0, 0x0, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000040)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000080)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f00000000c0)=0x8080000}) syz_kvm_vgic_v3_setup(r5, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000140)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000180)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_SIGNAL_MSI(r5, 0x4020aea5, &(0x7f0000000240)={0x8090040, 0x0, 0x0, 0x1}) ioctl$KVM_ARM_VCPU_INIT(r3, 0x4020aeae, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_filter={0x0, 0x0, 0x2, 0x0}) r8 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000100)={0x0, &(0x7f00000001c0)=[@mrs={0xbe, 0x18, {0x603000000013dce0}}], 0x18}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r9, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) ioctl$KVM_RUN(r9, 0xae80, 0x0) 1h14m20.028767823s ago: executing program 0 (id=65): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000000), 0x20200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = syz_kvm_vgic_v3_setup(r3, 0x3, 0x40) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000000c0)=@attr_other={0x0, 0x6, 0x382bc664, &(0x7f0000000100)=0xd31f}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r1, r5, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x20}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r5, 0x4010aeab, &(0x7f0000000180)=@arm64_core={0x603000000010000a, &(0x7f0000000040)=0x1}) 1h14m11.357361675s ago: executing program 1 (id=66): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xd7, 0x80000001}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r6 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x1800002, 0x11, r5, 0x0) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x2a) r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil) r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r10, 0x4010aeac, &(0x7f0000000100)=@arm64_fw={0x6030000000140000, &(0x7f0000000180)=0x10002}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f00000001c0)="d6011813013c360000000000f0ff8000802346cbd98748c77999581bc42baeecff00000700000000004800000001000000000000000000000000000000000000002300", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r5, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x40305829, &(0x7f0000000040)=@attr_other={0x0, 0x0, 0xfffffffffffffff7, 0x0}) 1h14m7.741127639s ago: executing program 0 (id=67): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0x80111500, 0x20000000) ioctl$KVM_CREATE_VM(r2, 0x541b, 0x2000001c) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc9, 0x3}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r8 = openat$kvm(0x0, &(0x7f0000000000), 0x161001, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x25) ioctl$KVM_SET_USER_MEMORY_REGION2(r9, 0x40a0ae49, &(0x7f0000000240)={0x5, 0x7, 0xc000, 0x1000, &(0x7f0000ffc000/0x1000)=nil, 0x4000}) r10 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x1800002, 0x11, r7, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r10, 0x20, &(0x7f00000001c0)="d601ac24fa0e04683bec0000f4ff8000802346cbd98762c7795582ba3948ecff0900355067d69f9340ebff00040000000100", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r7, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x40305828, &(0x7f0000000040)=@attr_other={0x0, 0x0, 0xfffffffffffffff7, 0x0}) 1h14m0.208469293s ago: executing program 1 (id=68): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000580)={0x0, &(0x7f0000000180)=[@eret={0xe6, 0x18, 0x5}, @smc={0x1e, 0x40, {0x30000000, [0xffffffff, 0xffffffffffffc719, 0x0, 0x9, 0x9]}}, @msr={0x14, 0x20, {0x603000000013807d}}, @msr={0x14, 0x20, {0x603000000013c015, 0x7f}}, @its_setup={0x82, 0x28, {0x1, 0x2, 0x308}}, @eret={0xe6, 0x18, 0x1}, @hvc={0x32, 0x40, {0x3000000, [0x5, 0x800, 0x120000000000, 0xe, 0x7]}}, @irq_setup={0x46, 0x18, {0x1, 0x208}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x1400, 0x80000000}}, @uexit={0x0, 0x18, 0x3}, @hvc={0x32, 0x40, {0xc400000e, [0x100000000, 0x10001, 0x5, 0x8]}}, @eret={0xe6, 0x18, 0x1}, @svc={0x122, 0x40, {0x84000051, [0xffff, 0xffffffffffffffff, 0xfffffffffffffffb, 0xa, 0x1000]}}, @smc={0x1e, 0x40, {0x4, [0x9, 0x5600000000000000, 0x0, 0xd, 0x6]}}, @code={0xa, 0x6c, {"007008d5c00e9dd20040b0f2010180d2020080d2630180d2a40180d2020000d4000028d5000020ab000080a9007008d5008008d5002e91d20080b8f2a10080d2820180d2230180d2c40180d2020000d40058202e000000d8"}}, @irq_setup={0x46, 0x18, {0x1, 0x3b5}}, @mrs={0xbe, 0x18, {0x603000000013e6dc}}, @eret={0xe6, 0x18, 0x5}, @its_send_cmd={0xaa, 0x28, {0xf, 0x1, 0x4, 0x5, 0x5, 0x63c, 0x3}}, @svc={0x122, 0x40, {0x84000014, [0x7f, 0x3e5, 0x9, 0x7ff]}}, @irq_setup={0x46, 0x18, {0x1, 0x1d0}}, @irq_setup={0x46, 0x18, {0x2, 0x15b}}, @svc={0x122, 0x40, {0x6d3b4f2cf64c5c85, [0x5, 0x2, 0x9, 0x9, 0x209]}}], 0x3dc}, &(0x7f00000005c0)=[@featur1={0x1, 0xcb}], 0x1) ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x22) openat$kvm(0x0, 0x0, 0x180, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000073000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000100)={0x0, &(0x7f0000000140)=[@mrs={0xbe, 0x18, {0x603000000013803c}}], 0x18}, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r7 = syz_kvm_vgic_v3_setup(r6, 0x1, 0x100) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000080)=@attr_arm64={0x0, 0x6, 0x4, &(0x7f00000000c0)=0xc}) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xf, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x3a) 1h13m58.298482291s ago: executing program 0 (id=69): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000040)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14d94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8ff90b5f3cedd7420b2b04000000000000002627e7", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r2, 0x0) r4 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0x80086601, 0x20004000) r5 = mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000300)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r7, 0xc018aec0, &(0x7f0000000340)={0x2717, 0x280, 0x400, 0x0}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000000240)="37e68986ad644f5dc57bbc1ff382863b67f3eee57a32ec911d95f88f3dd8ea716e4a29cefbd440b2ecf83f57baf33b0c97182970a47ef45c954e42f2055384921830f6e273d2eb30", 0x0, 0x2a2019ac5ed2a1ef) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000180)={0xffffffffffffffff, 0xc8}) mmap$KVM_VCPU(0x0, 0x50000, 0x2000002, 0x10031, 0xffffffffffffffff, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x129180, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x34) syz_kvm_setup_cpu$arm64(r9, 0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000200)={0x4, 0xffffffffffffffff, 0x1}) r11 = openat$kvm(0x0, &(0x7f0000000380), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x1) r14 = syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r14, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f0000000400)=[@featur1={0x1, 0x8}], 0x1) syz_kvm_vgic_v3_setup(r12, 0x1, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r13, 0x4018aee2, &(0x7f0000000440)=@attr_pmu_irq={0x0, 0x0, 0x0, 0x0}) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x0, 0x8032, 0xffffffffffffffff, 0x0) r15 = ioctl$KVM_CREATE_VM(r10, 0x894c, 0x0) ioctl$KVM_CREATE_VCPU(r15, 0xb701, 0x0) 1h13m51.407551953s ago: executing program 1 (id=70): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x161642, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r2, 0x4018aee2, &(0x7f0000000240)=@attr_pmu_init) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) mmap$KVM_VCPU(&(0x7f0000be2000/0x4000)=nil, 0x930, 0x2800002, 0x11, r4, 0x0) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000080)="fb4949dd038986814d7b9f0b000000000000dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e70000000000002000", 0x0, 0x48) (async) r5 = openat$kvm(0x0, &(0x7f00000002c0), 0x8280, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r7, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f0000000300)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r7, 0x0) (async) r9 = eventfd2(0x0, 0x0) close(r9) (async) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x4102c0, 0x1f01) (async) write$eventfd(r9, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r4, 0x0) (async) r10 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0x5460, 0xf8fffffffffefffc) r11 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r12 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000a5a000/0x400000)=nil) r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000b80)={0x0, &(0x7f0000000040)}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1) (async) syz_kvm_vgic_v3_setup(r11, 0xffffffffffffffff, 0x0) (async) r14 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2001, 0x0) r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r15, 0x4008ae6a, &(0x7f00000003c0)={0x4, 0x0, [{0x6, 0x3, 0x1, 0x0, @adapter={0x4, 0x13, 0x9e0, 0xffffffff, 0x3df}}, {0x7, 0x1, 0x1, 0x0, @msi={0x40, 0x8, 0xfffffff7, 0xa}}, {0x1, 0x5, 0x1, 0x0, @sint={0x10001, 0x9}}, {0x5, 0x2, 0x0, 0x0, @sint={0x7f, 0xba3}}]}) ioctl$KVM_RUN(r13, 0xae80, 0x0) (async) ioctl$KVM_GET_REG_LIST(r4, 0xc008aeb0, &(0x7f0000000140)={0x7, [0xd65, 0x10, 0xf, 0x3, 0x4, 0x81, 0x7]}) 1h13m11.736296224s ago: executing program 32 (id=69): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000040)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14d94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8ff90b5f3cedd7420b2b04000000000000002627e7", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r2, 0x0) r4 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0x80086601, 0x20004000) r5 = mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000300)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r7, 0xc018aec0, &(0x7f0000000340)={0x2717, 0x280, 0x400, 0x0}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000000240)="37e68986ad644f5dc57bbc1ff382863b67f3eee57a32ec911d95f88f3dd8ea716e4a29cefbd440b2ecf83f57baf33b0c97182970a47ef45c954e42f2055384921830f6e273d2eb30", 0x0, 0x2a2019ac5ed2a1ef) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000180)={0xffffffffffffffff, 0xc8}) mmap$KVM_VCPU(0x0, 0x50000, 0x2000002, 0x10031, 0xffffffffffffffff, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x129180, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x34) syz_kvm_setup_cpu$arm64(r9, 0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000200)={0x4, 0xffffffffffffffff, 0x1}) r11 = openat$kvm(0x0, &(0x7f0000000380), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x1) r14 = syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r14, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f0000000400)=[@featur1={0x1, 0x8}], 0x1) syz_kvm_vgic_v3_setup(r12, 0x1, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r13, 0x4018aee2, &(0x7f0000000440)=@attr_pmu_irq={0x0, 0x0, 0x0, 0x0}) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x0, 0x8032, 0xffffffffffffffff, 0x0) r15 = ioctl$KVM_CREATE_VM(r10, 0x894c, 0x0) ioctl$KVM_CREATE_VCPU(r15, 0xb701, 0x0) 1h13m5.229731521s ago: executing program 33 (id=70): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x161642, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r2, 0x4018aee2, &(0x7f0000000240)=@attr_pmu_init) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) mmap$KVM_VCPU(&(0x7f0000be2000/0x4000)=nil, 0x930, 0x2800002, 0x11, r4, 0x0) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000080)="fb4949dd038986814d7b9f0b000000000000dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e70000000000002000", 0x0, 0x48) (async) r5 = openat$kvm(0x0, &(0x7f00000002c0), 0x8280, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r7, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f0000000300)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r7, 0x0) (async) r9 = eventfd2(0x0, 0x0) close(r9) (async) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x4102c0, 0x1f01) (async) write$eventfd(r9, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r4, 0x0) (async) r10 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0x5460, 0xf8fffffffffefffc) r11 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r12 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000a5a000/0x400000)=nil) r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000b80)={0x0, &(0x7f0000000040)}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1) (async) syz_kvm_vgic_v3_setup(r11, 0xffffffffffffffff, 0x0) (async) r14 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2001, 0x0) r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r15, 0x4008ae6a, &(0x7f00000003c0)={0x4, 0x0, [{0x6, 0x3, 0x1, 0x0, @adapter={0x4, 0x13, 0x9e0, 0xffffffff, 0x3df}}, {0x7, 0x1, 0x1, 0x0, @msi={0x40, 0x8, 0xfffffff7, 0xa}}, {0x1, 0x5, 0x1, 0x0, @sint={0x10001, 0x9}}, {0x5, 0x2, 0x0, 0x0, @sint={0x7f, 0xba3}}]}) ioctl$KVM_RUN(r13, 0xae80, 0x0) (async) ioctl$KVM_GET_REG_LIST(r4, 0xc008aeb0, &(0x7f0000000140)={0x7, [0xd65, 0x10, 0xf, 0x3, 0x4, 0x81, 0x7]}) 1h4m17.448852598s ago: executing program 2 (id=100): openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async) r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x8800, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x8800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd2(0x40000000, 0x80000) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f00000001c0)={0x0, 0x0, 0x2, r5, 0x3}) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000240)={0x5, 0x0, 0x2, r5, 0xa}) syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000100)={0x0, &(0x7f0000000000)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x1}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x3, 0x40000000, 0x10000, 0x0, 0x0, 0x80000002}}], 0x50}, 0x0, 0x0) (async) r6 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000100)={0x0, &(0x7f0000000000)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x1}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x3, 0x40000000, 0x10000, 0x0, 0x0, 0x80000002}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8}) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1h4m3.739296873s ago: executing program 2 (id=102): mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x9000000) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000040)={0x101ff, 0x4, 0x6000, 0x2000, &(0x7f0000ffc000/0x2000)=nil, 0x100000000000000}) munmap(&(0x7f0000e76000/0x12000)=nil, 0x12000) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) 1h3m56.144307131s ago: executing program 3 (id=103): mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r1, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x0, 0x0, 0x0}) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@svc={0x122, 0x40, {0x84000014, [0x7, 0x4, 0x90, 0x8001, 0x80000001]}}], 0x40}, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000180)={0xffffffffffffffff, 0xc8, 0x3}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000200)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000240)=@x86={0x11, 0x9b, 0xf, 0x0, 0x5, 0x8, 0x82, 0x46, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x100001, 0x0, 0x0, 0x3, 0xa, 0x4, '\x00', 0x1, 0xc31}) write$eventfd(r6, &(0x7f0000000280)=0x3, 0xfdef) munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) munmap(&(0x7f0000482000/0x2000)=nil, 0x2000) munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_ARM_VCPU_INIT(r9, 0x4020aeae, &(0x7f0000000140)={0x5, 0x38257336d83328e6}) munmap(&(0x7f0000e76000/0x12000)=nil, 0x12000) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000f1a000/0x4000)=nil, 0x930, 0x0, 0x9032, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000) 1h3m49.538896451s ago: executing program 2 (id=104): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000080)="fb0149dd033be3abf408020000001b0000005a9610fbff67521ce16f8f1f449a7ab2aa76c829d2262f00000000000000000200df38000000000000000020001e91114900", 0x0, 0xfda9) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x600657af12600f2, 0x0) 1h3m38.987324118s ago: executing program 3 (id=105): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000bfe000/0x400000)=nil) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0xb, 0x30d2a4fbfbfad6b8, 0xffffffffffffffff, 0x0) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000200)=[@its_setup={0x82, 0x28, {0x4, 0x4, 0x3ee}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x1, 0x4, 0x0, 0x80000001, 0x6}}, @svc={0x122, 0x40, {0x84000001, [0x43c4f2e9, 0xb, 0x3, 0x8f8, 0xfff]}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x4, 0x6, 0x2}}, @irq_setup={0x46, 0x18, {0x4, 0x1b8}}, @smc={0x1e, 0x40, {0x2000, [0x1, 0xfc6, 0x1, 0x2, 0x7]}}, @its_setup={0x82, 0x28, {0x1, 0x1, 0x3ad}}, @eret={0xe6, 0x18, 0x6}, @its_setup={0x82, 0x28, {0x4, 0x4, 0x2f2}}, @mrs={0xbe, 0x18, {0x603000000013e102}}, @svc={0x122, 0x40, {0x31000000, [0x5, 0x5, 0x7, 0xffff, 0xffffffff]}}, @irq_setup={0x46, 0x18, {0x8, 0x188}}, @its_send_cmd={0xaa, 0x28, {0x4, 0x0, 0x3, 0xd, 0x8, 0x5}}, @uexit={0x0, 0x18}, @its_send_cmd={0xaa, 0x28, {0x5, 0x0, 0x1, 0xf, 0x6, 0xa}}, @uexit={0x0, 0x18, 0x10000}, @eret={0xe6, 0x18, 0xffff}, @smc={0x1e, 0x40, {0x2000000, [0x7cdc1b75, 0x3, 0x5b1, 0x8000000000000000, 0x26c7]}}], 0x2c8}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x4, 0x100) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x25) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000040)={0x0, 0x0}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r5, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000100)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x0, 0x4, 0x0}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_GET_ONE_REG(r7, 0x4010aeab, &(0x7f0000000180)=@arm64_core={0x603000000010003c, &(0x7f00000001c0)=0x5}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1h3m38.379323483s ago: executing program 2 (id=106): r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r0, &(0x7f0000000200)={0x0, &(0x7f0000000500)=[@mrs={0xbe, 0x18, {0x6030000000138056}}], 0x18}, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000000)=@x86={0x1, 0x80, 0x7, 0x0, 0x0, 0x2, 0x6e, 0xf8, 0x46, 0x3, 0x8, 0xb9, 0x0, 0x8d0, 0xffffff80, 0x4, 0x5, 0xec, 0x9, '\x00', 0xff, 0x80000001}) syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000900)=[@eret={0xe6, 0x18, 0xe54}, @msr={0x14, 0x20, {0x603000000013e081, 0xa}}, @smc={0x1e, 0x40, {0x84000009, [0x6, 0x80000000, 0xa26b, 0x6, 0x4]}}, @smc={0x1e, 0x40, {0x84000004, [0x6, 0xfffffffffffffffe, 0x1, 0x9, 0x1]}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80c0000, 0x400, 0x80, 0x8}}, @irq_setup={0x46, 0x18, {0x0, 0xec}}, @msr={0x14, 0x20, {0x603000000013e6d1, 0x80}}, @code={0xa, 0x6c, {"007008d50000809a0050800fa06590d20080b8f2e10080d2020080d2a30080d2c40080d2020000d420e287d200e0b0f2410080d2e20180d2830080d2c40080d2020000d4008008d5008008d50004000f007008d500a0bf0d"}}, @mrs={0xbe, 0x18, {0x603000000013e664}}, @smc={0x1e, 0x40, {0x2000000, [0x7335, 0x5, 0x5, 0x3, 0x2]}}, @hvc={0x32, 0x40, {0x84000052, [0x6, 0x7b9, 0x5, 0x9d]}}, @msr={0x14, 0x20, {0x603000000013defb, 0x8000}}, @hvc={0x32, 0x40, {0x84000006, [0xf5, 0x2, 0x10, 0x4ab3c1ae, 0x7]}}, @svc={0x122, 0x40, {0x84000053, [0x6, 0x9, 0xffffffffffffff60, 0xa, 0x10001]}}, @its_send_cmd={0xaa, 0x28, {0x4, 0x1, 0x0, 0xa, 0xffff, 0x7, 0x1}}, @svc={0x122, 0x40, {0x5000000, [0xff, 0x2, 0x9, 0x9, 0x4]}}, @mrs={0xbe, 0x18, {0x603000000013c019}}, @hvc={0x32, 0x40, {0x84000009, [0x5, 0xd0, 0x80000000, 0xeed0, 0xc009]}}, @eret={0xe6, 0x18, 0x18d}, @svc={0x122, 0x40, {0xc4000012, [0x0, 0x7, 0x8, 0xffffffff, 0x2]}}], 0x3dc}, 0x0, 0x0) ioctl$KVM_ARM_VCPU_INIT(0xffffffffffffffff, 0x4020aeae, &(0x7f0000000000)={0x5, 0x18}) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$arm64(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000bfe000/0x400000)=nil, &(0x7f00000000c0)=[{0x0, &(0x7f0000000100)=[@hvc={0x32, 0x40, {0x8600ff01, [0x7, 0x9, 0x8, 0xfffffffffffffff8, 0x100]}}], 0x40}], 0x1, 0x0, 0x0, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000bfe000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000180)={0x0, &(0x7f0000000240)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x2}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x1, 0x80000, 0x10000, 0x20, 0x0, 0x2}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r5, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f00000002c0)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f0000000300)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000340)=0x8080000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0) 1h3m26.968307266s ago: executing program 2 (id=107): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000040)={0x0, &(0x7f0000000200)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}, 0x0, 0x0) r5 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000280)={0x0, &(0x7f00000002c0)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r2, 0x2, 0x100) r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) r7 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r6, 0x3, 0x11, r4, 0x0) r8 = mmap$KVM_VCPU(&(0x7f000000a000/0x1000)=nil, r6, 