last executing test programs: 29m15.19898774s ago: executing program 1 (id=51): r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) eventfd2(0x1e, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, 0xffffffffffffffff, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r7 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil) r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000180)={0x0, &(0x7f0000001200)=[@code={0xa, 0x0, {"20b186d200a0b8f2010080d2c20180d2230180d2440180d2020000d400e885d200a0b0f2c10180d2a20180d2830180d2240180d2020000d4003c40930000805a007008d5007008d500b0200e0008c09a000020cac06f94d20020b8f2010080d2820080d2a30080d2c40080d2020000d4"}}, @mrs={0xbe, 0x18, {0x603000000013c119}}, @uexit={0x0, 0x18, 0x6}, @uexit={0x0, 0x18, 0x2000000000000}, @its_send_cmd={0xaa, 0x28, {0xf, 0x0, 0x0, 0xa, 0x6, 0x0, 0x2}}, @its_send_cmd={0xaa, 0x28, {0xa, 0x0, 0x0, 0x1, 0x80000001, 0xe, 0x1}}, @code={0xa, 0x6c, {"a0e080d200e0b8f2e10180d2420080d2c30180d2c40180d2020000d4007008d5007008d580ac9fd200a0b0f2410180d2c20080d2630180d2a40180d2020000d4009c000f007008d50004006e007008d5008008d5007008d5"}}, @eret={0xe6, 0x18, 0x7}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0xffe8, 0x8a41, 0x2}}, @eret={0xe6, 0x18, 0xffffffff}, @its_setup={0x82, 0x28, {0x1, 0x0, 0x374}}, @hvc={0x32, 0x40, {0xc5000020, [0x8, 0x1, 0x1000000000000000, 0x8, 0x4]}}, @svc={0x122, 0x40, {0x84000012, [0x6, 0x7fff, 0x200, 0x80, 0x6]}}, @eret={0xe6, 0x18, 0x96c}, @msr={0x14, 0x20, {0x603000000013c200, 0x100}}, @mrs={0xbe, 0x18, {0x6030000000138010}}, @its_send_cmd={0xaa, 0x28, {0x4, 0x0, 0x1, 0x3, 0x3, 0x8, 0x2}}, @mrs={0xbe, 0x18, {0x603000000013e6d7}}, @eret={0xe6, 0x18, 0x9c}, @eret={0xe6, 0x18, 0x1}, @mrs={0xbe, 0x18, {0x603000000013c101}}, @svc={0x122, 0x40, {0x6000000, [0x401, 0x8, 0x7, 0x9, 0x2]}}, @eret={0xe6, 0x18, 0x6}, @hvc={0x32, 0x40, {0x0, [0x200, 0x9, 0x16, 0x100, 0xff]}}, @code={0xa, 0xe4, {"0000403cc02983d200a0b0f2e10080d2e20080d2c30080d2640180d2020000d480708bd200a0b8f2410180d2420180d2830080d2a40080d2020000d4404691d20040b0f2210080d2020180d2430180d2c40080d2020000d400198ed20080b0f2610080d2e20080d2a30080d2640080d2020000d40068217e008698d200e0b0f2c10080d2820080d2430080d2a40080d2020000d4007008d5c03489d20000b0f2810080d2220180d2230080d2e40180d2020000d400c492d20060b0f2c10080d2e20080d2830180d2440180d2020000d4"}}, @hvc={0x32, 0x0, {0x84000010, [0xe72, 0xffffffffffffffff, 0x1, 0x6, 0x2]}}], 0xfffffffffffffcca}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r10, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) ioctl$KVM_ARM_VCPU_INIT(0xffffffffffffffff, 0x4020aeae, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) r11 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r11, 0x4018aee1, &(0x7f00000011c0)=@attr_set_pmu={0x0, 0x0, 0x3, &(0x7f00000000c0)=0x8}) r12 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000240)={0x0, &(0x7f0000000000)=[@its_setup={0x82, 0x28, {0x2, 0x4, 0x1}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x0, 0x40000000, 0x10000, 0x0, 0x105, 0x2}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r4, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r14, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r13, 0xae80, 0x0) r15 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r15, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0xffffffffffffffa7) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) r16 = eventfd2(0xd, 0x1) close(r16) 28m59.315817801s ago: executing program 1 (id=55): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x11) ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f0000000000)={0x600000, 0x6}) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x8003) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000bfe000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f00000000c0)={0x0, &(0x7f00000009c0)=[@code={0xa, 0x9c, {"000008d5e00b8dd20020b8f2610080d2e20180d2630080d2440080d2020000d4000c407860a48bd200e0b8f2410080d2820180d2e30080d2e40180d2020000d4007008d500804088007008d50018285ea0f981d20060b0f2c10080d2620180d2a30080d2440080d2020000d4201186d20080b0f2e10080d2820180d2630180d2040080d2020000d4"}}, @its_send_cmd={0xaa, 0x28, {0xa, 0x0, 0x3, 0xd, 0x7fff, 0x8, 0x1}}, @its_setup={0x82, 0x28, {0x2, 0x4, 0x221}}, @its_setup={0x82, 0x28, {0x2, 0x4, 0x394}}, @hvc={0x32, 0x40, {0x400, [0x3, 0x1, 0x9, 0xc, 0xd2e]}}, @msr={0x14, 0x20, {0x7c55}}, @its_send_cmd={0xaa, 0x28, {0x5, 0x0, 0x3, 0x10, 0x81, 0x0, 0x10}}, @msr={0x14, 0x20, {0x603000000013e6d8, 0xffffffffffffff5c}}, @smc={0x1e, 0x40, {0xc400000c, [0x7fff, 0x231, 0x3fd4, 0x4, 0x8]}}, @its_setup={0x82, 0x28, {0x3, 0x2, 0x12d}}, @its_setup={0x82, 0x28, {0x2, 0x1, 0x14d}}, @irq_setup={0x46, 0x18, {0x1, 0x3d2}}, @uexit={0x0, 0x18}, @eret={0xe6, 0x18, 0x7}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x7a00, 0x4, 0x4}}, @svc={0x122, 0x40, {0x8600ff01, [0x7fffffff, 0x3, 0x6, 0x27a, 0x3]}}, @code={0xa, 0x6c, {"c06d91d200a0b8f2c10180d2020180d2030080d2240080d2020000d4008008d5001a87d20060b0f2610080d2a20180d2c30180d2640080d2020000d40000006a0058000e000028d50034000f00d8a05e000008d50000406c"}}, @eret={0xe6, 0x18, 0x87}, @hvc={0x32, 0x40, {0x80000000, [0x20000, 0x0, 0x0, 0xfff, 0x3]}}, @code={0xa, 0x54, {"000480780000002a00a4000d000008d520689ed20020b0f2e10180d2220180d2030080d2e40080d2020000d4008008d50040241e007008d50000709e008008d5"}}, @code={0xa, 0x6c, {"000c0078e03f80d20080b0f2810180d2a20080d2830080d2c40080d2020000d4c08083d20060b0f2c10080d2e20180d2830180d2c40080d2020000d4008008d500c0206e000008d50000291e00d8212e0060006f00eca02e"}}, @hvc={0x32, 0x40, {0x84000014, [0x2, 0x3, 0xb, 0x0, 0xff]}}, @mrs={0xbe, 0x18, {0x603000000013e6db}}, @code={0xa, 0x6c, {"000008d5007008d5000008d520f59bd200c0b0f2210180d2220180d2c30080d2c40080d2020000d4000028d5000c00f8e00300cb000028d5c04299d200c0b0f2c10180d2020180d2830180d2040080d2020000d4000028d5"}}, @uexit={0x0, 0x18, 0x6}, @hvc={0x32, 0x40, {0x20, [0xfffffffffffffff8, 0x0, 0x7, 0x8ec, 0xf2]}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x0, 0x1, 0xb, 0x7, 0x8, 0x3}}, @svc={0x122, 0x40, {0xc5000020, [0x2151, 0x0, 0x3, 0x8, 0xff]}}, @code={0xa, 0x84, {"000008d5030000d4009f8dd200a0b8f2610080d2420080d2c30080d2a40080d2020000d4203395d200e0b8f2010180d2c20080d2030180d2a40180d2020000d4007008d5007008d5007008d5007008d5003c0013403b86d200a0b8f2410080d2820080d2630180d2e40180d2020000d4"}}, @hvc={0x32, 0x40, {0x40000000, [0x0, 0x84b9, 0x6100000000, 0x1, 0xd]}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x1, 0x4, 0x3, 0x8, 0x1, 0x1}}, @hvc={0x32, 0x40, {0x84000005, [0x5, 0x4, 0xffffffffffffff9d, 0x9, 0x8]}}], 0x738}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r2, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) mmap$KVM_VCPU(&(0x7f0000e8b000/0x2000)=nil, r6, 0x0, 0x11, r4, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 28m53.988162143s ago: executing program 1 (id=56): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x26) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r3, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) r4 = syz_kvm_vgic_v3_setup(r2, 0x1, 0x100) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000007c0)=@attr_other={0x0, 0x7, 0x40, &(0x7f0000000100)=0x7fffffff}) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r7 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r8, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)={0xef000000, 0x1000, 0x2}}) r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil) r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f00000000c0)={0x0, &(0x7f00000002c0)=[@hvc={0x32, 0x40, {0x86000001, [0x0, 0x9, 0x50e, 0x10, 0x401]}}, @irq_setup={0x46, 0x18, {0x1, 0x6b}}, @smc={0x1e, 0x40, {0x84000011, [0x3, 0x5, 0x6, 0x1, 0x2]}}, @uexit={0x0, 0x18, 0x400}, @hvc={0x32, 0x40, {0x80000000, [0x10001, 0xffffffff00000, 0x3, 0x8000000000000000, 0x8000]}}, @mrs={0xbe, 0x18, {0x603000000013e21b}}, @uexit={0x0, 0x18, 0x400}, @its_send_cmd={0xaa, 0x28, {0xb, 0x0, 0x2, 0xe, 0xf, 0x1}}, @code={0xa, 0xfffffffffffffdb4, {"0000261e0000311e0000002f007008d5008008d5000008d50008202ea04d90d20000b0f2010080d2a20080d2030180d2040080d2020000d4008008d5007008d5"}}, @its_setup={0x82, 0x28, {0x3, 0x3, 0x370}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80a0000, 0x70, 0x3, 0x2}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xfff4, 0x490, 0x2}}, @svc={0x122, 0x40, {0x8, [0x4, 0x5, 0x8, 0x9, 0x6]}}, @irq_setup={0x46, 0x18, {0x1, 0x9c}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x88, 0x4}}, @its_setup={0x82, 0x28, {0x3, 0x1, 0x2da}}, @irq_setup={0x46, 0x18, {0x0, 0x3ba}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x10, 0x5, 0x7}}, @uexit={0x0, 0x18, 0x3}, @mrs={0xbe, 0x18, {0x603000000013dea6}}, @smc={0x1e, 0x40, {0x85689c2456ecd094, [0xfff, 0x7, 0xef, 0x6, 0x80000000]}}, @uexit={0x0, 0x18, 0x7fffffffffffffff}, @irq_setup={0x46, 0x18, {0x2, 0x10344}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x8, 0x80}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x5, 0x160, 0x7, 0x3}}, @its_setup={0x82, 0x28, {0x1, 0x4, 0x160}}, @irq_setup={0x46, 0x18, {0x4, 0x10a}}, @smc={0x1e, 0x40, {0x80008000, [0x100000001, 0x23fffffffffff, 0x6, 0x31b8, 0x3f]}}], 0x49c}, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) munmap$KVM_VCPU(0x0, 0x1000000000) r11 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1f) ioctl$KVM_ASSIGN_SET_MSIX_NR(r11, 0x4008ae73, &(0x7f0000000280)={0x8001, 0x7}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r12 = eventfd2(0xffff10c0, 0x80001) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000100)={0xf0b, 0x8080000, 0x4, r12}) syz_kvm_add_vcpu$arm64(r6, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@code={0xa, 0x6c, {"007008d5c07e80d20040b8f2e10180d2220080d2c30080d2a40180d2020000d4007008d50020df0c40d895d20060b8f2610180d2420080d2a30180d2040080d2020000d4007008d5000028d5008060c80000209b008008d5"}}], 0x6c}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r5, 0x1, 0x0) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80180, 0x0) ioctl$KVM_CHECK_EXTENSION(r13, 0x5450, 0x6) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r14, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r15 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x181b03, 0x0) ioctl$KVM_CREATE_VM(r15, 0xae01, 0x1c) 28m44.022515273s ago: executing program 1 (id=58): ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000000)={0x2, 0xffff}) (async) r0 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000000)={0x2, 