last executing test programs: 1h25m23.801973983s ago: executing program 0 (id=358): mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) r0 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000840)={0x0, &(0x7f00000001c0)=[@irq_setup={0x46, 0x18, {0x4, 0x31e}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80e0000, 0xb0, 0x4, 0xe}}, @smc={0x1e, 0x40, {0x84000013, [0x0, 0x50, 0x1, 0x5]}}, @code={0xa, 0xe4, {"20bb92d20020b0f2410080d2620180d2630080d2a40180d2020000d4e0c09ad20060b8f2810180d2820080d2230180d2e40080d2020000d40000801280298cd20060b8f2e10080d2420180d2c30180d2640180d2020000d400fc85d20080b8f2210180d2c20080d2630080d2a40080d2020000d40070005fc05186d200a0b8f2410080d2220080d2230180d2c40180d2020000d4403e98d20000b0f2610180d2a20180d2430080d2840080d2020000d4004a83d20080b0f2410080d2a20080d2c30180d2240080d2020000d4000028d5"}}, @mrs={0xbe, 0x18, {0x603000000013e706}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x80, 0x6, 0x2}}, @hvc={0x32, 0x40, {0x2017, [0x1, 0x26, 0x6, 0x3, 0x5]}}, @mrs={0xbe, 0x18, {0x603000000013c510}}, @code={0xa, 0x9c, {"00fd81d20000b0f2410080d2420080d2c30180d2040080d2020000d40000406c000008d5007008d500b899d20080b0f2a10080d2420180d2030180d2640180d2020000d40080204e004e96d200e0b0f2810080d2620080d2630080d2e40080d2020000d400c8215e00409f0d00a09fd200e0b0f2a10180d2220180d2a30080d2840080d2020000d4"}}, @code={0xa, 0x6c, {"0080800880d590d200a0b0f2210180d2820180d2230180d2840180d2020000d4007008d500f8a02e000028d500a4002f20ae94d200a0b8f2a10080d2420080d2230080d2240080d2020000d4007008d5007008d50084a00d"}}, @smc={0x1e, 0x40, {0xc400000e, [0x5, 0x3, 0xfffffffffffffff8, 0x7e0, 0x7fffffffffffffff]}}, @code={0xa, 0x9c, {"008008d50000803880e69ad20060b0f2410080d2020180d2230080d2c40080d2020000d4000cc03ca03999d20060b8f2010080d2a20180d2430180d2840080d2020000d4000c00fc008008d5008008d5207498d200a0b0f2210080d2c20080d2630080d2240180d2020000d4601492d200e0b8f2610080d2420180d2430080d2a40180d2020000d4"}}, @memwrite={0x6e, 0x30, @generic={0x0, 0xf98, 0x6, 0x8}}, @uexit={0x0, 0x18, 0x40}, @irq_setup={0x46, 0x18, {0x4, 0xb}}, @code={0xa, 0xcc, {"000028d50100a0d4806b92d20040b8f2610180d2220180d2c30080d2240180d2020000d4e09c88d200a0b8f2a10080d2820080d2830080d2c40180d2020000d40020bf0dc0d490d20060b8f2810080d2620180d2e30180d2640080d2020000d4a06e92d20020b8f2810180d2220080d2430180d2440180d2020000d40060df0c60fd88d20060b0f2c10080d2620080d2230180d2840080d2020000d480ff82d20000b0f2810180d2820180d2230180d2240180d2020000d4"}}, @its_send_cmd={0xaa, 0x28, {0xa, 0x4, 0x3, 0x5, 0x10000, 0x5}}, @mrs={0xbe, 0x18, {0x6030000000131a02}}, @uexit={0x0, 0x18, 0xffffffffffffffff}, @code={0xa, 0x9c, {"0084df0d004198d20020b8f2410080d2e20080d2630080d2640180d2020000d4600d96d20000b0f2410180d2e20080d2630180d2a40080d2020000d4000028d5e0948ed20020b8f2c10080d2620180d2e30080d2040180d2020000d40000641e40ea9bd20080b8f2210180d2e20080d2c30080d2040180d2020000d40038212e00f8b07e000c00bc"}}], 0x610}, &(0x7f0000000880)=[@featur2={0x1, 0x9}], 0x1) ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead) r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x3800001, 0x11, r4, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r4, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000b80)={0x0, &(0x7f0000000100)=[@smc={0x1e, 0x40, {0x8400000a, [0x84000000, 0xa, 0x0, 0x6, 0x10]}}], 0x40}, &(0x7f00000000c0)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r8, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000006000/0x4000)=nil, r1, 0x2, 0x11, r4, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r10 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000080)}, &(0x7f0000000080), 0x1) ioctl$KVM_ARM_VCPU_INIT(r10, 0x4020aeae, &(0x7f0000000180)={0x0, 0xc0}) ioctl$KVM_GET_VCPU_MMAP_SIZE(r9, 0xae04) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r11 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x1) syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil) r13 = syz_kvm_add_vcpu$arm64(r7, &(0x7f00000008c0)={0x0, &(0x7f00000002c0)=[@hvc={0x32, 0x40, {0x80000001, [0x80, 0x10001, 0x4, 0x1009, 0x4d]}}], 0x40}, &(0x7f0000000800)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r13, 0xae80, 0x0) r14 = openat$kvm(0x0, &(0x7f0000000000), 0x80, 0x0) r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x2e) r16 = ioctl$KVM_CREATE_VCPU(r15, 0xae41, 0x2) ioctl$KVM_ARM_VCPU_FINALIZE(r16, 0x4004aec2, 0x0) 1h25m23.474905107s ago: executing program 1 (id=359): r0 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0xaa) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000bc2000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=[@featur2={0x1, 0x2}], 0x1) ioctl$KVM_SET_GUEST_DEBUG_arm64(r4, 0x4208ae9b, &(0x7f00000001c0)={0x30001, 0x0, {[0x2, 0xd6, 0x504, 0xf2f, 0x5, 0x6, 0x100000001, 0xa4, 0xfb, 0x4b, 0x0, 0x8, 0x0, 0x8, 0xc, 0xffffffffffffffff], [0x6, 0x3, 0xea, 0x1003, 0x4, 0x3, 0x4, 0x5, 0x5b, 0x2, 0x6, 0x6f4, 0x3, 0x3, 0xfffffffffffffff7], [0x0, 0x1, 0x100, 0xc2ef, 0x1, 0x5, 0x9, 0x7fff, 0x7, 0x80000000, 0x6, 0x8000000000000000, 0x6, 0x4, 0x4, 0x1], [0x2, 0x89c8, 0xed, 0x0, 0x7, 0xb, 0x7, 0x7, 0x3, 0x2, 0x1, 0x400, 0x5ac, 0x49e4, 0x0, 0x5]}}) (async) r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) r7 = syz_kvm_vgic_v3_setup(r6, 0x1, 0x100) (async) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000240)={0x8}) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x5, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) syz_kvm_vgic_v3_setup(r2, 0x1, 0x100) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1h25m16.779656565s ago: executing program 0 (id=360): r0 = openat$kvm(0x0, &(0x7f0000000280), 0x103080, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r3, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x101800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000700)={0x7, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x4, 0x0, 0x0}) ioctl$KVM_GET_DEVICE_ATTR(r6, 0x4018aee2, &(0x7f0000000340)=@attr_riscv64=@attr_imsic={0x0, 0x1, 0x3, &(0x7f0000000080)=0x9}) close(0x5) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r9, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r9, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000300)={0x8001, 0x55e, 0x1}}) r10 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil) r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000100)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x7fff}}], 0x20}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r11, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) ioctl$KVM_RUN(r11, 0xae80, 0x0) r12 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_vgic_v3_setup(r12, 0x1, 0x40) 1h25m15.345527157s ago: executing program 1 (id=361): r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000001c0)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000080)=@attr_riscv64=@attr_aplic={0x0, 0x1, @any=0x6, &(0x7f00000000c0)=0x10}) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd2(0x6bb9, 0x800) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_GUEST_MEMFD(r7, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x2000003, 0x12, r8, 0x200001fe0000) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000280)={0x2, 0x4, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil, 0x5, r8}) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000140)={0x80, 0x4, 0x0, r5}) r9 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000180)={0x4}) ioctl$KVM_CREATE_GUEST_MEMFD(r10, 0xc040aed4, &(0x7f0000000000)={0x7fffffff, 0x3}) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000080)={0x0, 0x4, 0x1, r5, 0x5}) 1h25m7.008693913s ago: executing program 1 (id=362): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x80101, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000100)=[@featur1={0x1, 0x8}], 0x1) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x100000c, 0x6832, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r5, 0x4018aee1, &(0x7f00000011c0)=@attr_set_pmu={0x0, 0x0, 0x3, 0x0}) r6 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000240)={0x0, &(0x7f0000000300)=[@mrs={0xbe, 0x18, {0x603000000013f081}}], 0x18}, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4000ae84, &(0x7f0000000100)={{0xfec00000, 0xc000, 0xc, 0x5, 0x81, 0x8, 0x3, 0x8, 0x5, 0x1, 0x5d, 0x4}, {0x70000, 0x3000, 0x10, 0x8, 0x0, 0x8, 0xb, 0xe, 0x70, 0xbd, 0x6, 0x8}, {0x41000, 0xe000, 0xf, 0x8, 0x96, 0x3, 0x7, 0xff, 0x4, 0xd5, 0x2, 0x4}, {0x200000, 0x4, 0x10, 0x5, 0xa9, 0x8, 0x2, 0x4, 0x5, 0x1, 0x7, 0x1}, {0xdddd1000, 0x10000, 0x10, 0x5, 0xc9, 0x8, 0x3, 0x1, 0x9, 0x9, 0x8, 0x7}, {0x26000, 0xe000, 0x20, 0x45, 0x4, 0x4, 0xb, 0xb, 0x9d, 0x8, 0xc4, 0xff}, {0x6000, 0x594da9cde26fd2fa, 0xf, 0xa, 0x8, 0x4, 0x6, 0x0, 0x9, 0xdb, 0xf7, 0x7f}, {0x8080000, 0x200000, 0xb, 0x8, 0x9, 0x6, 0x2, 0xab, 0xf9, 0x0, 0x4, 0x3}, {0x50000, 0x7}, {0xeeef0000, 0xa8ad}, 0x0, 0x0, 0x26000, 0x200104, 0x8, 0x4800, 0x0, [0x40, 0x1, 0x3c, 0x997b]}) openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x5a0401, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r9, 0x4018aee1, &(0x7f0000000040)=@attr_irq_timer={0x0, 0x1, 0x1, 0x0}) 1h25m5.661484973s ago: executing program 0 (id=363): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x22) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) (async, rerun: 32) r2 = syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) (rerun: 32) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ARM_VCPU_INIT(r5, 0x4020aeae, &(0x7f0000000240)={0x5}) (async) close(r2) (async, rerun: 32) close(0x4) (async, rerun: 32) close(0x5) 1h24m54.896832732s ago: executing program 0 (id=364): r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_kvm_add_vcpu$arm64(r0, &(0x7f00000002c0)={0x0, &(0x7f0000000140)}, &(0x7f00000007c0)=[@featur2={0x1, 0x10}], 0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000000080)={0x100000000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000080)={0x0, 0x4, 0x7000, 0x2000, &(0x7f0000e37000/0x2000)=nil, 0x10000, r3}) syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) eventfd2(0x2, 0x80000) syz_kvm_add_vcpu$arm64(r0, &(0x7f0000000040)={0x0, 0x0}, 0x0, 0xfffffffffffffdbd) r4 = openat$kvm(0x0, &(0x7f0000000180), 0x400, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[@its_setup={0x82, 0x28, {0x4, 0x4000004, 0x14c}}], 0x28}, 0x0, 0x0) r8 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_REGISTER_COALESCED_MMIO(r10, 0x4010ae67, &(0x7f0000000000)={0x1, 0x37d03030d7a92616}) ioctl$KVM_REGISTER_COALESCED_MMIO(r10, 0x4010ae67, &(0x7f0000000180)={0xeeee0000}) r11 = syz_kvm_add_vcpu$arm64(r8, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) syz_kvm_vgic_v3_setup(r5, 0x100000000000001, 0x100) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000240)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r12, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_ARM_PREFERRED_TARGET(r7, 0x8020aeaf, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) munmap$KVM_VCPU(0x0, 0x1000000000) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x0, 0x0, 0x4000010, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) 1h24m54.496431986s ago: executing program 1 (id=365): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0xeffffffd, 0x801) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000001340)={0x3, 0xeeef0000, 0x2, r4, 0x3}) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000000c0)={0x3, 0x0, 0x1, r4, 0xb}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000001c0)={0x8, 0xffffffffffffffff}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x4) ioctl$KVM_ARM_VCPU_INIT(r8, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000080)={0x10004, 0x0, &(0x7f0000d49000/0x1000)=nil}) ioctl$KVM_SET_ONE_REG(r8, 0x4010aeac, &(0x7f00000000c0)=@arm64_sys={0x603000000013dce0, &(0x7f0000000000)=0x43ff}) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r8, 0x4018aee1, &(0x7f00000000c0)=@attr_pmu_init) ioctl$KVM_RUN(r8, 0xae80, 0x0) close(0x4) close(0x5) ioctl$KVM_HAS_DEVICE_ATTR(r5, 0x4018aee3, &(0x7f0000000240)=@attr_arm64={0x0, 0x0, 0x4, 0x0}) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x4, 0x4f832, 0xffffffffffffffff, 0x1000000) 1h24m43.078920351s ago: executing program 1 (id=366): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) r4 = syz_kvm_vgic_v3_setup(r1, 0x4, 0x220) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x3, 0x27, 0x6, 0x0, 0x4, 0x9, 0xff, 0x7, 0xc7, 0x43, 0x5, 0x7, 0x0, 0x5, 0x2e, 0xd7, 0x10, 0xaa, 0x7, '\x00', 0x2, 0x100000000000000}) write$eventfd(r9, &(0x7f00000001c0)=0x9, 0x1d) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x7f, 0x4, 0x3, 0x0, 0x800, 0x9, 0xd, 0x8b, 0x4, 0x0, 0xf, 0xfe, 0x0, 0x2, 0x6, 0x0, 0xd, 0xfe, 0xa, '\x00', 0x0, 0xb}) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r10, &(0x7f00000001c0)=0x9, 0x1d) ioctl$KVM_HAS_DEVICE_ATTR(r4, 0x4018aee3, &(0x7f0000000240)=@attr_other={0x0, 0x6, 0x0, 0x0}) 1h24m40.551722608s ago: executing program 0 (id=367): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@its_setup={0x82, 0x28, {0x0, 0x1, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x0, 0x5, 0x4000000a, 0x0, 0x8, 0x4}}], 0x50}, 0x0, 0x0) (async) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) (async, rerun: 64) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) (rerun: 64) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) (async, rerun: 64) r5 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (rerun: 64) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_GUEST_MEMFD(r7, 0xc040aed4, &(0x7f0000000080)={0x100000000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r7, 0x40a0ae49, &(0x7f0000000080)={0x101ff, 0x4, 0x0, 0x2000, &(0x7f0000e37000/0x2000)=nil, 0x10000, r8}) (async) syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) (async) r9 = eventfd2(0x2, 0x80000) r10 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil) (async, rerun: 32) ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f0000000180)={0x8}) (rerun: 32) r12 = eventfd2(0xf3eb, 0x0) ioctl$KVM_IRQFD(r11, 0x4020ae76, &(0x7f0000000140)={r9, 0xa7, 0x1, r12}) r13 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000040)={0x0, 0x0}, 0x0, 0xfffffffffffffdbd) ioctl$KVM_RUN(r13, 0xae80, 0x0) (async) ioctl$KVM_CAP_ARM_MTE(r11, 0x4068aea3, &(0x7f00000001c0)) (async) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) 1h24m32.534227437s ago: executing program 1 (id=368): munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) (async) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x19) r2 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f00000003c0)={0x0, &(0x7f0000000240)=[@irq_setup={0x46, 0x18, {0x1, 0x36c}}, @eret={0xe6, 0x18, 0x5}, @msr={0x14, 0x20, {0x6030000000131a04}}, @code={0xa, 0xb4, {"40448dd20040b8f2e10080d2a20080d2030080d2a40080d2020000d400b48fd20020b8f2810180d2a20180d2030080d2640180d2020000d4000028d51f0000ea80d093d200a0b0f2010180d2620180d2e30180d2440180d2020000d4007008d50000002e20b395d200a0b8f2c10080d2020180d2230180d2a40080d2020000d4008008d5c05897d20040b0f2a10080d2a20180d2430180d2c40180d2020000d4"}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x100, 0x5, 0x9}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x1, 0x3, 0xd, 0x4, 0x1e8, 0x3}}, @eret={0xe6, 0x18, 0x4}], 0x174}, &(0x7f0000000400)=[@featur1={0x1, 0xd}], 0x1) syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000bfe000/0x400000)=nil, &(0x7f0000000640)=[{0x0, &(0x7f0000000440)=[@memwrite={0x6e, 0x30, @vgic_gicr={0x80c0000, 0x300, 0x5dbaeec7, 0x8}}, @smc={0x1e, 0x40, {0x31000000, [0x4, 0x5, 0x0, 0x8, 0x7]}}, @its_setup={0x82, 0x28, {0x2, 0x2, 0x268}}, @hvc={0x32, 0x40, {0xc3000052, [0x2, 0x7ff, 0xa9, 0x1, 0x1]}}, @uexit={0x0, 0x18, 