0x3, 0x11, r5, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$arm64(r5, r8, 0xffffffffffffffff) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f0000000300)={0x1010020, 0x1}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$arm64(r4, r7, 0xfffffffffffffffe) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil) r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x3, 0x2}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x1, 0x80000, 0xfffc, 0x0, 0x8, 0x2}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r9, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r12, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000240)=0x8080000}) ioctl$KVM_RUN(r11, 0xae80, 0x0) 1h3m24.20174773s ago: executing program 3 (id=108): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000300)="fb4149dd033b8986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67525673312b01040000000000002627e7000000000000000200", 0x0, 0xfffffffffffffe73) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x12, r2, 0x0) r4 = eventfd2(0x0, 0x0) close(r4) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x0) mmap$KVM_VCPU(&(0x7f0000c17000/0x3000)=nil, 0x930, 0x0, 0x10, 0xffffffffffffffff, 0x20) write$eventfd(r4, &(0x7f0000000100)=0xfffffffffffffffe, 0x8) r5 = eventfd2(0x0, 0x0) close(r5) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mmap$KVM_VCPU(&(0x7f0000008000/0x3000)=nil, 0x930, 0x2000004, 0x2011, r5, 0x0) 1h3m14.391184288s ago: executing program 2 (id=109): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x800, 0x0) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000) r1 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x17832, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mmap$KVM_VCPU(0x0, 0x50000, 0x3, 0x11, r4, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2c) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x8842, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000680)={0x0, &(0x7f0000000cc0)=[@its_send_cmd={0xaa, 0x28, {0x8, 0x0, 0x4, 0xa, 0x4, 0x5, 0x1}}, @its_setup={0x82, 0x28, {0x1, 0x4, 0x3f3}}, @memwrite={0x6e, 0x30, @generic={0x60000, 0xb3e, 0xff, 0x6}}, @uexit={0x0, 0x18, 0x9}, @msr={0x14, 0x20, {0x603000000013c4d0, 0x2}}, @uexit={0x0, 0x18}, @svc={0x122, 0x40, {0x1, [0x9, 0x8000000000000001, 0xfffffffffffffff8, 0x1, 0x8]}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x1, 0x1, 0x1000b, 0x8000, 0x7fffffff, 0x2}}, @hvc={0x32, 0x40, {0x80007fff, [0xb, 0x9, 0x1, 0x8, 0x4]}}, @svc={0x122, 0x40, {0x200, [0xc, 0x5, 0x7000000000, 0x0, 0x1]}}, @smc={0x1e, 0x40, {0x8400000a, [0x101, 0x7fffffffffffffff, 0xfffffffffffffffd, 0x400, 0x1]}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x280, 0x5ed, 0x2}}, @msr={0x14, 0x20, {0x603000000013df71, 0x8}}, @mrs={0xbe, 0x18, {0x603000000013e703}}, @msr={0x14, 0x20, {0x603000000013f102, 0x8}}, @smc={0x1e, 0x40, {0x3f000000, [0x6, 0x7ff, 0x1, 0x0, 0xff]}}, @code={0xa, 0x84, {"60fe97d200e0b8f2210080d2020180d2630180d2640080d2020000d4604f83d20080b8f2410180d2a20180d2430080d2a40180d2020000d4000894d20040b8f2e10080d2020080d2430080d2040080d2020000d4008008d500e0204e008008d5000028d5000028d500fc40d3007008d5"}}, @uexit={0x0, 0x18, 0x7}, @msr={0x14, 0x20, {0x603000000013802f, 0x5}}, @mrs={0xbe, 0x18}, @hvc={0x32, 0x40, {0xe6ef1b9e683a83bd, [0x7, 0x5, 0x87, 0x7, 0x6]}}, @memwrite={0x6e, 0x30, @generic={0x1, 0x367, 0x100000000}}, @mrs={0xbe, 0x18, {0x603000000013c644}}, @msr={0x14, 0x20, {0x603000000013c01a, 0x6}}], 0x43c}, &(0x7f00000006c0)=[@featur2={0x1, 0xf0}], 0x1) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34) syz_kvm_add_vcpu$arm64(r6, &(0x7f00000009c0)={0x0, &(0x7f0000000a80)=[@uexit={0x0, 0x18, 0x1}, @msr={0x14, 0x20, {0x50280000001a14fc, 0xffff}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x1, 0x0, 0x1, 0x3, 0x100, 0x3}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x1, 0x3, 0x1, 0x1, 0x10001, 0x3}}, @irq_setup={0x46, 0x18, {0x1, 0x1be}}, @its_setup={0x82, 0x28, {0x4, 0x4, 0xdc}}, @code={0xa, 0x54, {"0050805f008008d5c0749bd20020b0f2410180d2e20080d2430080d2c40180d2020000d4008008d500b0005f000028d5000028d5007008d5000008d50000421e"}}, @svc={0x122, 0x40, {0xc5000021, [0x81, 0x6ab, 0x0, 0x7, 0x17e]}}, @its_send_cmd={0xaa, 0x28, {0xa, 0x1, 0x4, 0xe, 0x88, 0x100, 0x3}}, @smc={0x1e, 0x40, {0xc05ddeb525e828b9, [0x4, 0x3, 0x2, 0x8, 0x9]}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80e0000, 0x180, 0x100000001, 0x1}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x0, 0x4, 0x8, 0x0, 0x10, 0x4}}], 0x21c}, &(0x7f0000000a00)=[@featur2], 0x1) r9 = syz_kvm_vgic_v3_setup(r8, 0xf, 0x40) ioctl$KVM_HAS_DEVICE_ATTR(r9, 0x4018aee3, &(0x7f0000000100)=@attr_other={0x0, 0x4, 0x6, 0x0}) r10 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000140)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r10, 0x4010aeac, &(0x7f0000000180)=@arm64_fw={0x6030000000140005, &(0x7f00000001c0)=0xfffffffffffffffd}) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r8, 0x4068aea3, &(0x7f0000000700)={0xdf, 0x0, 0x100000}) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x4f832, 0xffffffffffffffff, 0x1000000) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xc, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x20000000) 1h3m13.29580592s ago: executing program 3 (id=110): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r1, 0x4068aea3, &(0x7f0000000080)={0xef, 0x0, 0x7}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000100)={0x5}) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)=@arm64_sys={0x603000000013c807, &(0x7f0000000180)=0x2}) openat$kvm(0x0, &(0x7f0000000000), 0x72483, 0x0) munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0) 1h2m59.422312237s ago: executing program 3 (id=111): mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000) munmap(&(0x7f0000482000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xc, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x20000000) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0xdca01, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x31) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r3, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f00000001c0)="fb0149dd833be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8faa767969d22627e700", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r3, 0x0) r5 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0) syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000000)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0xe}}], 0x28}, 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0x401c5820, 0x20000007) 1h2m48.532514779s ago: executing program 3 (id=112): r0 = openat$kvm(0x0, &(0x7f0000000240), 0x444080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000280)={0x1, 0x0, [{0x4, 0x2, 0x0, 0x0, @irqchip={0x6, 0x8}}]}) r2 = eventfd2(0x4, 0x80000) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000380)={0xffffffffffffffff, 0xc8}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0xfffdffffffffffff) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000400)={0x4, 0xffffffffffffffff, 0x1}) r6 = ioctl$KVM_CREATE_VM(r5, 0x894c, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xb701, 0x0) close(r6) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000340)={r2, 0x3, 0x0, r2}) r7 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r8 = eventfd2(0x9, 0x1) write$eventfd(r8, &(0x7f0000000000)=0x3, 0x8) r9 = openat$kvm(0x0, &(0x7f00000000c0), 0x2000, 0x0) r10 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil) r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000180)={0x0, &(0x7f0000000740)=[@its_setup={0x82, 0x28, {0x4, 0x0, 0x3f5}}, @hvc={0x32, 0x40, {0xc5000020, [0x2, 0xcb9, 0x40, 0x10000, 0xb3]}}, @hvc={0x32, 0x40, {0x3d041079a8d8cf72, [0x5, 0x1, 0x9, 0x2, 0xfffffffffffffff7]}}, @code={0xa, 0x9c, {"00c0241ec0d687d200a0b0f2810180d2a20080d2830180d2e40080d2020000d400c0231e000840fac0a482d20080b0f2810180d2420180d2030080d2040180d2020000d4000028d5e01788d20040b0f2010180d2020180d2830180d2a40180d2020000d480b38dd20060b8f2410180d2620080d2030180d2040080d2020000d400c0ff0d008008d5"}}, @its_setup={0x82, 0x28, {0x4, 0x0, 0x83}}, @irq_setup={0x46, 0x18, {0x2, 0x28b}}, @irq_setup={0x46, 0x18, {0x1, 0x29c}}, @mrs={0xbe, 0x18, {0x603000000013c4cf}}, @mrs={0xbe, 0x18, {0x6030000000138044}}, @smc={0x1e, 0x40, {0x8400000a, [0x401, 0x4000000009, 0x6, 0x4, 0x3]}}, @svc={0x122, 0x40, {0xc5000020, [0x10000, 0x100000001, 0x7fffffff, 0x14e000000000, 0x2]}}, @uexit={0x0, 0x18}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x80, 0x7fff, 0x1f}}, @msr={0x14, 0x20, {0x603000000013c020, 0x6711}}, @msr={0x14, 0x20, {0x603000000013dcea, 0x200}}], 0x2d4}, &(0x7f00000001c0), 0x1) ioctl$KVM_RUN(r13, 0xae80, 0x0) r14 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x29) r15 = ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x1) r16 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r7, 0xae04) r17 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, r16, 0x3, 0x11, r15, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x880, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r17, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0xffffffffffffffa7) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r15, 0x0) openat$kvm(0x3f, &(0x7f0000000040), 0x0, 0x0) 1h2m27.878544822s ago: executing program 34 (id=109): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x800, 0x0) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000) r1 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x17832, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mmap$KVM_VCPU(0x0, 0x50000, 0x3, 0x11, r4, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2c) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x8842, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000680)={0x0, &(0x7f0000000cc0)=[@its_send_cmd={0xaa, 0x28, {0x8, 0x0, 0x4, 0xa, 0x4, 0x5, 0x1}}, @its_setup={0x82, 0x28, {0x1, 0x4, 0x3f3}}, @memwrite={0x6e, 0x30, @generic={0x60000, 0xb3e, 0xff, 0x6}}, @uexit={0x0, 0x18, 0x9}, @msr={0x14, 0x20, {0x603000000013c4d0, 0x2}}, @uexit={0x0, 0x18}, @svc={0x122, 0x40, {0x1, [0x9, 0x8000000000000001, 0xfffffffffffffff8, 0x1, 0x8]}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x1, 0x1, 0x1000b, 0x8000, 0x7fffffff, 0x2}}, @hvc={0x32, 0x40, {0x80007fff, [0xb, 0x9, 0x1, 0x8, 0x4]}}, @svc={0x122, 0x40, {0x200, [0xc, 0x5, 0x7000000000, 0x0, 0x1]}}, @smc={0x1e, 0x40, {0x8400000a, [0x101, 0x7fffffffffffffff, 0xfffffffffffffffd, 0x400, 0x1]}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x280, 0x5ed, 0x2}}, @msr={0x14, 0x20, {0x603000000013df71, 0x8}}, @mrs={0xbe, 0x18, {0x603000000013e703}}, @msr={0x14, 0x20, {0x603000000013f102, 0x8}}, @smc={0x1e, 0x40, {0x3f000000, [0x6, 0x7ff, 0x1, 0x0, 0xff]}}, @code={0xa, 0x84, {"60fe97d200e0b8f2210080d2020180d2630180d2640080d2020000d4604f83d20080b8f2410180d2a20180d2430080d2a40180d2020000d4000894d20040b8f2e10080d2020080d2430080d2040080d2020000d4008008d500e0204e008008d5000028d5000028d500fc40d3007008d5"}}, @uexit={0x0, 0x18, 0x7}, @msr={0x14, 0x20, {0x603000000013802f, 0x5}}, @mrs={0xbe, 0x18}, @hvc={0x32, 0x40, {0xe6ef1b9e683a83bd, [0x7, 0x5, 0x87, 0x7, 0x6]}}, @memwrite={0x6e, 0x30, @generic={0x1, 0x367, 0x100000000}}, @mrs={0xbe, 0x18, {0x603000000013c644}}, @msr={0x14, 0x20, {0x603000000013c01a, 0x6}}], 0x43c}, &(0x7f00000006c0)=[@featur2={0x1, 0xf0}], 0x1) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34) syz_kvm_add_vcpu$arm64(r6, &(0x7f00000009c0)={0x0, &(0x7f0000000a80)=[@uexit={0x0, 0x18, 0x1}, @msr={0x14, 0x20, {0x50280000001a14fc, 0xffff}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x1, 0x0, 0x1, 0x3, 0x100, 0x3}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x1, 0x3, 0x1, 0x1, 0x10001, 0x3}}, @irq_setup={0x46, 0x18, {0x1, 0x1be}}, @its_setup={0x82, 0x28, {0x4, 0x4, 0xdc}}, @code={0xa, 0x54, {"0050805f008008d5c0749bd20020b0f2410180d2e20080d2430080d2c40180d2020000d4008008d500b0005f000028d5000028d5007008d5000008d50000421e"}}, @svc={0x122, 0x40, {0xc5000021, [0x81, 0x6ab, 0x0, 0x7, 0x17e]}}, @its_send_cmd={0xaa, 0x28, {0xa, 0x1, 0x4, 0xe, 0x88, 0x100, 0x3}}, @smc={0x1e, 0x40, {0xc05ddeb525e828b9, [0x4, 0x3, 0x2, 0x8, 0x9]}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80e0000, 0x180, 0x100000001, 0x1}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x0, 0x4, 0x8, 0x0, 0x10, 0x4}}], 0x21c}, &(0x7f0000000a00)=[@featur2], 0x1) r9 = syz_kvm_vgic_v3_setup(r8, 0xf, 0x40) ioctl$KVM_HAS_DEVICE_ATTR(r9, 0x4018aee3, &(0x7f0000000100)=@attr_other={0x0, 0x4, 0x6, 0x0}) r10 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000140)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r10, 0x4010aeac, &(0x7f0000000180)=@arm64_fw={0x6030000000140005, &(0x7f00000001c0)=0xfffffffffffffffd}) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r8, 0x4068aea3, &(0x7f0000000700)={0xdf, 0x0, 0x100000}) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x4f832, 0xffffffffffffffff, 0x1000000) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xc, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x20000000) 1h2m0.561520289s ago: executing program 35 (id=112): r0 = openat$kvm(0x0, &(0x7f0000000240), 0x444080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000280)={0x1, 0x0, [{0x4, 0x2, 0x0, 0x0, @irqchip={0x6, 0x8}}]}) r2 = eventfd2(0x4, 0x80000) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000380)={0xffffffffffffffff, 0xc8}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0xfffdffffffffffff) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000400)={0x4, 0xffffffffffffffff, 0x1}) r6 = ioctl$KVM_CREATE_VM(r5, 0x894c, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xb701, 0x0) close(r6) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000340)={r2, 0x3, 0x0, r2}) r7 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r8 = eventfd2(0x9, 0x1) write$eventfd(r8, &(0x7f0000000000)=0x3, 0x8) r9 = openat$kvm(0x0, &(0x7f00000000c0), 0x2000, 0x0) r10 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil) r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000180)={0x0, &(0x7f0000000740)=[@its_setup={0x82, 0x28, {0x4, 0x0, 0x3f5}}, @hvc={0x32, 0x40, {0xc5000020, [0x2, 0xcb9, 0x40, 0x10000, 0xb3]}}, @hvc={0x32, 0x40, {0x3d041079a8d8cf72, [0x5, 0x1, 0x9, 0x2, 0xfffffffffffffff7]}}, @code={0xa, 0x9c, {"00c0241ec0d687d200a0b0f2810180d2a20080d2830180d2e40080d2020000d400c0231e000840fac0a482d20080b0f2810180d2420180d2030080d2040180d2020000d4000028d5e01788d20040b0f2010180d2020180d2830180d2a40180d2020000d480b38dd20060b8f2410180d2620080d2030180d2040080d2020000d400c0ff0d008008d5"}}, @its_setup={0x82, 0x28, {0x4, 0x0, 0x83}}, @irq_setup={0x46, 0x18, {0x2, 0x28b}}, @irq_setup={0x46, 0x18, {0x1, 0x29c}}, @mrs={0xbe, 0x18, {0x603000000013c4cf}}, @mrs={0xbe, 0x18, {0x6030000000138044}}, @smc={0x1e, 0x40, {0x8400000a, [0x401, 0x4000000009, 0x6, 0x4, 0x3]}}, @svc={0x122, 0x40, {0xc5000020, [0x10000, 0x100000001, 0x7fffffff, 0x14e000000000, 0x2]}}, @uexit={0x0, 0x18}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x80, 0x7fff, 0x1f}}, @msr={0x14, 0x20, {0x603000000013c020, 0x6711}}, @msr={0x14, 0x20, {0x603000000013dcea, 0x200}}], 0x2d4}, &(0x7f00000001c0), 0x1) ioctl$KVM_RUN(r13, 0xae80, 0x0) r14 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x29) r15 = ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x1) r16 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r7, 0xae04) r17 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, r16, 0x3, 0x11, r15, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x880, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r17, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0xffffffffffffffa7) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r15, 0x0) openat$kvm(0x3f, &(0x7f0000000040), 0x0, 0x0) 30m46.307753379s ago: executing program 4 (id=288): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x1}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x25) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000040)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000080)=@arm64_core={0x603000000010001c, &(0x7f00000000c0)=0x5}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0xd, 0x8, 0xb, 0x0, 0x2, 0x6, 0x6, 0x6, 0x48, 0x88, 0xf5, 0x9, 0x0, 0x9, 0x6, 0xa, 0x3, 0x8, 0x0, '\x00', 0x10, 0x6}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) write$eventfd(r6, &(0x7f00000001c0)=0xff0, 0xe) 30m32.645651108s ago: executing program 4 (id=290): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x2e0000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x100000c, 0x16831, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@irq_setup={0x46, 0x18, {0x1, 0x3c9}}], 0x18}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r3, 0xfffffffffffffffd, 0x60) r6 = eventfd2(0x9, 0x1) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000100)={0x3, 0x8001002, 0x1, r6}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, 0x0) 30m30.360246137s ago: executing program 5 (id=291): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x28) r2 = openat$kvm(0x0, &(0x7f0000000100), 0xc002, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0x40086602, 0x110e22ffff) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x10) r4 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000080)=[@featur2={0x1, 0x2}], 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000000)=@arm64={0x3, 0xe0, 0xb4, '\x00', 0x1}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 30m25.068651573s ago: executing program 4 (id=292): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = mmap$KVM_VCPU(&(0x7f0000dd4000/0x3000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xffffffffffffffff) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x2002, 0x0) eventfd2(0x0, 0x0) eventfd2(0x0, 0x0) r5 = openat$kvm(0x0, &(0x7f00000001c0), 0x300, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$kvm(0x0, &(0x7f0000000200), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x0, 0x11, r8, 0x0) r9 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r7, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffd000/0x1000)=nil, r9, 0x1, 0x11, r8, 0x0) r10 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r7, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, r10, 0x8, 0x13, r8, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x4000)=nil, r10, 0x0, 0x12, r8, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x5, 0x8000000, 0x8, 0xffffffffffffffff, 0x7}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x5, 0xffffffffffffffff, 0x1}) r11 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r3, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r11, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r12 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_RUN(r13, 0xae80, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) 30m21.16849726s ago: executing program 5 (id=293): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r3, 0x40a0ae49, &(0x7f0000000540)={0x5, 0x4, 0x4, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000937000/0x400000)=nil) r5 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CAP_HALT_POLL(r6, 0x4068aea3, &(0x7f0000000240)) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f00000002c0)={0x0, &(0x7f0000000300)=[@code={0xa, 0x18, {"7f2003d5"}}], 0x18}, 0x0, 0x0) r9 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000380)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r12, 0x4010aeab, &(0x7f00000003c0)=@riscv64_csr={0x8030000000300000, 0x0}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r6, 0xc008ae67, &(0x7f0000000340)={0x0, 0x81}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000200)={0xffffffffffffffff, 0xc8}) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000480)={0x4, 0xffffffffffffffff, 0x1}) r16 = ioctl$KVM_CREATE_VM(r15, 0x894c, 0x0) syz_kvm_setup_cpu$arm64(r16, 0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil, &(0x7f00000004c0)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) r17 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000100)={0x0, &(0x7f0000000000)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x3, 0x40000000, 0x10000, 0x0, 0x105, 0x2}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r18, 0x4018aee1, &(0x7f00000001c0)=@attr_riscv64=@attr_ctrl={0x0, 0x1, 0x1, &(0x7f0000000400)=0x4}) ioctl$KVM_RUN(r17, 0xae80, 0x0) 30m5.487818858s ago: executing program 4 (id=294): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x302, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000640), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000180)={0x2000, 0x3}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x20800, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x169880, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x80403, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000340)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_ARM_VCPU_INIT(r9, 0x4020aeae, 0xfffffffffffffffe) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f00000002c0)={0x7, 0xffffffffffffffff, 0x1}) r10 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@mrs={0xbe, 