0xffff}) close(r0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x101ff, 0x4, 0xeeef0000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x101ff, 0x4, 0xeeef0000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r1 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f00000002c0)={0x0, &(0x7f0000000080)=[@mrs={0xbe, 0x18, {0x603000000013e7a7}}, @its_setup={0x82, 0x28, {0x3, 0x0, 0x319}}, @code={0xa, 0x54, {"007008d5008008d50020800dc0228fd200e0b8f2810180d2220080d2230080d2040180d2020000d4007008d5007008d5000028d5e003004b008008d5000028d5"}}, @code={0xa, 0x54, {"00c483d200a0b8f2410080d2620080d2030080d2a40080d2020000d4000008d50020002f007008d5000008d5000028d50004c0381004201e0068203c00000038"}}, @msr={0x14, 0x20, {0x603000000013df06, 0x101}}, @eret={0xe6, 0x18, 0x6}, @msr={0x14, 0x20, {0x603000000013e130, 0x8}}, @its_send_cmd={0xaa, 0x28, {0x0, 0x1, 0x0, 0x10, 0xd15, 0x6, 0x4}}, @code={0xa, 0x84, {"0020800d0060df0d200b85d200c0b8f2410180d2a20080d2030180d2040080d2020000d4405d93d200a0b8f2c10080d2220080d2e30180d2640180d2020000d4008008d5008008d50040202e1f00002b5f3003d5408096d20020b0f2610080d2420180d2030080d2c40180d2020000d4"}}, @msr={0x14, 0x20, {0x603000000013df7d, 0x7fff00000000}}], 0x20c}, &(0x7f0000000300)=[@featur1={0x1, 0x24}], 0x1) ioctl$KVM_SET_SREGS(r1, 0x4000ae84, &(0x7f0000000340)={{0xffff1000, 0x9000, 0x3, 0x6, 0x7b, 0x9, 0x0, 0xa, 0xa, 0x5, 0x71, 0x6}, {0x1000, 0x2, 0xb, 0x0, 0x3, 0xc4, 0xf6, 0x6c, 0x0, 0x25, 0xc0, 0x1}, {0x30000, 0xb000, 0xb, 0x7, 0x9, 0x8, 0x65, 0x8, 0x2c, 0xb8, 0x9, 0x7f}, {0x4000, 0x25000, 0x10, 0xc0, 0x8, 0x8, 0x64, 0x9, 0xdf, 0x3, 0x3, 0x6}, {0x5000, 0x4, 0x3, 0xf, 0x2, 0xb0, 0x0, 0x46, 0x6, 0x85, 0x4, 0x7}, {0x100000, 0x33305002, 0x9, 0x1, 0x9, 0x6, 0x2, 0x1, 0x3f, 0x9, 0x2, 0x2}, {0x26000, 0x80a0000, 0x10, 0x2, 0xc, 0xd7, 0xff, 0x9, 0x1, 0x9, 0x1}, {0x200000, 0x25000, 0x4, 0x8, 0x6, 0xb, 0x7f, 0xc4, 0x5, 0xf1, 0x6, 0x7}, {0x100000, 0x5}, {0xc000, 0xfffc}, 0x80040004, 0x0, 0x3000, 0x200, 0x5, 0x901, 0x8080000, [0xcb, 0x2, 0x9, 0x5]}) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f00000004c0)=@arm64_fp_extra={0x60200000001000d4, &(0x7f0000000480)=0x1}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x201, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x14) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x14) syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000800)={0x0, &(0x7f0000000540)=[@irq_setup={0x46, 0x18, {0x2, 0x216}}, @eret={0xe6, 0x18, 0x4}, @msr={0x14, 0x20, {0x603000000013f288, 0x7a}}, @eret={0xe6, 0x18, 0x7d}, @msr={0x14, 0x20, {0x603000000013c010, 0x8}}, @uexit={0x0, 0x18, 0x2}, @svc={0x122, 0x40, {0x84000002, [0x3, 0x2, 0x5, 0xb8f, 0x6]}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0xd00, 0x800, 0xe}}, @uexit={0x0, 0x18, 0x2}, @smc={0x1e, 0x40, {0x84000000, [0x8cb, 0x4, 0x8, 0x81, 0x101]}}, @smc={0x1e, 0x40, {0x200, [0xf, 0x3, 0x80000001, 0x4, 0x8000000000000001]}}, @hvc={0x32, 0x40, {0xc400000d, [0x6, 0x6afc, 0x2, 0x1000, 0x81]}}, @hvc={0x32, 0x40, {0x86000000, [0x2, 0x3, 0x1, 0x3, 0x2]}}, @its_send_cmd={0xaa, 0x28, {0xe, 0x0, 0x1, 0x3, 0x4, 0x5, 0x3}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x0, 0x0, 0x1, 0xf98b, 0x7, 0x3}}, @mrs={0xbe, 0x18, {0x603000000013e65a}}, @irq_setup={0x46, 0x18, {0x1, 0x21a}}], 0x2a8}, &(0x7f0000000840)=[@featur2={0x1, 0x94}], 0x1) (async) syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000800)={0x0, &(0x7f0000000540)=[@irq_setup={0x46, 0x18, {0x2, 0x216}}, @eret={0xe6, 0x18, 0x4}, @msr={0x14, 0x20, {0x603000000013f288, 0x7a}}, @eret={0xe6, 0x18, 0x7d}, @msr={0x14, 0x20, {0x603000000013c010, 0x8}}, @uexit={0x0, 0x18, 0x2}, @svc={0x122, 0x40, {0x84000002, [0x3, 0x2, 0x5, 0xb8f, 0x6]}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0xd00, 0x800, 0xe}}, @uexit={0x0, 0x18, 0x2}, @smc={0x1e, 0x40, {0x84000000, [0x8cb, 0x4, 0x8, 0x81, 0x101]}}, @smc={0x1e, 0x40, {0x200, [0xf, 0x3, 0x80000001, 0x4, 0x8000000000000001]}}, @hvc={0x32, 0x40, {0xc400000d, [0x6, 0x6afc, 0x2, 0x1000, 0x81]}}, @hvc={0x32, 0x40, {0x86000000, [0x2, 0x3, 0x1, 0x3, 0x2]}}, @its_send_cmd={0xaa, 0x28, {0xe, 0x0, 0x1, 0x3, 0x4, 0x5, 0x3}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x0, 0x0, 0x1, 0xf98b, 0x7, 0x3}}, @mrs={0xbe, 0x18, {0x603000000013e65a}}, @irq_setup={0x46, 0x18, {0x1, 0x21a}}], 0x2a8}, &(0x7f0000000840)=[@featur2={0x1, 0x94}], 0x1) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x30) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000880)={0x7, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000900)=@attr_arm64={0x0, 0x5, 0x3, &(0x7f00000008c0)=0x7}) (async) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000900)=@attr_arm64={0x0, 0x5, 0x3, &(0x7f00000008c0)=0x7}) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x20) (async) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION2(r6, 0x40a0ae49, &(0x7f0000000940)={0x4, 0x5, 0x2000, 0x1000, &(0x7f0000ffb000/0x1000)=nil, 0x2, r0}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1d) (async) r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1d) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r7, 0x4010ae74, &(0x7f0000000a00)={0xff, 0x0, 0x20}) r8 = eventfd2(0x8, 0x80001) write$eventfd(r8, &(0x7f0000000a40)=0x7, 0x8) ioctl$KVM_RESET_DIRTY_RINGS(r3, 0xaec7) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000a80)={0x10004, 0x0, &(0x7f0000ffb000/0x3000)=nil}) ioctl$KVM_IRQ_LINE(r4, 0x4008ae61, &(0x7f0000000ac0)={0x9, 0x3}) ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r6, 0x4068aea3, &(0x7f0000000b00)={0xe4, 0x0, 0x7}) ioctl$KVM_GET_DEVICE_ATTR_vm(r7, 0x4018aee2, &(0x7f0000000bc0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000b80)={0x1, 0x6, 0x1}}) ioctl$KVM_CAP_HALT_POLL(r7, 0x4068aea3, &(0x7f0000000c00)={0xb6, 0x0, 0x3}) ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r6, 0x4068aea3, &(0x7f0000000c80)={0xe4, 0x0, 0x10001}) ioctl$KVM_CAP_DIRTY_LOG_RING(r6, 0x4068aea3, &(0x7f0000000d00)) (async) ioctl$KVM_CAP_DIRTY_LOG_RING(r6, 0x4068aea3, &(0x7f0000000d00)) ioctl$KVM_PPC_ALLOCATE_HTAB(r3, 0xc004aea7, &(0x7f0000000d80)=0x7ed2) write$eventfd(r8, &(0x7f0000000dc0)=0x6, 0x8) (async) write$eventfd(r8, &(0x7f0000000dc0)=0x6, 0x8) close(r8) (async) close(r8) 28m19.865609063s ago: executing program 1 (id=60): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000100)={0x5, 0x18}) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f00000000c0)=@arm64_core={0x6030000000100050, &(0x7f00000001c0)=0x1}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x51) 28m13.842197559s ago: executing program 1 (id=62): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x800, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$kvm(0x0, &(0x7f0000000000), 0x1, 0x0) (async) r2 = openat$kvm(0x0, &(0x7f0000000000), 0x1, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x31) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x31) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x1, 0x2, &(0x7f00000000c0)}) (async) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x1, 0x2, &(0x7f00000000c0)}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) (async) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) r9 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r8, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r9, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r8, 0x0) r10 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0x5460, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r11, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) ioctl$KVM_SET_ONE_REG(r11, 0x4010aeac, &(0x7f00000000c0)=@arm64_sys={0x603000000013c00a, &(0x7f0000000000)=0x7}) r12 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r13, 0xae03, 0x42) syz_kvm_add_vcpu$arm64(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@irq_setup={0x46, 0x18, {0x3, 0x15c}}], 0x18}, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r14 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r14, 0xc0189436, 0x20000001) (async) ioctl$KVM_CREATE_VM(r14, 0xc0189436, 0x20000001) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000040)=@arm64_core={0x603000000010004a, &(0x7f0000000000)=0x7f1}) ioctl$KVM_CREATE_VM(r0, 0x401c5820, 0x20000002) 27m27.318747045s ago: executing program 32 (id=62): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x800, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$kvm(0x0, &(0x7f0000000000), 0x1, 0x0) (async) r2 = openat$kvm(0x0, &(0x7f0000000000), 0x1, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x31) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x31) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x1, 0x2, &(0x7f00000000c0)}) (async) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x1, 0x2, &(0x7f00000000c0)}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) (async) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) r9 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r8, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r9, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r8, 0x0) r10 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0x5460, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r11, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) ioctl$KVM_SET_ONE_REG(r11, 0x4010aeac, &(0x7f00000000c0)=@arm64_sys={0x603000000013c00a, &(0x7f0000000000)=0x7}) r12 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r13, 0xae03, 0x42) syz_kvm_add_vcpu$arm64(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@irq_setup={0x46, 0x18, {0x3, 0x15c}}], 0x18}, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r14 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r14, 0xc0189436, 0x20000001) (async) ioctl$KVM_CREATE_VM(r14, 0xc0189436, 0x20000001) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000040)=@arm64_core={0x603000000010004a, &(0x7f0000000000)=0x7f1}) ioctl$KVM_CREATE_VM(r0, 0x401c5820, 0x20000002) 25m41.583602337s ago: executing program 0 (id=78): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f000036d000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x3, 0x0, 0x10000000004}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000005}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x8, 0xffffffffffffffff}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r6, 0x4068aea3, &(0x7f0000000240)={0xe4, 0x0, 0x5}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 25m31.118702527s ago: executing program 0 (id=79): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, 