0x3}, @irq_setup={0x46, 0x18, {0x2, 0x28}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x0, 0x0, 0x7, 0x400, 0x200, 0x1}}, @hvc={0x32, 0x40, {0x80000000, [0x4, 0x4, 0x1, 0x7, 0x5]}}, @msr={0x14, 0x20, {0x603000000013d920}}, @uexit={0x0, 0x18}, @irq_setup={0x46, 0x18, {0x4, 0x365}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x2200, 0x4, 0x1}}], 0x1f0}], 0x1, 0x0, &(0x7f0000000680)=[@featur2={0x1, 0x20}], 0x1) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_HALT_POLL(r3, 0x4068aea3, &(0x7f00000001c0)={0xb6, 0x0, 0xffffffffffffffff}) (async) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r6 = openat$kvm(0x0, &(0x7f0000000140), 0x2900, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x74b700, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x32) (async, rerun: 32) mmap$KVM_VCPU(&(0x7f0000ec3000/0x1000)=nil, r5, 0x0, 0x9032, r4, 0x0) (async, rerun: 32) mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0) 1h24m29.291900629s ago: executing program 0 (id=369): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x0, 0x0}) r1 = openat$kvm(0x0, &(0x7f0000000100), 0x300, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x42) syz_kvm_setup_cpu$arm64(r4, r5, &(0x7f0000bff000/0x400000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r5, 0x4010aeab, &(0x7f0000000000)=@arm64_bitmap={0x6030000000162001, 0x0}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) mmap$KVM_VCPU(0x0, 0x50000, 0x3, 0x13012, r8, 0x0) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000100)={0x6, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r9, 0x800454cf, 0x0) r10 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r12, 0x4040ae79, &(0x7f0000000040)={0x3, 0x0, 0x2, 0xffffffffffffffff, 0x20}) r13 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) r15 = syz_kvm_setup_syzos_vm$arm64(r14, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r15, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) r16 = syz_kvm_vgic_v3_setup(r14, 0x1, 0x100) ioctl$KVM_SET_DEVICE_ATTR(r16, 0x4018aee1, &(0x7f0000000140)=@attr_riscv64=@attr_config={0x0, 0x1, 0x0, &(0x7f0000000000)=0x10}) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r17 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r18 = ioctl$KVM_CREATE_VM(r17, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r18, 0xae41, 0x0) 1h23m47.952273368s ago: executing program 32 (id=368): munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) (async) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x19) r2 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f00000003c0)={0x0, &(0x7f0000000240)=[@irq_setup={0x46, 0x18, {0x1, 0x36c}}, @eret={0xe6, 0x18, 0x5}, @msr={0x14, 0x20, {0x6030000000131a04}}, @code={0xa, 0xb4, {"40448dd20040b8f2e10080d2a20080d2030080d2a40080d2020000d400b48fd20020b8f2810180d2a20180d2030080d2640180d2020000d4000028d51f0000ea80d093d200a0b0f2010180d2620180d2e30180d2440180d2020000d4007008d50000002e20b395d200a0b8f2c10080d2020180d2230180d2a40080d2020000d4008008d5c05897d20040b0f2a10080d2a20180d2430180d2c40180d2020000d4"}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x100, 0x5, 0x9}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x1, 0x3, 0xd, 0x4, 0x1e8, 0x3}}, @eret={0xe6, 0x18, 0x4}], 0x174}, &(0x7f0000000400)=[@featur1={0x1, 0xd}], 0x1) syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000bfe000/0x400000)=nil, &(0x7f0000000640)=[{0x0, &(0x7f0000000440)=[@memwrite={0x6e, 0x30, @vgic_gicr={0x80c0000, 0x300, 0x5dbaeec7, 0x8}}, @smc={0x1e, 0x40, {0x31000000, [0x4, 0x5, 0x0, 0x8, 0x7]}}, @its_setup={0x82, 0x28, {0x2, 0x2, 0x268}}, @hvc={0x32, 0x40, {0xc3000052, [0x2, 0x7ff, 0xa9, 0x1, 0x1]}}, @uexit={0x0, 0x18, 0x3}, @irq_setup={0x46, 0x18, {0x2, 0x28}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x0, 0x0, 0x7, 0x400, 0x200, 0x1}}, @hvc={0x32, 0x40, {0x80000000, [0x4, 0x4, 0x1, 0x7, 0x5]}}, @msr={0x14, 0x20, {0x603000000013d920}}, @uexit={0x0, 0x18}, @irq_setup={0x46, 0x18, {0x4, 0x365}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x2200, 0x4, 0x1}}], 0x1f0}], 0x1, 0x0, &(0x7f0000000680)=[@featur2={0x1, 0x20}], 0x1) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_HALT_POLL(r3, 0x4068aea3, &(0x7f00000001c0)={0xb6, 0x0, 0xffffffffffffffff}) (async) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r6 = openat$kvm(0x0, &(0x7f0000000140), 0x2900, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x74b700, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x32) (async, rerun: 32) mmap$KVM_VCPU(&(0x7f0000ec3000/0x1000)=nil, r5, 0x0, 0x9032, r4, 0x0) (async, rerun: 32) mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0) 1h23m41.881885774s ago: executing program 33 (id=369): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x0, 0x0}) r1 = openat$kvm(0x0, &(0x7f0000000100), 0x300, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x42) syz_kvm_setup_cpu$arm64(r4, r5, &(0x7f0000bff000/0x400000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r5, 0x4010aeab, &(0x7f0000000000)=@arm64_bitmap={0x6030000000162001, 0x0}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) mmap$KVM_VCPU(0x0, 0x50000, 0x3, 0x13012, r8, 0x0) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000100)={0x6, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r9, 0x800454cf, 0x0) r10 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r12, 0x4040ae79, &(0x7f0000000040)={0x3, 0x0, 0x2, 0xffffffffffffffff, 0x20}) r13 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) r15 = syz_kvm_setup_syzos_vm$arm64(r14, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r15, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) r16 = syz_kvm_vgic_v3_setup(r14, 0x1, 0x100) ioctl$KVM_SET_DEVICE_ATTR(r16, 0x4018aee1, &(0x7f0000000140)=@attr_riscv64=@attr_config={0x0, 0x1, 0x0, &(0x7f0000000000)=0x10}) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r17 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r18 = ioctl$KVM_CREATE_VM(r17, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r18, 0xae41, 0x0) 1h11m22.011649649s ago: executing program 3 (id=434): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0xb) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_ARM_MTE(r1, 0x4068aea3, &(0x7f00000000c0)) 1h11m18.17432138s ago: executing program 2 (id=435): openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x28) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x100000c, 0x16831, 0xffffffffffffffff, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000100)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r9, 0x4010aeab, &(0x7f0000000000)=@arm64_core={0x603000000010004a, &(0x7f0000000180)=0xffffffffffffffff}) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x480, 0x0) ioctl$KVM_CHECK_EXTENSION(r10, 0xae03, 0xdf) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r11 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r13, 0x400454d0, 0x110c230004) r14 = openat$kvm(0x0, &(0x7f0000000140), 0x400, 0x0) r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r15, 0xc00caee0, &(0x7f00000000c0)={0x7, 0xffffffffffffffff}) ioctl$KVM_CREATE_VCPU(r15, 0xae41, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r16, 0x4018aee1, &(0x7f0000000180)=@attr_arm64={0x0, 0x0, 0x3, &(0x7f0000000000)=0xfffffffffffffffd}) 1h11m15.349777421s ago: executing program 3 (id=436): r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r2, r3, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000140)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000040)=@arm64_fw={0x6030000000140001, &(0x7f00000000c0)=0x7}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x25) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f00000001c0)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x4, 0x2, 0x0}) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ARM_VCPU_INIT(r8, 0x4020aeae, &(0x7f0000000340)={0x5}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_ARM_SET_COUNTER_OFFSET(r4, 0x4010aeb5, &(0x7f0000000140)={0x400000000000004}) r9 = openat$kvm(0x0, &(0x7f0000000080), 0xc01, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r10, 0x4068aea3, &(0x7f00000001c0)={0xdf, 0x0, 0xd000}) openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) (async) openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) syz_kvm_setup_cpu$arm64(r2, r3, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000140)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000040)=@arm64_fw={0x6030000000140001, &(0x7f00000000c0)=0x7}) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x25) (async) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f00000001c0)={0x8}) (async) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x4, 0x2, 0x0}) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$KVM_ARM_VCPU_INIT(r8, 0x4020aeae, &(0x7f0000000340)={0x5}) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) ioctl$KVM_ARM_SET_COUNTER_OFFSET(r4, 0x4010aeb5, &(0x7f0000000140)={0x400000000000004}) (async) openat$kvm(0x0, &(0x7f0000000080), 0xc01, 0x0) (async) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) (async) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r10, 0x4068aea3, &(0x7f00000001c0)={0xdf, 0x0, 0xd000}) (async) 1h11m7.214435661s ago: executing program 2 (id=437): r0 = openat$kvm(0x0, &(0x7f0000000100), 0x80402, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xd7, 0x80000001}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) r10 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x1800002, 0x11, r9, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r10, 0x20, &(0x7f0000000180)="f3011813013c36000000004ee28398f8964346cbd98700000001908b9463d139887a01002e25000000000000ffff00", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r9, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x40305839, &(0x7f0000000040)=@attr_other={0x0, 0x0, 0xfffffffffffffff7, 0x0}) (async) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x40305839, &(0x7f0000000040)=@attr_other={0x0, 0x0, 0xfffffffffffffff7, 0x0}) mmap$KVM_VCPU(0x0, 0x50000, 0x3, 0x11, r3, 0x0) (async) mmap$KVM_VCPU(0x0, 0x50000, 0x3, 0x11, r3, 0x0) r11 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2c) ioctl$KVM_SET_DEVICE_ATTR_vm(r11, 0x4018aee1, &(0x7f0000000080)=@attr_arm64={0x0, 0x0, 0x0, 0x0}) 1h10m58.182364136s ago: executing program 3 (id=438): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x380000a, 0x11, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000380)="f30149ddae810b65d0ecc1d3a6abf4e7454e37c4b85007000000b7fbc51869be2e0000d40f000000000000000001000000000000000000010000000e0000000000ed00", 0x0, 0x48) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, 0x0) r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000b7c000/0x400000)=nil) r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r9, 0x4018aee1, &(0x7f0000000000)=@attr_pmu_init) r10 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, 0x0) r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000b80)={0x0, &(0x7f0000000040)=[@smc={0x1e, 0x40, {0xc4000004, [0x40000099a, 0x4, 0x9, 0x89, 0xffffffffffffffff]}}], 0x40}, &(0x7f0000000bc0)=[@featur2={0x1, 0xc8}], 0x1) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000100)=@attr_other={0x0, 0x651, 0x400, &(0x7f00000000c0)=0xffffffffffffffff}) syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000580)={0x0, &(0x7f0000000400)=[@code={0xa, 0xb4, {"c0119cd200e0b8f2810180d2820080d2030180d2840080d2020000d400c38bd200e0b0f2010080d2420080d2030180d2e40180d2020000d4000028d5007008d520e583d20020b8f2c10080d2020180d2c30080d2040080d2020000d4a01590d20060b0f2010080d2c20180d2e30180d2240180d2020000d4007008d5406999d200c0b8f2810080d2a20180d2030180d2a40180d2020000d4007008d500a0000d"}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x1, 0x2, 0xc, 0x9, 0x6}}, @msr={0x14, 0x20, {0x603000000013c520, 0x140000000000}}, @uexit={0x0, 0x18, 0x2}, @mrs={0xbe, 0x18, {0x603000000013f289}}, @svc={0x122, 0x40, {0xc4000001, [0xa3, 0x200, 0x1, 0x9, 0x3]}}], 0x16c}, &(0x7f00000005c0)=[@featur1={0x1, 0x48}], 0x1) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x753481, 0x0) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r14 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0) r16 = syz_kvm_setup_syzos_vm$arm64(r15, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r16, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) 1h10m52.892562532s ago: executing program 2 (id=439): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_vgic_v3_setup(r2, 0x2, 0x100) r3 = eventfd2(0x1, 0x801) r4 = eventfd2(0xff, 0x80000) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000001c0)={r3, 0x3, 0x2, r4}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc018aec0, &(0x7f0000000240)={0x6, 0xffffffffffffffff, 0x1}) r7 = eventfd2(0x1, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000780)={r7, 0x3, 0x2, r4}) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r9, 0x0) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000300)) 1h10m41.72487732s ago: executing program 3 (id=440): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000340)={0x5}) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f00000001c0)=@arm64_core={0x603000000010004e, &(0x7f0000000200)=0x6f48}) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async) r3 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x27) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000700)={0x7, 0xffffffffffffffff}) ioctl$KVM_GET_DEVICE_ATTR(r7, 0x4018aee2, &(0x7f0000000180)=@attr_arm64={0x0, 0x0, 0x5, &(0x7f00000002c0)=0x8}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x2a) (async) r8 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x2a) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil) (async) syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000b80)={0x0, &(0x7f0000000100)=[@hvc={0x32, 0x40, {0x84000015, [0x100000001, 0x8000000040000000, 0xffffffffffffffff, 0xee24, 0xfffffffffffeffff]}}], 0x40}, &(0x7f0000000040)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r9, 0xae80, 0x0) 1h10m39.734784094s ago: executing program 2 (id=441): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x10004, 0x3, 0x3131ba7867f24df2, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2a) r1 = eventfd2(0xfffffb24, 0x80800) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000040)={r1, 0x7, 0x3}) close(r0) r2 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000300)={0x0, &(0x7f0000000080)=[@mrs={0xbe, 0x18, {0x1c6}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0xfc0, 0x81, 0xa}}, @hvc={0x32, 0x40, {0x2, [0x9, 0x8, 0x10, 0x6, 0x4]}}, @svc={0x122, 0x40, {0xc4000010, [0x3, 0x6, 0x7, 0x3, 0x5]}}, @eret={0xe6, 0x18, 0x4}, @irq_setup={0x46, 0x18, {0x1, 0xa7}}, @its_setup={0x82, 0x28, {0x1, 0x3, 0x2f2}}, @eret={0xe6, 0x18, 0x4}, @msr={0x14, 0x20, {0x603000000013dea1, 0x8001}}, @msr={0x14, 0x20, {0x603000000013c523, 0x7fff}}, @its_setup={0x82, 0x28, {0x0, 0x3, 0x214}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x90, 0x0, 0x3}}, @svc={0x122, 0x40, {0x84000005, [0x7, 0x9135, 0x4, 0x4, 0x10001]}}, @eret={0xe6, 0x18, 0x9}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x8, 0x800, 0xa}}], 0x258}, &(0x7f0000000340), 0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000380)) r3 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f00000003c0)=@attr_pmu_init) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000400)={0x5}) ioctl$KVM_CAP_ARM_INJECT_SERROR_ESR(r0, 0x4068aea3, &(0x7f0000000440)) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f00000004c0)={0x3, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000540)=@attr_arm64={0x0, 0x8, 0x0, &(0x7f0000000500)=0x192e}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x1) ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r6, 0x4068aea3, &(0x7f00000005c0)={0xe4, 0x0, 0x9}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_DIRTY_TLB(r7, 0x4010aeaa, &(0x7f0000000640)={0x10, 0x8001}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000680)=@arm64={0x3, 0x5, 0x0, '\x00', 0x5}) ioctl$KVM_ARM_SET_DEVICE_ADDR(r3, 0x4010aeab, &(0x7f00000006c0)={0xffff, 0x2308c000}) ioctl$KVM_SET_SREGS(r3, 0x4000ae84, &(0x7f0000000700)={{0x41000, 0xffffffff, 0x3, 0x7, 0x6, 0x90, 0x8, 0x3, 0x4d, 0x3, 0x7, 0x9}, {0xffffffff, 0xfffc7000, 0xf, 0x81, 0x1, 0x80, 0x8, 0x9, 0x9, 0x9, 0xf7, 0x4}, {0x40000, 0x41000, 0x1f, 0x94, 0x1, 0x7, 0x70, 0xb, 0x1, 0x9, 0x1, 0xa}, {0x25000, 0xeeee8000, 0xe, 0x1, 0xb, 0xf, 0xf7, 0x5, 0x66, 0xf, 0xad, 0x5}, {0xf000, 0x25000, 0x8, 0x6, 0x2, 0x8, 0xfd, 0x1, 0x3, 0x1, 0x5c, 0x6}, {0x30000, 0xfffb1fff, 0xe, 0x3, 0xfa, 0x5, 0x3, 0x1, 0x8, 0x7f, 0xfc, 0x1}, {0x26000, 0x41000, 0xb, 0x7, 0x2, 0x6, 0x4, 0x1, 0x1, 0x3, 0x9, 0x5}, {0x7000, 0xeee84000, 0x13, 0x2, 0xa, 0x0, 0x2, 0x7, 0x0, 0x6, 0x4}, {0x80a0000, 0x3d9}, {0xdddd0000, 0x3}, 0x20, 0x0, 0x5000, 0x2000, 0x2, 0x0, 0x100000, [0x80000001, 0x5, 0x0, 0x3]}) r8 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x3d) ioctl$KVM_IRQFD(r8, 0x4020ae76, &(0x7f0000000840)={r1, 0x4, 0x0, r1}) ioctl$KVM_CAP_ARM_MTE(r6, 0x4068aea3, &(0x7f0000000880)) ioctl$KVM_INTERRUPT(r3, 0x4004ae86, &(0x7f0000000900)=0x9) syz_kvm_vgic_v3_setup(r0, 0x7fffffffffffffff, 0x60) r9 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x3000)=nil, 0x0, 0x1800000, 0x13, r7, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r9, 0x20, &(0x7f0000000940)="394a1d4caaeecdf86ec9aa70e24653d9165e1a4ce736651dcd9a7533e39f623549529472668bf29e371fb665a497a0e9be4b890f8e9fe68457534291d3d066cd3ecfa906b908d269", 0x0, 0x48) ioctl$KVM_DIRTY_TLB(r7, 0x4010aeaa, &(0x7f00000009c0)={0x7, 0x5}) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000a00)={0xb2c}) 1h10m31.31334093s ago: executing program 2 (id=442): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x3) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ARM_VCPU_INIT(r4, 0x4020aeae, &(0x7f0000000080)={0x5}) ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f0000000280)=@arm64_sys={0x603000000013c006, &(0x7f0000000240)=0x2}) r5 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000100)={0x0, &(0x7f0000000140)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x2, 0x100) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil) r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000b80)={0x0, &(0x7f0000000080)=[@hvc={0x32, 0x0, {0x84000001, [0x9, 0x8, 0x5, 0x603c8354, 0x200]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_IRQ_LINE(r8, 0x4008ae61, &(0x7f0000000000)={0x0, 0x100}) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4040aea0, &(0x7f00000000c0)=@arm64={0x7, 0x1, 0xe, '\x00', 0x1}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1h10m28.132814177s ago: executing program 3 (id=443): openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0x2, 0x1}) openat$kvm(0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x3, 0x0, 0x2, 0xffffffffffffffff, 0x20}) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r2 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r4, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x12, r4, 0x0) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000002000/0x400000)=nil) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x646000, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000000)="ea0200a8b76cc4f92c91806208be643e8da3c7cf3b9ef9c8b837f82c72cab92a34882624ffbf321b6f70c6003b12e8529a000000000000000000008000000000000000a5916e7400", 0x0, 0x48) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0x40086602, 0x20000000) 1h10m19.317941343s ago: executing program 3 (id=444): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) r4 = ioctl$KVM_CREATE_VM(r3, 0x894c, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xb701, 0x0) syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xb701, 0xfffffffffffffffe) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3b) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f00000002c0)={0x9, 0x0, [{0x5, 0x5, 0x1, 0x0, @sint={0x400, 0x4}}, {0x5, 0x3, 0x1, 0x0, @sint={0x5, 0x10}}, {0x4, 0x1, 0xe729d8c3398efb96, 0x0, @msi={0x2, 0x9, 0x80000000, 0x8}}, {0x0, 0x5, 0x0, 0x0, @irqchip={0x7, 0x101}}, {0x8, 0x1, 0x0, 0x0, @sint={0x7, 0x2}}, {0x7, 0x3, 0x1, 0x0, @sint={0x9, 0x5}}, {0x8, 0x1, 0x0, 0x0, @msi={0x4, 0x0, 0x5c0, 0x6}}, {0x5, 0x1, 0x83ba17bb3d14038e, 0x0, @adapter={0x7ff, 0x400, 0x4ae4, 0xfb4f, 0x4}}, {0x5, 0x3, 0x1, 0x0, @sint={0x0, 0x4}}]}) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f00003af000/0x400000)=nil) eventfd2(0x0, 0x0) r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f00000000c0)={0x0, &(0x7f0000000280)=[@its_setup={0x82, 0x28, {0x400005, 0x8000000000403, 0x1}}], 0x28}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r7, 0x10000000000003, 0x100) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000240)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r9, 0xae80, 0x0) r11 = openat$kvm(0xffffffffffffff9c, 0x0, 0x9501, 0x0) r12 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vm(r13, 0x4018aee3, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x0, 0x0}) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f0000000000)=@attr_arm64={0x0, 0x4, 0x1, 0x0}) 1h10m12.851670689s ago: executing program 2 (id=445): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_RUN(r0, 0xae80, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1c) syz_kvm_setup_cpu$arm64(r1, r0, &(0x7f0000bfd000/0x400000)=nil, &(0x7f00000000c0)=[{0x0, &(0x7f0000000000)=[@its_send_cmd={0xaa, 0x28, {0xa, 0x0, 0x3, 0x3, 0x0, 0x660, 0x1}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x1590, 0x7, 0x6}}, @hvc={0x32, 0x40, {0xc4000012, [0x533, 0x2916, 0x100000001, 0xda3, 0x9]}}], 0x98}], 0x1, 0x0, &(0x7f0000000100)=[@featur1={0x1, 0x1}], 0x1) (async, rerun: 64) syz_kvm_vgic_v3_setup(r1, 0x4, 0x340) (async, rerun: 64) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x34) (async) r4 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f00000002c0)={0x0, &(0x7f0000000180)=[@its_setup={0x82, 0x28, {0x0, 0x1, 0x246}}, @svc={0x122, 0x40, {0x84000011, [0x5, 0xffffffff, 0x8, 0xfffffffffffffffd, 0x6]}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x0, 0x1, 0xd, 0x4, 0x32aa, 0x4}}, @its_setup={0x82, 0x28, {0x3, 0x3, 0x377}}, @eret={0xe6, 0x18, 0xe6}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x100, 0x0, 0x5}}, @eret={0xe6, 0x18, 0x1}], 0x118}, &(0x7f0000000300)=[@featur2={0x1, 0x40}], 0x1) ioctl$KVM_KVMCLOCK_CTRL(r4, 0xaead) (async, rerun: 64) ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, &(0x7f0000000340)={0xffffff7f, 0x6eddcf54}) (async, rerun: 64) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x40, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x20) r6 = eventfd2(0x5, 0x800) write$eventfd(r6, &(0x7f00000003c0)=0x361a, 0x8) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r4, 0x4018aee1, &(0x7f0000000400)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0x4}) (async) r7 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) mmap$KVM_VCPU(&(0x7f0000e0a000/0x1000)=nil, r7, 0xb, 0x4010, r0, 0x0) (async) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f0000000480)=@arm64_core={0x6030000000100034, &(0x7f0000000440)=0xe0000000000000}) (async) ioctl$KVM_CLEAR_DIRTY_LOG(r3, 0xc018aec0, &(0x7f00000008c0)={0x10004, 0x40, 0x300, &(0x7f00000004c0)=[0x404, 0x849, 0x1, 0x4, 0x7, 0x7, 0x4, 0xa, 0xfa, 0x100, 0x3, 0x5, 0xeb, 0x7e493872, 0xb362, 0x6, 0x0, 0x0, 0x2000000000000000, 0x1670, 0x0, 0x3, 0x7, 0x7, 0x5, 0x7fffffffffffffff, 0x8, 0x2, 0x6, 0x8001, 0x7, 0x5acf, 0x9, 0x6, 0x7, 0x1, 0x7, 0x3, 0x879d, 0x3, 0x401, 0xe, 0xf, 0x2, 0x1ff, 0xfffffffffffffffe, 0x6, 0x0, 0x2, 0x8, 0x1, 0x6, 0x1, 0x2, 0x1, 0x8, 0x4d, 0x94, 0x6, 0x5, 0x98d8, 0x5, 0x8, 0x7fffffffffffffff, 0xffffffffffffff80, 0x2, 0x0, 0x5, 0x7, 0x6, 0x7, 0x3ff, 0x0, 0x9, 0x5, 0xffffffffffffffff, 0xfffffffffffffffa, 0x3ff, 0x6, 0x8000000000000000, 0x80000000, 0x6, 0x7f, 0x6, 0x7cb, 0x5, 0xc, 0x2, 0x100000000, 0xfffffffffffffc00, 0x3, 0x10, 0x81, 0x1, 0x4, 0x2, 0x905, 0xca, 0x8000000000000, 0x2, 0x5, 0x1d29, 0x5, 0x100000000, 0x9, 0x8, 0xc41, 0xa8, 0x58964bd4, 0x7, 0x377, 0xffff, 0x3, 0x6, 0x8, 0x2, 0x7fff, 0x4ee, 0x8001, 0x7, 0x9, 0x7fffffffffffffff, 0x10000, 0x7, 0x6, 0x7f, 0xa]}) (async) ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead) (async, rerun: 32) ioctl$KVM_GET_SREGS(r4, 0x8000ae83, &(0x7f0000000900)) (async, rerun: 32) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000a40)={0x60000, 0x35000}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000a80), 0x80, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000ac0), 0x301002, 0x0) (async) r8 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000fc0)={0x0, &(0x7f0000000b00)=[@hvc={0x32, 0x40, {0x84000052, [0x4, 0x5, 0x6, 0xcd, 0x4]}}, @svc={0x122, 0x40, {0x76000091, [0xfffffffffffffff9, 0x88, 0x8000000000000001, 0x5, 0x5]}}, @smc={0x1e, 0x40, {0xc4000003, [0x8000000000000000, 0x7, 0x7ff, 0x1, 0x4]}}, @svc={0x122, 0x40, {0xc400000d, [0xf, 0x6, 0x6, 0x9, 0x5005]}}, @smc={0x1e, 0x40, {0x40002040, [0x5, 0x6, 0x2, 0xffffffff, 0xfe7]}}, @uexit={0x0, 0x18, 0xb}, @memwrite={0x6e, 0x30, @generic={0xc000, 0xf28, 0x0, 0x8}}, @eret={0xe6, 0x18, 0x35b}, @eret={0xe6, 0x18, 0x5}, @msr={0x14, 0x20, {0x603000000013c012, 0x67e1}}, @uexit={0x0, 0x18, 0x5}, @msr={0x14, 0x20, {0x6030000000138057, 0x7}}, @mrs={0xbe, 0x18, {0x603000000013df67}}, @msr={0x14, 0x20, {0x6030000000138066, 0x9}}, @mrs={0xbe, 0x18, {0x603000000013e687}}, @its_setup={0x82, 0x28, {0x0, 0x1, 0x86}}, @smc={0x1e, 0x40, {0xc5000020, [0x7, 0x5, 0x4, 0x4, 0x8001]}}, @mrs={0xbe, 0x18, {0x603000000013e6c1}}, @mrs={0xbe, 0x18, {0x603000000013c663}}, @smc={0x1e, 0x40, {0x80000001, [0x8, 0x5, 0x400, 0x8, 0x401]}}, @its_setup={0x82, 0x28, {0x2, 0x4, 0x288}}, @its_setup={0x82, 0x28, {0x2, 0x0, 0x49}}, @its_send_cmd={0xaa, 0x28, {0xb, 0x0, 0x4, 0x4, 0x2, 0x5, 0x2}}, @irq_setup={0x46, 0x18, {0x4, 0x29c}}, @msr={0x14, 0x20, {0x603000000013c2b0, 0xfffffffffffffffc}}, @code={0xa, 0x9c, {"e00300aa20a98fd20020b8f2610180d2020080d2830180d2e40180d2020000d4000028d5007008d500e0400d007008d500c087d20060b8f2010180d2220080d2c30180d2640180d2020000d4a0f68dd200a0b8f2010080d2620180d2630180d2a40180d2020000d400c8a05e203290d200a0b8f2610080d2220080d2a30180d2e40080d2020000d4"}}], 0x484}, &(0x7f0000001000)=[@featur2={0x1, 0x42}], 0x1) (async, rerun: 64) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r3, 0x4068aea3, &(0x7f0000001040)={0xa8, 0x0, 0x1}) (async, rerun: 64) ioctl$KVM_ARM_VCPU_INIT(r4, 0x4020aeae, &(0x7f00000010c0)={0x0, 0x8b}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x39) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 1h9m31.402592141s ago: executing program 34 (id=444): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) r4 = ioctl$KVM_CREATE_VM(r3, 0x894c, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xb701, 0x0) syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xb701, 0xfffffffffffffffe) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3b) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f00000002c0)={0x9, 0x0, [{0x5, 0x5, 0x1, 0x0, @sint={0x400, 0x4}}, {0x5, 0x3, 0x1, 0x0, @sint={0x5, 0x10}}, {0x4, 0x1, 0xe729d8c3398efb96, 0x0, @msi={0x2, 0x9, 0x80000000, 0x8}}, {0x0, 0x5, 0x0, 0x0, @irqchip={0x7, 0x101}}, {0x8, 0x1, 0x0, 0x0, @sint={0x7, 0x2}}, {0x7, 0x3, 0x1, 0x0, @sint={0x9, 0x5}}, {0x8, 0x1, 0x0, 0x0, @msi={0x4, 0x0, 0x5c0, 0x6}}, {0x5, 0x1, 0x83ba17bb3d14038e, 0x0, @adapter={0x7ff, 0x400, 0x4ae4, 0xfb4f, 0x4}}, {0x5, 0x3, 0x1, 0x0, @sint={0x0, 0x4}}]}) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f00003af000/0x400000)=nil) eventfd2(0x0, 0x0) r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f00000000c0)={0x0, &(0x7f0000000280)=[@its_setup={0x82, 0x28, {0x400005, 0x8000000000403, 0x1}}], 0x28}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r7, 0x10000000000003, 0x100) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000240)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r9, 0xae80, 0x0) r11 = openat$kvm(0xffffffffffffff9c, 0x0, 0x9501, 0x0) r12 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vm(r13, 0x4018aee3, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x0, 0x0}) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f0000000000)=@attr_arm64={0x0, 0x4, 0x1, 0x0}) 1h9m25.844436931s ago: executing program 35 (id=445): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_RUN(r0, 0xae80, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1c) syz_kvm_setup_cpu$arm64(r1, r0, &(0x7f0000bfd000/0x400000)=nil, &(0x7f00000000c0)=[{0x0, &(0x7f0000000000)=[@its_send_cmd={0xaa, 0x28, {0xa, 0x0, 0x3, 0x3, 0x0, 0x660, 0x1}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x1590, 0x7, 0x6}}, @hvc={0x32, 0x40, {0xc4000012, [0x533, 0x2916, 0x100000001, 0xda3, 0x9]}}], 0x98}], 0x1, 0x0, &(0x7f0000000100)=[@featur1={0x1, 0x1}], 0x1) (async, rerun: 64) syz_kvm_vgic_v3_setup(r1, 0x4, 0x340) (async, rerun: 64) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x34) (async) r4 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f00000002c0)={0x0, &(0x7f0000000180)=[@its_setup={0x82, 0x28, {0x0, 0x1, 0x246}}, @svc={0x122, 0x40, {0x84000011, [0x5, 0xffffffff, 0x8, 0xfffffffffffffffd, 0x6]}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x0, 0x1, 0xd, 0x4, 0x32aa, 0x4}}, @its_setup={0x82, 0x28, {0x3, 0x3, 0x377}}, @eret={0xe6, 0x18, 0xe6}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x100, 0x0, 0x5}}, @eret={0xe6, 0x18, 0x1}], 0x118}, &(0x7f0000000300)=[@featur2={0x1, 0x40}], 0x1) ioctl$KVM_KVMCLOCK_CTRL(r4, 0xaead) (async, rerun: 64) ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, &(0x7f0000000340)={0xffffff7f, 0x6eddcf54}) (async, rerun: 64) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x40, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x20) r6 = eventfd2(0x5, 0x800) write$eventfd(r6, &(0x7f00000003c0)=0x361a, 0x8) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r4, 0x4018aee1, &(0x7f0000000400)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0x4}) (async) r7 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) mmap$KVM_VCPU(&(0x7f0000e0a000/0x1000)=nil, r7, 0xb, 0x4010, r0, 0x0) (async) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f0000000480)=@arm64_core={0x6030000000100034, &(0x7f0000000440)=0xe0000000000000}) (async) ioctl$KVM_CLEAR_DIRTY_LOG(r3, 0xc018aec0, &(0x7f00000008c0)={0x10004, 0x40, 0x300, &(0x7f00000004c0)=[0x404, 0x849, 0x1, 0x4, 0x7, 0x7, 0x4, 0xa, 0xfa, 0x100, 0x3, 0x5, 0xeb, 0x7e493872, 0xb362, 0x6, 0x0, 0x0, 0x2000000000000000, 0x1670, 0x0, 0x3, 0x7, 0x7, 0x5, 0x7fffffffffffffff, 0x8, 0x2, 0x6, 0x8001, 0x7, 0x5acf, 0x9, 0x6, 0x7, 0x1, 0x7, 0x3, 0x879d, 0x3, 0x401, 0xe, 0xf, 0x2, 0x1ff, 0xfffffffffffffffe, 0x6, 0x0, 0x2, 0x8, 0x1, 0x6, 0x1, 0x2, 0x1, 0x8, 0x4d, 0x94, 0x6, 0x5, 0x98d8, 0x5, 0x8, 0x7fffffffffffffff, 0xffffffffffffff80, 0x2, 0x0, 0x5, 0x7, 0x6, 0x7, 0x3ff, 0x0, 0x9, 0x5, 0xffffffffffffffff, 0xfffffffffffffffa, 0x3ff, 0x6, 0x8000000000000000, 0x80000000, 0x6, 0x7f, 0x6, 0x7cb, 0x5, 0xc, 0x2, 0x100000000, 0xfffffffffffffc00, 0x3, 0x10, 0x81, 0x1, 0x4, 0x2, 0x905, 0xca, 0x8000000000000, 0x2, 0x5, 0x1d29, 0x5, 0x100000000, 0x9, 0x8, 0xc41, 0xa8, 0x58964bd4, 0x7, 0x377, 0xffff, 0x3, 0x6, 0x8, 0x2, 0x7fff, 0x4ee, 0x8001, 0x7, 0x9, 0x7fffffffffffffff, 0x10000, 0x7, 0x6, 0x7f, 0xa]}) (async) ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead) (async, rerun: 