0x18, {0x6030000000138057}}, @irq_setup={0x46, 0x18, {0x0, 0x1b6}}], 0x30}, 0x0, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r11, 0xae03, 0x19) r12 = openat$kvm(0x0, &(0x7f0000000040), 0xc0841, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_vgic_v3_setup(0xffffffffffffffff, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000004c0)={0x8, 0xffffffffffffffff, 0x2}) ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f0000000500)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000540)=0x8080000}) r14 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000918000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r14, &(0x7f00000003c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_CAP_ARM_INJECT_SERROR_ESR(r3, 0x4068aea3, &(0x7f00000001c0)) r15 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r16 = syz_kvm_setup_syzos_vm$arm64(r15, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r16, &(0x7f00000000c0)={0x0, &(0x7f0000000240)}, 0x0, 0x0) 30m1.808969115s ago: executing program 5 (id=295): r0 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, r0, 0xe, 0x1010, r1, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2f) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)={0xeeee8000, 0x8000, 0x1}) r3 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000380)={0x0, &(0x7f0000000040)=[@its_send_cmd={0xaa, 0x28, {0x8, 0x1, 0x1, 0x4, 0x255879f1, 0xffff, 0x4}}, @its_setup={0x82, 0x28, {0x0, 0x3, 0x8001}}, @smc={0x1e, 0x40, {0xc400000c, [0x9, 0xfffffffffffffffe, 0x8000000000000001, 0xffffffffb1270a95, 0x8]}}, @irq_setup={0x46, 0x18, {0x3, 0x2de}}, @uexit={0x0, 0x18, 0x3}, @its_setup={0x82, 0x28, {0x3, 0x0, 0x1b5}}, @svc={0x122, 0x40, {0x8400000e, [0x6, 0x6, 0x326, 0xafe, 0x1]}}, @hvc={0x32, 0x40, {0x84000005, [0x400, 0x8, 0xfffffffffffffff8, 0x9, 0xfffffffffffff9e8]}}, @svc={0x122, 0x40, {0x2, [0xfffffffffffffffd, 0x10, 0xffff, 0x80, 0x3f]}}, @eret={0xe6, 0x18, 0x2}, @hvc={0x32, 0x40, {0x84000051, [0x9, 0x3, 0xfffffffffffffffb, 0xdd6]}}, @its_setup={0x82, 0x28, {0x3, 0x4, 0x263}}, @smc={0x1e, 0x40, {0x30000000, [0x9f7, 0x9, 0x6, 0x4c2a6c85, 0x8]}}, @mrs={0xbe, 0x18, {0x603000000013802c}}, @uexit={0x0, 0x18, 0x2}, @uexit={0x0, 0x18, 0x4}, @eret={0xe6, 0x18, 0x9}, @uexit={0x0, 0x18, 0x1ff}, @svc={0x122, 0x40, {0xc4000001, [0x0, 0x5, 0x6, 0x81, 0xacc8]}}, @msr={0x14, 0x20, {0x603000000013803d, 0x800}}], 0x340}, &(0x7f00000003c0)=[@featur2={0x1, 0x10}], 0x1) ioctl$KVM_ARM_PREFERRED_TARGET(r3, 0x8020aeaf, &(0x7f0000000400)) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000000480)=@attr_other={0x0, 0x8000, 0x1, &(0x7f0000000440)=0x8000000000000000}) ioctl$KVM_CAP_HALT_POLL(r2, 0x4068aea3, &(0x7f00000004c0)={0xb6, 0x0, 0xc741}) ioctl$KVM_SET_GUEST_DEBUG_arm64(r3, 0x4208ae9b, &(0x7f0000000540)={0x10000, 0x0, {[0xfffffffffffffffa, 0x1, 0x4, 0x10, 0xfffffffffffffff7, 0x2, 0xfffffffffffffe01, 0x2, 0x10000, 0x7dd6, 0x7, 0x6c9, 0x9, 0x3, 0xd, 0x422], [0x9, 0x1, 0x5, 0xf, 0x8000, 0x3, 0x7c5, 0x0, 0x3, 0x2, 0x8, 0xec1, 0x1000, 0x8, 0x3, 0x4], [0xa42, 0x9, 0x4, 0xc, 0x5, 0x400, 0x6, 0x8000000000000000, 0x6, 0x8, 0xff, 0x0, 0x3, 0x7fffffff, 0x0, 0xfffffffffffffff9], [0x3, 0x1, 0x5, 0x0, 0x4004, 0x400, 0x100000001, 0x5, 0x7ff, 0x0, 0x9, 0x9, 0x4, 0x38, 0x9, 0x10000]}}) r4 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f00000008c0)={0x0, &(0x7f0000000780)=[@smc={0x1e, 0x40, {0x0, [0x14, 0x7, 0x4, 0x7]}}, @code={0xa, 0xb4, {"e00300aaa06388d200c0b8f2010180d2c20080d2830180d2c40080d2020000d4006f97d20000b8f2610080d2e20080d2630080d2040080d2020000d440e298d200c0b0f2410080d2020180d2030180d2040180d2020000d40000621e00000071601c82d20020b0f2e10180d2420080d2c30180d2c40080d2020000d400a380d20020b8f2a10080d2220080d2030180d2040180d2020000d4000c0078007008d5"}}, @uexit={0x0, 0x18, 0x7}], 0x10c}, &(0x7f0000000900)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, r0, 0x0, 0x10, r3, 0x0) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000940)=@arm64={0x8, 0x2, 0x6, '\x00', 0x2}) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r1, 0x4018aee2, &(0x7f00000009c0)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000980)={0x321, 0x92, 0x1}}) close(r3) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a00), 0x60100, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xffffffffffffffff) ioctl$KVM_ARM_SET_DEVICE_ADDR(r4, 0x4010aeab, &(0x7f0000000a40)={0x9}) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x1) ioctl$KVM_RUN(r1, 0xae80, 0x0) r7 = eventfd2(0x9, 0x80001) r8 = eventfd2(0x80000000, 0x80800) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000a80)={r7, 0xeb, 0x0, r8}) ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f0000000ac0)=0x5) ioctl$KVM_GET_DEVICE_ATTR_vm(r2, 0x4018aee2, &(0x7f0000000b40)=@attr_other={0x0, 0x9, 0x9926, &(0x7f0000000b00)=0x7}) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000000b80)=@arm64) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000bc0)={0x39b, 0x2}) 29m51.110729958s ago: executing program 5 (id=296): openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) (async) r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$KVM_SET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee1, 0x0) (async) r1 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000140)={0x8, 0xffffffffffffffff}) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1, 0x16831, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000180)=@attr_arm64={0x0, 0x8, 0x3, 0x0}) (async) r4 = openat$kvm(0x0, &(0x7f00000001c0), 0x0, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000200), 0x80, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x2e) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r6, r7, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000240)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_ONE_REG(r7, 0x4010aeac, &(0x7f0000000280)=@arm64_core={0x6030000000100042, &(0x7f00000002c0)=0x12}) r8 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r9 = ioctl$KVM_GET_STATS_FD_vm(r8, 0xaece) close(r9) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r11 = openat$kvm(0x0, 0x0, 0x8280, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) (async) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x3) ioctl$KVM_HAS_DEVICE_ATTR(r4, 0x4018aee3, &(0x7f0000000440)=@attr_riscv64=@attr_config={0x0, 0x1, 0x0, &(0x7f0000000400)}) (async, rerun: 32) ioctl$KVM_ARM_VCPU_INIT(r14, 0x4020aeae, &(0x7f0000000340)={0x5, 0x8}) (async, rerun: 32) ioctl$KVM_SET_ONE_REG(r14, 0x4010aeac, &(0x7f0000000380)=@arm64_core={0x6030000000100006, &(0x7f00000003c0)}) (async) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r10, 0x4010ae68, &(0x7f0000000040)={0xe000, 0x2000}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000000)={0x10004, 0x2, 0xf000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) 29m43.667433881s ago: executing program 4 (id=297): munmap(&(0x7f0000481000/0x1000)=nil, 0x1000) munmap(&(0x7f0000136000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) r0 = openat$kvm(0x0, 0x0, 0x8280, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r3, 0x4020aeae, &(0x7f00000000c0)={0x5, 0x8}) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000100)=@arm64_core={0x6030000000100006, &(0x7f0000000140)}) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x9000000) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000180)={0xffffffffffffffff, 0xc8}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000240)={0x4, 0xffffffffffffffff, 0x1}) r7 = ioctl$KVM_CREATE_VM(r6, 0x894c, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xb701, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0x8004b707, 0x2) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) munmap(&(0x7f0000482000/0x2000)=nil, 0x2000) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) 29m35.219394899s ago: executing program 5 (id=298): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e7, 0x7, 0xfec00000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r2 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r3, r4, &(0x7f0000b74000/0x400000)=nil, &(0x7f0000000300)=[{0x0, &(0x7f0000000340)=[@memwrite={0x6e, 0x30, @generic={0xeeee8000, 0xc10, 0xfffffffffffffffd, 0x3}}, @smc={0x1e, 0x40, {0x3f000000, [0xffffffff, 0x5, 0x8000000000000000, 0x9, 0x6]}}, @mrs={0xbe, 0x18, {0x603000000013e703}}], 0x88}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) close(r1) (async, rerun: 32) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 32) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x161642, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) (async, rerun: 64) r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04) (rerun: 64) r9 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, r8, 0x1000002, 0x13, r7, 0x0) r10 = syz_kvm_vgic_v3_setup(r6, 0x1, 0x80) ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f0000000280)=@attr_riscv64=@attr_addr={0x0, 0x1, @aplic, &(0x7f0000000240)=0x5}) (async, rerun: 64) syz_memcpy_off$KVM_EXIT_HYPERCALL(r9, 0x20, &(0x7f0000000180)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48) (async, rerun: 64) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r7, 0x0) (async) openat$kvm(0x0, &(0x7f0000000200), 0x8280, 0x0) (async) ioctl$KVM_CAP_ARM_USER_IRQ(r1, 0x4068aea3, &(0x7f0000000000)) ioctl$KVM_GET_DEVICE_ATTR_vm(r1, 0x4018aee2, &(0x7f0000000100)=@attr_other={0x0, 0x2d284cb3, 0x3, &(0x7f00000000c0)=0x7}) 29m19.895151323s ago: executing program 4 (id=299): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r2, 0x0) mmap$KVM_VCPU(&(0x7f0000e04000/0x2000)=nil, 0x930, 0x1, 0x11, r2, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x0, 0x8, 0x13, r2, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x0, 0x8, 0x13, r2, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x34) mmap$KVM_VCPU(&(0x7f0000001000/0x2000)=nil, 0x930, 0x2000003, 0x4120932, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000001000/0x2000)=nil, 0x930, 0x2000003, 0x4120932, 0xffffffffffffffff, 0x0) r5 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0x80111500, 0x20000000) close(r6) (async) close(r6) ioctl$KVM_GET_STATS_FD_vm(r4, 0xaece) (async) ioctl$KVM_GET_STATS_FD_vm(r4, 0xaece) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1, 0x16831, 0xffffffffffffffff, 0x0) openat$kvm(0x0, &(0x7f0000000100), 0x6819ed28d58b2b5c, 0x0) (async) openat$kvm(0x0, &(0x7f0000000100), 0x6819ed28d58b2b5c, 0x0) mmap$KVM_VCPU(&(0x7f0000011000/0x3000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) r7 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000007000/0x2000)=nil, 0x930, 0x280000b, 0x12, r9, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000007000/0x2000)=nil, 0x930, 0x280000b, 0x12, r9, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) (async) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x0, 0x8032, 0xffffffffffffffff, 0x0) 29m19.749192822s ago: executing program 5 (id=300): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x2, 0x3, 0x100000, 0x2000, &(0x7f000000f000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xcccc0000, 0x1000, &(0x7f0000f15000/0x1000)=nil}) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000bfe000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x1fd, 0x0, 0xb000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x2710, 0x3, 0x200000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0xdc032, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000240)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e700", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) munmap(&(0x7f0000481000/0x1000)=nil, 0x1000) munmap(&(0x7f0000136000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) r3 = mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000e51000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x1000007, 0x28031, 0xffffffffffffffff, 0x9000000) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) munmap(&(0x7f0000f2c000/0x4000)=nil, 0x4000) munmap$KVM_VCPU(r3, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) close(0x4) munmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x2, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 28m35.296170795s ago: executing program 36 (id=299): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r2, 0x0) mmap$KVM_VCPU(&(0x7f0000e04000/0x2000)=nil, 0x930, 0x1, 0x11, r2, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x0, 0x8, 0x13, r2, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x0, 0x8, 0x13, r2, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x34) mmap$KVM_VCPU(&(0x7f0000001000/0x2000)=nil, 0x930, 0x2000003, 0x4120932, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000001000/0x2000)=nil, 0x930, 0x2000003, 0x4120932, 0xffffffffffffffff, 0x0) r5 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0x80111500, 0x20000000) close(r6) (async) close(r6) ioctl$KVM_GET_STATS_FD_vm(r4, 0xaece) (async) ioctl$KVM_GET_STATS_FD_vm(r4, 0xaece) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1, 0x16831, 0xffffffffffffffff, 0x0) openat$kvm(0x0, &(0x7f0000000100), 0x6819ed28d58b2b5c, 0x0) (async) openat$kvm(0x0, &(0x7f0000000100), 0x6819ed28d58b2b5c, 0x0) mmap$KVM_VCPU(&(0x7f0000011000/0x3000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) r7 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000007000/0x2000)=nil, 0x930, 0x280000b, 0x12, r9, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000007000/0x2000)=nil, 0x930, 0x280000b, 0x12, r9, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) (async) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x0, 0x8032, 0xffffffffffffffff, 0x0) 28m28.190256908s ago: executing program 37 (id=300): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x2, 0x3, 0x100000, 0x2000, &(0x7f000000f000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xcccc0000, 0x1000, &(0x7f0000f15000/0x1000)=nil}) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000bfe000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x1fd, 0x0, 0xb000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x2710, 0x3, 0x200000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0xdc032, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000240)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e700", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) munmap(&(0x7f0000481000/0x1000)=nil, 0x1000) munmap(&(0x7f0000136000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) r3 = mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000e51000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x1000007, 0x28031, 0xffffffffffffffff, 0x9000000) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) munmap(&(0x7f0000f2c000/0x4000)=nil, 0x4000) munmap$KVM_VCPU(r3, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) close(0x4) munmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x2, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 20m16.348867446s ago: executing program 6 (id=301): r0 = openat$kvm(0x0, 0x0, 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2e) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x1}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3d) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x482400, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xab) r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r8, 0x4018aee1, 0x0) ioctl$KVM_GET_ONE_REG(r8, 0x4010aeab, &(0x7f0000000180)=@arm64_sys={0x603000000013dce8, &(0x7f0000000200)=0x5}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8902, 0x0) ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0x69) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r10, &(0x7f00000001c0)=0xff0, 0xe) 19m59.66094756s ago: executing program 6 (id=303): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) (async) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) (async) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000) (async) munmap(&(0x7f0000482000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x8, 0x23ac5f9b426ec4b1, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000) (async) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) (async) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) (async) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x9000000) (async) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) (async) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x24132, 0xffffffffffffffff, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x161642, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r4 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r3, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000040)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f0000000001000000ff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e700", 0x0, 0x48) (async) munmap$KVM_VCPU(r4, 0xffffffffffffffff) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2a) 19m39.340258151s ago: executing program 7 (id=302): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101441, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x88) openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000040)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r5, 0x4018aee2, 0xffffffffffffffff) r6 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000740)={0x10002, 0x1c0, 0x0, &(0x7f0000000340)=[0x5, 0x3cdf73e0, 0x9, 0x10, 0xfffffffffffffff2, 0xfffffffffffffffd, 0x2, 0x32, 0x8, 0x5, 0x100000001, 0x8a02, 0x7, 0xf9, 0x4, 0x100, 0x5, 0x9, 0x1c0, 0xffff, 0x2, 0x9, 0x100000001, 0x8000000000000001, 0xe, 0x1e, 0x7, 0x7ef, 0x10000, 0x4, 0x7, 0xffffffffffffffff, 0x8, 0x1, 0xfffffffffffffffe, 0xff, 0x9, 0x9de6, 0x5, 0x8000, 0x401, 0x6, 0x6563, 0x1, 0x2, 0x7fffffff, 0x4, 0x3, 0x3, 0x4, 0xfffffffffffffff3, 0x2, 0xfffffffffffffffb, 0x5, 0x1, 0x401, 0x6f09, 0xce7b, 0x8, 0x7ff, 0xfffffffffffffffb, 0x0, 0x38aa, 0x4, 0xffffffffffffffff, 0x400, 0xfff, 0x3ff, 0x7fff, 0x1, 0x2, 0x0, 0x7, 0x9, 0xbf, 0x800, 0x4, 0x3, 0x9, 0x6, 0x101, 0x80000001, 0x6, 0x487, 0x7cc2f650, 0x6, 0x8, 0xffffffff, 0x7, 0x4, 0x6b, 0x2, 0x0, 0x4, 0x4, 0xfffffffffffffff8, 0x5, 0x40, 0x8, 0xffffffffffffffff, 0x7fffffffffffffff, 0x7ff, 0xffffffff, 0x7fff, 0x94f, 0x4, 0x9, 0x1, 0x4, 0x6, 0x0, 0x6, 0x84, 0xa2, 0x6, 0x9, 0x4, 0x5, 0x0, 0x8, 0x1, 0x5, 0x3, 0x1ff, 0x7fffffff, 0x900000000000, 0x6, 0xfffffffffffffffe]}) syz_kvm_add_vcpu$arm64(r6, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x81}], 0x1) syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000180)={0x0, &(0x7f00000001c0)}, 0x0, 0x0) syz_kvm_add_vcpu$arm64(r2, 0x0, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x3, 0xa0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x27) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x8a902, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r11, 0x4018aee3, &(0x7f0000000200)=@attr_other={0x0, 0x0, 0x80000000, 0x0}) r12 = syz_kvm_vgic_v3_setup(r8, 0xf, 0x40) ioctl$KVM_HAS_DEVICE_ATTR(r12, 0x4018aee3, &(0x7f0000000280)=@attr_arm64={0x0, 0x2, 0x2, 0x0}) r13 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_add_vcpu$arm64(0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$kvm(0x0, &(0x7f0000000100), 0x339081, 0x0) 19m38.709128034s ago: executing program 6 (id=304): mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x9000000) mmap$KVM_VCPU(&(0x7f0000e54000/0x2000)=nil, 0x930, 0x4, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000) munmap(&(0x7f0000e28000/0x4000)=nil, 0x4000) munmap(&(0x7f0000482000/0x2000)=nil, 0x2000) munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000) munmap(&(0x7f0000e76000/0x12000)=nil, 0x12000) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000fed000/0x3000)=nil, 0x930, 0x0, 0x4030031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000080)={0x1ff, 0x0, &(0x7f0000ffa000/0x4000)=nil}) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) 19m16.758301157s ago: executing program 6 (id=305): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x15) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000000)={0x5, 0x18}) ioctl$KVM_ARM_VCPU_FINALIZE(r2, 0x4004aec2, &(0x7f00000001c0)=0x4) openat$kvm(0x0, 0x0, 0x0, 0x0) close(0x4) close(0x5) openat$kvm(0x0, &(0x7f0000000040), 0x800, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x15) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) (async) ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000000)={0x5, 0x18}) (async) ioctl$KVM_ARM_VCPU_FINALIZE(r2, 0x4004aec2, &(0x7f00000001c0)=0x4) (async) openat$kvm(0x0, 0x0, 0x0, 0x0) (async) close(0x4) (async) close(0x5) (async) 19m13.278281454s ago: executing program 7 (id=306): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x40000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_add_vcpu$arm64(r3, &(0x7f00000000c0)={0x0, &(0x7f0000000240)}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r2, 0xfffffffffffffffd, 0x60) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000080)={0x6}) r4 = openat$kvm(0x0, &(0x7f0000000300), 0x400000, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000480), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f00000004c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_MP_STATE(r8, 