0xfffffffffffffffe) (async) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x18b200, 0x0) (async) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_vgic_v3_setup(r5, 0x2, 0x100) (async) close(r5) (async) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) close(r6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x30) 25m3.661809734s ago: executing program 0 (id=80): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2b) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000aec000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000040)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f00000000c0)=@arm64={0x7, 0x0, 0xfc, '\x00', 0x4}) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000080)=@arm64={0xd, 0x8, 0x7, '\x00', 0x2d}) (async) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000080)={0x1, 0x0, [{0xc9, 0x2, 0x0, 0x0, @msi={0x0, 0x8}}]}) munmap(&(0x7f00005ed000/0x800000)=nil, 0x800000) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r6, 0xae04) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000c58000/0x1000)=nil, r7, 0x2000003, 0xaf832, 0xffffffffffffffff, 0x0) (async) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) mmap$KVM_VCPU(&(0x7f0000a37000/0x2000)=nil, 0x0, 0x300000e, 0xd910, r10, 0x0) (async) r11 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r11, 0x401c5820, 0x20000000) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) (async) ioctl$KVM_CHECK_EXTENSION_VM(r5, 0xae03, 0xb3) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000240)={0x1fe, 0x3, 0xffff6000, 0x1000, &(0x7f0000b24000/0x1000)=nil}) (async) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) (async) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) (async) munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000) (async) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) (async) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) 24m54.027886527s ago: executing program 0 (id=81): mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) r0 = eventfd2(0x0, 0x0) close(r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40800, 0x0) mmap$KVM_VCPU(&(0x7f0000008000/0x3000)=nil, 0x930, 0x6000004, 0x2011, r0, 0x0) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000) r2 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, r2, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000fed000/0x3000)=nil, 0x930, 0x0, 0x4030031, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xc, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x20000000) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) (async) eventfd2(0x0, 0x0) (async) close(r0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40800, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000008000/0x3000)=nil, 0x930, 0x6000004, 0x2011, r0, 0x0) (async) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) (async) munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) (async) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) (async) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) (async) munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000) (async) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) (async) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, r2, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000fed000/0x3000)=nil, 0x930, 0x0, 0x4030031, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xc, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x20000000) (async) 24m47.718961443s ago: executing program 0 (id=82): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2e) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000140)=[{0x0, 0x0}], 0x1, 0x0, &(0x7f00000003c0)=[@featur2={0x1, 0x80}], 0x1) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000180)=@arm64_core={0x6030000000100042, &(0x7f0000000000)=0x80003ff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x8, 0xf, 0x0, 0x5, 0x6, 0x6, 0x6, 0x74, 0x86, 0xdd, 0x68, 0x0, 0x209, 0x0, 0x0, 0x3, 0x5, 0x5, '\x00', 0x1, 0x400000000002}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000140)={0x4, 0x0, [{0x1, 0x1, 0x0, 0x0, @irqchip={0x8, 0x9}}, {0x9, 0x3, 0x1, 0x0, @sint={0xc30, 0x2}}, {0x0, 0x2, 0x0, 0x0, @msi={0x83, 0x4, 0x804, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, 0x0, @adapter={0x5, 0x5, 0x80000001, 0x7f, 0xc}}]}) write$eventfd(r7, &(0x7f00000001c0)=0x3, 0x50) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x4) ioctl$KVM_ARM_VCPU_INIT(r8, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) ioctl$KVM_SET_ONE_REG(r8, 0x4010aeac, &(0x7f00000000c0)=@arm64_sys={0x603000000013dce0, &(0x7f0000000000)=0x43ff}) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r8, 0x4018aee1, &(0x7f00000000c0)=@attr_pmu_init) ioctl$KVM_RUN(r8, 0xae80, 0x0) close(0x4) close(0x5) ioctl$KVM_CAP_ARM_INJECT_SERROR_ESR(r1, 0x4068aea3, &(0x7f0000000080)) 24m21.88350153s ago: executing program 0 (id=83): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1000000) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x33) ioctl$KVM_CAP_DIRTY_LOG_RING(r3, 0x4068aea3, &(0x7f0000000180)={0xc0, 0x0, 0x6000}) r4 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000300)=[@featur2={0x1, 0x2}], 0x1) syz_kvm_setup_cpu$arm64(r1, r4, &(0x7f0000bfd000/0x400000)=nil, &(0x7f00000000c0)=[{0x0, 0x0}], 0x1, 0x0, &(0x7f0000000100)=[@featur1={0x1, 0x2}], 0x1) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f0000000000)={0x3, 0xe28f, 0x9}) 23m35.478805895s ago: executing program 33 (id=83): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1000000) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x33) ioctl$KVM_CAP_DIRTY_LOG_RING(r3, 0x4068aea3, &(0x7f0000000180)={0xc0, 0x0, 0x6000}) r4 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000300)=[@featur2={0x1, 0x2}], 0x1) syz_kvm_setup_cpu$arm64(r1, r4, &(0x7f0000bfd000/0x400000)=nil, &(0x7f00000000c0)=[{0x0, 0x0}], 0x1, 0x0, &(0x7f0000000100)=[@featur1={0x1, 0x2}], 0x1) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f0000000000)={0x3, 0xe28f, 0x9}) 8m12.431305448s ago: executing program 2 (id=183): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000040)=@arm64_core={0x6030000000100050, &(0x7f0000000000)=0x85c7}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000080)="fb014ec4b8540002009610fbff00000000000000079a7a835673312b54ebb2aa76e369d22627e7000000000000e748971e00", 0x0, 0x48) (async) r4 = mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) r5 = eventfd2(0x0, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000100)="bdb4dee3dd74b90821c3a8ff02775e293e5069c540a80242b3fb04e15cb0cf1a73b9d45192c8465f15e4cf05cc0bbcf78f659064fc9b9610cae79e5e278a58ec9aef857c847d11b0", 0x0, 0x48) (async) close(r5) (async) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) (async) write$eventfd(r5, &(0x7f0000000180)=0x6, 0x8) (async, rerun: 32) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0) (async, rerun: 32) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0) 8m9.648808744s ago: executing program 3 (id=184): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r2, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) r3 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x4}}], 0x28}, 0x0, 0x0) r9 = syz_kvm_vgic_v3_setup(r6, 0x4, 0x100) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2040, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r13, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r13, 0x4018aee1, &(0x7f0000000000)=@attr_other={0x0, 0x0, 0x4, 0x0}) ioctl$KVM_RUN(r8, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f0000000040)=@attr_riscv64=@attr_config={0x0, 0x1, 0x0, &(0x7f0000000100)=0x6}) 8m2.877367467s ago: executing program 2 (id=185): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x2}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x1, 0x1, 0x10002, 0xfffffff9, 0x0, 0x2}}], 0x50}, 0x0, 0x0) (async) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x2}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x1, 0x1, 0x10002, 0xfffffff9, 0x0, 0x2}}], 0x50}, 0x0, 0x0) openat$kvm(0x0, &(0x7f00000001c0), 0x0, 0x0) (async) r4 = openat$kvm(0x0, &(0x7f00000001c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r5, 0x4018aee1, &(0x7f0000000600)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f00000005c0)={0x1, 0x8, 0x1}}) syz_kvm_vgic_v3_setup(r1, 0x1, 0x2e0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0) (async) r9 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = openat$kvm(0x0, 0x0, 0x40000, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r12, 0xae03, 0x1e) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x7000, 0xd000}) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x7000, 0xd000}) ioctl$KVM_IOEVENTFD(r10, 0x4040ae79, &(0x7f0000000000)={0x2, 0x80a0000, 0x0, r10, 0x4fd0f096b459bd7b}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x1}) (async) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x1}) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x0, 0x8, 0x13, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x0, 0x8, 0x13, 0xffffffffffffffff, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x8, 0xf, 0x0, 0x5, 0x6, 0x6, 0x6, 0x74, 0x86, 0xdd, 0x68, 0x0, 0x209, 0x0, 0x0, 0x3, 0x5, 0x5, '\x00', 0x1, 0x400000000002}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000140)={0x4, 0x0, [{0x1, 0x1, 0x0, 0x0, @adapter={0x8000000000000001, 0x2, 0x2, 0xa, 0x10}}, {0x9, 0x3, 0x1, 0x0, @sint={0xc30, 0x2}}, {0x0, 0x2, 0x0, 0x0, @msi={0x83, 0x0, 0x800, 0x3}}, {0x0, 0x0, 0x1, 0x0, @adapter={0x5, 0x5, 0x100, 0x7f, 0xb2d}}]}) write$eventfd(r15, &(0x7f00000001c0)=0x3, 0x50) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x8001, 0x400, &(0x7f0000000280)=0xffffffffffffff29}) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7m52.970208032s ago: executing program 3 (id=186): r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0xd, 0x1, 0xb, 0x0, 0xb5c, 0x6, 0x6, 0x9, 0x8, 0x89, 0x2f, 0x2, 0x0, 0x6, 0x6, 0x9, 0x3, 0x27, 0x0, '\x00', 0x12, 0x6}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r4, &(0x7f00000001c0)=0x7ffffff, 0xe80) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x3}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x9b, 0xf, 0x0, 0x5, 0x8, 0x82, 0x46, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x100001, 0xffc0000, 0x0, 0x3, 0xa, 0x8, '\x00', 0x1, 0x93}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4000ae84, &(0x7f0000000200)={{0x0, 0x1000, 0x1, 0x3a, 0x0, 