32) ioctl$KVM_GET_SREGS(r4, 0x8000ae83, &(0x7f0000000900)) (async, rerun: 32) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000a40)={0x60000, 0x35000}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000a80), 0x80, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000ac0), 0x301002, 0x0) (async) r8 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000fc0)={0x0, &(0x7f0000000b00)=[@hvc={0x32, 0x40, {0x84000052, [0x4, 0x5, 0x6, 0xcd, 0x4]}}, @svc={0x122, 0x40, {0x76000091, [0xfffffffffffffff9, 0x88, 0x8000000000000001, 0x5, 0x5]}}, @smc={0x1e, 0x40, {0xc4000003, [0x8000000000000000, 0x7, 0x7ff, 0x1, 0x4]}}, @svc={0x122, 0x40, {0xc400000d, [0xf, 0x6, 0x6, 0x9, 0x5005]}}, @smc={0x1e, 0x40, {0x40002040, [0x5, 0x6, 0x2, 0xffffffff, 0xfe7]}}, @uexit={0x0, 0x18, 0xb}, @memwrite={0x6e, 0x30, @generic={0xc000, 0xf28, 0x0, 0x8}}, @eret={0xe6, 0x18, 0x35b}, @eret={0xe6, 0x18, 0x5}, @msr={0x14, 0x20, {0x603000000013c012, 0x67e1}}, @uexit={0x0, 0x18, 0x5}, @msr={0x14, 0x20, {0x6030000000138057, 0x7}}, @mrs={0xbe, 0x18, {0x603000000013df67}}, @msr={0x14, 0x20, {0x6030000000138066, 0x9}}, @mrs={0xbe, 0x18, {0x603000000013e687}}, @its_setup={0x82, 0x28, {0x0, 0x1, 0x86}}, @smc={0x1e, 0x40, {0xc5000020, [0x7, 0x5, 0x4, 0x4, 0x8001]}}, @mrs={0xbe, 0x18, {0x603000000013e6c1}}, @mrs={0xbe, 0x18, {0x603000000013c663}}, @smc={0x1e, 0x40, {0x80000001, [0x8, 0x5, 0x400, 0x8, 0x401]}}, @its_setup={0x82, 0x28, {0x2, 0x4, 0x288}}, @its_setup={0x82, 0x28, {0x2, 0x0, 0x49}}, @its_send_cmd={0xaa, 0x28, {0xb, 0x0, 0x4, 0x4, 0x2, 0x5, 0x2}}, @irq_setup={0x46, 0x18, {0x4, 0x29c}}, @msr={0x14, 0x20, {0x603000000013c2b0, 0xfffffffffffffffc}}, @code={0xa, 0x9c, {"e00300aa20a98fd20020b8f2610180d2020080d2830180d2e40180d2020000d4000028d5007008d500e0400d007008d500c087d20060b8f2010180d2220080d2c30180d2640180d2020000d4a0f68dd200a0b8f2010080d2620180d2630180d2a40180d2020000d400c8a05e203290d200a0b8f2610080d2220080d2a30180d2e40080d2020000d4"}}], 0x484}, &(0x7f0000001000)=[@featur2={0x1, 0x42}], 0x1) (async, rerun: 64) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r3, 0x4068aea3, &(0x7f0000001040)={0xa8, 0x0, 0x1}) (async, rerun: 64) ioctl$KVM_ARM_VCPU_INIT(r4, 0x4020aeae, &(0x7f00000010c0)={0x0, 0x8b}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x39) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 1h1m20.598293743s ago: executing program 4 (id=461): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = mmap$KVM_VCPU(&(0x7f0000ecd000/0x4000)=nil, 0x930, 0x1000002, 0x20010, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x27) r6 = syz_kvm_vgic_v3_setup(r5, 0xf, 0x40) ioctl$KVM_HAS_DEVICE_ATTR(r6, 0x4018aee3, &(0x7f00000001c0)=@attr_arm64={0x0, 0x2, 0x2, 0x0}) (async) syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000bc4000/0x400000)=nil) (async) r7 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r3, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r3, 0x0) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x8800, 0x0) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0xf0) (async) r9 = eventfd2(0x0, 0x0) close(r9) (async) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) (async) write$eventfd(r9, &(0x7f0000000180)=0x5, 0x8) (async) r10 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000100)={0x0, &(0x7f0000000000)=[@its_setup={0x82, 0x28, {0x1, 0x800000004, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x3, 0x40000000, 0x10000, 0x0, 0x0, 0x80000002}}], 0x50}, 0x0, 0x0) (async) syz_kvm_vgic_v3_setup(r11, 0x1, 0x100) (async) ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f0000000180)={0x8}) (async) r13 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x2e) r15 = ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x2) syz_kvm_setup_cpu$arm64(r14, r15, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000100)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_ONE_REG(r15, 0x4010aeac, &(0x7f0000000140)=@riscv64_core={0x803000000020000c, &(0x7f0000000200)=0x6}) 1h1m0.08648857s ago: executing program 5 (id=462): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = mmap$KVM_VCPU(&(0x7f0000cf5000/0x1000)=nil, 0x930, 0x280000b, 0x13, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f00000001c0)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000ffc000/0x1000)=nil, 0x930, 0xf, 0x11, r2, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x20000) ioctl$KVM_SET_DEVICE_ATTR_vm(r5, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x9, 0x7, 0x3}}) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1b37f3, 0x0) munmap$KVM_VCPU(0x0, 0x21001000) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x4f832, 0xffffffffffffffff, 0x2000) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40800, 0x0) openat$kvm(0x0, &(0x7f0000000240), 0x139880, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r7 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x0, 0x0}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe2301, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r10, 0x894c, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0x8004b709, 0x0) write$eventfd(0xffffffffffffffff, &(0x7f0000000280), 0x8) r11 = syz_kvm_add_vcpu$arm64(r7, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r11, 0x4018aee1, &(0x7f0000000000)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0x20e4586c}) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) ioctl$KVM_CREATE_VM(r6, 0x40049409, 0x6) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000180)=@x86={0x9, 0x6, 0x7, 0x0, 0xfffffe01, 0x1, 0x1, 0xf3, 0xae, 0x1, 0xb0, 0x8, 0x0, 0x6, 0x6, 0x50, 0x4, 0x9, 0x0, '\x00', 0x4, 0x4}) 1h0m59.012320323s ago: executing program 4 (id=463): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x161642, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x2f) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r4, 0x0) openat$kvm(0x0, &(0x7f0000000180), 0x670e94d674961125, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0xe4) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000140)={0x4, 0x0, [{0x1, 0x2, 0x1, 0x0, @adapter={0x7, 0x100000000, 0x8, 0x0, 0x7}}, {0x9, 0x2, 0x1, 0x0, @adapter={0xd4ff, 0x6d39, 0x2, 0x0, 0x7f}}, {0x3, 0x0, 0x1, 0x0, @sint={0x6, 0x8000}}, {0x0, 0x0, 0x0, 0x0, @adapter={0x8f9, 0xe808e8f, 0x3f, 0x7, 0x332ccd89}}]}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x3}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x9b, 0xf, 0x0, 0x5, 0x8, 0x82, 0x46, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x900001, 0x0, 0x0, 0x3, 0xa, 0x8, '\x00', 0x1, 0x93}) write$eventfd(r7, &(0x7f00000001c0)=0x3, 0xfdef) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000000)={0x10000, 0x5, 0x0, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) 1h0m45.471775347s ago: executing program 5 (id=464): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = mmap$KVM_VCPU(&(0x7f0000dd4000/0x3000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_vgic_v3_setup(r4, 0x4, 0x19edc75233277a35) syz_kvm_vgic_v3_setup(r4, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000100)={0xa}) ioctl$KVM_SIGNAL_MSI(r4, 0x4020aea5, &(0x7f0000000200)={0x8090040, 0x0, 0x0, 0x1}) openat$kvm(0x0, 0x0, 0x7d1101, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0xffffffffffffffff) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000240)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) r8 = syz_kvm_vgic_v3_setup(r6, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000100)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000180)=0x4}) ioctl$KVM_SIGNAL_MSI(r6, 0x4020aea5, &(0x7f0000000200)={0x8090040, 0x0, 0x0, 0x1}) r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r11 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x0, 0x380000c, 0x11, r10, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r11, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r10, 0x0) r12 = eventfd2(0x0, 0x0) close(r8) mmap$KVM_VCPU(&(0x7f0000e93000/0x3000)=nil, 0x50000, 0x3, 0x4002031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) write$eventfd(r12, &(0x7f0000000180)=0x5, 0xfffffde3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0) 1h0m29.783079645s ago: executing program 4 (id=465): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@its_setup={0x82, 0x28, {0x0, 0x1, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x0, 0x5, 0x4000000a, 0x0, 0x8, 0x4}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) 1h0m18.441473128s ago: executing program 5 (id=466): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x4}}], 0x28}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, &(0x7f0000000140)) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x2, 0x4f832, 0xffffffffffffffff, 0x1000000) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x8, 0x88, &(0x7f0000000000)=0x10}) 1h0m15.403127811s ago: executing program 4 (id=467): munmap$KVM_VCPU(0x0, 0x1000000000) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000140)={0x0, &(0x7f0000000200)=[@smc={0x1e, 0x40, {0xc4000001, [0x10000, 0xfff, 0x7e8, 0x7, 0x4000004]}}], 0x40}, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x3, 0x2}}, @its_send_cmd={0xaa, 0x28, {0x4, 0x1, 0x80000, 0xfffc, 0x0, 0x8, 0x2}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r6, 0x1, 0x100) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000240)=0x8080000}) ioctl$KVM_RUN(r8, 0xae80, 0x0) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_ARM_VCPU_INIT(r11, 0x4020aeae, &(0x7f0000000040)={0x5}) ioctl$KVM_RUN(r11, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0) 1h0m7.24457388s ago: executing program 5 (id=468): openat$kvm(0x0, 0x0, 0x0, 0x0) (async) r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x80002, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x4) ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r3, 0x4068aea3, &(0x7f00000002c0)) r4 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) (async) r5 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r8, 0x4018aee1, &(0x7f00000001c0)=@attr_pmu_filter={0x0, 0x0, 0x2, 0x0}) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r9 = openat$kvm(0x0, &(0x7f0000000040), 0x20200, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) r11 = syz_kvm_vgic_v3_setup(r10, 0x3, 0x40) ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f0000000000)=@attr_other={0x0, 0x6, 0x382bc664, &(0x7f0000000100)=0xd31f}) (async) r12 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_ARM_SET_COUNTER_OFFSET(r13, 0x8020aeaf, 0xfffffffffffffffe) (async) syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000100)={0x0, 0x81}) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 59m51.504988401s ago: executing program 4 (id=469): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x9) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r2, 0x4018aee2, &(0x7f0000000100)=@attr_irq_timer={0x0, 0x1, 0x1, &(0x7f0000000280)=0x18}) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x80, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000bfe000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000040)={0x0, &(0x7f0000000340)=[@its_setup={0x82, 0x28, {0x4, 0x0, 0x179}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80e0000, 0xa0, 0x45b, 0xc}}], 0x58}, 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x16) r8 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil) syz_kvm_vgic_v3_setup(r9, 0x3, 0x320) ioctl$KVM_CAP_ARM_MTE(r9, 0x4068aea3, &(0x7f00000002c0)) syz_kvm_vgic_v3_setup(r9, 0x1, 0x100) r10 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x5}) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000140)={0x8, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r15, 0x400454cb, 0x23) ioctl$KVM_GET_ONE_REG(r12, 0x4010aeab, &(0x7f0000000100)=@arm64_sys={0x603000000013df10, 0x0}) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000000)={0x8, 0xffffffffffffffff}) ioctl$KVM_GET_SREGS(r7, 0x8000ae83, &(0x7f0000000440)) ioctl$KVM_SET_DEVICE_ATTR(r16, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) 59m48.266693067s ago: executing program 5 (id=470): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f00000001c0)={0x8, 0xffffffffffffffff}) (async) r5 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x29) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) (async) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) mmap$KVM_VCPU(0x0, 0x50000, 0x3, 0x11, r9, 0x0) (async) r10 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x5) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r10, 0x4018aee2, &(0x7f0000000140)=@attr_irq_timer={0x0, 0x1, 0x1, 0x0}) (async) ioctl$KVM_HAS_DEVICE_ATTR(r4, 0x4018aee3, &(0x7f0000000240)=@attr_arm64={0x0, 0x0, 0x4, 0x0}) 59m29.152970359s ago: executing program 5 (id=471): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x21) close(0xffffffffffffffff) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r5 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r4, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000000080)="fb4149dd033be3ac2ca5a22332a70000000000000071b14c94a6ab8031d1dfd90f05000000010000521ce16f8f1f449a7a8356733169d22627e700", 0x0, 0x29) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r4, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x4c4882, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@eret={0xe6, 0x18, 0x7}], 0x18}, &(0x7f0000000300)=[@featur2={0x1, 0x45}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r7, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) ioctl$KVM_RUN(r7, 0xae80, 0x0) 59m26.859111606s ago: executing program 4 (id=472): ioctl$KVM_GET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000140)=@attr_pmu_init) (async) ioctl$KVM_GET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000140)=@attr_pmu_init) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x28081, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000a0f000/0x400000)=nil) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000769000/0x400000)=nil) (async) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000769000/0x400000)=nil) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x31) syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=[@featur2={0x1, 0x5}], 0x1) (async) syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=[@featur2={0x1, 0x5}], 0x1) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000380)={0x0, &(0x7f0000000100)=[@smc={0x1e, 0x40, {0x84000004, [0x3, 0x3, 0x2, 0x3f8b, 0xf7b0]}}], 0x40}, &(0x7f00000000c0)=[@featur2={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) 58m40.621819931s ago: executing program 36 (id=471): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x21) close(0xffffffffffffffff) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r5 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r4, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000000080)="fb4149dd033be3ac2ca5a22332a70000000000000071b14c94a6ab8031d1dfd90f05000000010000521ce16f8f1f449a7a8356733169d22627e700", 0x0, 0x29) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r4, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x4c4882, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@eret={0xe6, 0x18, 0x7}], 0x18}, &(0x7f0000000300)=[@featur2={0x1, 0x45}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r7, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) ioctl$KVM_RUN(r7, 0xae80, 0x0) 58m33.801940114s ago: executing program 37 (id=472): ioctl$KVM_GET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000140)=@attr_pmu_init) (async) ioctl$KVM_GET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000140)=@attr_pmu_init) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x28081, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000a0f000/0x400000)=nil) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000769000/0x400000)=nil) (async) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000769000/0x400000)=nil) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x31) syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=[@featur2={0x1, 0x5}], 0x1) (async) syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=[@featur2={0x1, 0x5}], 0x1) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000380)={0x0, &(0x7f0000000100)=[@smc={0x1e, 0x40, {0x84000004, [0x3, 0x3, 0x2, 0x3f8b, 0xf7b0]}}], 0x40}, &(0x7f00000000c0)=[@featur2={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) 26m12.434528654s ago: executing program 7 (id=630): r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x3}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r2, 0x400454d0, 0x2f) r3 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000300)="fb4149dd033b8986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67525673312b01040000000000002627e7000000000000000200", 0x0, 0xfffffffffffffe73) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x12, r5, 0x0) r6 = eventfd2(0x10001, 0x0) close(r6) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r8, 0x4068aea3, &(0x7f0000000080)={0xa8, 0x0, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000040)={0x5, 0x1, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$arm64(r8, 0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000500)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x0) write$eventfd(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffffe, 0x8) r9 = eventfd2(0x0, 0x0) close(r9) r10 = eventfd2(0x0, 0x0) close(r10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xc0c82, 0x0) mmap$KVM_VCPU(&(0x7f0000008000/0x3000)=nil, 0x930, 0x2000004, 0x2011, r10, 0x0) mmap$KVM_VCPU(&(0x7f0000008000/0x3000)=nil, 0x930, 0x2000004, 0x2011, r9, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) 26m3.025580472s ago: executing program 6 (id=631): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000b80)={0x0, &(0x7f00000002c0)=[@hvc={0x32, 0x40, {0x84000003, [0xa00000000, 0x4, 0x4, 0x9, 0x4d]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r7, 0x4068aea3, &(0x7f0000000100)={0xef, 0x0, 0x7}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x181b03, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r11, 0x400454d8, 0x110c230005) ioctl$KVM_ARM_VCPU_INIT(r8, 0x4020aeae, &(0x7f0000000080)={0x5}) ioctl$KVM_SET_ONE_REG(r8, 0x4010aeac, &(0x7f0000000280)=@arm64_sys={0x603000000013c006, &(0x7f0000000240)=0x2}) r12 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r13 = syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil) r14 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x101) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000300)=@attr_other={0x0, 0x2, 0x1, &(0x7f00000002c0)=0x2}) r15 = eventfd2(0x31e, 0x80801) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={r15, 0xc8, 0x2}) ioctl$KVM_IOEVENTFD(r14, 0x4040ae79, &(0x7f0000000040)={0xa, 0x30000, 0x1, r15, 0xd}) syz_kvm_add_vcpu$arm64(r13, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r12, 0xc008ae67, &(0x7f0000000000)={0x80000000, 0x10000}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 25m50.307524572s ago: executing program 7 (id=632): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x101000, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x300, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x28) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r4, 0x4068aea3, &(0x7f0000000280)={0xdf, 0x0, 0x2000}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) close(0x4) close(0x5) syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) (async) r5 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000180)={0x0, &(0x7f00000002c0)}, &(0x7f0000000000)=[@featur2={0x1, 0x40}], 0x1) (async) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000180)={0x0, &(0x7f00000002c0)}, &(0x7f0000000000)=[@featur2={0x1, 0x40}], 0x1) ioctl$KVM_RUN(r6, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) r10 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000000)=@riscv64_aia_csr={0x8030000003010006, 0x0}) (async) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000000)=@riscv64_aia_csr={0x8030000003010006, 0x0}) ioctl$KVM_CREATE_VM(r10, 0x40086602, 0x20000000) ioctl$KVM_CREATE_VM(r9, 0x54e3, 0x110c230008) (async) ioctl$KVM_CREATE_VM(r9, 0x54e3, 0x110c230008) r11 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SIGNAL_MSI(r11, 0x4020aea5, &(0x7f0000000080)={0xdddd0000, 0xd000, 0x1, 0x1, 0xff}) (async) ioctl$KVM_SIGNAL_MSI(r11, 0x4020aea5, &(0x7f0000000080)={0xdddd0000, 0xd000, 0x1, 0x1, 0xff}) 25m41.642845101s ago: executing program 6 (id=633): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0x40087602, 0x20000000) r2 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r5, 0x4010aeac, &(0x7f0000000a80)=@arm64_core={0x6030000000100006, &(0x7f0000000a40)=0x7}) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x48800, 0x0) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x2}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x1, 0x80000, 0xfffd, 0x0, 0x0, 0x2}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r6, 0x0, 0x280) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 25m28.452945777s ago: executing program 7 (id=634): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = syz_kvm_vgic_v3_setup(0xffffffffffffffff, 0x3, 0x2c0) r2 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xc, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x20000000) ioctl$KVM_SET_SIGNAL_MASK(r4, 0x4004ae8b, &(0x7f0000000000)) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000bfe000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) munmap(&(0x7f0000481000/0x1000)=nil, 0x1000) munmap(&(0x7f0000136000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) mmap$KVM_VCPU(&(0x7f0000f7e000/0x3000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) close(r1) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r7 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x0, 0x1, 0x10, r6, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f00000001c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e700", 0x0, 0xfffffd91) mmap$KVM_VCPU(&(0x7f0000f29000/0x1000)=nil, 0x0, 0x1000009, 0x16831, 0xffffffffffffffff, 0x0) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) r8 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f00001b1000/0x400000)=nil) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) r9 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r8, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@mrs={0xbe, 0x18, {0x4661}}, @msr={0x14, 0x20, {0x603000000013d807, 0x3}}, @irq_setup={0x46, 0x18, {0x4, 0x155}}, @hvc={0x32, 0x40, {0x8, [0xa03a, 0x1, 0x50, 0x3, 0xd2]}}, @code={0xa, 0x9c, {"a0ab9ed200e0b8f2410080d2e20080d2430080d2e40080d2020000d4007008d5007008d5000028d5400991d20020b0f2c10180d2c20180d2230180d2240080d2020000d40070204e007008d500cf81d200e0b0f2010180d2620080d2e30180d2c40180d2020000d4000040ade0b986d200a0b0f2610080d2a20180d2e30080d2c40080d2020000d4"}}, @msr={0x14, 0x20, {0x603000000013c288, 0xffffffffffffffff}}, @uexit={0x0, 0x18, 0x8000000000000000}, @svc={0x122, 0x40, {0x43008046, [0x4, 0xa, 0xd96, 0x3]}}, @mrs={0xbe, 0x18, {0x603000000013e289}}, @mrs={0xbe, 0x18, {0x603000000013df59}}, @code={0xa, 0x9c, {"a0739fd20000b8f2410180d2620080d2a30180d2640080d2020000d4008008d5e04786d200a0b0f2410080d2c20180d2a30080d2c40080d2020000d4000028d5008008d50000c03d20ca85d200a0b0f2410180d2420080d2a30180d2c40080d2020000d4007008d5a04990d20080b0f2e10180d2020180d2e30080d2040180d2020000d40058201e"}}, @uexit={0x0, 0x18, 0x1}, @code={0xa, 0x6c, {"0040204e007008d5008008d5000008d5007008d5008008d520e39fd200c0b8f2210080d2e20180d2630080d2440180d2020000d400c0221e40f090d200a0b0f2a10180d2a20180d2430080d2440080d2020000d4000008d5"}}, @irq_setup={0x46, 0x18, {0x0, 0x3c9}}, @msr={0x14, 0x20, {0x603000000013c64b, 0x4}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x1, 0x1, 0x9, 0x1, 0x7, 0x1}}, @eret={0xe6, 0x18, 0x4}, @smc={0x1e, 0x40, {0x84000008, [0x10001, 0x401, 0x5000000000, 0xf, 0x200]}}, @smc={0x1e, 0x40, {0x4000000, [0x3, 0x1ac0, 0x9, 0x0, 0x8]}}], 0x3ec}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r10, 0x1, 0x100) 25m25.432811023s ago: executing program 6 (id=635): r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@mrs={0xbe, 0x18, {0x6030000000138010}}], 0x18}, 0x0, 0x0) r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) r6 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r5, 0x3, 0x11, r4, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$arm64(r4, r6, 0xffffffffffffffff) r7 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_add_vcpu$arm64(r0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@mrs={0xbe, 0x18, {0x603000000013c807}}], 0x18}, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 25m8.244947223s ago: executing program 6 (id=636): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000100)={0x0, &(0x7f0000000140)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x2, 0x100) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x200100000000002d) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000b80)={0x0, &(0x7f0000000080)=[@hvc={0x32, 0x0, {0x84000001, [0x9, 0x8, 0x5, 0x603c8354, 0x200]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_IRQ_LINE(r4, 0x4008ae61, &(0x7f0000000000)={0x0, 0x100}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x400202, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x18) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CAP_PTP_KVM(r4, 0x4068aea3, &(0x7f0000000180)) 25m8.242690583s ago: executing program 7 (id=637): munmap$KVM_VCPU(0x0, 0x1000000000) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) 24m59.721502175s ago: executing program 7 (id=638): r0 = openat$kvm(0x0, &(0x7f0000000180), 0x582, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x2312e000, 0x1000}) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x100000c, 0x6832, 0xffffffffffffffff, 0x0) r2 = eventfd2(0xfffffffa, 0x80001) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) openat$kvm(0x0, &(0x7f0000000040), 0x240100, 0x0) (async) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x240100, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) (async) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r4 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r6, 0x400454d1, 0x110c230004) (async) ioctl$KVM_CREATE_VM(r6, 0x400454d1, 0x110c230004) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0x401c5820, 0xffff98600fff) write$eventfd(r2, &(0x7f0000000200)=0x8, 0x8) eventfd2(0xc, 0x1) (async) eventfd2(0xc, 0x1) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x2, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f0000000200)=@attr_riscv64=@attr_ctrl={0x0, 0x1, 0x1, 0xfffffffffffffffe}) (async) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f0000000200)=@attr_riscv64=@attr_ctrl={0x0, 0x1, 0x1, 0xfffffffffffffffe}) close(0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000240)={0x1fd, 0x2, 0xa000, 0x1000, &(0x7f0000d35000/0x1000)=nil, 0x5}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) (async) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_GSI_ROUTING(r10, 0x4008ae6a, 0x0) r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000b80)={0x0, &(0x7f0000000040)=[@smc={0x1e, 0x40, {0xc4000004, [0x40000099a, 0x4, 0x9, 0x89, 0xffffffffffffffff]}}], 0x40}, &(0x7f0000000bc0)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r12, 0xae80, 0x0) ioctl$KVM_GET_DEVICE_ATTR(r8, 0x4018aee2, &(0x7f0000000100)=@attr_arm64={0x0, 0x6, 0x2, &(0x7f0000000080)=0xacf4}) 24m56.403265696s ago: executing program 6 (id=639): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xd7, 0x80000001}) munmap$KVM_VCPU(0x0, 0x1000000000) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000040)={0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r6, 0x4020aeae, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x7, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_DEVICE_ATTR_vm(r4, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x217, 0x400, &(0x7f0000000000)=0x77}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, r6, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000010000/0x4000)=nil, 0x930, 0x7, 0x4010, r7, 0x0) 24m44.744452548s ago: executing program 7 (id=640): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_vgic_v3_setup(r3, 0x3, 0xc0) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)=0x9}) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x33) ioctl$KVM_ASSIGN_SET_MSIX_NR(r5, 0x4008ae73, &(0x7f0000000000)={0x4}) r6 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r6, &(0x7f00000000c0)={0x0, &(0x7f0000000500)=[@mrs={0xbe, 0x18, {0x603000000013c608}}, @uexit={0x0, 0x18, 0x1}, @its_send_cmd={0xaa, 0x28, {0x0, 0x0, 0x1, 0xe, 0xff, 0x4, 0x1}}], 0x58}, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x601, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x26) ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000100)={0x7, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f0000000180)=@attr_other={0x0, 0x9, 0x2, &(0x7f0000000300)=0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x23766, 0x3, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x29) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x1) syz_kvm_vgic_v3_setup(r12, 0x4, 0x80) ioctl$KVM_IRQ_LINE(r12, 0x4008ae61, &(0x7f0000000040)={0x2000010, 0xbb28}) ioctl$KVM_GET_DIRTY_LOG(r8, 0x4010ae42, &(0x7f00000000c0)={0x1fe, 0x0, &(0x7f0000cb7000/0x2000)=nil}) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) ioctl$KVM_CAP_HALT_POLL(r14, 0x4068aea3, &(0x7f0000000000)={0xdf, 0x0, 0x2}) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x9000000) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) 24m37.37230676s ago: executing program 6 (id=641): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) (async) r3 = openat$kvm(0x0, 0x0, 0x161681, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0xfffffffffffffffc) r4 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) syz_kvm_vgic_v3_setup(r1, 0x1, 0x0) (async) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x2c) (async) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, 0xffffffffffffffff, 0x0) (async, rerun: 64) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async, rerun: 64) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x27) r10 = syz_kvm_vgic_v3_setup(r9, 0xf, 0x40) ioctl$KVM_HAS_DEVICE_ATTR(r10, 0x4018aee3, &(0x7f0000000280)=@attr_other={0x0, 0x4, 0x6, 0x0}) (async) r11 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r11, 0x4010aeac, &(0x7f0000000100)=@arm64_fp_extra={0x60200000001000d5, &(0x7f00000001c0)=0x4}) (async) ioctl$KVM_SET_DEVICE_ATTR_vm(r6, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x16, 0x4, 0x1}}) (async, rerun: 64) r12 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (rerun: 64) syz_kvm_setup_cpu$arm64(r6, r12, &(0x7f0000bfe000/0x400000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0xffffffffffffff8a}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000bfd000/0x400000)=nil) (async, rerun: 64) ioctl$KVM_RUN(r12, 0xae80, 0x0) (async, rerun: 64) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r4, 0x4018aee1, &(0x7f0000000000)=@attr_pmu_irq={0x0, 0x0, 0x0, &(0x7f0000000040)=0xe7}) ioctl$KVM_ARM_PREFERRED_TARGET(0xffffffffffffffff, 0x8020aeaf, &(0x7f00000006c0)) (async) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r4, 