0x4004ae99, &(0x7f0000000500)=0xa) ioctl$KVM_PRE_FAULT_MEMORY(r8, 0xc040aed5, &(0x7f0000000540)={0x9000, 0x110000}) r9 = openat$kvm(0x0, &(0x7f0000000640), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x2d) mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0xb, 0x30d2a4fbfbfad6b8, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_ARM_VCPU_INIT(r11, 0x4020aeae, &(0x7f00000006c0)={0x5}) ioctl$KVM_RUN(r11, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0) munmap$KVM_VCPU(0x0, 0x1000000000) r12 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000580)={0x0, &(0x7f00000005c0)=[@mrs={0xbe, 0x18, {0x603000000013dcf0}}], 0x18}, &(0x7f0000000600)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_RUN(r12, 0xae80, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r13 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r13, &(0x7f0000000340)={0x0, &(0x7f0000000380)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x4}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x80, 0x0, 0x2, 0x0, 0x0, 0x40000004}}], 0x50}, 0x0, 0x0) 19m4.70577822s ago: executing program 6 (id=307): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0x0, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0xfffffffa, 0x80001) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000500)={0x80, 0x4, 0x0, r4}) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000540)={0x0, 0x4, 0x0, r4, 0x5}) r5 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f00000005c0)={0x0, &(0x7f0000000600)=[@hvc={0x32, 0x40, {0xc4000053, [0xfffffffffffffffc, 0x1, 0x1, 0x9d, 0x6]}}], 0x40}, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, &(0x7f0000000680)=@riscv64_sbi_sta={0x803000000a000000, &(0x7f0000000640)=0x7}) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r8, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r9, 0x20, &(0x7f0000000100)="fb0149dd833be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8faa767969d22627e700", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r8, 0x0) r10 = openat$kvm(0xffffff9c, &(0x7f0000000180), 0x1a97f2, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x2) ioctl$KVM_SET_SIGNAL_MASK(r13, 0x4004ae8b, 0x0) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_kvm_add_vcpu$arm64(0x0, &(0x7f00000001c0)={0x0, &(0x7f0000000200)=[@msr={0x14, 0x0, {0x603000000013df11, 0x3}}], 0x28}, 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0x401c5820, 0x20000007) r14 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r15 = syz_kvm_setup_syzos_vm$arm64(r14, &(0x7f0000a5a000/0x400000)=nil) r16 = syz_kvm_add_vcpu$arm64(r15, &(0x7f0000000080)={0x0, &(0x7f0000000240)=[@hvc={0x32, 0x40, {0x3008848, [0x6, 0xffff, 0xb, 0xe57, 0x4]}}, @hvc={0x32, 0x40, {0x32000000, [0x1b1b, 0x1, 0xffffffffffffffff, 0x8001, 0x1]}}, @code={0xa, 0x9c, {"0000000b00a99bd20080b8f2210080d2220080d2830080d2640180d2020000d41f0000f2c00f91d200a0b0f2010180d2a20180d2830080d2a40080d2020000d4007008d500000013c02396d20020b0f2810180d2220080d2030080d2a40180d2020000d4007008d5a04288d200c0b0f2410080d2220080d2a30080d2040180d2020000d400c4202e"}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x1, 0x4, 0x7, 0x8, 0x2, 0x1}}, @smc={0x1e, 0x40, {0x40, [0x6, 0x4, 0x9, 0x3, 0x800]}}, @msr={0x14, 0x20, {0x603000000013df45, 0x1}}, @irq_setup={0x46, 0x18, {0x2, 0x26}}, @uexit={0x0, 0x18, 0xffffffffffff8001}, @svc={0x122, 0x40, {0x8400000c, [0x1d, 0x7, 0x1, 0x8000000000000000, 0xffff]}}, @uexit={0x0, 0x18, 0x7ff}, @irq_setup={0x46, 0x18, {0x4, 0x380}}], 0x244}, 0x0, 0x0) ioctl$KVM_RUN(r16, 0xae80, 0x0) 18m44.651227092s ago: executing program 7 (id=308): r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000a5a000/0x400000)=nil) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000280)={0x1da, 0x5}) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000002c0)={0x0, &(0x7f0000000300)=[@smc={0x1e, 0x40, {0xc400000c, [0x200000000000006e, 0xa00000000000, 0x4009, 0x101, 0x100000013]}}], 0x40}, &(0x7f0000000340)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2c140, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x15) r6 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000380)={0x0, &(0x7f00000003c0)=[@msr={0x14, 0x20, {0x603000000013df60, 0x8000}}, @msr={0x14, 0x20, {0x603000000013df7f, 0x8000}}], 0x40}, &(0x7f0000000400)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r9, 0x4018aee1, &(0x7f0000000440)=@attr_pmu_init) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f00000001c0)="f21bc75509bf71c9d70236fc044842dae3ffffffffffffff4c24501958da2e2c18b875c2357c6ed600", 0x0, 0x48) openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r10 = openat$kvm(0x0, &(0x7f0000000480), 0x40501, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x31) ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f00000004c0)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r12, 0x4018aee1, &(0x7f0000000500)=@attr_arm64={0x0, 0x1, 0x2, &(0x7f0000000540)}) r13 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r14 = syz_kvm_add_vcpu$arm64(r13, &(0x7f0000000040)={0x0, &(0x7f0000000380)}, &(0x7f00000000c0)=[@featur1={0x1, 0x48}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r14, 0x4018aee1, &(0x7f0000000180)=@attr_pmu_init) ioctl$KVM_RUN(r14, 0xae80, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000140)={0x1, 0xffffffffffffffff, 0x1}) write$eventfd(r15, &(0x7f00000001c0)=0xffffff7f, 0xff25) 18m39.188391289s ago: executing program 6 (id=309): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000640), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f0000000680)={0x8, 0x3}) r4 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@mrs={0xbe, 0x18, {0x603000000013def0}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x1, 0x80003, 0x10000, 0x0, 0x2, 0x2}}], 0x40}, 0x0, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = openat$kvm(0x0, &(0x7f0000000300), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x29) syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000340)={0x0, &(0x7f0000000400)=[@svc={0x122, 0x40, {0x100, [0x9, 0x7030, 0x3, 0x5, 0x3]}}, @code={0xa, 0x6c, {"008008d50044207e0000809a007008d5006c200e007c001b20ec99d20040b8f2810180d2e20180d2230180d2240180d2020000d4a0a19dd20080b0f2810180d2620080d2630080d2640080d2020000d40820601e000008d5"}}], 0xac}, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) r10 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r9, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r10, 0x20, &(0x7f00000004c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0xffffffffffffffa7) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r9, 0x0) ioctl$KVM_CAP_HALT_POLL(r8, 0x4068aea3, &(0x7f0000000540)={0xb6, 0x0, 0x9}) eventfd2(0x5, 0x800) r11 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r12 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r12, &(0x7f00000003c0)={0x0, 0x0}, 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r14 = syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r14, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x1}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x3, 0x40000000, 0x3, 0x0, 0x0, 0x80000002}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x1, 0x380) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r15, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) munmap$KVM_VCPU(0x0, 0xffffffffc) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 17m56.247860242s ago: executing program 38 (id=308): r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000a5a000/0x400000)=nil) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000280)={0x1da, 0x5}) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000002c0)={0x0, &(0x7f0000000300)=[@smc={0x1e, 0x40, {0xc400000c, [0x200000000000006e, 0xa00000000000, 0x4009, 0x101, 0x100000013]}}], 0x40}, &(0x7f0000000340)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2c140, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x15) r6 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000380)={0x0, &(0x7f00000003c0)=[@msr={0x14, 0x20, {0x603000000013df60, 0x8000}}, @msr={0x14, 0x20, {0x603000000013df7f, 0x8000}}], 0x40}, &(0x7f0000000400)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r9, 0x4018aee1, &(0x7f0000000440)=@attr_pmu_init) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f00000001c0)="f21bc75509bf71c9d70236fc044842dae3ffffffffffffff4c24501958da2e2c18b875c2357c6ed600", 0x0, 0x48) openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r10 = openat$kvm(0x0, &(0x7f0000000480), 0x40501, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x31) ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f00000004c0)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r12, 0x4018aee1, &(0x7f0000000500)=@attr_arm64={0x0, 0x1, 0x2, &(0x7f0000000540)}) r13 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r14 = syz_kvm_add_vcpu$arm64(r13, &(0x7f0000000040)={0x0, &(0x7f0000000380)}, &(0x7f00000000c0)=[@featur1={0x1, 0x48}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r14, 0x4018aee1, &(0x7f0000000180)=@attr_pmu_init) ioctl$KVM_RUN(r14, 0xae80, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000140)={0x1, 0xffffffffffffffff, 0x1}) write$eventfd(r15, &(0x7f00000001c0)=0xffffff7f, 0xff25) 17m47.038777649s ago: executing program 39 (id=309): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000640), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f0000000680)={0x8, 0x3}) r4 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@mrs={0xbe, 0x18, {0x603000000013def0}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x1, 0x80003, 0x10000, 0x0, 0x2, 0x2}}], 0x40}, 0x0, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = openat$kvm(0x0, &(0x7f0000000300), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x29) syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000340)={0x0, &(0x7f0000000400)=[@svc={0x122, 0x40, {0x100, [0x9, 0x7030, 0x3, 0x5, 0x3]}}, @code={0xa, 0x6c, {"008008d50044207e0000809a007008d5006c200e007c001b20ec99d20040b8f2810180d2e20180d2230180d2240180d2020000d4a0a19dd20080b0f2810180d2620080d2630080d2640080d2020000d40820601e000008d5"}}], 0xac}, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) r10 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r9, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r10, 0x20, &(0x7f00000004c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0xffffffffffffffa7) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r9, 0x0) ioctl$KVM_CAP_HALT_POLL(r8, 0x4068aea3, &(0x7f0000000540)={0xb6, 0x0, 0x9}) eventfd2(0x5, 0x800) r11 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r12 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r12, &(0x7f00000003c0)={0x0, 0x0}, 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r14 = syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r14, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x1}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x3, 0x40000000, 0x3, 0x0, 0x0, 0x80000002}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x1, 0x380) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r15, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) munmap$KVM_VCPU(0x0, 0xffffffffc) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 3m4.078614823s ago: executing program 8 (id=335): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0x80111500, 0x2d) ioctl$KVM_CREATE_VM(r2, 0x5760, 0x2000001c) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x100000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r6, 0x4020aeae, &(0x7f0000000080)={0x5, 0x8}) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r6, 0x4018aee1, &(0x7f00000000c0)=@attr_other={0x0, 0x0, 0x5, &(0x7f0000000100)=0x37}) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) mmap$KVM_VCPU(&(0x7f0000000000/0xc00000)=nil, 0x0, 0xf, 0x10, r7, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r9 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r10, r11, &(0x7f0000bff000/0x400000)=nil, &(0x7f00000002c0)=[{0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="82000000000000002800000000000000030000000000000003000000000000008501000000000000e6000000000000001800000000000000d542000000000000320000000000000040000000000000000000000400000000020000000000000009a73b5400000000040000000000000007000000000000000300000000000000e6000000000000001800000000000000220c000000000000e600000000000000180000000000000036331b250000000032000000000000004000000000000000070000c40000000001040000000000000200000000000000010000000000000008000000000000000500000000000000820000010000000028000000000000000200000000000000040000000000000011030000000000001e00000000000000400000000000000000020000000000000000000000000000080000000000000002000000000000000800000000000000f9ffffffffffffff3200000000000000400000000000000004000084000000000000ffffffffffff000000000000000007000000000000000900000000000000060000000000000014000000000000002000000000000000128013000000306005000000000000001400000000000000200000000000000070df1300000030600400000000000000000000000000000018000000000000000200000000000000000000000000000018000000000000000100000000000000"], 0x208}], 0x1, 0x0, &(0x7f0000000540)=[@featur2={0x1, 0x8}], 0x1) r12 = openat$kvm(0x0, &(0x7f0000000600), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x2) r15 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r14, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r15, 0x20, &(0x7f0000000640)="fb4149dd033b8986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67525673312b01040000000000002627e7000000000000000200", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x12, r14, 0x0) r16 = eventfd2(0x0, 0x0) close(r16) r17 = eventfd2(0x0, 0x0) close(r17) openat$kvm(0xffffff9c, &(0x7f00000006c0), 0x109272, 0x1f01) 3m3.470251676s ago: executing program 9 (id=336): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f00000001c0)={0x2, 0x0, [{0x0, 0x2, 0x0, 0x0, @sint={0x6, 0x5}}, {0xffb, 0x5, 0x0, 0x0, @adapter={0xe, 0x7, 0x7, 0x3, 0x3ff}}]}) r1 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x28) ioctl$KVM_CAP_HALT_POLL(r2, 0x4068aea3, &(0x7f0000000040)={0xb6, 0x2000000}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20080, 0x0) eventfd2(0xfffffffd, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd2(0xeffffffd, 0x801) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000100)={0x200, 0x4000, 0x4, r5, 0x1}) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000140)={0x3, 0x0, 0x2, r5, 0x3}) r6 = openat$kvm(0x0, &(0x7f0000000280), 0x8280, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = openat$kvm(0x0, &(0x7f0000000340), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0x80111500, 0x20000000) close(r9) ioctl$KVM_CAP_HALT_POLL(r7, 0x4068aea3, &(0x7f00000002c0)={0xb6, 0x0, 0xffffffffffffffff}) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000180)={0x1000000000003, 0x0, 0x2, r5, 0xf}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000240)={0x10000, 0x6000, 0x0, r5, 0x8}) 2m36.867451882s ago: executing program 9 (id=337): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x101, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x7fff}}, @msr={0x14, 0x20, {0x603000000013dce4, 0x1}}], 0x40}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m35.120139757s ago: executing program 8 (id=338): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x28442, 0x0) r1 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0x80111500, 0x20000000) close(r4) r5 = openat$kvm(0x0, &(0x7f0000000200), 0x20200, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r7 = syz_kvm_vgic_v3_setup(r6, 0x3, 0x40) r8 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x80000001d) r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil) r11 = openat$kvm(0x0, &(0x7f00000003c0), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil) r14 = syz_kvm_add_vcpu$arm64(r13, &(0x7f0000000800)={0x0, &(0x7f0000000080)=[@hvc={0x32, 0x40, {0x84000001, [0xfffffffffffffffc, 0x8000000000000001, 0x1, 0x5, 0x2]}}], 0x40}, 0x0, 0x0) ioctl$KVM_RUN(r14, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r12, 0xc008ae67, &(0x7f0000000880)={0x0, 0x81}) r15 = syz_kvm_add_vcpu$arm64(r10, &(0x7f00000008c0)={0x0, &(0x7f0000000900)=[@mrs={0xbe, 0x18, {0x603000000013c017}}], 0x18}, 0x0, 0x0) ioctl$KVM_RUN(r15, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r15, 0x4040aea0, &(0x7f0000000940)=@arm64={0x7, 0x6, 0x4, '\x00', 0x2}) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000240)=@attr_other={0x0, 0x6, 0x382bc664, &(0x7f0000000280)=0xd31f}) r16 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r16, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0) r17 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r18 = ioctl$KVM_CREATE_VM(r17, 0x80111500, 0x20000000) ioctl$KVM_CREATE_VM(r18, 0x541b, 0x10000000000000) ioctl$KVM_CAP_DIRTY_LOG_RING_WITH_BITMAP(r6, 0x4068aea3, &(0x7f0000000340)={0xe1, 0x0, 0x5000}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 2m16.345857109s ago: executing program 9 (id=339): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x7, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r0, 0x4018aee1, &(0x7f0000000080)=@attr_arm64={0x0, 0x0, 0x3, &(0x7f00000000c0)}) ioctl$KVM_SET_DEVICE_ATTR(r0, 0x4018aee1, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r1 = openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000380)={0x0, 0x0}, 0x0, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000000), 0x800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r8, 0x4020aeae, &(0x7f0000000100)={0x5, 0x18}) ioctl$KVM_ARM_VCPU_FINALIZE(r8, 0x4004aec2, &(0x7f0000000140)=0x4) openat$kvm(0x0, 0x0, 0x0, 0x0) close(0x4) close(0x5) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f0000000400)={0x9000, 0x110000}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x200, 0x0) r9 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, &(0x7f0000000580)={0x0, 0x4, 0x6000, 0x2000, &(0x7f0000ffd000/0x2000)=nil, 0x100000000000000, r9}) close(0xffffffffffffffff) close(r9) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x4f832, 0xffffffffffffffff, 0x1000000) mmap$KVM_VCPU(&(0x7f0000f87000/0x4000)=nil, 0x0, 0xc, 0x5c1fd1b65647af1, r5, 0x20000000) munmap$KVM_VCPU(0x0, 0x1000000000) 2m6.357333968s ago: executing program 8 (id=340): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) openat$kvm(0x0, &(0x7f00000002c0), 0x800, 0x0) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x4f832, 0xffffffffffffffff, 0x1000000) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xc, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x20000000) r1 = openat$kvm(0x0, &(0x7f0000000100), 0x2403, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r3 = openat$kvm(0x0, &(0x7f00000003c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_add_vcpu$arm64(0x0, 0x0, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r4, 0xae03, 0x80) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000140)={0x8, 0xffffffffffffffff}) r6 = openat$kvm(0x0, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000440)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r9, 0x4010aeab, &(0x7f0000000480)=@arm64_fw={0x6030000000160003, &(0x7f00000004c0)=0x9}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x26831d6d, 0xffffffff, &(0x7f0000000400)=0x800}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000240)=@attr_other={0x0, 0x8, 0x90, &(0x7f0000000280)=0x10}) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xd) r11 = mmap$KVM_VCPU(&(0x7f0000cef000/0x3000)=nil, 0x0, 0x8, 0x10, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r11, 0x20, &(0x7f0000000300)="8b6e01d43e46acb0396225cb212f656b82803c32caabf5e505256a2f89185f216ab09d936a7b8325ec616b8434e3f33bd96b42b9ca9b106d0c2cb38a02a9279d0c92e7b3072182a2", 0x0, 0x48) ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000380)={0xa}) r12 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r12, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x7, 0x0, &(0x7f0000000000)=0xd60}) 1m50.275398828s ago: executing program 9 (id=341): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000040)={0x0, &(0x7f0000000240)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x1}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x3, 0x40000000, 0x10000, 0x0, 0x0, 0x80000002}}], 0x50}, 0x0, 0x0) r4 = syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x1c1800, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x2b) (async) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x2b) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000aec000/0x400000)=nil) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000540)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f0000000580)=@arm64={0x7, 0x0, 0xfc, '\x00', 0x4}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f00000005c0)=@arm64={0xd, 0x8, 0x7, '\x00', 0x2d}) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) syz_kvm_add_vcpu$arm64(0x0, 0x0, 0x0, 0x0) (async) syz_kvm_add_vcpu$arm64(0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000600)={0x1, 0x0, [{0x2, 0x0, 0x0, 0x0, @msi={0x0, 0x0, 0x4000}}]}) munmap(&(0x7f00005ed000/0x800000)=nil, 