0x9, 0xba, 0xc, 0x2, 0x6, 0x0, 0xa0}, {0xeeef0000, 0x0, 0xd, 0x1, 0xfc, 0x1, 0xd3, 0xc, 0x7, 0x4, 0x6, 0x6}, {0x0, 0xeeee8000, 0x8, 0x9, 0x6, 0x7, 0x3, 0xdb, 0x8, 0x1, 0x1}, {0x2, 0xe000, 0x0, 0x55, 0x7f, 0x80, 0x4, 0x4, 0xa, 0x1, 0x5, 0x9}, {0x6000, 0x0, 0x0, 0x38, 0x0, 0x6, 0x8, 0x1, 0x81, 0x93, 0x7f, 0x8}, {0xdddd1000, 0x41000, 0xd, 0x5, 0xb, 0x5, 0x2, 0x8, 0x81, 0xf, 0x5, 0xfe}, {0xffff1000, 0xb000, 0x14, 0x1, 0x1, 0x7b, 0xfd, 0x9, 0x67, 0xe, 0x8, 0xd1}, {0xeeef0000, 0x7000, 0x4, 0x3, 0x0, 0x0, 0x7, 0xfa, 0x10, 0x8, 0x2, 0x1}, {0xeeee0000, 0x2}, {0x8000000, 0xc71}, 0x20000002, 0x0, 0x1000, 0x8, 0x8, 0x8000, 0x6000, [0x3, 0x8000000000000000, 0x89, 0x1]}) write$eventfd(r7, &(0x7f00000001c0)=0x3, 0xfdef) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r8 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_ARM_SET_COUNTER_OFFSET(r9, 0x4010aeab, &(0x7f0000000000)={0xbf4}) r10 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r11, 0x4018aee1, &(0x7f0000000000)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0x20e4586c}) ioctl$KVM_RUN(r11, 0xae80, 0x0) syz_kvm_add_vcpu$arm64(r10, &(0x7f00000005c0)={0x0, &(0x7f0000000280)=[@its_send_cmd={0xaa, 0x28, {0x7, 0x0, 0x1, 0xe, 0x80000000, 0xd, 0x3}}, @eret={0xe6, 0x18, 0x8}, @its_setup={0x82, 0x28, {0x3, 0x1, 0x1e0}}, @msr={0x14, 0x20, {0x1abb, 0xfffffffffffffff0}}, @smc={0x1e, 0x40, {0xc400000d, [0xb, 0x9b, 0x3, 0xb, 0x81]}}, @eret={0xe6, 0x18, 0x2e0d}, @uexit={0x0, 0x18, 0x38000000}, @its_send_cmd={0xaa, 0x28, {0x9, 0x1, 0x2, 0xa, 0x9, 0x4, 0x4}}, @mrs={0xbe, 0x18}, @hvc={0x32, 0x40, {0x31000000, [0x4, 0x89e, 0x3, 0xffffffffffffffff, 0x80]}}, @msr={0x14, 0x20, {0x60300000001383c6, 0x7fffffff}}, @svc={0x122, 0x40, {0x40, [0xffffffffffffff80, 0x0, 0x5, 0x9, 0xf65d]}}, @svc={0x122, 0x40, {0x84000011, [0x10001, 0x6, 0xa, 0x7, 0x9990]}}, @its_send_cmd={0xaa, 0x28, {0xe, 0x1, 0x0, 0xb, 0x4f0357d6}}, @mrs={0xbe, 0x18, {0x603000000013f682}}, @hvc={0x32, 0x40, {0x84000050, [0x0, 0x100000000, 0x3ff, 0x8, 0x4]}}, @its_setup={0x82, 0x28, {0x4, 0x1, 0x321}}, @its_setup={0x82, 0x28, {0x3, 0x4, 0x1ce}}, @smc={0x1e, 0x40, {0x8400000b, [0x2f9f, 0x8000000000000000, 0x3, 0x7ab, 0x80000001]}}], 0x328}, &(0x7f0000000600)=[@featur1={0x1, 0xa0}], 0x1) ioctl$KVM_RUN(r11, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) 7m48.368206626s ago: executing program 2 (id=187): mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x7, 0xb, 0x89, 0x0, 0x7, 0xd5, 0x20, 0x8, 0x2, 0x7, 0x1, 0x7, 0x0, 0x1000081, 0x8, 0x0, 0x5, 0x1, 0xb1, '\x00', 0x6, 0x3}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0x5000, 0x12000, 0x81}) write$eventfd(r2, &(0x7f00000001c0)=0x8100000001, 0x51a8) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000bff000/0x400000)=nil) r3 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000680)="38ce8347fc1e86008cfc72bb352c8659dcc9225b48cb5cb00c73b0b33018748e73f7f1f493e89c859e17625ad1b19ca88da9c227db3473a7fd4ce992bfc316bd22ccc646cd69c728", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xf, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0) 7m39.225455168s ago: executing program 2 (id=188): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x8900, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x24) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x24) syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) (async) syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000000)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r5, 0x4010aeac, &(0x7f0000000100)=@arm64_sys={0x603000000013c801, &(0x7f0000000080)=0x800000000000}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8180, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8180, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0xa) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0xa) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_GUEST_MEMFD(r7, 0xc040aed4, &(0x7f0000000040)={0x1000200001fe0000, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION2(r7, 0x40a0ae49, &(0x7f0000000180)={0x0, 0x4, 0x6000, 0x2000, &(0x7f0000ffd000/0x2000)=nil, 0x100000000000000, r8}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x0, 0x0}) (async) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x0, 0x0}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x3, 0xffffffffffffffff}) ioctl$KVM_CREATE_VM(r10, 0x894c, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xb702, 0x0) close(r7) (async) close(r7) r11 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_ARM_VCPU_INIT(r11, 0x4020aeae, &(0x7f0000000140)={0x5, 0x8}) ioctl$KVM_GET_ONE_REG(r11, 0x4010aeab, &(0x7f0000000240)=@arm64_fp_extra={0x60200000101000d5, 0x0}) r12 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000100)={0x0, &(0x7f00000003c0)=[@code={0xa, 0x9c, {"0080400d009793d200c0b8f2210080d2420080d2c30180d2440080d2020000d4000028d5007789d200e0b8f2410180d2e20080d2a30080d2240080d2020000d4000008d500a09f0d60718cd20040b8f2610180d2e20180d2830180d2640080d2020000d400a0204e007008d5e09f9dd20000b8f2c10180d2c20180d2a30180d2040080d2020000d4"}}, @its_send_cmd={0xaa, 0x28, {0xe, 0x0, 0x2, 0x8, 0x8, 0x100}}], 0xc4}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x2, 0x40) (async) syz_kvm_vgic_v3_setup(r1, 0x2, 0x40) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0xa, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) (async) ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) 7m36.281316354s ago: executing program 3 (id=189): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x7, 0xb, 0x89, 0x0, 0x7, 0x4, 0x20, 0x8, 0x2, 0x7, 0x1, 0x7, 0x0, 0x104007e, 0x81, 0x0, 0x45, 0x7, 0xb1, '\x00', 0xdf, 0x3}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0x5000, 0x12000, 0x81}) write$eventfd(r4, &(0x7f00000001c0)=0x8100000001, 0x51a8) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r5, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x12, r5, 0x0) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000002000/0x400000)=nil) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x40, 0x0) 7m27.797535323s ago: executing program 2 (id=190): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x0, 0x0}) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) r4 = ioctl$KVM_CREATE_VM(r3, 0x894c, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0x40305829, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x38) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000000)={0x2, 0x0, &(0x7f0000ffa000/0x3000)=nil}) openat$kvm(0xffffffffffffff9c, 0x0, 0x4eed40, 0x0) syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, &(0x7f0000000240)="57ffe02b199233af1c100f993e9c1541d69a2077275a13cf", 0x0, 0x18) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x1}) r7 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20080, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x9000000) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000f1a000/0x4000)=nil, 0x930, 0x0, 0x9032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000fed000/0x3000)=nil, 0x930, 0x0, 0x4030031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x8, 0xf, 0x0, 0x5, 0x6, 0x86, 0x6, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x0, 0x800000, 0x0, 0x3, 0x5, 0x8, '\x00', 0x9, 0x93}) 7m23.798153629s ago: executing program 3 (id=191): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013c4f1, 0x8000}}, @msr={0x14, 0x20, {0x603000000013c4f2, 0x8000}}, @msr={0x14, 0x20, {0x603000000013dce2, 0x8000}}, @msr={0x14, 0x20, {0x603000000013dce3, 0x8000}}, @msr={0x14, 0x20, {0x603000000013dce4, 0x8000}}, @msr={0x14, 0x20, {0x603000000013dce8, 0x8000}}], 0xc0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r4, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000100)={0x7, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f00000002c0)=@attr_arm64={0x0, 0x4, 0x0, 0x0}) r8 = eventfd2(0x8801, 0x800) r9 = eventfd2(0x3ff, 0x0) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000000)={r9, 0x1, 0x2, r9}) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000140)={r9, 0x5, 0x2, r8}) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x2}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x4, 0x80003, 0xa, 0x0, 0x2, 0x2}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r10, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r12, 0xae80, 0x0) 7m13.15780952s ago: executing program 2 (id=192): openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async) r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0) (async) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000bd0000/0x400000)=nil) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1c) syz_kvm_vgic_v3_setup(r3, 0x2, 0x320) (async) syz_kvm_vgic_v3_setup(r3, 0x2, 0x320) syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000040)=[@irq_setup={0x46, 0x18, {0x3, 0x20}}], 0x18}, 0x0, 0x0) (async) syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000040)=[@irq_setup={0x46, 0x18, {0x3, 0x20}}], 0x18}, 0x0, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x34) (async) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x34) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r6, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) (async) r8 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f00000000c0)={0x0, &(0x7f0000000280)=[@its_setup={0x82, 0x28, {0x1, 0x2, 0x2}}, @msr={0x14, 0x20, {0x603000000013e21a, 0x7}}], 0x48}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r7, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) (async) ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) r11 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000140)={0x0, 0x0}, 0x0, 0x0) r12 = syz_kvm_vgic_v3_setup(r5, 0x3, 0x40) close(r11) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r13, 0xae01, 0x3b) (async) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x3b) r15 = ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r15, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) ioctl$KVM_SET_ONE_REG(r15, 0x4010aeac, &(0x7f00000000c0)=@arm64_sys={0x603000000013dce7, &(0x7f0000000000)=0x337a2444}) close(0x4) close(r12) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) eventfd2(0x80000001, 0x80000) 7m9.488359799s ago: executing program 3 (id=193): r0 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[@svc={0x122, 0x40, {0x84000053, [0x1, 0x1425bf09, 0x1, 0xc09, 0x7]}}, @svc={0x122, 0x40, {0x84000008, [0x3, 0x1, 0x27a, 0x0, 0x10]}}, @irq_setup={0x46, 0x18, {0x1, 0x145}}, @mrs={0xbe, 