0x4018aee1, &(0x7f0000000280)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0x7}) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f0000000080)={0x6, 0x7}) 23m57.88165562s ago: executing program 38 (id=640): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_vgic_v3_setup(r3, 0x3, 0xc0) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)=0x9}) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x33) ioctl$KVM_ASSIGN_SET_MSIX_NR(r5, 0x4008ae73, &(0x7f0000000000)={0x4}) r6 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r6, &(0x7f00000000c0)={0x0, &(0x7f0000000500)=[@mrs={0xbe, 0x18, {0x603000000013c608}}, @uexit={0x0, 0x18, 0x1}, @its_send_cmd={0xaa, 0x28, {0x0, 0x0, 0x1, 0xe, 0xff, 0x4, 0x1}}], 0x58}, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x601, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x26) ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000100)={0x7, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f0000000180)=@attr_other={0x0, 0x9, 0x2, &(0x7f0000000300)=0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x23766, 0x3, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x29) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x1) syz_kvm_vgic_v3_setup(r12, 0x4, 0x80) ioctl$KVM_IRQ_LINE(r12, 0x4008ae61, &(0x7f0000000040)={0x2000010, 0xbb28}) ioctl$KVM_GET_DIRTY_LOG(r8, 0x4010ae42, &(0x7f00000000c0)={0x1fe, 0x0, &(0x7f0000cb7000/0x2000)=nil}) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) ioctl$KVM_CAP_HALT_POLL(r14, 0x4068aea3, &(0x7f0000000000)={0xdf, 0x0, 0x2}) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x9000000) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) 23m47.893565429s ago: executing program 39 (id=641): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) (async) r3 = openat$kvm(0x0, 0x0, 0x161681, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0xfffffffffffffffc) r4 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) syz_kvm_vgic_v3_setup(r1, 0x1, 0x0) (async) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x2c) (async) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, 0xffffffffffffffff, 0x0) (async, rerun: 64) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async, rerun: 64) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x27) r10 = syz_kvm_vgic_v3_setup(r9, 0xf, 0x40) ioctl$KVM_HAS_DEVICE_ATTR(r10, 0x4018aee3, &(0x7f0000000280)=@attr_other={0x0, 0x4, 0x6, 0x0}) (async) r11 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r11, 0x4010aeac, &(0x7f0000000100)=@arm64_fp_extra={0x60200000001000d5, &(0x7f00000001c0)=0x4}) (async) ioctl$KVM_SET_DEVICE_ATTR_vm(r6, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x16, 0x4, 0x1}}) (async, rerun: 64) r12 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (rerun: 64) syz_kvm_setup_cpu$arm64(r6, r12, &(0x7f0000bfe000/0x400000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0xffffffffffffff8a}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000bfd000/0x400000)=nil) (async, rerun: 64) ioctl$KVM_RUN(r12, 0xae80, 0x0) (async, rerun: 64) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r4, 0x4018aee1, &(0x7f0000000000)=@attr_pmu_irq={0x0, 0x0, 0x0, &(0x7f0000000040)=0xe7}) ioctl$KVM_ARM_PREFERRED_TARGET(0xffffffffffffffff, 0x8020aeaf, &(0x7f00000006c0)) (async) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r4, 0x4018aee1, &(0x7f0000000280)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0x7}) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f0000000080)={0x6, 0x7}) 3m5.551675523s ago: executing program 8 (id=701): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0), 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0xffffffffffbffffc, 0x120) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) r4 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0xc2881, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = openat$kvm(0x0, &(0x7f0000000140), 0x101282, 0x0) r10 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil) r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000080)={0x0, &(0x7f0000000200)=[@svc={0x122, 0x40, {0x800, [0xffffffeffffffff8, 0x8, 0x8000000005, 0x5, 0x400]}}], 0x40}, 0x0, 0x0) r12 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r9, 0xae04) mmap$KVM_VCPU(&(0x7f0000c0b000/0x1000)=nil, r12, 0x3, 0x40b2811, r11, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) r13 = syz_kvm_add_vcpu$arm64(r4, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x3, 0x1, 0x1}}], 0x28}, 0x0, 0x0) ioctl$KVM_RUN(r13, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) r14 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r15, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) mmap$KVM_VCPU(0x0, r12, 0x2, 0x10031, 0xffffffffffffffff, 0x0) r16 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r17 = ioctl$KVM_CREATE_VM(r16, 0xae01, 0x0) syz_kvm_setup_cpu$arm64(r17, 0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 2m37.888556911s ago: executing program 8 (id=703): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000300)="fb4149dd033b8986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67525673312b01040000000000002627e7000000000000000200", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x12, r2, 0x0) r4 = eventfd2(0x0, 0x0) close(r4) r5 = eventfd2(0x0, 0x0) close(r5) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x109272, 0x1f01) write$eventfd(r5, &(0x7f0000000180)=0x6, 0x8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0) write$eventfd(r4, &(0x7f0000000100)=0xfffffffffffffffe, 0xfdef) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) eventfd2(0x7, 0x80001) 2m37.440266405s ago: executing program 9 (id=704): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x145600, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r1, 0x4018aee1, 0xfffffffffffffffe) 2m22.769826661s ago: executing program 9 (id=705): r0 = openat$kvm(0x0, &(0x7f0000000280), 0x6161e0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r2, 0x4068aea3, &(0x7f0000000100)={0xef, 0x0, 0x7}) (async) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000080)={0x0, &(0x7f0000000600)=[@mrs={0xbe, 0x18, {0x603000000013c006}}], 0x18}, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 32) r6 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0) (rerun: 32) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0xb, 0x30d2a4fbfbfad6b8, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_ARM_VCPU_INIT(r8, 0x4020aeae, &(0x7f0000000040)={0x5}) ioctl$KVM_RUN(r8, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async, rerun: 64) r9 = ioctl$KVM_GET_STATS_FD_vm(r5, 0xaece) (rerun: 64) ioctl$KVM_ARM_VCPU_INIT(r9, 0x4020aeae, &(0x7f0000000000)={0x5, 0x8}) (async) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xd7, 0x80000001}) (async) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) (async) r12 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) (async) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x1) r15 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x1800002, 0x11, r14, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r15, 0x20, &(0x7f00000001c0)="d6011813013c360000000000f0ff8000802346cbd98748c77999581bc42baeecff00000700000000004800000001000000000000000000000000000000000000002300", 0x0, 0x48) (async) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r14, 0x0) 2m15.106155229s ago: executing program 8 (id=706): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@smc={0x1e, 0x0, {0x84000053, [0x4, 0x6, 0xffffffffffffffff, 0x400, 0xfffffffffffff801]}}], 0xfffffee6}, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x100a83, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f00000001c0)="f21bc75509bf71c9d70236fc044842da63ff2f677e80ab404d37b2e3f137a13bc2b875c2357c6e1100000000000000000000000000000000000000000000000000ff00", 0x0, 0x48) ioctl$KVM_REGISTER_COALESCED_MMIO(r7, 0x4010ae67, &(0x7f00000001c0)={0x5000, 0x102000, 0x20081}) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r8, &(0x7f00000001c0)=0x8100000001, 0x51a8) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f00000002c0)={0x2, 0x0, [{0x3, 0x1, 0x0, 0x0, @adapter={0x0, 0x0, 0x8, 0x5, 0x3}}, {0x3, 0x5, 0x0, 0x0, @msi={0x1, 0x5, 0x0, 0xcfb}}]}) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000bff000/0x400000)=nil) 1m56.137759285s ago: executing program 9 (id=707): r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r0, &(0x7f0000000080)={0x0, &(0x7f0000000800)=[@mrs={0xbe, 0x18, {0x603000000013dce9}}], 0x18}, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000280), 0x28000, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000080), 0x101e40, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x28) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000b75000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000140)={0x0, &(0x7f00000003c0)=[@eret={0xe6, 0x18, 0x5}, @memwrite={0x6e, 0x30, @generic={0x2a22ffff, 0x8ef, 0x401, 0x8}}, @hvc={0x32, 0x40, {0x86000000, [0x3, 0x9, 0x9, 0x8001, 0x9]}}, @hvc={0x32, 0x40, {0x84007ff3, [0x4, 0xfffffffffffff30a, 0x7, 0x4, 0x9]}}, @code={0xa, 0x9c, {"000028d5000008d5008008d5801389d20020b8f2610080d2c20080d2a30180d2240080d2020000d40080209b808a86d200a0b8f2010180d2020180d2430080d2040180d2020000d400000029201987d200a0b8f2a10180d2220180d2c30180d2040180d2020000d4000008d560819fd20000b8f2c10180d2220080d2a30180d2a40080d2020000d4"}}, @code={0xa, 0x84, {"007008d5007008d5007008d50000c06c0014c05a80ac99d20000b0f2c10180d2a20080d2430080d2440180d2020000d4007008d5401f92d20000b8f2e10180d2e20180d2830180d2a40180d2020000d4e04984d20040b0f2c10180d2c20080d2630080d2240180d2020000d400004008"}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x8100000, 0x40, 0xfffffffffffffc01, 0x4}}, @irq_setup={0x46, 0x18, {0x4, 0x1a4}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x0, 0x3, 0x7, 0x9, 0x100, 0x4}}, @mrs={0xbe, 0x18, {0x603000000013df58}}, @irq_setup={0x46, 0x18, {0x4, 0x1df}}, @mrs={0xbe, 0x18, {0x603000000013e518}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x50, 0x2, 0x2}}, @irq_setup={0x46, 0x18, {0x4, 0x5e}}, @irq_setup={0x46, 0x18, {0x1, 0x309}}, @its_send_cmd={0xaa, 0x28, {0xb, 0x1, 0x4, 0x5, 0x10000, 0x6, 0x1}}, @uexit={0x0, 0x18, 0x8}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x180, 0x5, 0x6}}, @code={0xa, 0xb4, {"600087d200a0b8f2210180d2620080d2c30180d2c40180d2020000d480ce91d20060b0f2010080d2a20180d2c30180d2640180d2020000d4008c006f008008d5e0998dd200a0b0f2210180d2620080d2830080d2440080d2020000d4007008d5e0bf91d200a0b0f2210080d2220180d2230080d2e40080d2020000d40034207e80ca90d200c0b8f2e10080d2c20080d2030080d2840180d2020000d4007008d5"}}], 0x424}, 0x0, 0x0) r8 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil) r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x2}}, @msr={0x14, 0x20, {0x603000000013dce5, 0x8000}}], 0x40}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) r12 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000c00000/0x400000)=nil) r15 = syz_kvm_add_vcpu$arm64(r14, &(0x7f0000000180)={0x0, &(0x7f0000000380)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x7ffc}}, @msr={0x14, 0x20, {0x603000000013dce0, 0x10001}}], 0x40}, &(0x7f0000000000)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r15, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) ioctl$KVM_RUN(r15, 0xae80, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r11, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) ioctl$KVM_RUN(r11, 0xae80, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r16 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x1000000) r17 = syz_kvm_setup_syzos_vm$arm64(r16, &(0x7f0000c00000/0x400000)=nil) r18 = syz_kvm_add_vcpu$arm64(r17, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x18, {"7f2003d5"}}], 0x18}, 0x0, 0x0) ioctl$KVM_RUN(r18, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r16, 0xc008ae67, &(0x7f0000000100)={0x0, 0x81}) 1m51.453127252s ago: executing program 8 (id=708): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x101800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000700)={0x7, 0xffffffffffffffff}) munmap$KVM_VCPU(0x0, 0x1000000000) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x4, 0x0, 0x0}) ioctl$KVM_GET_DEVICE_ATTR(r4, 0x4018aee2, &(0x7f0000000340)=@attr_riscv64=@attr_imsic={0x0, 0x1, 0x3, &(0x7f0000000080)=0x9}) r5 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000740)={0x10002, 0x1c0, 0x0, &(0x7f0000000340)=[0x5, 0x3cdf73e0, 0x9, 0x10, 0xfffffffffffffff2, 0xfffffffffffffffd, 0x2, 0x32, 0x8, 0x5, 0x100000001, 0x8a02, 0x7, 0xf9, 0x4, 0x100, 0x5, 0x9, 0x1c0, 0xffff, 0x2, 0x9, 0x100000001, 0x8000000000000001, 0xe, 0x1e, 0x7, 0x7ef, 0x10000, 0x4, 0x7, 0x2, 0x8, 0x1, 0xfffffffffffffffe, 0xff, 0x9, 0x9de6, 0x5, 0xa, 0x401, 0x6, 0x6, 0x1, 0x2, 0x7fffffff, 0x4, 0x3, 0x3, 0x4, 0xfffffffffffffff3, 0x2, 0xfffffffffffffffb, 0x5, 0x1, 0x800, 0x6f09, 0x60217238, 0x8, 0x7ff, 0xfffffffffffffffb, 0x0, 0x38aa, 0x9, 0xffffffffffffffff, 0x400, 0xfff, 0x3ff, 0x7fff, 0x1, 0x2, 0x0, 0x7, 0x9, 0xbf, 0x800, 0x4, 0x3, 0x3, 0x6, 0x101, 0x80000001, 0x6, 0x487, 0x7cc2f64e, 0x6, 0x8, 0xffffffff, 0x7, 0x4, 0x6b, 0x2, 0x0, 0xa8, 0x4, 0xfffffffffffffff8, 0x5, 0x40, 0x8, 0xffffffffffffffff, 0x7fffffffffffffff, 0x7ff, 0xffffffff, 0x7fff, 0x94f, 0x4, 0x2009, 0x1, 0x4, 0x6, 0x0, 0x6, 0x84, 0xa2, 0x6, 0x9, 0x4, 0x5, 0x0, 0xc, 0x1, 0x5, 0x3, 0x1ff, 0x7fffffff, 0x900000000000, 0x6, 0x1]}) syz_kvm_add_vcpu$arm64(r6, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x81}], 0x1) r7 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013c65d, 0xfffdffffc1af0ec0}}], 0x20}, 0x0, 0xffffffffffffff92) syz_kvm_add_vcpu$arm64(r5, 0x0, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x3, 0xa0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1m28.573205541s ago: executing program 9 (id=709): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x3}) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0) (async) r1 = openat$kvm(0x0, &(0x7f0000000140), 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r3, 0x4020aeae, &(0x7f0000000100)={0x5, 0x18}) (async) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f00000000c0)=@arm64_core={0x6030000000100032, &(0x7f00000001c0)=0x1}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_ARM_SET_COUNTER_OFFSET(r5, 0x4010aeb5, &(0x7f0000000300)={0x3, 0x2}) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r6, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) (async) ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, &(0x7f0000000340)=@arm64_core={0x6030000000100020, &(0x7f00000003c0)=0xffffffff}) (async) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000040)=@riscv64_sbi_sta={0x803000000a000001, &(0x7f0000000000)=0x1000}) (async) ioctl$KVM_CREATE_VM(r8, 0x801054db, 0x110d230008) 1m25.373075088s ago: executing program 8 (id=710): munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000140), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000000c0)={0x7}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r7 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffc000/0x3000)=nil, r7, 0x1, 0x11, r6, 0x0) r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, r8, 0x8, 0x13, r6, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x2000)=nil, r8, 0x1000001, 0x12, r6, 0x0) r9 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000740)={0x0, &(0x7f0000000180)=[@mrs={0xbe, 0x18, {0x603000000013c522}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x1, 0x2, 0xc, 0xf07d, 0x4}}, @hvc={0x32, 0x40, {0x8600ff01, [0xe, 0x759a74ab, 0x5, 0x9, 0x80000001]}}, @smc={0x1e, 0x40, {0x3000000, [0x4, 0xf7a, 0x0, 0x6, 0x7]}}, @svc={0x122, 0x40, {0x84000007, [0x7fffffff, 0x7, 0x9, 0xd8, 0x1]}}, @uexit={0x0, 0x18, 0x800000000000000}, @hvc={0x32, 