0x800000) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000002c0)={0x8}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000080)=@attr_other={0x0, 0xfffffff8, 0xf, &(0x7f00000000c0)=0x1}) (async) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000080)=@attr_other={0x0, 0xfffffff8, 0xf, &(0x7f00000000c0)=0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000400)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000100)=0x9}) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil) openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) (async) r10 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) (async) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil) (async) r12 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0xfffffffffffffffe}}, @msr={0x14, 0x20, {0x603000000013dce1, 0x7}}], 0x40}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) (async) r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0xfffffffffffffffe}}, @msr={0x14, 0x20, {0x603000000013dce1, 0x7}}], 0x40}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r13, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) ioctl$KVM_ARM_VCPU_INIT(0xffffffffffffffff, 0x4020aeae, 0x0) 1m46.261335595s ago: executing program 8 (id=342): r0 = openat$kvm(0x0, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000bfe000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000480)={0x0, &(0x7f00000004c0)=[@smc={0x1e, 0x40, {0x84000007, [0xd, 0x10000, 0x4, 0xf492, 0x35b]}}, @hvc={0x32, 0x40, {0x8, [0x5, 0x7, 0xb8, 0xb, 0x5]}}, @mrs={0xbe, 0x18, {0x60300000001383c6}}, @uexit={0x0, 0x18, 0xa}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xfff4, 0x6}}, @svc={0x122, 0x40, {0x8, [0x9, 0x7, 0x6, 0x3ff, 0xd]}}], 0x120}, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x3) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r7, 0x4018aee3, &(0x7f0000000040)=@attr_other={0x0, 0x2, 0x1, 0x0}) syz_kvm_setup_cpu$arm64(r4, r7, &(0x7f0000bfe000/0x400000)=nil, &(0x7f00000003c0)=[{0x0, &(0x7f0000000080)=[@mrs={0xbe, 0x18, {0x603000000013e668}}, @svc={0x122, 0x40, {0x4000000, [0x8, 0x0, 0x4, 0x7, 0x10001]}}, @mrs={0xbe, 0x18, {0x603000000013e6d3}}, @msr={0x14, 0x20, {0x603000000013c086, 0x5}}, @msr={0x14, 0x20, {0x6030000000131a01, 0x8}}, @msr={0x14, 0x20, {0x603000000013c708, 0x2}}, @uexit={0x0, 0x18, 0x4}, @smc={0x1e, 0x40, {0x84000012, [0x4, 0x7fffffffffffffff, 0x3, 0x3, 0x1]}}, @msr={0x14, 0x20, {0x603000000013e6df, 0x7}}, @hvc={0x32, 0x40, {0x80, [0x3, 0x6, 0x9273, 0x0, 0x7]}}, @memwrite={0x6e, 0x30, @generic={0xffc, 0xbe8, 0xb7, 0x8}}, @uexit={0x0, 0x18, 0x5}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x6000, 0x1, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x5, 0x0, 0x0, 0x2, 0x70000, 0x80, 0x1}}, @mrs={0xbe, 0x18, {0x603000000013df7f}}, @its_setup={0x82, 0x28, {0x2, 0x3, 0x3c8}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0xf10, 0x9, 0x8}}, @smc={0x1e, 0x40, {0x84000003, [0x5, 0xffffffffffffffff, 0x200, 0xa2, 0x4]}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x20020, 0x3d3, 0x4}}], 0x308}], 0x1, 0x0, &(0x7f0000000400)=[@featur2={0x1, 0x8}], 0x1) mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x0, 0x40032, 0xffffffffffffffff, 0x0) openat$kvm(0x0, &(0x7f0000000440), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000bfe000/0x400000)=nil) (async) syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000480)={0x0, &(0x7f00000004c0)=[@smc={0x1e, 0x40, {0x84000007, [0xd, 0x10000, 0x4, 0xf492, 0x35b]}}, @hvc={0x32, 0x40, {0x8, [0x5, 0x7, 0xb8, 0xb, 0x5]}}, @mrs={0xbe, 0x18, {0x60300000001383c6}}, @uexit={0x0, 0x18, 0xa}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xfff4, 0x6}}, @svc={0x122, 0x40, {0x8, [0x9, 0x7, 0x6, 0x3ff, 0xd]}}], 0x120}, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x3) (async) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r7, 0x4018aee3, &(0x7f0000000040)=@attr_other={0x0, 0x2, 0x1, 0x0}) (async) syz_kvm_setup_cpu$arm64(r4, r7, &(0x7f0000bfe000/0x400000)=nil, &(0x7f00000003c0)=[{0x0, &(0x7f0000000080)=[@mrs={0xbe, 0x18, {0x603000000013e668}}, @svc={0x122, 0x40, {0x4000000, [0x8, 0x0, 0x4, 0x7, 0x10001]}}, @mrs={0xbe, 0x18, {0x603000000013e6d3}}, @msr={0x14, 0x20, {0x603000000013c086, 0x5}}, @msr={0x14, 0x20, {0x6030000000131a01, 0x8}}, @msr={0x14, 0x20, {0x603000000013c708, 0x2}}, @uexit={0x0, 0x18, 0x4}, @smc={0x1e, 0x40, {0x84000012, [0x4, 0x7fffffffffffffff, 0x3, 0x3, 0x1]}}, @msr={0x14, 0x20, {0x603000000013e6df, 0x7}}, @hvc={0x32, 0x40, {0x80, [0x3, 0x6, 0x9273, 0x0, 0x7]}}, @memwrite={0x6e, 0x30, @generic={0xffc, 0xbe8, 0xb7, 0x8}}, @uexit={0x0, 0x18, 0x5}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x6000, 0x1, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x5, 0x0, 0x0, 0x2, 0x70000, 0x80, 0x1}}, @mrs={0xbe, 0x18, {0x603000000013df7f}}, @its_setup={0x82, 0x28, {0x2, 0x3, 0x3c8}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0xf10, 0x9, 0x8}}, @smc={0x1e, 0x40, {0x84000003, [0x5, 0xffffffffffffffff, 0x200, 0xa2, 0x4]}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x20020, 0x3d3, 0x4}}], 0x308}], 0x1, 0x0, &(0x7f0000000400)=[@featur2={0x1, 0x8}], 0x1) (async) mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x0, 0x40032, 0xffffffffffffffff, 0x0) (async) 1m17.729265151s ago: executing program 9 (id=343): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x39) ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0x8) mmap$KVM_VCPU(&(0x7f0000c0c000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x2}}], 0x20}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r4, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee1, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m17.280262113s ago: executing program 8 (id=344): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r2, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f00000000c0)={0x16, 0x4, 0x1}}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r2, r3, &(0x7f0000bfe000/0x400000)=nil, &(0x7f0000000100)=[{0x0, &(0x7f0000000180)=[@smc={0x1e, 0x40, {0x84000050, [0xf98, 0xffbfffff, 0x7, 0x80000001, 0xfffffffffffffffb]}}], 0x40}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r5, 0x400454d8, 0x1000000008) 55.667691261s ago: executing program 9 (id=345): syz_kvm_vgic_v3_setup(0xffffffffffffffff, 0x1, 0x40) r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x34) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_HALT_POLL(r3, 0x4068aea3, &(0x7f0000000080)={0xdf, 0x0, 0x8}) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xc, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x20000000) ioctl$KVM_SET_SIGNAL_MASK(r4, 0x4004ae8b, &(0x7f0000000000)) 54.751175228s ago: executing program 8 (id=346): r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r3, 0x4020aeae, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000380)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r5, 0x4018aee1, &(0x7f00000003c0)=@attr_pmu_init) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000005c0), 0x161642, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x31) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r8, 0x0) openat$kvm(0x0, &(0x7f0000000600), 0x670e94d674961527, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r9 = syz_kvm_add_vcpu$arm64(r0, &(0x7f0000000400)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r9, 0x4018aee1, &(0x7f0000000440)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000480)={0x14, 0xff}}) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) munmap$KVM_VCPU(0x0, 0x1000000000) r11 = mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) r12 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000280)={0x0, &(0x7f0000000640)=[@irq_setup={0x46, 0x18, {0x3, 0x42}}, @memwrite={0x6e, 0x30, @generic={0x7000, 0x47b, 0x8000000003}}, @eret={0xe6, 0x18, 0xfffffffffffffffa}, @its_send_cmd={0xaa, 0x28, {0x3, 0x0, 0x1, 0xa, 0x2, 0x3, 0x2}}, @mrs={0xbe, 0x18, {0x603000000013800d}}, @uexit={0x0, 0x18, 0x40}, @its_setup={0x82, 0x28, {0x3, 0x2, 0x1cb}}, @smc={0x1e, 0x40, {0x0, [0xfffffffffffffffe, 0x5, 0x171, 0x1, 0x2]}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x0, 0xb}}, @msr={0x14, 0x20, {0x603000000013c663, 0x1ff}}, @smc={0x1e, 0x40, {0x80000000, [0x5, 0x6, 0x3, 0x5]}}, @mrs={0xbe, 0x18, {0x6030000000139808}}, @code={0xa, 0xb4, {"406c9ad200a0b0f2e10080d2e20180d2c30080d2e40080d2020000d4007008d5000008d560dc83d20000b0f2610180d2a20180d2c30080d2640080d2020000d4007008d5001481d200a0b0f2410080d2c20080d2a30080d2c40080d2020000d40080009b0000202ac0a281d200c0b0f2810180d2820080d2830080d2040180d2020000d460fd98d20000b0f2010080d2020080d2e30180d2840180d2020000d4"}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0xe00, 0x7ff}}], 0x2ac}, &(0x7f00000002c0)=[@featur2={0x1, 0x20}], 0x1) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x0, 0x2000002, 0x10, r12, 0x0) r13 = openat$kvm(0x0, &(0x7f00000004c0), 0x161681, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x13) r15 = ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r14, r15, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000500)=[{0x0, 0x0}], 0x1, 0x0, &(0x7f0000000540)=[@featur2={0x1, 0x4}], 0x1) syz_kvm_setup_cpu$arm64(r14, r15, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000580)=[{0x0, 0x0, 0x20}], 0x1, 0x0, 0x0, 0x0) munmap$KVM_VCPU(r11, 0x9) ioctl$KVM_CHECK_EXTENSION(r10, 0xae03, 0xae) 7.059293754s ago: executing program 40 (id=345): syz_kvm_vgic_v3_setup(0xffffffffffffffff, 0x1, 0x40) r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x34) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_HALT_POLL(r3, 0x4068aea3, &(0x7f0000000080)={0xdf, 0x0, 0x8}) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xc, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x20000000) ioctl$KVM_SET_SIGNAL_MASK(r4, 0x4004ae8b, &(0x7f0000000000)) 0s ago: executing program 41 (id=346): r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r3, 0x4020aeae, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000380)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r5, 0x4018aee1, &(0x7f00000003c0)=@attr_pmu_init) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000005c0), 0x161642, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x31) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r8, 0x0) openat$kvm(0x0, &(0x7f0000000600), 0x670e94d674961527, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r9 = syz_kvm_add_vcpu$arm64(r0, &(0x7f0000000400)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r9, 0x4018aee1, &(0x7f0000000440)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000480)={0x14, 0xff}}) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) munmap$KVM_VCPU(0x0, 0x1000000000) r11 = mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) r12 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000280)={0x0, &(0x7f0000000640)=[@irq_setup={0x46, 0x18, {0x3, 0x42}}, @memwrite={0x6e, 0x30, @generic={0x7000, 0x47b, 0x8000000003}}, @eret={0xe6, 0x18, 0xfffffffffffffffa}, @its_send_cmd={0xaa, 0x28, {0x3, 0x0, 0x1, 0xa, 0x2, 0x3, 0x2}}, @mrs={0xbe, 0x18, {0x603000000013800d}}, @uexit={0x0, 0x18, 0x40}, @its_setup={0x82, 0x28, {0x3, 0x2, 0x1cb}}, @smc={0x1e, 0x40, {0x0, [0xfffffffffffffffe, 0x5, 0x171, 0x1, 0x2]}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x0, 0xb}}, @msr={0x14, 0x20, {0x603000000013c663, 0x1ff}}, @smc={0x1e, 0x40, {0x80000000, [0x5, 0x6, 0x3, 0x5]}}, @mrs={0xbe, 0x18, {0x6030000000139808}}, @code={0xa, 0xb4, {"406c9ad200a0b0f2e10080d2e20180d2c30080d2e40080d2020000d4007008d5000008d560dc83d20000b0f2610180d2a20180d2c30080d2640080d2020000d4007008d5001481d200a0b0f2410080d2c20080d2a30080d2c40080d2020000d40080009b0000202ac0a281d200c0b0f2810180d2820080d2830080d2040180d2020000d460fd98d20000b0f2010080d2020080d2e30180d2840180d2020000d4"}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0xe00, 0x7ff}}], 0x2ac}, &(0x7f00000002c0)=[@featur2={0x1, 0x20}], 0x1) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x0, 0x2000002, 0x10, r12, 0x0) r13 = openat$kvm(0x0, &(0x7f00000004c0), 0x161681, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x13) r15 = ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r14, r15, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000500)=[{0x0, 0x0}], 0x1, 0x0, &(0x7f0000000540)=[@featur2={0x1, 0x4}], 0x1) syz_kvm_setup_cpu$arm64(r14, r15, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000580)=[{0x0, 0x0, 0x20}], 0x1, 0x0, 0x0, 0x0) munmap$KVM_VCPU(r11, 0x9) ioctl$KVM_CHECK_EXTENSION(r10, 0xae03, 0xae) kernel console output (not intermixed with test programs): [ 376.212309][ T24] audit: type=1400 audit(375.380:74): avc: denied { read } for pid=3225 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 382.736351][ T24] audit: type=1400 audit(381.900:75): avc: denied { write } for pid=3282 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 386.396519][ T24] audit: type=1400 audit(385.550:76): avc: denied { write } for pid=3285 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 388.848633][ T3225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.178300][ T24] audit: type=1400 audit(395.320:77): avc: denied { write } for pid=3290 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 401.010043][ T24] audit: type=1400 audit(400.180:78): avc: denied { write } for pid=3293 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 411.428986][ T24] audit: type=1400 audit(410.590:79): avc: denied { write } for pid=3297 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 414.976518][ T24] audit: type=1400 audit(414.130:80): avc: denied { write } for pid=3300 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 426.003411][ T24] audit: type=1400 audit(425.170:81): avc: denied { write } for pid=3305 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 429.693627][ T24] audit: type=1400 audit(428.860:82): avc: denied { write } for pid=3308 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 432.084188][ T3225] eql: remember to turn off Van-Jacobson compression on your slave devices [ 445.467707][ T24] audit: type=1400 audit(444.590:83): avc: denied { write } for pid=3317 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 448.997432][ T24] audit: type=1400 audit(448.160:84): avc: denied { write } for pid=3320 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 462.016662][ T24] audit: type=1400 audit(461.180:85): avc: denied { write } for pid=3325 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 466.968456][ T24] audit: type=1400 audit(466.090:86): avc: denied { write } for pid=3328 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 472.577826][ T24] audit: type=1400 audit(471.740:87): avc: denied { write } for pid=3330 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 476.256420][ T24] audit: type=1400 audit(475.420:88): avc: denied { write } for pid=3333 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 485.877745][ T24] audit: type=1400 audit(485.040:89): avc: denied { write } for pid=3338 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 489.408393][ T24] audit: type=1400 audit(488.580:90): avc: denied { write } for pid=3341 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 496.186561][ T24] audit: type=1400 audit(495.340:91): avc: denied { write } for pid=3344 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 499.704046][ T24] audit: type=1400 audit(498.870:92): avc: denied { write } for pid=3347 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 516.574328][ T24] audit: type=1400 audit(515.740:93): avc: denied { write } for pid=3355 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 521.237718][ T24] audit: type=1400 audit(520.370:94): avc: denied { write } for pid=3358 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 537.101228][ T24] audit: type=1400 audit(536.270:95): avc: denied { write } for pid=3365 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 540.578664][ T24] audit: type=1400 audit(539.740:96): avc: denied { write } for pid=3368 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 549.407750][ T24] audit: type=1400 audit(548.570:97): avc: denied { write } for pid=3371 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 553.110973][ T24] audit: type=1400 audit(552.280:98): avc: denied { write } for pid=3374 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:53033' (ED25519) to the list of known hosts. [ 571.127010][ T24] audit: type=1400 audit(570.280:99): avc: denied { name_bind } for pid=3379 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 573.007647][ T24] audit: type=1400 audit(572.160:100): avc: denied { execute } for pid=3380 comm="sh" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 573.008596][ T24] audit: type=1400 audit(572.170:101): avc: denied { execute_no_trans } for pid=3380 comm="sh" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 605.617783][ T24] audit: type=1400 audit(604.780:102): avc: denied { mounton } for pid=3380 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 605.654258][ T24] audit: type=1400 audit(604.820:103): avc: denied { mount } for pid=3380 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 605.733762][ T3380] cgroup: Unknown subsys name 'net' [ 605.788796][ T24] audit: type=1400 audit(604.950:104): avc: denied { unmount } for pid=3380 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 606.182388][ T3380] cgroup: Unknown subsys name 'cpuset' [ 606.291399][ T3380] cgroup: Unknown subsys name 'rlimit' [ 607.078431][ T24] audit: type=1400 audit(606.240:105): avc: denied { setattr } for pid=3380 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 607.101969][ T24] audit: type=1400 audit(606.250:106): avc: denied { mounton } for pid=3380 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 607.119855][ T24] audit: type=1400 audit(606.290:107): avc: denied { mount } for pid=3380 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 608.074079][ T3383] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 608.094541][ T24] audit: type=1400 audit(607.260:108): avc: denied { relabelto } for pid=3383 comm="mkswap" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 608.122842][ T24] audit: type=1400 audit(607.290:109): avc: denied { write } for pid=3383 comm="mkswap" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 608.299291][ T24] audit: type=1400 audit(607.460:110): avc: denied { read } for pid=3380 comm="syz-executor" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 608.305063][ T24] audit: type=1400 audit(607.470:111): avc: denied { open } for pid=3380 comm="syz-executor" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 608.370234][ T3380] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 661.878102][ T24] audit: type=1400 audit(661.040:112): avc: denied { execmem } for pid=3384 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 665.327683][ T24] audit: type=1400 audit(664.490:113): avc: denied { read } for pid=3386 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 665.347715][ T24] audit: type=1400 audit(664.500:114): avc: denied { open } for pid=3387 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 665.419638][ T24] audit: type=1400 audit(664.570:115): avc: denied { mounton } for pid=3387 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 665.631069][ T24] audit: type=1400 audit(664.770:116): avc: denied { module_request } for pid=3387 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 666.563400][ T24] audit: type=1400 audit(665.730:117): avc: denied { sys_module } for pid=3387 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 672.916733][ T24] audit: type=1400 audit(672.060:118): avc: denied { create } for pid=3386 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 673.541361][ T24] audit: type=1400 audit(672.710:119): avc: denied { write } for pid=3386 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 673.624771][ T3387] rdma_rxe: Failed to create IPv4 UDP tunnel [ 673.672363][ T24] audit: type=1400 audit(672.840:120): avc: denied { read } for pid=3387 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 673.830458][ T3386] rxe_eth0 speed is unknown, defaulting to 1000 [ 673.917151][ T3386] rxe_eth0 speed is unknown, defaulting to 1000 [ 673.974517][ T3386] rxe_eth0 speed is unknown, defaulting to 1000 [ 681.789836][ T916] rxe_eth0 speed is unknown, defaulting to 1000 [ 681.816967][ T3386] infiniband rxe0: set active [ 681.817481][ T3386] infiniband rxe0: added rxe_eth0 [ 683.129422][ T3386] RDS/IB: rxe0: added [ 683.133034][ T3386] smc: adding ib device rxe0 with port count 1 [ 683.134216][ T3386] smc: ib device rxe0 port 1 has no pnetid [ 683.161392][ T916] rxe_eth0 speed is unknown, defaulting to 1000 [ 683.224534][ T3386] rxe_eth0 speed is unknown, defaulting to 1000 [ 690.122735][ T3386] rxe_eth0 speed is unknown, defaulting to 1000 [ 692.861799][ T916] rxe_eth0 speed is unknown, defaulting to 1000 [ 695.540213][ T24] audit: type=1400 audit(694.710:121): avc: denied { write } for pid=3429 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 696.209192][ T3387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 696.617688][ T3387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 698.779835][ T24] audit: type=1400 audit(697.940:122): avc: denied { write } for pid=3433 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 706.636811][ T24] audit: type=1400 audit(705.800:123): avc: denied { write } for pid=3438 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 711.846958][ T24] audit: type=1400 audit(710.970:124): avc: denied { write } for pid=3449 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 718.108413][ T3387] hsr_slave_0: entered promiscuous mode [ 718.142732][ T3387] hsr_slave_1: entered promiscuous mode [ 721.738972][ T3386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 722.090123][ T3386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 725.717722][ T24] audit: type=1400 audit(724.880:125): avc: denied { create } for pid=3387 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 725.754082][ T24] audit: type=1400 audit(724.920:126): avc: denied { write } for pid=3387 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 725.810690][ T24] audit: type=1400 audit(724.960:127): avc: denied { read } for pid=3387 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 725.919747][ T3387] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 726.142031][ T3387] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 726.209610][ T3387] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 726.359431][ T3387] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 726.404398][ T3387] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 726.543270][ T3387] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 726.608179][ T3387] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 726.718359][ T3387] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 734.978308][ T3386] hsr_slave_0: entered promiscuous mode [ 734.999942][ T3386] hsr_slave_1: entered promiscuous mode [ 735.030605][ T3386] debugfs: 'hsr0' already exists in 'hsr' [ 735.032016][ T3386] Cannot create hsr debugfs directory [ 738.163686][ T3387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 742.322691][ T3386] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 742.477388][ T3386] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 742.538569][ T3386] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 742.643988][ T3386] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 742.728707][ T3386] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 742.881653][ T3386] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 742.919798][ T3386] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 743.087698][ T3386] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 756.204235][ T3386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 791.160907][ T3387] veth0_vlan: entered promiscuous mode [ 791.604057][ T3387] veth1_vlan: entered promiscuous mode [ 793.488078][ T3387] veth0_macvtap: entered promiscuous mode [ 793.759013][ T3387] veth1_macvtap: entered promiscuous mode [ 795.670810][ T21] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.777235][ T21] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.793599][ T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.829515][ T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.831034][ T24] audit: type=1400 audit(797.000:128): avc: denied { mount } for pid=3387 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 798.006827][ T24] audit: type=1400 audit(797.150:129): avc: denied { mounton } for pid=3387 comm="syz-executor" path="/syzkaller.fVyu4e/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 798.149779][ T24] audit: type=1400 audit(797.290:130): avc: denied { mount } for pid=3387 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 798.380989][ T24] audit: type=1400 audit(797.540:131): avc: denied { mounton } for pid=3387 comm="syz-executor" path="/syzkaller.fVyu4e/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 798.521730][ T24] audit: type=1400 audit(797.680:132): avc: denied { mounton } for pid=3387 comm="syz-executor" path="/syzkaller.fVyu4e/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 798.903352][ T24] audit: type=1400 audit(798.070:133): avc: denied { unmount } for pid=3387 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 799.028772][ T24] audit: type=1400 audit(798.190:134): avc: denied { mounton } for pid=3387 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1548 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 799.118310][ T24] audit: type=1400 audit(798.280:135): avc: denied { mount } for pid=3387 comm="syz-executor" name="/" dev="gadgetfs" ino=3734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 799.586690][ T24] audit: type=1400 audit(798.740:136): avc: denied { mount } for pid=3387 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 799.691724][ T24] audit: type=1400 audit(798.860:137): avc: denied { mounton } for pid=3387 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 800.733224][ T3387] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 808.981319][ T3386] veth0_vlan: entered promiscuous mode [ 809.460198][ T3386] veth1_vlan: entered promiscuous mode [ 810.484806][ T24] kauditd_printk_skb: 4 callbacks suppressed [ 810.490208][ T24] audit: type=1400 audit(809.650:142): avc: denied { read } for pid=3558 comm="syz.0.1" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 810.590368][ T24] audit: type=1400 audit(809.700:143): avc: denied { open } for pid=3558 comm="syz.0.1" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 810.899820][ T24] audit: type=1400 audit(810.040:144): avc: denied { ioctl } for pid=3558 comm="syz.0.1" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 811.591528][ T3386] veth0_macvtap: entered promiscuous mode [ 811.931025][ T3386] veth1_macvtap: entered promiscuous mode [ 813.932566][ T42] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.939871][ T3432] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.948336][ T50] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.949082][ T50] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.202890][ T24] audit: type=1400 audit(815.230:145): avc: denied { execute } for pid=3558 comm="syz.0.1" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=3843 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 826.652561][ T24] audit: type=1400 audit(825.820:146): avc: denied { append } for pid=3568 comm="syz.0.3" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 835.573492][ T24] audit: type=1400 audit(834.680:147): avc: denied { write } for pid=3573 comm="syz.0.4" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 839.009053][ T24] audit: type=1400 audit(838.130:148): avc: denied { setattr } for pid=3574 comm="syz.1.5" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 860.714115][ T24] audit: type=1400 audit(859.800:149): avc: denied { mmap_zero } for pid=3588 comm="syz.0.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 875.897673][ T24] audit: type=1400 audit(875.060:150): avc: denied { create } for pid=3598 comm="syz.0.13" anonclass=[kvm-gmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 876.031063][ T24] audit: type=1400 audit(875.180:151): avc: denied { map } for pid=3598 comm="syz.0.13" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=4535 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 876.077320][ T24] audit: type=1400 audit(875.200:152): avc: denied { read } for pid=3598 comm="syz.0.13" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=4535 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 876.302605][ T24] audit: type=1400 audit(875.470:153): avc: denied { write } for pid=3598 comm="syz.0.13" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=4535 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1015.627409][ T24] audit: type=1400 audit(1014.730:154): avc: denied { write } for pid=3695 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1018.696643][ T24] audit: type=1400 audit(1017.810:155): avc: denied { map } for pid=3697 comm="syz.1.42" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1018.723533][ T24] audit: type=1400 audit(1017.870:156): avc: denied { execute } for pid=3697 comm="syz.1.42" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1024.617071][ T24] audit: type=1400 audit(1023.770:157): avc: denied { write } for pid=3706 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1145.718827][ T24] audit: type=1400 audit(1144.880:158): avc: denied { ioctl } for pid=3794 comm="syz.0.67" path="net:[4026531833]" dev="nsfs" ino=4026531833 ioctlcmd=0x5828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1216.758170][ T3810] rxe_eth0 speed is unknown, defaulting to 1000 [ 1227.072814][ T3817] rxe_eth0 speed is unknown, defaulting to 1000 [ 1266.209892][ T3810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1266.970058][ T3810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1278.004178][ T3817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1278.294796][ T3817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1288.111072][ T42] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1289.764234][ T42] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1291.269666][ T42] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1292.440843][ T42] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1297.754481][ T3810] hsr_slave_0: entered promiscuous mode [ 1297.850249][ T3810] hsr_slave_1: entered promiscuous mode [ 1297.938635][ T3810] debugfs: 'hsr0' already exists in 'hsr' [ 1297.939019][ T3810] Cannot create hsr debugfs directory [ 1306.584656][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1306.691028][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1306.739862][ T42] bond0 (unregistering): Released all slaves [ 1315.363361][ T3817] hsr_slave_0: entered promiscuous mode [ 1315.522931][ T3817] hsr_slave_1: entered promiscuous mode [ 1315.682182][ T3817] debugfs: 'hsr0' already exists in 'hsr' [ 1315.682596][ T3817] Cannot create hsr debugfs directory [ 1320.987374][ T42] hsr_slave_0: left promiscuous mode [ 1321.086733][ T42] hsr_slave_1: left promiscuous mode [ 1321.576873][ T42] veth1_macvtap: left promiscuous mode [ 1321.578148][ T42] veth0_macvtap: left promiscuous mode [ 1321.580372][ T42] veth1_vlan: left promiscuous mode [ 1321.582002][ T42] veth0_vlan: left promiscuous mode [ 1327.199955][ T24] audit: type=1400 audit(1326.360:159): avc: denied { write } for pid=3883 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1331.127475][ T24] audit: type=1400 audit(1330.270:160): avc: denied { write } for pid=3886 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1338.948922][ T3225] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1343.662742][ T24] audit: type=1400 audit(1342.830:161): avc: denied { write } for pid=3889 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1344.313964][ T42] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1345.720952][ T42] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1347.589129][ T24] audit: type=1400 audit(1346.730:162): avc: denied { write } for pid=3892 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1347.954976][ T42] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1348.447288][ T3810] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1348.654993][ T3810] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1348.904974][ T3810] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1349.208492][ T3810] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1349.799188][ T42] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1350.279627][ T3810] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1350.608366][ T3810] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1351.083506][ T3810] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1351.220964][ T3810] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1355.310518][ T3817] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1355.663248][ T3817] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1356.371571][ T3817] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1356.728629][ T3817] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1364.298180][ T24] audit: type=1400 audit(1363.450:163): avc: denied { write } for pid=3908 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1365.432229][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1365.591400][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1365.708927][ T42] bond0 (unregistering): Released all slaves [ 1366.388498][ T3817] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1366.644487][ T3817] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1366.876965][ T3817] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1367.191072][ T3817] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1371.533165][ T24] audit: type=1400 audit(1370.690:164): avc: denied { write } for pid=3916 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1378.253104][ T3225] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1384.228511][ T42] hsr_slave_0: left promiscuous mode [ 1384.302592][ T42] hsr_slave_1: left promiscuous mode [ 1384.710766][ T42] veth1_macvtap: left promiscuous mode [ 1384.711499][ T42] veth0_macvtap: left promiscuous mode [ 1384.713911][ T42] veth1_vlan: left promiscuous mode [ 1384.737327][ T42] veth0_vlan: left promiscuous mode [ 1404.103801][ T3810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1410.381629][ T24] audit: type=1400 audit(1409.550:165): avc: denied { write } for pid=3933 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1410.603331][ T3817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1416.247685][ T24] audit: type=1400 audit(1415.400:166): avc: denied { write } for pid=3941 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1420.090556][ T3225] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1435.157810][ T24] audit: type=1400 audit(1434.270:167): avc: denied { write } for pid=3953 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1442.786718][ T24] audit: type=1400 audit(1441.950:168): avc: denied { write } for pid=3964 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1447.858407][ T3225] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1464.466608][ T24] audit: type=1400 audit(1463.630:169): avc: denied { write } for pid=3983 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1470.509633][ T24] audit: type=1400 audit(1469.640:170): avc: denied { write } for pid=3992 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1474.923840][ T3225] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1484.163633][ T3810] veth0_vlan: entered promiscuous mode [ 1484.958571][ T3810] veth1_vlan: entered promiscuous mode [ 1487.567639][ T3810] veth0_macvtap: entered promiscuous mode [ 1488.042345][ T3810] veth1_macvtap: entered promiscuous mode [ 1489.631685][ T24] audit: type=1400 audit(1488.800:171): avc: denied { write } for pid=4009 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1490.901966][ T3841] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1490.921018][ T3904] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1490.929614][ T3928] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1490.930315][ T3928] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1494.369854][ T3817] veth0_vlan: entered promiscuous mode [ 1496.268982][ T3817] veth1_vlan: entered promiscuous mode [ 1497.524152][ T24] audit: type=1400 audit(1496.690:172): avc: denied { write } for pid=4015 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1500.061015][ T3817] veth0_macvtap: entered promiscuous mode [ 1500.579134][ T3817] veth1_macvtap: entered promiscuous mode [ 1503.621207][ T3225] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1504.391167][ T3841] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1504.397351][ T3432] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1504.398008][ T3432] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1504.398516][ T3432] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1526.094362][ T24] audit: type=1400 audit(1525.240:173): avc: denied { write } for pid=4029 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1534.198741][ T24] audit: type=1400 audit(1533.360:174): avc: denied { write } for pid=4037 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1540.220865][ T3225] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1558.980849][ T24] audit: type=1400 audit(1558.060:175): avc: denied { write } for pid=4052 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1570.279185][ T24] audit: type=1400 audit(1569.450:176): avc: denied { write } for pid=4062 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1577.068188][ T3225] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1592.449619][ T24] audit: type=1400 audit(1591.590:177): avc: denied { write } for pid=4075 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1601.112669][ T24] audit: type=1400 audit(1600.250:178): avc: denied { write } for pid=4087 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1656.254711][ T24] audit: type=1400 audit(1655.420:179): avc: denied { write } for pid=4121 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1664.297136][ T24] audit: type=1400 audit(1663.460:180): avc: denied { write } for pid=4133 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1696.091187][ T24] audit: type=1400 audit(1695.170:181): avc: denied { write } for pid=4151 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1705.183171][ T24] audit: type=1400 audit(1704.330:182): avc: denied { write } for pid=4160 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1723.697143][ T24] audit: type=1400 audit(1722.780:183): avc: denied { write } for pid=4176 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1732.419690][ T24] audit: type=1400 audit(1731.590:184): avc: denied { write } for pid=4182 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1749.509393][ T24] audit: type=1400 audit(1748.660:185): avc: denied { write } for pid=4192 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1760.020258][ T24] audit: type=1400 audit(1759.130:186): avc: denied { write } for pid=4200 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1778.250043][ T24] audit: type=1400 audit(1777.410:187): avc: denied { write } for pid=4210 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1786.240455][ T24] audit: type=1400 audit(1785.380:188): avc: denied { write } for pid=4220 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1800.307777][ T24] audit: type=1400 audit(1799.460:189): avc: denied { write } for pid=4228 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1810.457275][ T24] audit: type=1400 audit(1809.610:190): avc: denied { write } for pid=4238 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1829.466828][ T24] audit: type=1400 audit(1828.600:191): avc: denied { write } for pid=4246 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1836.079684][ T24] audit: type=1400 audit(1835.250:192): avc: denied { write } for pid=4251 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1856.721449][ T24] audit: type=1400 audit(1855.820:193): avc: denied { write } for pid=4260 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1865.179832][ T24] audit: type=1400 audit(1864.330:194): avc: denied { write } for pid=4267 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1874.802330][ T4257] rxe_eth0 speed is unknown, defaulting to 1000 [ 1890.768136][ T24] audit: type=1400 audit(1889.900:195): avc: denied { write } for pid=4277 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1898.736365][ T24] audit: type=1400 audit(1897.890:196): avc: denied { write } for pid=4283 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1908.048328][ T4274] rxe_eth0 speed is unknown, defaulting to 1000 [ 1942.509248][ T4257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1943.080297][ T4257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1967.837557][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1968.458991][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1972.260015][ T4257] hsr_slave_0: entered promiscuous mode [ 1972.337868][ T4257] hsr_slave_1: entered promiscuous mode [ 1994.683637][ T4257] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1995.277884][ T4257] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1995.344650][ T4257] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1995.868049][ T4257] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1996.018489][ T4257] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1996.440891][ T4257] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1996.614931][ T4257] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1996.903708][ T4257] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2005.291293][ T4274] hsr_slave_0: entered promiscuous mode [ 2005.379748][ T4274] hsr_slave_1: entered promiscuous mode [ 2005.420944][ T4274] debugfs: 'hsr0' already exists in 'hsr' [ 2005.421333][ T4274] Cannot create hsr debugfs directory [ 2025.637472][ T4274] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2026.034093][ T4274] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2026.121363][ T4274] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2026.473879][ T4274] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2026.798212][ T4274] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2027.210292][ T4274] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2027.634501][ T4274] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2028.009493][ T4274] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2029.239132][ T4257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2051.112526][ T42] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2053.392870][ T42] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2055.204586][ T42] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2057.169147][ T42] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2074.222549][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2074.392901][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2074.513871][ T42] bond0 (unregistering): Released all slaves [ 2085.182368][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2095.134372][ T42] hsr_slave_0: left promiscuous mode [ 2095.318748][ T42] hsr_slave_1: left promiscuous mode [ 2096.069049][ T42] veth1_macvtap: left promiscuous mode [ 2096.069835][ T42] veth0_macvtap: left promiscuous mode [ 2096.071434][ T42] veth1_vlan: left promiscuous mode [ 2096.072677][ T42] veth0_vlan: left promiscuous mode [ 2099.997627][ T24] audit: type=1400 audit(2099.130:197): avc: denied { write } for pid=4380 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2107.952652][ T24] audit: type=1400 audit(2107.060:198): avc: denied { write } for pid=4385 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2125.039063][ T3225] 8021q: adding VLAN 0 to HW filter on device eth9 [ 2130.370342][ T21] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2132.214149][ T21] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2133.962724][ T21] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2135.688896][ T21] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2145.936838][ T24] audit: type=1400 audit(2145.010:199): avc: denied { write } for pid=4396 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2152.531759][ T24] audit: type=1400 audit(2151.700:200): avc: denied { write } for pid=4404 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2154.472076][ T21] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2154.840848][ T21] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2155.208243][ T21] bond0 (unregistering): Released all slaves [ 2158.033721][ T3225] 8021q: adding VLAN 0 to HW filter on device eth10 [ 2179.526914][ T21] hsr_slave_0: left promiscuous mode [ 2179.620515][ T21] hsr_slave_1: left promiscuous mode [ 2180.336899][ T21] veth1_macvtap: left promiscuous mode [ 2180.337693][ T21] veth0_macvtap: left promiscuous mode [ 2180.348588][ T21] veth1_vlan: left promiscuous mode [ 2180.349914][ T21] veth0_vlan: left promiscuous mode [ 2183.903312][ T24] audit: type=1400 audit(2183.070:201): avc: denied { write } for pid=4415 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2191.324762][ T24] audit: type=1400 audit(2190.480:202): avc: denied { write } for pid=4421 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2204.531318][ T3225] 8021q: adding VLAN 0 to HW filter on device eth11 [ 2227.431067][ T24] audit: type=1400 audit(2226.510:203): avc: denied { write } for pid=4437 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2236.068522][ T24] audit: type=1400 audit(2235.190:204): avc: denied { write } for pid=4447 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2242.408926][ T3225] 8021q: adding VLAN 0 to HW filter on device eth12 [ 2257.359132][ T4257] veth0_vlan: entered promiscuous mode [ 2258.338035][ T4257] veth1_vlan: entered promiscuous mode [ 2258.639488][ T24] audit: type=1400 audit(2257.770:205): avc: denied { write } for pid=4464 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2261.382170][ T4257] veth0_macvtap: entered promiscuous mode [ 2262.039646][ T4257] veth1_macvtap: entered promiscuous mode [ 2266.368467][ T21] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2266.372777][ T21] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2266.461240][ T50] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2266.462035][ T50] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2267.304614][ T24] audit: type=1400 audit(2266.470:206): avc: denied { write } for pid=4471 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2273.194165][ T3225] 8021q: adding VLAN 0 to HW filter on device eth13 [ 2289.340264][ T4274] veth0_vlan: entered promiscuous mode [ 2291.002890][ T4274] veth1_vlan: entered promiscuous mode [ 2295.718220][ T4274] veth0_macvtap: entered promiscuous mode [ 2296.758932][ T4274] veth1_macvtap: entered promiscuous mode [ 2299.040673][ T24] audit: type=1400 audit(2298.190:207): avc: denied { write } for pid=4486 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2301.067548][ T3521] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2301.080823][ T4271] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2301.081643][ T4271] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2301.082241][ T4271] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2311.097897][ T24] audit: type=1400 audit(2310.260:208): avc: denied { write } for pid=4492 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2318.342506][ T3225] 8021q: adding VLAN 0 to HW filter on device eth14 [ 2341.554702][ T24] audit: type=1400 audit(2340.700:209): avc: denied { write } for pid=4514 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2352.780644][ T24] audit: type=1400 audit(2351.920:210): avc: denied { write } for pid=4524 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2361.760280][ T3225] 8021q: adding VLAN 0 to HW filter on device eth15 [ 2387.500545][ T24] audit: type=1400 audit(2386.670:211): avc: denied { write } for pid=4539 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2398.219445][ T24] audit: type=1400 audit(2397.360:212): avc: denied { write } for pid=4550 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2406.494783][ T3225] 8021q: adding VLAN 0 to HW filter on device eth16 [ 2417.937249][ T24] audit: type=1400 audit(2417.080:213): avc: denied { write } for pid=4559 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2430.250792][ T24] audit: type=1400 audit(2429.410:214): avc: denied { write } for pid=4568 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2506.421368][ T24] audit: type=1400 audit(2505.540:215): avc: denied { write } for pid=4615 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2516.258160][ T24] audit: type=1400 audit(2515.360:216): avc: denied { write } for pid=4622 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2538.739344][ T24] audit: type=1400 audit(2537.840:217): avc: denied { write } for pid=4632 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2550.338406][ T24] audit: type=1400 audit(2549.410:218): avc: denied { write } for pid=4641 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2568.446682][ T24] audit: type=1400 audit(2567.610:219): avc: denied { write } for pid=4652 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2578.757661][ T24] audit: type=1400 audit(2577.840:220): avc: denied { write } for pid=4663 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2616.060092][ T24] audit: type=1400 audit(2615.230:221): avc: denied { write } for pid=4682 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2627.088444][ T24] audit: type=1400 audit(2626.220:222): avc: denied { write } for pid=4693 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2650.069433][ T24] audit: type=1400 audit(2649.150:223): avc: denied { write } for pid=4704 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2662.872167][ T24] audit: type=1400 audit(2662.040:224): avc: denied { write } for pid=4717 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2683.782894][ T24] audit: type=1400 audit(2682.940:225): avc: denied { write } for pid=4726 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2692.830703][ T24] audit: type=1400 audit(2691.980:226): avc: denied { write } for pid=4736 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2729.738324][ T24] audit: type=1400 audit(2728.860:227): avc: denied { write } for pid=4759 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2741.503877][ T24] audit: type=1400 audit(2740.670:228): avc: denied { write } for pid=4771 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2766.440797][ T24] audit: type=1400 audit(2765.610:229): avc: denied { write } for pid=4783 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2778.786782][ T24] audit: type=1400 audit(2777.910:230): avc: denied { write } for pid=4794 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2803.411341][ T24] audit: type=1400 audit(2802.580:231): avc: denied { write } for pid=4805 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2814.050204][ T24] audit: type=1400 audit(2813.190:232): avc: denied { write } for pid=4815 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3123.349971][ T24] audit: type=1400 audit(3122.480:233): avc: denied { write } for pid=4969 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3135.644164][ T24] audit: type=1400 audit(3134.790:234): avc: denied { write } for pid=4980 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3360.613627][ T24] audit: type=1400 audit(3359.770:235): avc: denied { write } for pid=5083 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3373.146309][ T24] audit: type=1400 audit(3372.310:236): avc: denied { write } for pid=5092 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3642.101266][ T24] audit: type=1400 audit(3641.270:237): avc: denied { map } for pid=5235 comm="syz.5.274" path="pipe:[12291]" dev="pipefs" ino=12291 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 3642.212235][ T24] audit: type=1400 audit(3641.360:238): avc: denied { execute } for pid=5235 comm="syz.5.274" path="pipe:[12291]" dev="pipefs" ino=12291 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 3700.087626][ T24] audit: type=1400 audit(3699.250:239): avc: denied { write } for pid=5262 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3710.349524][ T24] audit: type=1400 audit(3709.510:240): avc: denied { write } for pid=5272 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3917.251502][ T5345] rxe_eth0 speed is unknown, defaulting to 1000 [ 3931.876593][ T5348] rxe_eth0 speed is unknown, defaulting to 1000 [ 3991.213158][ T5345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3992.402351][ T5345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4006.484861][ T5348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4007.487678][ T5348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4025.158124][ T5345] hsr_slave_0: entered promiscuous mode [ 4025.231621][ T5345] hsr_slave_1: entered promiscuous mode [ 4025.327835][ T5345] debugfs: 'hsr0' already exists in 'hsr' [ 4025.328251][ T5345] Cannot create hsr debugfs directory [ 4049.940366][ T5348] hsr_slave_0: entered promiscuous mode [ 4050.164789][ T5348] hsr_slave_1: entered promiscuous mode [ 4050.378430][ T5348] debugfs: 'hsr0' already exists in 'hsr' [ 4050.378884][ T5348] Cannot create hsr debugfs directory [ 4056.515089][ T5345] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 4057.072207][ T5345] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 4058.459282][ T5345] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 4058.694624][ T5345] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 4059.708424][ T5345] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 4060.062417][ T5345] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 4061.196813][ T5345] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 4061.723256][ T5345] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 4068.389698][ T42] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4069.978787][ T42] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4071.454762][ T42] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4073.024588][ T42] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4080.138115][ T5348] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 4080.471682][ T5348] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 4081.512828][ T5348] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 4082.133351][ T5348] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 4097.929648][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 4098.734781][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 4099.284194][ T42] bond0 (unregistering): Released all slaves [ 4100.689147][ T5348] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 4101.289640][ T5348] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 4101.548238][ T5348] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 4102.063274][ T5348] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 4122.052952][ T5345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4126.780018][ T42] hsr_slave_0: left promiscuous mode [ 4126.918537][ T42] hsr_slave_1: left promiscuous mode [ 4127.758230][ T42] veth1_macvtap: left promiscuous mode [ 4127.759028][ T42] veth0_macvtap: left promiscuous mode [ 4127.782060][ T42] veth1_vlan: left promiscuous mode [ 4127.783364][ T42] veth0_vlan: left promiscuous mode [ 4132.056774][ T24] audit: type=1400 audit(4131.190:241): avc: denied { write } for pid=5442 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4139.442708][ T24] audit: type=1400 audit(4138.610:242): avc: denied { write } for pid=5448 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4163.230327][ T3225] 8021q: adding VLAN 0 to HW filter on device eth17 [ 4171.441511][ T42] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4173.792161][ T42] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4175.534143][ T42] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4177.269939][ T42] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4178.191250][ T24] audit: type=1400 audit(4177.330:243): avc: denied { write } for pid=5452 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4188.790297][ T24] audit: type=1400 audit(4187.920:244): avc: denied { write } for pid=5461 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4198.151729][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 4198.374233][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 4198.541347][ T42] bond0 (unregistering): Released all slaves [ 4203.479636][ T5348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4224.140302][ T42] hsr_slave_0: left promiscuous mode [ 4224.276873][ T42] hsr_slave_1: left promiscuous mode [ 4225.079764][ T42] veth1_macvtap: left promiscuous mode [ 4225.080554][ T42] veth0_macvtap: left promiscuous mode [ 4225.144343][ T42] veth1_vlan: left promiscuous mode [ 4225.187092][ T42] veth0_vlan: left promiscuous mode [ 4230.562795][ T24] audit: type=1400 audit(4229.730:245): avc: denied { write } for pid=5472 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4239.231637][ T24] audit: type=1400 audit(4238.390:246): avc: denied { write } for pid=5478 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4254.872362][ T3225] 8021q: adding VLAN 0 to HW filter on device eth18 [ 4280.929277][ T24] audit: type=1400 audit(4280.090:247): avc: denied { write } for pid=5489 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4291.256452][ T24] audit: type=1400 audit(4290.410:248): avc: denied { write } for pid=5499 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4297.841310][ T3225] 8021q: adding VLAN 0 to HW filter on device eth20 [ 4315.136485][ T24] audit: type=1400 audit(4314.300:249): avc: denied { write } for pid=5515 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4324.289148][ T24] audit: type=1400 audit(4323.430:250): avc: denied { write } for pid=5526 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4331.533190][ T3225] 8021q: adding VLAN 0 to HW filter on device eth19 [ 4351.364652][ T5345] veth0_vlan: entered promiscuous mode [ 4352.812450][ T5345] veth1_vlan: entered promiscuous mode [ 4356.002586][ T24] audit: type=1400 audit(4355.170:251): avc: denied { write } for pid=5543 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4357.664370][ T5345] veth0_macvtap: entered promiscuous mode [ 4358.539363][ T5345] veth1_macvtap: entered promiscuous mode [ 4362.452020][ T5361] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 4362.723552][ T3521] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 4362.744304][ T4327] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 4362.777442][ T4705] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 4367.347154][ T24] audit: type=1400 audit(4366.500:252): avc: denied { write } for pid=5549 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4373.588813][ T3225] 8021q: adding VLAN 0 to HW filter on device eth21 [ 4383.552325][ T5348] veth0_vlan: entered promiscuous mode [ 4385.288648][ T5348] veth1_vlan: entered promiscuous mode [ 4390.244981][ T5348] veth0_macvtap: entered promiscuous mode [ 4391.008866][ T5348] veth1_macvtap: entered promiscuous mode [ 4395.939111][ T21] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 4395.954555][ T5356] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 4395.960671][ T5356] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 4395.965010][ T5356] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 4401.598438][ T24] audit: type=1400 audit(4400.710:253): avc: denied { write } for pid=5562 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4414.873242][ T24] audit: type=1400 audit(4414.020:254): avc: denied { write } for pid=5573 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4424.179058][ T3225] 8021q: adding VLAN 0 to HW filter on device eth22 [ 4466.099125][ T24] audit: type=1400 audit(4465.150:255): avc: denied { write } for pid=5598 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4480.376527][ T24] audit: type=1400 audit(4479.450:256): avc: denied { write } for pid=5608 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4489.858846][ T3225] 8021q: adding VLAN 0 to HW filter on device eth23 [ 4511.773552][ T24] audit: type=1400 audit(4510.830:257): avc: denied { write } for pid=5615 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4523.779891][ T24] audit: type=1400 audit(4522.930:258): avc: denied { write } for pid=5619 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4533.881962][ T3225] 8021q: adding VLAN 0 to HW filter on device eth24 [ 4549.032505][ T4271] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4552.263653][ T4271] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4554.681459][ T4271] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4556.873990][ T4271] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4583.457165][ T4271] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 4584.030320][ T4271] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 4584.323195][ T4271] bond0 (unregistering): Released all slaves [ 4599.343249][ T24] audit: type=1400 audit(4598.470:259): avc: denied { write } for pid=5645 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4609.298184][ T4271] hsr_slave_0: left promiscuous mode [ 4609.338914][ T4271] hsr_slave_1: left promiscuous mode [ 4609.729092][ T4271] veth1_macvtap: left promiscuous mode [ 4609.729834][ T4271] veth0_macvtap: left promiscuous mode [ 4609.732206][ T4271] veth1_vlan: left promiscuous mode [ 4609.733398][ T4271] veth0_vlan: left promiscuous mode [ 4609.987204][ T24] audit: type=1400 audit(4609.100:260): avc: denied { write } for pid=5654 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4641.547188][ T5625] rxe_eth0 speed is unknown, defaulting to 1000 [ 4647.281188][ T4271] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4649.073057][ T4271] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4650.722757][ T4271] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4652.463163][ T4271] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4652.667270][ T24] audit: type=1400 audit(4651.770:261): avc: denied { write } for pid=5659 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4662.292394][ T24] audit: type=1400 audit(4661.430:262): avc: denied { write } for pid=5664 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4671.213226][ T4271] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 4671.354338][ T4271] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 4671.450053][ T4271] bond0 (unregistering): Released all slaves [ 4672.950050][ T5629] rxe_eth0 speed is unknown, defaulting to 1000 [ 4692.089868][ T24] audit: type=1400 audit(4691.260:263): avc: denied { write } for pid=5671 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4702.835031][ T24] audit: type=1400 audit(4701.990:264): avc: denied { write } for pid=5678 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4712.752268][ T3225] 8021q: adding VLAN 0 to HW filter on device eth25 [ 4719.167461][ T4271] hsr_slave_0: left promiscuous mode [ 4719.229160][ T4271] hsr_slave_1: left promiscuous mode [ 4719.899836][ T4271] veth1_macvtap: left promiscuous mode [ 4719.900627][ T4271] veth0_macvtap: left promiscuous mode [ 4719.902155][ T4271] veth1_vlan: left promiscuous mode [ 4719.903311][ T4271] veth0_vlan: left promiscuous mode [ 4761.309477][ T24] audit: type=1400 audit(4760.460:265): avc: denied { write } for pid=5697 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4762.351785][ T5625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4763.989335][ T5625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4770.070235][ T24] audit: type=1400 audit(4769.240:266): avc: denied { write } for pid=5704 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4775.609634][ T3225] 8021q: adding VLAN 0 to HW filter on device eth26 [ 4779.659703][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4780.614508][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4782.856832][ T24] audit: type=1400 audit(4782.020:267): avc: denied { write } for pid=5712 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4790.829161][ T24] audit: type=1400 audit(4789.950:268): avc: denied { write } for pid=5720 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4798.105010][ T5625] hsr_slave_0: entered promiscuous mode [ 4798.141099][ T5625] hsr_slave_1: entered promiscuous mode [ 4806.682006][ T24] audit: type=1400 audit(4805.850:269): avc: denied { write } for pid=5728 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4816.058304][ T24] audit: type=1400 audit(4815.070:270): avc: denied { write } for pid=5735 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4820.967012][ T5629] hsr_slave_0: entered promiscuous mode [ 4821.062676][ T5629] hsr_slave_1: entered promiscuous mode [ 4821.244425][ T5629] debugfs: 'hsr0' already exists in 'hsr' [ 4821.244827][ T5629] Cannot create hsr debugfs directory [ 4828.024027][ T5625] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 4828.733225][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 4828.928943][ T5625] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 4829.270029][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 4831.180729][ T5625] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 4831.401047][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 4832.126813][ T5625] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 4832.313577][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 4844.978782][ T5629] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 4845.529776][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 4845.604704][ T5629] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 4846.133950][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 4846.279940][ T5629] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 4846.730964][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 4846.882427][ T5629] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 4847.449990][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 4857.981273][ T24] audit: type=1400 audit(4857.150:271): avc: denied { write } for pid=5756 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4869.685028][ T24] audit: type=1400 audit(4868.810:272): avc: denied { write } for pid=5771 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4870.737931][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4878.383893][ T3225] 8021q: adding VLAN 0 to HW filter on device eth27 [ 4886.489240][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4910.352523][ T24] audit: type=1400 audit(4909.520:273): avc: denied { write } for pid=5788 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4922.077820][ T24] audit: type=1400 audit(4921.210:274): avc: denied { write } for pid=5796 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4930.841695][ T3225] 8021q: adding VLAN 0 to HW filter on device eth28 [ 4960.677292][ T24] audit: type=1400 audit(4959.830:275): avc: denied { write } for pid=5813 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4971.569015][ T24] audit: type=1400 audit(4970.720:276): avc: denied { write } for pid=5822 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4978.583724][ T3225] 8021q: adding VLAN 0 to HW filter on device eth29 [ 4991.138976][ T24] audit: type=1400 audit(4990.270:277): avc: denied { write } for pid=5831 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5003.187241][ T24] audit: type=1400 audit(5002.350:278): avc: denied { write } for pid=5841 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5044.431179][ T5625] veth0_vlan: entered promiscuous mode [ 5046.031364][ T5625] veth1_vlan: entered promiscuous mode [ 5051.527611][ T5625] veth0_macvtap: entered promiscuous mode [ 5052.247229][ T24] audit: type=1400 audit(5051.390:279): avc: denied { write } for pid=5866 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5052.398080][ T5625] veth1_macvtap: entered promiscuous mode [ 5057.768222][ T4974] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 5057.769058][ T4974] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 5057.769676][ T4974] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 5057.770260][ T4974] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 5065.127823][ T5629] veth0_vlan: entered promiscuous mode [ 5066.817467][ T24] audit: type=1400 audit(5065.980:280): avc: denied { write } for pid=5872 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5067.904564][ T5629] veth1_vlan: entered promiscuous mode [ 5074.364012][ T5629] veth0_macvtap: entered promiscuous mode [ 5075.483670][ T5629] veth1_macvtap: entered promiscuous mode [ 5076.261218][ T3225] 8021q: adding VLAN 0 to HW filter on device eth30 [ 5082.069770][ T5782] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 5082.070602][ T5782] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 5082.071206][ T5782] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 5082.071821][ T5782] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 5118.207471][ T24] audit: type=1400 audit(5117.360:281): avc: denied { write } for pid=5883 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5135.238110][ T24] audit: type=1400 audit(5134.350:282): avc: denied { write } for pid=5896 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5146.644273][ T3225] 8021q: adding VLAN 0 to HW filter on device eth31 [ 5184.842170][ T24] audit: type=1400 audit(5184.010:283): avc: denied { write } for pid=5916 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5201.791034][ T24] audit: type=1400 audit(5200.950:284): avc: denied { write } for pid=5927 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5246.640103][ T24] audit: type=1400 audit(5245.690:285): avc: denied { write } for pid=5941 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5263.296987][ T24] audit: type=1400 audit(5262.460:286): avc: denied { write } for pid=5954 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5274.490859][ T3225] 8021q: adding VLAN 0 to HW filter on device eth32 [ 5305.421104][ T24] audit: type=1400 audit(5304.540:287): avc: denied { write } for pid=5971 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5322.160242][ T24] audit: type=1400 audit(5321.290:288): avc: denied { write } for pid=5986 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5354.127619][ T24] audit: type=1400 audit(5353.290:289): avc: denied { write } for pid=6000 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5371.611485][ T24] audit: type=1400 audit(5370.740:290): avc: denied { write } for pid=6010 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5407.187793][ T24] audit: type=1400 audit(5406.330:291): avc: denied { write } for pid=6019 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5423.459813][ T24] audit: type=1400 audit(5422.530:292): avc: denied { write } for pid=6030 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5494.468343][ T24] audit: type=1400 audit(5493.640:293): avc: denied { write } for pid=6054 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5510.980455][ T24] audit: type=1400 audit(5510.090:294): avc: denied { write } for pid=6069 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5559.448188][ T24] audit: type=1400 audit(5558.590:295): avc: denied { write } for pid=6088 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5571.387041][ T24] audit: type=1400 audit(5570.540:296): avc: denied { write } for pid=6091 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5630.577896][ T24] audit: type=1400 audit(5629.730:297): avc: denied { write } for pid=6102 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5644.141058][ T24] audit: type=1400 audit(5643.290:298): avc: denied { write } for pid=6115 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5670.254889][ T6103] rxe_eth0 speed is unknown, defaulting to 1000 [ 5688.083713][ T24] audit: type=1400 audit(5687.250:299): avc: denied { write } for pid=6130 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5699.219134][ T6106] rxe_eth0 speed is unknown, defaulting to 1000 [ 5699.687493][ T24] audit: type=1400 audit(5698.820:300): avc: denied { write } for pid=6133 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5751.660738][ T24] audit: type=1400 audit(5750.830:301): avc: denied { write } for pid=6142 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5764.946972][ T24] audit: type=1400 audit(5764.080:302): avc: denied { write } for pid=6149 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5812.657904][ T6103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 5813.399564][ T6103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 5826.930706][ T24] audit: type=1400 audit(5826.100:303): avc: denied { write } for pid=6174 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5840.543055][ T6106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 5842.614250][ T24] audit: type=1400 audit(5841.770:304): avc: denied { write } for pid=6184 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5846.049864][ T6106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 5878.760509][ T6103] hsr_slave_0: entered promiscuous mode [ 5878.933579][ T6103] hsr_slave_1: entered promiscuous mode [ 5879.050041][ T6103] debugfs: 'hsr0' already exists in 'hsr' [ 5879.050450][ T6103] Cannot create hsr debugfs directory [ 5880.996991][ T24] audit: type=1400 audit(5880.120:305): avc: denied { write } for pid=6195 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5895.677542][ T24] audit: type=1400 audit(5894.770:306): avc: denied { write } for pid=6202 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5924.843523][ T6106] hsr_slave_0: entered promiscuous mode [ 5925.044885][ T6106] hsr_slave_1: entered promiscuous mode [ 5925.289911][ T6106] debugfs: 'hsr0' already exists in 'hsr' [ 5925.290296][ T6106] Cannot create hsr debugfs directory [ 5928.329360][ T24] audit: type=1400 audit(5927.500:307): avc: denied { write } for pid=6207 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5943.599027][ T24] audit: type=1400 audit(5942.700:308): avc: denied { write } for pid=6215 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5960.868925][ T6103] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 5961.531960][ T6103] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 5962.948278][ T6103] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 5963.523050][ T6103] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 5964.918048][ T6103] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 5965.890378][ T6103] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 5966.687175][ T6103] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 5967.174206][ T6103] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 5972.588860][ T24] audit: type=1400 audit(5971.720:309): avc: denied { write } for pid=6218 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5990.188801][ T24] audit: type=1400 audit(5989.310:310): avc: denied { write } for pid=6232 comm="rm" name="hook-state" dev="tmpfs" ino=43 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5998.688297][ T6106] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 5999.350796][ T6106] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 5999.547537][ T6106] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 5999.984574][ T6106] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 6000.154918][ T6106] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 6000.790964][ T6106] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 6001.014259][ T6106] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 6001.758663][ T6106] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 6031.892584][ T6103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 6052.568938][ T26] INFO: task syz.8.346:6081 blocked for more than 430 seconds. [ 6052.569786][ T26] Not tainted syzkaller #0 [ 6052.570245][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 6052.570567][ T26] task:syz.8.346 state:D stack:0 pid:6081 tgid:6081 ppid:5625 task_flags:0x400040 flags:0x00000011 [ 6052.573318][ T26] Call trace: [ 6052.573669][ T26] __switch_to+0x5e4/0xb74 (T) [ 6052.575010][ T26] __schedule+0x1e0c/0x38cc SYZFAIL: failed to recv rpc [ 6052.843438][ T26] schedule+0x1b4/0x274 [ 6052.843953][ T26] schedule_timeout+0x68/0x1e4 [ 6052.844311][ T26] wait_for_completion+0x1b8/0x414 [ 6052.844641][ T26] __synchronize_srcu+0x1c8/0x208 [ 6052.844937][ T26] synchronize_srcu+0x668/0x8dc [ 6052.908658][ T26] mmu_notifier_unregister+0x33c/0x444 [ 6052.909224][ T26] kvm_put_kvm+0x69c/0xbbc [ 6052.909610][ T26] kvm_vm_release+0x58/0x78 [ 6052.909924][ T26] __fput+0x4ac/0x978 [ 6052.910244][ T26] ____fput+0x20/0x30 [ 6052.910562][ T26] task_work_run+0x1b8/0x250 [ 6052.910886][ T26] exit_to_user_mode_loop+0x110/0x188 [ 6052.911229][ T26] el0_svc+0x18c/0x240 [ 6052.911577][ T26] el0t_64_sync_handler+0x68/0xdc [ 6052.911934][ T26] el0t_64_sync+0x198/0x19c [ 6052.913480][ T26] [ 6052.913480][ T26] Showing all locks held in the system: [ 6052.913840][ T26] locks held by khungtaskd/26: 1, last CPU#0: [ 6052.914093][ T26] #0: ffff800088afe918 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x4c/0x188 [ 6053.070890][ T26] locks held by kworker/u4:5/50: 3, last CPU#0: [ 6053.071218][ T26] #0: b7f000000dc34140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b4 [ 6053.072198][ T26] #1: ffff80008dd37ce8 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b4 [ 6053.073033][ T26] #2: aaf0000024b9fa58 (&devlink->lock_key#10){+.+.}-{4:4}, at: devl_trylock+0x24/0x34 [ 6053.074215][ T26] locks held by klogd/3188: 1, last CPU#0: [ 6053.074432][ T26] #0: ffff800088afe918 (rcu_read_lock){....}-{1:3}, at: sock_def_readable+0xd4/0x7f0 [ 6053.267106][ T26] locks held by dhcpcd/3224: 2, on CPU#0: [ 6053.267431][ T26] #0: ffff800088df1e68 (vlan_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x528/0x81c [ 6053.268340][ T26] #1: ffff800088df4ff8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c [ 6053.269139][ T26] locks held by getty/3253: 2, on CPU#0: [ 6053.269325][ T26] #0: e3f00000134320a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 6053.270129][ T26] #1: d3ff80008d85b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x314/0x11f8 [ 6053.270954][ T26] locks held by syz-executor/3380: 2, last CPU#0: [ 6053.271145][ T26] #0: 2af0000017d1d778 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0xf4/0xb64 [ 6053.271887][ T26] #1: ffff800088afe918 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x50/0x22c [ 6053.272725][ T26] locks held by kworker/u4:7/3521: 3, last CPU#0: [ 6053.272937][ T26] #0: b7f000000dc34140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b4 [ 6053.273691][ T26] #1: ffff8000a3d37ce8 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b4 [ 6053.274455][ T26] #2: 5bf0000021588258 (&devlink->lock_key#6){+.+.}-{4:4}, at: devl_trylock+0x24/0x34 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 6053.486450][ T26] locks held by kworker/u4:4/4271: 3, last CPU#0: [ 6053.486784][ T26] #0: c2f0000013328940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b4 [ 6053.487656][ T26] #1: ffff80008fc67ce8 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b4 [ 6053.488501][ T26] #2: ffff800088df4ff8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c [ 6053.489314][ T26] locks held by kworker/u4:8/4327: 3, last CPU#0: [ 6053.489530][ T26] #0: b7f000000dc34140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b4 [ 6053.490308][ T26] #1: ffff80008fd87ce8 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b4 [ 6053.491082][ T26] #2: 36f0000028639a58 (&devlink->lock_key#3){+.+.}-{4:4}, at: devl_trylock+0x24/0x34 [ 6053.491972][ T26] locks held by kworker/u4:10/4359: 3, last CPU#0: [ 6053.492176][ T26] #0: b7f000000dc34140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b4 [ 6053.492960][ T26] #1: ffff8000a3da7ce8 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b4 [ 6053.493705][ T26] #2: 99f000001fc39258 (&devlink->lock_key#11){+.+.}-{4:4}, at: devl_trylock+0x24/0x34 [ 6053.494568][ T26] locks held by kworker/u4:12/4368: 3, last CPU#0: [ 6053.494764][ T26] #0: b7f000000dc34140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b4 [ 6053.759346][ T26] #1: ffff80008efa7ce8 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b4 [ 6053.760249][ T26] #2: aaf0000024b9fa58 (&devlink->lock_key#10){+.+.}-{4:4}, at: devl_trylock+0x24/0x34 [ 6053.761204][ T26] locks held by kworker/u4:2/4974: 3, last CPU#0: [ 6053.761409][ T26] #0: b7f000000dc34140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b4 [ 6053.762174][ T26] #1: ffff8000a3f77ce8 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b4 [ 6053.762960][ T26] #2: f2f0000020b88258 (&devlink->lock_key#5){+.+.}-{4:4}, at: devl_trylock+0x24/0x34 [ 6053.763830][ T26] locks held by kworker/u4:11/5424: 3, last CPU#0: [ 6053.764045][ T26] #0: b7f000000dc34140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b4 [ 6053.764830][ T26] #1: ffff80008eff7ce8 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: psi_task_switch+0x6c/0x6e8 [ 6053.932337][ T26] #2: fff0000074c05cd8 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x5cc/0xe90 [ 6053.933327][ T26] locks held by kworker/0:7/5915: 2, last CPU#0: [ 6053.933548][ T26] #0: edf0000020c13b40 ((wq_completion)wg-crypt-wg0){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b4 [ 6053.934304][ T26] #1: ffff80008fc17ce8 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b4 [ 6054.037514][ T26] locks held by syz.9.345/6080: 2, last CPU#0: [ 6054.037883][ T26] #0: ffff800088b4c3f0 (srcu){.+.+}-{0:0}, at: mmu_notifier_unregister+0xdc/0x444 [ 6054.038840][ T26] #1: 16f0000020b63518 (&kvm->srcu){.+.+}-{0:0}, at: kvm_mmu_notifier_release+0x50/0xc4 [ 6054.039661][ T26] locks held by syz-executor/6106: 2, last CPU#0: [ 6054.039876][ T26] #0: ffff800088df4ff8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c [ 6054.040661][ T26] #1: ffff800088e20768 ((inetaddr_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x64/0xbc [ 6054.041453][ T26] locks held by kworker/u4:6/6109: 3, last CPU#0: [ 6054.041653][ T26] #0: b7f000000dc34140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b4 [ 6054.042395][ T26] #1: ffff8000a3a77ce8 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b4 [ 6054.043172][ T26] #2: 34f0000020e19a58 (&devlink->lock_key#7){+.+.}-{4:4}, at: devl_trylock+0x24/0x34 [ 6054.044146][ T26] locks held by kworker/u4:15/6254: 2, on CPU#0: [ 6054.044345][ T26] #0: b7f000000dc34140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b4 [ 6054.236763][ T26] #1: ffff8000a3d57ce8 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b4 [ 6054.237799][ T26] locks held by modprobe/6261: 1, last CPU#0: [ 6054.238004][ T26] #0: ffff800088afe918 (rcu_read_lock){....}-{1:3}, at: path_init+0x140/0x121c [ 6054.238766][ T26] locks held by modprobe/6262: 1, last CPU#0: [ 6054.238955][ T26] #0: 07f00000216122f8 (&mm->mmap_lock){++++}-{4:4}, at: __vm_munmap+0xac/0x2dc [ 6054.239956][ T26] [ 6054.240091][ T26] ============================================= [ 6054.240091][ T26] [ 6054.240939][ T26] Kernel panic - not syncing: hung_task: blocked tasks [ 6054.250624][ T26] CPU: 0 UID: 0 PID: 26 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT [ 6054.252146][ T26] Hardware name: linux,dummy-virt (DT) [ 6054.253090][ T26] Call trace: [ 6054.253850][ T26] show_stack+0x2c/0x3c (C) [ 6054.254846][ T26] __dump_stack+0x30/0x40 [ 6054.255800][ T26] dump_stack_lvl+0x30/0x12c [ 6054.256794][ T26] dump_stack+0x1c/0x28 [ 6054.257718][ T26] vpanic+0x4cc/0x844 [ 6054.258546][ T26] vpanic+0x0/0x844 [ 6054.259352][ T26] hung_task_panic+0x0/0x2c [ 6054.260307][ T26] kthread+0x4cc/0x514 [ 6054.261243][ T26] ret_from_fork+0x10/0x20 [ 6054.263119][ T26] Kernel Offset: disabled [ 6054.263886][ T26] CPU features: 0x0,00000000,00d1802f,df188f42,0afff61f [ 6054.265118][ T26] Memory Limit: none [ 6054.267336][ T26] Rebooting in 86400 seconds..