0x18, {0x603000000013da11}}, @eret={0xe6, 0x18, 0x8000000000000000}, @its_setup={0x82, 0x28, {0x1, 0x2, 0x29a}}, @eret={0xe6, 0x18, 0x80000001}, @irq_setup={0x46, 0x18, {0x3, 0x162}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x0, 0x4, 0x3, 0x8, 0x6, 0x3}}, @uexit={0x0, 0x18, 0x3}, @msr={0x14, 0x20, {0x603000000013c011, 0xf}}], 0x180}, &(0x7f0000000200)=[@featur2={0x1, 0x88}], 0x1) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x1, 0x40010, r0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x3000000, 0x4f831, 0xffffffffffffffff, 0x0) 7m1.778447585s ago: executing program 3 (id=194): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f0000000380)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x7ffe}}], 0x20}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xb2) r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2000000000000022) syz_kvm_vgic_v3_setup(r7, 0x2, 0x40) ioctl$KVM_IRQ_LINE_STATUS(r7, 0xc008ae67, 0x0) r8 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r8, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) r9 = syz_kvm_vgic_v3_setup(r6, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f0000000240)=@attr_other={0x0, 0x5, 0x8, &(0x7f0000000000)=0x100}) r10 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r11, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r11, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000000)={0x4, 0x7, 0xb5e4996915292310}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r12 = eventfd2(0x3, 0x0) r13 = eventfd2(0x0, 0x0) close(r13) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40800, 0x0) mmap$KVM_VCPU(&(0x7f0000008000/0x3000)=nil, 0x930, 0x6000004, 0x2011, r13, 0x0) write$eventfd(r12, &(0x7f0000000400)=0xfffffffffffffffe, 0x8) syz_kvm_add_vcpu$arm64(0x0, 0x0, 0x0, 0x0) close(0x4) 6m25.448474489s ago: executing program 34 (id=192): openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async) r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0) (async) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000bd0000/0x400000)=nil) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1c) syz_kvm_vgic_v3_setup(r3, 0x2, 0x320) (async) syz_kvm_vgic_v3_setup(r3, 0x2, 0x320) syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000040)=[@irq_setup={0x46, 0x18, {0x3, 0x20}}], 0x18}, 0x0, 0x0) (async) syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000040)=[@irq_setup={0x46, 0x18, {0x3, 0x20}}], 0x18}, 0x0, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x34) (async) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x34) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r6, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) (async) r8 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f00000000c0)={0x0, &(0x7f0000000280)=[@its_setup={0x82, 0x28, {0x1, 0x2, 0x2}}, @msr={0x14, 0x20, {0x603000000013e21a, 0x7}}], 0x48}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r7, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) (async) ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) r11 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000140)={0x0, 0x0}, 0x0, 0x0) r12 = syz_kvm_vgic_v3_setup(r5, 0x3, 0x40) close(r11) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r13, 0xae01, 0x3b) (async) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x3b) r15 = ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r15, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) ioctl$KVM_SET_ONE_REG(r15, 0x4010aeac, &(0x7f00000000c0)=@arm64_sys={0x603000000013dce7, &(0x7f0000000000)=0x337a2444}) close(0x4) close(r12) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) eventfd2(0x80000001, 0x80000) 6m14.558003346s ago: executing program 35 (id=194): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f0000000380)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x7ffe}}], 0x20}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xb2) r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2000000000000022) syz_kvm_vgic_v3_setup(r7, 0x2, 0x40) ioctl$KVM_IRQ_LINE_STATUS(r7, 0xc008ae67, 0x0) r8 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r8, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) r9 = syz_kvm_vgic_v3_setup(r6, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f0000000240)=@attr_other={0x0, 0x5, 0x8, &(0x7f0000000000)=0x100}) r10 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r11, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r11, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000000)={0x4, 0x7, 0xb5e4996915292310}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r12 = eventfd2(0x3, 0x0) r13 = eventfd2(0x0, 0x0) close(r13) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40800, 0x0) mmap$KVM_VCPU(&(0x7f0000008000/0x3000)=nil, 0x930, 0x6000004, 0x2011, r13, 0x0) write$eventfd(r12, &(0x7f0000000400)=0xfffffffffffffffe, 0x8) syz_kvm_add_vcpu$arm64(0x0, 0x0, 0x0, 0x0) close(0x4) 12.99850385s ago: executing program 4 (id=195): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) (async) ioctl$KVM_CAP_HALT_POLL(r3, 0x4068aea3, &(0x7f0000000000)={0xdf, 0x0, 0x10000}) ioctl$KVM_CAP_HALT_POLL(r3, 0x4068aea3, &(0x7f0000000000)={0xe1}) (async) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x62) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_MP_STATE(r7, 0x8004ae98, 0xfffffffffffffffe) (async) r8 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) (async) r11 = syz_kvm_add_vcpu$arm64(r8, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@mrs={0xbe, 0x18, {0x603000000013c02d}}], 0x18}, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) (async) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000140)=@x86={0xb2, 0x81, 0x4, 0x0, 0x37, 0x6, 0xc, 0x71, 0x3, 0x0, 0x4, 0x0, 0x0, 0xfff, 0x4, 0xb, 0x6, 0x0, 0x7, '\x00', 0x8, 0x4}) r12 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r13 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, r13, 0x2000001, 0x810, r12, 0x0) ioctl$KVM_SET_MP_STATE(r12, 0x4004ae99, &(0x7f0000000000)=0x1) 0s ago: executing program 5 (id=196): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x26) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x20200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_vgic_v3_setup(r3, 0x3, 0x40) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000000)=@attr_arm64={0x0, 0x4, 0x0, 0x0}) (async) r5 = syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_HAS_DEVICE_ATTR(r5, 0x4018aee3, &(0x7f0000000300)=@attr_arm64={0x0, 0x3, 0x1, 0x0}) (async) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) (async) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x100000c, 0x16831, 0xffffffffffffffff, 0x0) (async) openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x101300, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) syz_kvm_add_vcpu$arm64(0x0, 0x0, 0x0, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000100)={0x7, 0xffffffffffffffff}) r10 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r11 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil) (async) r13 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000200)={0x0, &(0x7f0000000500)=[@mrs={0xbe, 0x18, {0x6030000000138056}}], 0x18}, 0x0, 0x0) ioctl$KVM_RUN(r13, 0xae80, 0x0) (async) ioctl$KVM_SET_VCPU_EVENTS(r13, 0x4040aea0, &(0x7f0000000000)=@x86={0x1, 0x80, 0x7, 0x0, 0x0, 0x2, 0x6e, 0xf8, 0x46, 0x3, 0x8, 0xb9, 0x0, 0x8d0, 0xffffff80, 0x4, 0x5, 0xec, 0x9, '\x00', 0xff, 0x80000001}) r14 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000300)={0x0, &(0x7f0000000000)=[@hvc={0x32, 0x40, {0xc4000053, [0x9, 0x0, 0x0, 0x6, 0x800]}}], 0x40}, 0x0, 0x0) ioctl$KVM_ARM_VCPU_INIT(0xffffffffffffffff, 0x4020aeae, &(0x7f0000000000)={0x5, 0x18}) mmap$KVM_VCPU(&(0x7f0000e52000/0x4000)=nil, 0x930, 0x6000006, 0x4d832, r14, 0x0) (async) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f0000000240)=@attr_riscv64=@attr_imsic={0x0, 0x1, 0xfffffffffffffffc, &(0x7f00000000c0)}) syz_kvm_setup_syzos_vm$arm64(r14, &(0x7f0000ae9000/0x400000)=nil) kernel console output (not intermixed with test programs): [ 400.290256][ T24] audit: type=1400 audit(399.430:74): avc: denied { read } for pid=3210 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 408.214102][ T24] audit: type=1400 audit(407.380:75): avc: denied { write } for pid=3265 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 412.080296][ T24] audit: type=1400 audit(411.260:76): avc: denied { write } for pid=3268 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 414.642254][ T3210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.828705][ T24] audit: type=1400 audit(421.010:77): avc: denied { write } for pid=3272 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 425.741372][ T24] audit: type=1400 audit(424.920:78): avc: denied { write } for pid=3275 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 437.843909][ T24] audit: type=1400 audit(437.030:79): avc: denied { write } for pid=3281 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 441.830453][ T24] audit: type=1400 audit(441.010:80): avc: denied { write } for pid=3284 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 453.261415][ T24] audit: type=1400 audit(452.430:81): avc: denied { write } for pid=3289 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 458.641600][ T24] audit: type=1400 audit(457.790:82): avc: denied { write } for pid=3292 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 462.037387][ T3210] eql: remember to turn off Van-Jacobson compression on your slave devices [ 472.731592][ T24] audit: type=1400 audit(471.910:83): avc: denied { write } for pid=3298 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 476.620951][ T24] audit: type=1400 audit(475.800:84): avc: denied { write } for pid=3301 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 484.134569][ T24] audit: type=1400 audit(483.320:85): avc: denied { write } for pid=3304 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 488.067951][ T24] audit: type=1400 audit(487.250:86): avc: denied { write } for pid=3307 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 498.477155][ T24] audit: type=1400 audit(497.660:87): avc: denied { write } for pid=3312 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 502.382084][ T24] audit: type=1400 audit(501.560:88): avc: denied { write } for pid=3315 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 512.826183][ T24] audit: type=1400 audit(512.010:89): avc: denied { write } for