0x40, {0x84000008, [0x1ff, 0xf, 0x9, 0x8, 0x100000001]}}, @eret={0xe6, 0x18, 0x38}, @svc={0x122, 0x40, {0x3f000000, [0xc4, 0x2, 0x4, 0x6, 0x1000]}}, @memwrite={0x6e, 0x30, @generic={0x7000, 0x525, 0x83f, 0x2}}, @msr={0x14, 0x20, {0x603000000013df6b, 0x4}}, @memwrite={0x6e, 0x30, @generic={0x2000, 0xb79, 0x1ff, 0x1}}, @mrs={0xbe, 0x18, {0x603000000013e510}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80c0000, 0xc00, 0x9f4}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80a0000, 0x48, 0x6, 0xc}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x2000, 0x8000000000000000, 0x8}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x0, 0x2, 0xb, 0x5, 0x6, 0x1}}, @eret={0xe6, 0x18, 0x3}, @smc={0x1e, 0x40, {0x20, [0xff, 0x8, 0x4, 0xe871b1c, 0x6]}}, @uexit={0x0, 0x18, 0x7}, @svc={0x122, 0x40, {0x84000004, [0x8, 0x5, 0x8000, 0x4, 0xa609]}}, @mrs={0xbe, 0x18, {0x603000000013df44}}, @eret={0xe6, 0x18, 0x7}, @its_setup={0x82, 0x28, {0x1, 0x3, 0x2a1}}, @code={0xa, 0x84, {"008008d5c0619cd20080b8f2c10180d2a20080d2e30080d2440180d2020000d4000480da008008d5000028d5a0198cd20000b8f2010080d2620080d2230180d2640080d2020000d40000006b0068216e80a896d200a0b8f2610080d2620180d2230080d2a40180d2020000d40000201e"}}, @uexit={0x0, 0x18, 0x2}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x20020, 0x3a1, 0x1}}, @irq_setup={0x46, 0x18, {0x3, 0x32d}}, @irq_setup={0x46, 0x18, {0x2, 0x7a}}, @smc={0x1e, 0x40, {0x84000010, [0x80, 0x1, 0x800, 0x4, 0x6]}}, @its_setup={0x82, 0x28, {0x2, 0x2, 0x3f7}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x0, 0x0, 0x9, 0x1, 0x3}}], 0x594}, &(0x7f0000000780)=[@featur1={0x1, 0x80}], 0x1) ioctl$KVM_ARM_VCPU_INIT(r9, 0x4020aeae, &(0x7f0000000000)={0x5, 0x28}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0) 1m7.722760962s ago: executing program 9 (id=711): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x5, 0x0, 0x1000, 0x1000, &(0x7f0000275000/0x1000)=nil}) syz_kvm_setup_cpu$arm64(r1, 0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil, &(0x7f0000000280)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x2710, 0x0, 0x10000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r4, 0x4020aeae, &(0x7f0000000000)={0x5, 0x18}) ioctl$KVM_ARM_VCPU_FINALIZE(r4, 0x4004aec2, &(0x7f00000001c0)=0x4) openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) close(0x4) close(0x5) r5 = mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000000240)="37e68986ad644f5dc57bbc1ff382863b67f3eee57a32ec911d95f88f3dd8ea716e4a29cefbd440b2ecf83f57baf33b0c97182970a47ef45c954e42f2055384921830f6e273d2eb30", 0x0, 0x2a2019ac5ed2a1ef) 1m5.418526507s ago: executing program 8 (id=712): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80d00, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000e11000/0x3000)=nil, 0x50000, 0x0, 0x11, r3, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x2e) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, 0x0, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r7, 0x4018aee1, &(0x7f00000001c0)=@attr_pmu_filter={0x0, 0x0, 0x2, 0x0}) r8 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x34) r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r10, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=[@its_setup={0x82, 0x28, {0x3, 0x3, 0x10000000004}}, @smc={0x1e, 0x40, {0x0, [0x2, 0x1, 0x9, 0x3, 0x4]}}], 0x68}, 0x0, 0x0) r11 = openat$kvm(0x0, &(0x7f0000000040), 0x5d9080, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x3) r14 = syz_kvm_vgic_v3_setup(r12, 0x3, 0x40) ioctl$KVM_SET_DEVICE_ATTR(r14, 0x4018aee1, &(0x7f0000000100)=@attr_other={0x0, 0x6, 0x382bc667, &(0x7f0000000140)=0x8004}) syz_kvm_vgic_v3_setup(r9, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f00000002c0)={0x8, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_DEVICE_ATTR(r15, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x4}) ioctl$KVM_RUN(r13, 0xae80, 0x0) r16 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r17 = ioctl$KVM_GET_STATS_FD_vm(r9, 0xaece) close(r17) ioctl$KVM_CREATE_DEVICE(r16, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r11, 0x800454d7, 0x17) 48.354237348s ago: executing program 9 (id=713): munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) munmap(&(0x7f0000136000/0x2000)=nil, 0x2000) (async) munmap(&(0x7f0000136000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) r0 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) (async) r1 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@memwrite={0x6e, 0x30, @generic={0xe000, 0x21a, 0x6, 0xd}}], 0x30}, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) (async) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) (async) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) (async) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, r0, 0x3000006, 0x28031, r4, 0x0) munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0x5460, 0x0) (async) ioctl$KVM_CREATE_VM(r7, 0x5460, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x24) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x21) (async) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x21) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0x5452, 0xa00000000000000) syz_kvm_vgic_v3_setup(r9, 0x1, 0x140) 18.184679781s ago: executing program 40 (id=712): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80d00, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000e11000/0x3000)=nil, 0x50000, 0x0, 0x11, r3, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x2e) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, 0x0, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r7, 0x4018aee1, &(0x7f00000001c0)=@attr_pmu_filter={0x0, 0x0, 0x2, 0x0}) r8 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x34) r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r10, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=[@its_setup={0x82, 0x28, {0x3, 0x3, 0x10000000004}}, @smc={0x1e, 0x40, {0x0, [0x2, 0x1, 0x9, 0x3, 0x4]}}], 0x68}, 0x0, 0x0) r11 = openat$kvm(0x0, &(0x7f0000000040), 0x5d9080, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x3) r14 = syz_kvm_vgic_v3_setup(r12, 0x3, 0x40) ioctl$KVM_SET_DEVICE_ATTR(r14, 0x4018aee1, &(0x7f0000000100)=@attr_other={0x0, 0x6, 0x382bc667, &(0x7f0000000140)=0x8004}) syz_kvm_vgic_v3_setup(r9, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f00000002c0)={0x8, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_DEVICE_ATTR(r15, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x4}) ioctl$KVM_RUN(r13, 0xae80, 0x0) r16 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r17 = ioctl$KVM_GET_STATS_FD_vm(r9, 0xaece) close(r17) ioctl$KVM_CREATE_DEVICE(r16, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r11, 0x800454d7, 0x17) 0s ago: executing program 41 (id=713): munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) munmap(&(0x7f0000136000/0x2000)=nil, 0x2000) (async) munmap(&(0x7f0000136000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) r0 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) (async) r1 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@memwrite={0x6e, 0x30, @generic={0xe000, 0x21a, 0x6, 0xd}}], 0x30}, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) (async) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) (async) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) (async) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, r0, 0x3000006, 0x28031, r4, 0x0) munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0x5460, 0x0) (async) ioctl$KVM_CREATE_VM(r7, 0x5460, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x24) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x21) (async) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x21) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0x5452, 0xa00000000000000) syz_kvm_vgic_v3_setup(r9, 0x1, 0x140) kernel console output (not intermixed with test programs): [ 362.566052][ T24] audit: type=1400 audit(361.790:74): avc: denied { read } for pid=3211 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 370.529536][ T24] audit: type=1400 audit(369.760:75): avc: denied { write } for pid=3266 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 374.186231][ T24] audit: type=1400 audit(373.420:76): avc: denied { write } for pid=3269 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 376.808040][ T3211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.786488][ T24] audit: type=1400 audit(382.980:77): avc: denied { write } for pid=3274 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 388.687290][ T24] audit: type=1400 audit(387.920:78): avc: denied { write } for pid=3277 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 398.074462][ T24] audit: type=1400 audit(397.290:79): avc: denied { write } for pid=3280 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 401.829303][ T24] audit: type=1400 audit(401.050:80): avc: denied { write } for pid=3283 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 410.508311][ T24] audit: type=1400 audit(409.710:81): avc: denied { write } for pid=3287 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 414.193639][ T24] audit: type=1400 audit(413.380:82): avc: denied { write } for pid=3290 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 425.584196][ T24] audit: type=1400 audit(424.810:83): avc: denied { write } for pid=3296 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 429.104462][ T24] audit: type=1400 audit(428.330:84): avc: denied { write } for pid=3299 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 431.459994][ T3211] eql: remember to turn off Van-Jacobson compression on your slave devices [ 438.678919][ T24] audit: type=1400 audit(437.910:85): avc: denied { write } for pid=3304 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 442.192126][ T24] audit: type=1400 audit(441.420:86): avc: denied { write } for pid=3307 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 453.217647][ T24] audit: type=1400 audit(452.410:87): avc: denied { write } for pid=3311 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 458.045246][ T24] audit: type=1400 audit(457.240:88): avc: denied { write } for pid=3314 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 467.366179][ T24] audit: type=1400 audit(466.580:89): avc: denied { write } for pid=3319 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 471.043664][ T24] audit: type=1400 audit(470.240:90): avc: denied { write } for pid=3322 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 480.098638][ T24] audit: type=1400 audit(479.330:91): avc: denied { write } for pid=3326 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 483.706111][ T24] audit: type=1400 audit(482.940:92): avc: denied { write } for pid=3329 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 488.755112][ T24] audit: type=1400 audit(487.970:93): avc: denied { write } for pid=3331 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 492.405020][ T24] audit: type=1400 audit(491.630:94): avc: denied { write } for pid=3334 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 507.153669][ T24] audit: type=1400 audit(506.320:95): avc: denied { write } for pid=3341 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 511.954511][ T24] audit: type=1400 audit(511.160:96): avc: denied { write } for pid=3344 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 535.117603][ T24] audit: type=1400 audit(534.350:97): avc: denied { write } for pid=3354 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 538.883744][ T24] audit: type=1400 audit(538.110:98): avc: denied { write } for pid=3357 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 547.624004][ T24] audit: type=1400 audit(546.850:99): avc: denied { write } for pid=3360 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 551.213653][ T24] audit: type=1400 audit(550.430:100): avc: denied { write } for pid=3363 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:12527' (ED25519) to the list of known hosts. [ 567.764848][ T24] audit: type=1400 audit(566.980:101): avc: denied { name_bind } for pid=3368 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 570.270790][ T24] audit: type=1400 audit(569.500:102): avc: denied { execute } for pid=3369 comm="sh" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 570.308592][ T24] audit: type=1400 audit(569.540:103): avc: denied { execute_no_trans } for pid=3369 comm="sh" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 598.088371][ T24] audit: type=1400 audit(597.320:104): avc: denied { mounton } for pid=3369 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 598.128673][ T24] audit: type=1400 audit(597.360:105): avc: denied { mount } for pid=3369 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 598.209453][ T3369] cgroup: Unknown subsys name 'net' [ 598.265432][ T24] audit: type=1400 audit(597.490:106): avc: denied { unmount } for pid=3369 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 598.634635][ T3369] cgroup: Unknown subsys name 'cpuset' [ 598.748397][ T3369] cgroup: Unknown subsys name 'rlimit' [ 599.529802][ T24] audit: type=1400 audit(598.760:107): avc: denied { setattr } for pid=3369 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 599.548576][ T24] audit: type=1400 audit(598.780:108): avc: denied { mounton } for pid=3369 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 599.577930][ T24] audit: type=1400 audit(598.810:109): avc: denied { mount } for pid=3369 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 600.526584][ T3372] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 600.544059][ T24] audit: type=1400 audit(599.770:110): avc: denied { relabelto } for pid=3372 comm="mkswap" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 600.568840][ T24] audit: type=1400 audit(599.800:111): avc: denied { write } for pid=3372 comm="mkswap" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 600.747706][ T24] audit: type=1400 audit(599.980:112): avc: denied { read } for pid=3369 comm="syz-executor" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 600.762177][ T24] audit: type=1400 audit(599.990:113): avc: denied { open } for pid=3369 comm="syz-executor" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 600.815669][ T3369] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 658.018282][ T24] audit: type=1400 audit(657.250:114): avc: denied { execmem } for pid=3373 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 661.471458][ T24] audit: type=1400 audit(660.700:115): avc: denied { read } for pid=3375 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 661.507932][ T24] audit: type=1400 audit(660.740:116): avc: denied { open } for pid=3375 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 661.566053][ T24] audit: type=1400 audit(660.780:117): avc: denied { mounton } for pid=3376 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 661.777835][ T24] audit: type=1400 audit(661.010:118): avc: denied { module_request } for pid=3376 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 661.802119][ T24] audit: type=1400 audit(661.030:119): avc: denied { module_request } for pid=3375 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 662.721273][ T24] audit: type=1400 audit(661.950:120): avc: denied { sys_module } for pid=3376 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 683.366401][ T3375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 683.614917][ T3375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 683.675365][ T3376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 683.925920][ T3376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 697.229911][ T3375] hsr_slave_0: entered promiscuous