pid=3319 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 518.310701][ T24] audit: type=1400 audit(517.490:90): avc: denied { write } for pid=3322 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 525.621552][ T24] audit: type=1400 audit(524.750:91): avc: denied { write } for pid=3324 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 529.761523][ T24] audit: type=1400 audit(528.920:92): avc: denied { write } for pid=3327 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 548.908600][ T24] audit: type=1400 audit(548.090:93): avc: denied { write } for pid=3336 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 552.790245][ T24] audit: type=1400 audit(551.970:94): avc: denied { write } for pid=3339 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 577.041501][ T24] audit: type=1400 audit(576.190:95): avc: denied { write } for pid=3348 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 582.271274][ T24] audit: type=1400 audit(581.450:96): avc: denied { write } for pid=3351 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 589.516700][ T24] audit: type=1400 audit(588.700:97): avc: denied { write } for pid=3354 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 593.460306][ T24] audit: type=1400 audit(592.630:98): avc: denied { write } for pid=3357 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:41764' (ED25519) to the list of known hosts. [ 620.130272][ T24] audit: type=1400 audit(619.310:99): avc: denied { name_bind } for pid=3362 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 621.045670][ T24] audit: type=1400 audit(620.230:100): avc: denied { execute } for pid=3363 comm="sh" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 621.065189][ T24] audit: type=1400 audit(620.250:101): avc: denied { execute_no_trans } for pid=3363 comm="sh" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 652.200337][ T24] audit: type=1400 audit(651.380:102): avc: denied { mounton } for pid=3363 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 652.252050][ T24] audit: type=1400 audit(651.420:103): avc: denied { mount } for pid=3363 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 652.335303][ T3363] cgroup: Unknown subsys name 'net' [ 652.393726][ T24] audit: type=1400 audit(651.570:104): avc: denied { unmount } for pid=3363 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 652.820234][ T3363] cgroup: Unknown subsys name 'cpuset' [ 652.946987][ T3363] cgroup: Unknown subsys name 'rlimit' [ 653.823607][ T24] audit: type=1400 audit(653.010:105): avc: denied { setattr } for pid=3363 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 653.848865][ T24] audit: type=1400 audit(653.020:106): avc: denied { mounton } for pid=3363 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 653.861696][ T24] audit: type=1400 audit(653.040:107): avc: denied { mount } for pid=3363 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 654.894836][ T3366] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 654.915650][ T24] audit: type=1400 audit(654.090:108): avc: denied { relabelto } for pid=3366 comm="mkswap" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 654.941209][ T24] audit: type=1400 audit(654.120:109): avc: denied { write } for pid=3366 comm="mkswap" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 655.136368][ T24] audit: type=1400 audit(654.310:110): avc: denied { read } for pid=3363 comm="syz-executor" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 655.153896][ T24] audit: type=1400 audit(654.330:111): avc: denied { open } for pid=3363 comm="syz-executor" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 655.203642][ T3363] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 716.377686][ T24] audit: type=1400 audit(715.560:112): avc: denied { execmem } for pid=3367 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 720.185838][ T24] audit: type=1400 audit(719.370:114): avc: denied { open } for pid=3369 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 720.201831][ T24] audit: type=1400 audit(719.350:113): avc: denied { read } for pid=3370 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 720.284585][ T24] audit: type=1400 audit(719.450:115): avc: denied { mounton } for pid=3370 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 720.477973][ T24] audit: type=1400 audit(719.660:116): avc: denied { module_request } for pid=3370 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 721.507343][ T24] audit: type=1400 audit(720.670:117): avc: denied { sys_module } for pid=3369 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 744.195204][ T3370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 744.306639][ T3369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 744.427928][ T3370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 744.737992][ T3369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 757.130859][ T3370] hsr_slave_0: entered promiscuous mode [ 757.187086][ T3370] hsr_slave_1: entered promiscuous mode [ 758.958861][ T3369] hsr_slave_0: entered promiscuous mode [ 759.023907][ T3369] hsr_slave_1: entered promiscuous mode [ 759.063972][ T3369] debugfs: 'hsr0' already exists in 'hsr' [ 759.080774][ T3369] Cannot create hsr debugfs directory [ 768.076530][ T24] audit: type=1400 audit(767.260:118): avc: denied { create } for pid=3370 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 768.112004][ T24] audit: type=1400 audit(767.290:119): avc: denied { write } for pid=3370 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 768.161666][ T24] audit: type=1400 audit(767.340:120): avc: denied { read } for pid=3370 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 768.316978][ T3370] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 768.663038][ T3370] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 768.794817][ T3370] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 769.038881][ T3370] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 769.173274][ T3370] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 769.315787][ T3370] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 769.511853][ T3370] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 769.587266][ T3370] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 771.302976][ T3369] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 771.564763][ T3369] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 771.618224][ T3369] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 771.801677][ T3369] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 771.932681][ T3369] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 772.056568][ T3369] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 772.137643][ T3369] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 772.285610][ T3369] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 783.731568][ T3370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 786.694888][ T3369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 839.830135][ T3370] veth0_vlan: entered promiscuous mode [ 840.443768][ T3370] veth1_vlan: entered promiscuous mode [ 842.488321][ T3370] veth0_macvtap: entered promiscuous mode [ 842.907281][ T3370] veth1_macvtap: entered promiscuous mode [ 843.377744][ T3369] veth0_vlan: entered promiscuous mode [ 844.364438][ T3369] veth1_vlan: entered promiscuous mode [ 845.316024][ T3424] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.360986][ T3424] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.514694][ T3408] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.531777][ T3424] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.338175][ T3369] veth0_macvtap: entered promiscuous mode [ 848.736784][ T24] audit: type=1400 audit(847.900:121): avc: denied { mount } for pid=3370 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 849.090614][ T24] audit: type=1400 audit(848.270:122): avc: denied { mounton } for pid=3370 comm="syz-executor" path="/syzkaller.jFHFQV/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 849.107969][ T3369] veth1_macvtap: entered promiscuous mode [ 849.530787][ T24] audit: type=1400 audit(848.570:123): avc: denied { mount } for pid=3370 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 850.051692][ T24] audit: type=1400 audit(849.160:124): avc: denied { mounton } for pid=3370 comm="syz-executor" path="/syzkaller.jFHFQV/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 850.292866][ T24] audit: type=1400 audit(849.410:125): avc: denied { mounton } for pid=3370 comm="syz-executor" path="/syzkaller.jFHFQV/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 851.260971][ T24] audit: type=1400 audit(850.390:126): avc: denied { write } for pid=3518 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 851.582891][ T24] audit: type=1400 audit(850.760:127): avc: denied { unmount } for pid=3370 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 851.972653][ T24] audit: type=1400 audit(851.060:128): avc: denied { mounton } for pid=3370 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1548 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 852.038753][ T24] audit: type=1400 audit(851.220:129): avc: denied { mount } for pid=3370 comm="syz-executor" name="/" dev="gadgetfs" ino=3750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 852.620588][ T24] audit: type=1400 audit(851.770:130): avc: denied { mount } for pid=3370 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 852.803306][ T3408] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.807569][ T3408] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.872117][ T3408] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.882667][ T3408] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.153816][ T3370] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 855.761256][ T24] kauditd_printk_skb: 2 callbacks suppressed [ 855.772379][ T24] audit: type=1400 audit(854.940:133): avc: denied { mount } for pid=3369 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 856.850778][ T24] audit: type=1400 audit(856.020:134): avc: denied { read write } for pid=3370 comm="syz-executor" name="loop0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 856.851954][ T24] audit: type=1400 audit(856.030:135): avc: denied { open } for pid=3370 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 856.968124][ T24] audit: type=1400 audit(856.140:136): avc: denied { ioctl } for pid=3370 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=638 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 858.829806][ T24] audit: type=1400 audit(858.010:137): avc: denied { write } for pid=3522 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 868.158716][ T24] audit: type=1400 audit(867.340:138): avc: denied { read } for pid=3525 comm="syz.0.1" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 868.176529][ T24] audit: type=1400 audit(867.340:139): avc: denied { open } for pid=3525 comm="syz.0.1" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 868.605842][ T24] audit: type=1400 audit(867.790:140): avc: denied { ioctl } for pid=3525 comm="syz.0.1" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 873.181894][ T24] audit: type=1400 audit(872.360:141): avc: denied { write } for pid=3525 comm="syz.0.1" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 951.200286][ T24] audit: type=1400 audit(950.300:142): avc: denied { execute } for pid=3581 comm="syz.1.17" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=4691 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 969.941559][ T24] audit: type=1400 audit(969.080:143): avc: denied { append } for pid=3588 comm="syz.0.19" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 979.085050][ T24] audit: type=1400 audit(978.250:144): avc: denied { create } for pid=3600 comm="syz.1.22" anonclass=[kvm-gmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1122.711112][ T24] audit: type=1400 audit(1121.880:145): avc: denied { write } for pid=3675 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1132.982982][ T24] audit: type=1400 audit(1132.160:146): avc: denied { write } for pid=3685 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1208.607167][ T24] audit: type=1400 audit(1207.790:147): avc: denied { setattr } for pid=3728 comm="syz.0.61" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1266.888571][ T24] audit: type=1400 audit(1266.070:148): avc: denied { read } for pid=3753 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1266.971808][ T24] audit: type=1400 audit(1266.110:149): avc: denied { open } for pid=3753 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1272.205881][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1273.388796][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1274.967135][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1276.337846][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1294.337590][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1294.716998][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1295.026912][ T12] bond0 (unregistering): Released all slaves [ 1297.511732][ T12] hsr_slave_0: left promiscuous mode [ 1297.625649][ T12] hsr_slave_1: left promiscuous mode [ 1298.212920][ T12] veth1_macvtap: left promiscuous mode [ 1298.234481][ T12] veth0_macvtap: left promiscuous mode [ 1298.267741][ T12] veth1_vlan: left promiscuous mode [ 1298.277822][ T12] veth0_vlan: left promiscuous mode [ 1342.188201][ T24] audit: type=1400 audit(1341.370:150): avc: denied { write } for pid=3794 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1348.301068][ T24] audit: type=1400 audit(1347.440:151): avc: denied { write } for pid=3805 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1352.975127][ T3210] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1372.155091][ T24] audit: type=1400 audit(1371.280:152): avc: denied { write } for pid=3825 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1372.635026][ T3753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1373.098248][ T3753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1381.152606][ T24] audit: type=1400 audit(1380.330:153): avc: denied { write } for pid=3834 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1386.947637][ T3210] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1393.890436][ T24] audit: type=1400 audit(1393.070:154): avc: denied { write } for pid=3841 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1400.030882][ T24] audit: type=1400 audit(1399.180:155): avc: denied { write } for pid=3847 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1404.508686][ T3753] hsr_slave_0: entered promiscuous mode [ 1404.587305][ T3753] hsr_slave_1: entered promiscuous mode [ 1404.665252][ T3753] debugfs: 'hsr0' already exists in 'hsr' [ 1404.692791][ T3753] Cannot create hsr debugfs directory [ 1404.754935][ T3852] kvm [3852]: Failed to find VMA for hva 0x20c79000 [ 1413.020583][ T24] audit: type=1400 audit(1412.200:156): avc: denied { map } for pid=3859 comm="syz.0.81" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1413.050826][ T24] audit: type=1400 audit(1412.220:157): avc: denied { execute } for pid=3859 comm="syz.0.81" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1418.341803][ T24] audit: type=1400 audit(1417.510:158): avc: denied { write } for pid=3862 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1421.498091][ T3753] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1421.953498][ T3753] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1422.086595][ T3753] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1422.615334][ T3753] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1422.731924][ T3753] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1423.004612][ T3753] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1423.111457][ T3753] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1423.513081][ T3753] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1427.172774][ T24] audit: type=1400 audit(1426.350:159): avc: denied { write } for pid=3871 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1433.598352][ T3210] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1454.700765][ T24] audit: type=1400 audit(1453.850:160): avc: denied { write } for pid=3894 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1455.133724][ T3753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1461.994285][ T24] audit: type=1400 audit(1461.100:161): avc: denied { write } for pid=3899 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1466.065280][ T3210] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1482.456853][ T24] audit: type=1400 audit(1481.630:162): avc: denied { write } for pid=3910 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1490.911167][ T24] audit: type=1400 audit(1490.070:163): avc: denied { write } for pid=3916 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1520.982407][ T24] audit: type=1400 audit(1520.130:164): avc: denied { write } for pid=3938 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1528.730669][ T24] audit: type=1400 audit(1527.910:165): avc: denied { write } for pid=3948 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1541.232604][ T24] audit: type=1400 audit(1540.350:166): avc: denied { write } for pid=3953 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1549.882820][ T24] audit: type=1400 audit(1549.040:167): avc: denied { write } for pid=3962 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1560.895275][ T3753] veth0_vlan: entered promiscuous mode [ 1567.199823][ T3753] veth1_vlan: entered promiscuous mode [ 1570.949890][ T3753] veth0_macvtap: entered promiscuous mode [ 1571.640884][ T24] audit: type=1400 audit(1570.790:168): avc: denied { write } for pid=3975 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1571.702254][ T3753] veth1_macvtap: entered promiscuous mode [ 1575.143669][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1575.151432][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1575.234856][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1575.271646][ T3931] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1579.875913][ T24] audit: type=1400 audit(1579.050:169): avc: denied { mount } for pid=3753 comm="syz-executor" name="/" dev="gadgetfs" ino=3750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1581.260687][ T24] audit: type=1400 audit(1580.420:170): avc: denied { write } for pid=3981 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1587.115284][ T3926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1587.656516][ T3926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1609.117361][ T3931] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1611.094059][ T3931] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1612.676500][ T3931] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1614.434505][ T3931] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1633.652737][ T3931] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1633.996382][ T3931] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1634.196481][ T3931] bond0 (unregistering): Released all slaves [ 1636.134430][ T3931] hsr_slave_0: left promiscuous mode [ 1636.174441][ T3931] hsr_slave_1: left promiscuous mode [ 1636.742739][ T3931] veth1_macvtap: left promiscuous mode [ 1636.748686][ T3931] veth0_macvtap: left promiscuous mode [ 1636.776850][ T3931] veth1_vlan: left promiscuous mode [ 1636.791520][ T3931] veth0_vlan: left promiscuous mode [ 1658.935486][ T3926] hsr_slave_0: entered promiscuous mode [ 1659.046339][ T3926] hsr_slave_1: entered promiscuous mode [ 1673.411020][ T24] audit: type=1400 audit(1672.580:171): avc: denied { write } for pid=4020 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1680.405283][ T3926] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1680.917048][ T3926] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1680.988226][ T3926] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1681.334961][ T3926] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1681.443958][ T3926] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1681.722825][ T3926] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1681.836483][ T3926] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1682.146231][ T3926] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1682.797051][ T24] audit: type=1400 audit(1681.960:172): avc: denied { write } for pid=4026 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1690.127512][ T3210] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1707.695930][ T24] audit: type=1400 audit(1706.880:173): avc: denied { write } for pid=4047 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1711.578138][ T3926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1717.421143][ T24] audit: type=1400 audit(1716.510:174): avc: denied { write } for pid=4053 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1723.595621][ T3210] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1750.871501][ T24] audit: type=1400 audit(1750.030:175): avc: denied { write } for pid=4073 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1761.883254][ T24] audit: type=1400 audit(1761.000:176): avc: denied { write } for pid=4085 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1767.376648][ T3210] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1777.064128][ T24] audit: type=1400 audit(1776.240:177): avc: denied { write } for pid=4096 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1785.567855][ T24] audit: type=1400 audit(1784.700:178): avc: denied { write } for pid=4106 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1813.783859][ T24] audit: type=1400 audit(1812.970:179): avc: denied { write } for pid=4121 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1823.393086][ T24] audit: type=1400 audit(1822.560:180): avc: denied { write } for pid=4130 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1829.898243][ T3210] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1834.287091][ T3926] veth0_vlan: entered promiscuous mode [ 1835.314830][ T3926] veth1_vlan: entered promiscuous mode [ 1838.937836][ T3926] veth0_macvtap: entered promiscuous mode [ 1839.353179][ T3926] veth1_macvtap: entered promiscuous mode [ 1843.657339][ T3888] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1843.666477][ T3888] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1843.676862][ T3888] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1843.711654][ T3888] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1860.655660][ T24] audit: type=1400 audit(1859.820:181): avc: denied { write } for pid=4148 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1873.270285][ T24] audit: type=1400 audit(1872.430:182): avc: denied { write } for pid=4161 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1907.154175][ T24] audit: type=1400 audit(1906.250:183): avc: denied { ioctl } for pid=4190 comm="syz.3.106" path="net:[4026532780]" dev="nsfs" ino=4026532780 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1909.484070][ T24] audit: type=1400 audit(1908.660:184): avc: denied { write } for pid=4189 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1921.693716][ T24] audit: type=1400 audit(1920.850:185): avc: denied { write } for pid=4199 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1936.861735][ T24] audit: type=1400 audit(1936.020:186): avc: denied { map } for pid=4209 comm="syz.3.110" path="pipe:[8865]" dev="pipefs" ino=8865 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1942.782685][ T24] audit: type=1400 audit(1941.940:187): avc: denied { write } for pid=4208 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1953.517241][ T24] audit: type=1400 audit(1952.700:188): avc: denied { write } for pid=4221 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1976.463509][ T24] audit: type=1400 audit(1975.640:189): avc: denied { write } for pid=4231 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1989.020964][ T24] audit: type=1400 audit(1988.190:190): avc: denied { write } for pid=4242 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2099.664431][ T4301] kvm [4301]: Failed to find VMA for hva 0x21016000 [ 2314.382488][ T4430] kvm [4430]: Failed to find VMA for hva 0x20c79000 [ 2331.280478][ T24] audit: type=1400 audit(2330.410:191): avc: denied { write } for pid=4437 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2343.201550][ T24] audit: type=1400 audit(2342.380:192): avc: denied { write } for pid=4449 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2598.221704][ T4530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2598.486866][ T4530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2612.174682][ T4537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2613.498372][ T4537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2616.761110][ T24] audit: type=1400 audit(2615.860:193): avc: denied { write } for pid=4581 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2625.761775][ T24] audit: type=1400 audit(2624.880:194): avc: denied { write } for pid=4589 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2634.297200][ T4530] hsr_slave_0: entered promiscuous mode [ 2634.398994][ T4530] hsr_slave_1: entered promiscuous mode [ 2634.483986][ T4530] debugfs: 'hsr0' already exists in 'hsr' [ 2634.500158][ T4530] Cannot create hsr debugfs directory [ 2655.908814][ T4537] hsr_slave_0: entered promiscuous mode [ 2656.004138][ T4537] hsr_slave_1: entered promiscuous mode [ 2656.102131][ T4537] debugfs: 'hsr0' already exists in 'hsr' [ 2656.111949][ T4537] Cannot create hsr debugfs directory [ 2660.688979][ T4530] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2661.081826][ T4530] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2662.271745][ T4530] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2662.502358][ T4530] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2663.051482][ T4530] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2663.231941][ T4530] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2663.786326][ T4530] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2664.053693][ T4530] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2677.257809][ T4537] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2677.713791][ T4537] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2677.814894][ T4537] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2678.226722][ T4537] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2678.318767][ T4537] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2678.866493][ T4537] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2679.062498][ T4537] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2679.516106][ T4537] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2702.878254][ T4530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2714.953988][ T4537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2832.312083][ T24] audit: type=1400 audit(2831.480:195): avc: denied { write } for pid=4682 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2845.571051][ T24] audit: type=1400 audit(2844.690:196): avc: denied { write } for pid=4692 comm="rm" name="hook-state" dev="tmpfs" ino=71 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2863.507586][ T4530] veth0_vlan: entered promiscuous mode [ 2864.812821][ T4530] veth1_vlan: entered promiscuous mode [ 2868.851452][ T4530] veth0_macvtap: entered promiscuous mode [ 2869.412228][ T4530] veth1_macvtap: entered promiscuous mode [ 2875.468125][ T3888] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2875.477831][ T3888] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2875.507857][ T3888] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2875.515631][ T3888] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2875.652053][ T4537] veth0_vlan: entered promiscuous mode [ 2878.187985][ T4537] veth1_vlan: entered promiscuous mode [ 2885.415219][ T4537] veth0_macvtap: entered promiscuous mode [ 2886.753030][ T4537] veth1_macvtap: entered promiscuous mode [ 2891.772522][ T3408] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2891.782260][ T3408] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2891.808577][ T3888] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2891.820384][ T3888] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2924.812469][ T26] INFO: task syz.3.194:4525 blocked for more than 430 seconds. [ 2924.837633][ T26] Not tainted syzkaller #0 [ 2924.903425][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2924.943159][ T26] task:syz.3.194 state:D stack:0 pid:4525 tgid:4525 ppid:3926 task_flags:0x400040 flags:0x00000011 [ 2924.991479][ T26] Call trace: SYZFAIL: failed to recv rpc [ 2925.012105][ T26] __switch_to+0x5e0/0xb70 (T) [ 2925.034173][ T26] __schedule+0x1e0c/0x38cc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2925.091742][ T26] schedule+0x1b4/0x274 [ 2925.098465][ T26] schedule_timeout+0x68/0x1e4 [ 2925.120474][ T26] wait_for_completion+0x1b8/0x414 [ 2925.141167][ T26] __synchronize_srcu+0x1c8/0x208 [ 2925.142086][ T26] synchronize_srcu+0x668/0x8dc [ 2925.143128][ T26] mmu_notifier_unregister+0x33c/0x444 [ 2925.143710][ T26] kvm_put_kvm+0x69c/0xbbc [ 2925.144226][ T26] kvm_vm_release+0x58/0x78 [ 2925.144720][ T26] __fput+0x4ac/0x978 [ 2925.145152][ T26] ____fput+0x20/0x30 [ 2925.145609][ T26] task_work_run+0x1b8/0x250 [ 2925.146162][ T26] exit_to_user_mode_loop+0x110/0x188 [ 2925.146723][ T26] el0_svc+0x18c/0x240 [ 2925.147185][ T26] el0t_64_sync_handler+0x84/0x12c [ 2925.147686][ T26] el0t_64_sync+0x198/0x19c [ 2925.263489][ T26] [ 2925.263489][ T26] Showing all locks held in the system: [ 2925.287724][ T26] 1 lock held by khungtaskd/26: [ 2925.288317][ T26] #0: ffff800087e43318 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x4c/0x188 [ 2925.320423][ T26] 2 locks held by kworker/u4:5/49: [ 2925.323292][ T26] 1 lock held by klogd/3173: [ 2925.351834][ T26] 2 locks held by getty/3238: [ 2925.352600][ T26] #0: 0bf00000126d60a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 2925.354501][ T26] #1: 73ff80008cb8b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x314/0x11f8 [ 2925.356191][ T26] 2 locks held by syz-executor/3363: [ 2925.356628][ T26] 2 locks held by syz.2.192/4523: [ 2925.356971][ T26] 3 locks held by kworker/u4:9/4565: [ 2925.357468][ T26] [ 2925.357772][ T26] ============================================= [ 2925.357772][ T26] [ 2925.358746][ T26] Kernel panic - not syncing: hung_task: blocked tasks [ 2925.369117][ T26] CPU: 0 UID: 0 PID: 26 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT [ 2925.370767][ T26] Hardware name: linux,dummy-virt (DT) [ 2925.371817][ T26] Call trace: [ 2925.372659][ T26] show_stack+0x2c/0x3c (C) [ 2925.373740][ T26] __dump_stack+0x30/0x40 [ 2925.374762][ T26] dump_stack_lvl+0x30/0x12c [ 2925.375817][ T26] dump_stack+0x1c/0x28 [ 2925.376823][ T26] vpanic+0x4cc/0x844 [ 2925.377769][ T26] vpanic+0x0/0x844 [ 2925.378653][ T26] hung_task_panic+0x0/0x2c [ 2925.379605][ T26] kthread+0x4cc/0x514 [ 2925.380528][ T26] ret_from_fork+0x10/0x20 [ 2925.382455][ T26] Kernel Offset: disabled [ 2925.383246][ T26] CPU features: 0x00000000,0034600b,f7c647a1,057ffe1f [ 2925.384518][ T26] Memory Limit: none [ 2925.386849][ T26] Rebooting in 86400 seconds..