mode [ 697.280143][ T3375] hsr_slave_1: entered promiscuous mode [ 699.049696][ T3376] hsr_slave_0: entered promiscuous mode [ 699.096940][ T3376] hsr_slave_1: entered promiscuous mode [ 699.139150][ T3376] debugfs: 'hsr0' already exists in 'hsr' [ 699.174097][ T3376] Cannot create hsr debugfs directory [ 704.825000][ T24] audit: type=1400 audit(704.050:121): avc: denied { create } for pid=3375 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 704.944420][ T24] audit: type=1400 audit(704.160:122): avc: denied { write } for pid=3375 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 704.945563][ T24] audit: type=1400 audit(704.160:123): avc: denied { read } for pid=3375 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 705.171168][ T3375] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 705.416846][ T3375] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 705.521075][ T3375] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 705.726581][ T3375] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 705.818271][ T3375] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 705.954797][ T3375] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 706.105318][ T3375] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 706.187590][ T3375] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 707.648710][ T3376] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 707.838391][ T3376] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 707.935406][ T3376] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 708.109479][ T3376] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 708.186956][ T3376] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 708.327611][ T3376] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 708.420831][ T3376] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 708.557334][ T3376] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 718.936882][ T3375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 721.470130][ T3376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 769.060336][ T3375] veth0_vlan: entered promiscuous mode [ 769.541275][ T3375] veth1_vlan: entered promiscuous mode [ 771.437422][ T3375] veth0_macvtap: entered promiscuous mode [ 771.923933][ T3376] veth0_vlan: entered promiscuous mode [ 771.998962][ T3375] veth1_macvtap: entered promiscuous mode [ 772.765630][ T3376] veth1_vlan: entered promiscuous mode [ 774.337650][ T47] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.421027][ T47] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.429034][ T47] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.442157][ T47] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.340413][ T3376] veth0_macvtap: entered promiscuous mode [ 776.035528][ T3376] veth1_macvtap: entered promiscuous mode [ 776.914007][ T24] audit: type=1400 audit(776.140:124): avc: denied { mount } for pid=3375 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 777.144108][ T24] audit: type=1400 audit(776.360:125): avc: denied { mounton } for pid=3375 comm="syz-executor" path="/syzkaller.hribPC/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 777.359858][ T24] audit: type=1400 audit(776.590:126): avc: denied { mount } for pid=3375 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 777.680564][ T24] audit: type=1400 audit(776.910:127): avc: denied { mounton } for pid=3375 comm="syz-executor" path="/syzkaller.hribPC/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 777.857786][ T24] audit: type=1400 audit(777.050:128): avc: denied { mounton } for pid=3375 comm="syz-executor" path="/syzkaller.hribPC/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 778.391926][ T24] audit: type=1400 audit(777.620:129): avc: denied { unmount } for pid=3375 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 778.509303][ T3435] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.514584][ T3435] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.585669][ T3435] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.611069][ T3435] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.725494][ T24] audit: type=1400 audit(777.950:130): avc: denied { mounton } for pid=3375 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1544 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 778.869110][ T24] audit: type=1400 audit(778.100:131): avc: denied { mount } for pid=3375 comm="syz-executor" name="/" dev="gadgetfs" ino=3723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 779.201042][ T24] audit: type=1400 audit(778.430:132): avc: denied { mount } for pid=3375 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 779.285994][ T24] audit: type=1400 audit(778.480:133): avc: denied { mounton } for pid=3375 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 780.899847][ T3375] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 781.923621][ T24] kauditd_printk_skb: 2 callbacks suppressed [ 781.928186][ T24] audit: type=1400 audit(781.120:136): avc: denied { open } for pid=3375 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 781.929233][ T24] audit: type=1400 audit(781.140:137): avc: denied { ioctl } for pid=3375 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=636 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 790.883890][ T24] audit: type=1400 audit(790.080:138): avc: denied { read } for pid=3528 comm="syz.0.1" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 790.939454][ T24] audit: type=1400 audit(790.170:139): avc: denied { open } for pid=3528 comm="syz.0.1" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 791.109686][ T24] audit: type=1400 audit(790.340:140): avc: denied { ioctl } for pid=3528 comm="syz.0.1" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 793.364840][ T24] audit: type=1400 audit(792.590:141): avc: denied { write } for pid=3528 comm="syz.0.1" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 806.645226][ T24] audit: type=1400 audit(805.820:142): avc: denied { append } for pid=3535 comm="syz.1.3" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 807.900625][ T3537] KVM: debugfs: duplicate directory 3537-12 [ 808.181625][ T3537] KVM: debugfs: duplicate directory 3537-12 [ 831.742005][ T24] audit: type=1400 audit(830.940:143): avc: denied { map } for pid=3545 comm="syz.0.6" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 840.568964][ T24] audit: type=1400 audit(839.770:144): avc: denied { write } for pid=3551 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 848.295682][ T24] audit: type=1400 audit(847.520:145): avc: denied { write } for pid=3556 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 850.336613][ T24] audit: type=1400 audit(849.560:146): avc: denied { execute } for pid=3559 comm="syz.1.9" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 873.324423][ T24] audit: type=1400 audit(872.550:147): avc: denied { execute } for pid=3577 comm="syz.1.14" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=4581 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 874.029284][ T24] audit: type=1400 audit(873.250:148): avc: denied { mmap_zero } for pid=3577 comm="syz.1.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 1050.411102][ T24] audit: type=1400 audit(1049.580:149): avc: denied { setattr } for pid=3674 comm="syz.1.44" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1063.167542][ T3679] debugfs: 'vgic-its-state@8080000' already exists in '3679-9' [ 1063.906892][ T24] audit: type=1400 audit(1063.060:150): avc: denied { create } for pid=3678 comm="syz.1.45" anonclass=[kvm-gmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1100.359089][ T24] audit: type=1400 audit(1099.580:151): avc: denied { map } for pid=3697 comm="syz.0.52" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=6956 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1100.437940][ T24] audit: type=1400 audit(1099.640:152): avc: denied { read } for pid=3697 comm="syz.0.52" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=6956 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1148.569387][ T24] audit: type=1400 audit(1147.800:153): avc: denied { execute } for pid=3722 comm="syz.0.61" path="/sys/kernel/debug/kcov" dev="debugfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=file permissive=1 [ 1205.799853][ T24] audit: type=1400 audit(1205.030:154): avc: denied { write } for pid=3757 comm="syz.1.73" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=8343 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1211.217339][ T24] audit: type=1400 audit(1210.440:155): avc: denied { write } for pid=3762 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1218.618471][ T24] audit: type=1400 audit(1217.840:156): avc: denied { write } for pid=3765 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1232.048262][ T24] audit: type=1400 audit(1231.280:157): avc: denied { execute } for pid=3775 comm="syz.0.76" path=2F33392F10FBFF67525673312B0104 dev="tmpfs" ino=217 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1295.334720][ T24] audit: type=1400 audit(1294.550:158): avc: denied { execute } for pid=3816 comm="syz.1.89" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=9534 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1428.217529][ T24] audit: type=1400 audit(1427.420:159): avc: denied { map } for pid=3899 comm="syz.1.116" path="pipe:[2721]" dev="pipefs" ino=2721 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1604.603782][ T24] audit: type=1400 audit(1603.820:160): avc: denied { ioctl } for pid=4012 comm="syz.0.150" path="net:[4026532639]" dev="nsfs" ino=4026532639 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1626.172173][ T4029] kvm [4029]: Failed to find VMA for hva 0x203b0000 [ 1627.461424][ T4029] kvm [4029]: Failed to find VMA for hva 0x203b0000 [ 1641.143670][ T24] audit: type=1400 audit(1640.360:161): avc: denied { write } for pid=4043 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1648.053482][ T24] audit: type=1400 audit(1647.270:162): avc: denied { write } for pid=4057 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1861.246969][ T24] audit: type=1400 audit(1860.460:163): avc: denied { write } for pid=4190 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1869.066145][ T24] audit: type=1400 audit(1868.280:164): avc: denied { write } for pid=4201 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1998.969291][ T4295] kvm [4295]: Failed to find VMA for hva 0x20c01000 [ 2261.721993][ T24] audit: type=1400 audit(2260.950:165): avc: denied { write } for pid=4460 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2271.164791][ T24] audit: type=1400 audit(2270.290:166): avc: denied { write } for pid=4472 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2363.062132][ T4535] KVM: debugfs: duplicate directory 4535-15 [ 2363.509840][ T4535] KVM: debugfs: duplicate directory 4535-15 [ 2466.229129][ T24] audit: type=1400 audit(2465.380:167): avc: denied { write } for pid=4598 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2474.248527][ T24] audit: type=1400 audit(2473.480:168): avc: denied { write } for pid=4611 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2595.097478][ T4694] kvm [4694]: Failed to find VMA for hva 0x20c01000 [ 2708.147020][ T4743] kvm [4743]: Failed to find VMA for hva 0x20d68000 [ 2823.026238][ T4765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2823.371679][ T4765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2831.019532][ T4809] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2832.857401][ T4809] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2835.750561][ T4809] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2836.509096][ T4772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2836.739473][ T4772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2836.849931][ T24] audit: type=1400 audit(2836.070:169): avc: denied { write } for pid=4818 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2837.101642][ T4809] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2842.858842][ T24] audit: type=1400 audit(2841.990:170): avc: denied { write } for pid=4824 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2850.938406][ T4809] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2851.030172][ T4809] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2851.077354][ T4809] bond0 (unregistering): Released all slaves [ 2852.123547][ T4809] hsr_slave_0: left promiscuous mode [ 2852.174686][ T4809] hsr_slave_1: left promiscuous mode [ 2852.547868][ T4809] veth1_macvtap: left promiscuous mode [ 2852.551850][ T4809] veth0_macvtap: left promiscuous mode [ 2852.574482][ T4809] veth1_vlan: left promiscuous mode [ 2852.585644][ T4809] veth0_vlan: left promiscuous mode [ 2868.864834][ T4765] hsr_slave_0: entered promiscuous mode [ 2868.930445][ T4765] hsr_slave_1: entered promiscuous mode [ 2869.005193][ T4765] debugfs: 'hsr0' already exists in 'hsr' [ 2869.013411][ T4765] Cannot create hsr debugfs directory [ 2871.277379][ T4809] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2872.667631][ T4809] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2874.461895][ T4809] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2875.962090][ T4809] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2877.364835][ T24] audit: type=1400 audit(2876.590:171): avc: denied { write } for pid=4844 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2881.390657][ T4772] hsr_slave_0: entered promiscuous mode [ 2881.527976][ T4772] hsr_slave_1: entered promiscuous mode [ 2881.596260][ T4772] debugfs: 'hsr0' already exists in 'hsr' [ 2881.604725][ T4772] Cannot create hsr debugfs directory [ 2882.445523][ T24] audit: type=1400 audit(2881.670:172): avc: denied { write } for pid=4848 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2886.779691][ T3211] 8021q: adding VLAN 0 to HW filter on device eth1 [ 2891.389488][ T4809] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2891.461844][ T4809] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2891.521818][ T4809] bond0 (unregistering): Released all slaves [ 2892.888687][ T4809] hsr_slave_0: left promiscuous mode [ 2892.944721][ T4809] hsr_slave_1: left promiscuous mode [ 2893.221868][ T4809] veth1_macvtap: left promiscuous mode [ 2893.227606][ T4809] veth0_macvtap: left promiscuous mode [ 2893.245368][ T4809] veth1_vlan: left promiscuous mode [ 2893.276537][ T4809] veth0_vlan: left promiscuous mode [ 2907.026346][ T4765] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2907.157252][ T4765] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2907.468910][ T4765] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2907.577907][ T4765] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2908.074090][ T4765] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2908.226703][ T4765] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2908.306879][ T4765] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2908.477462][ T4765] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2911.036829][ T24] audit: type=1400 audit(2910.260:173): avc: denied { write } for pid=4857 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2912.820747][ T4772] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2913.087372][ T4772] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2913.141867][ T4772] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2913.516840][ T4772] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2913.647445][ T4772] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2913.977766][ T4772] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2914.126859][ T4772] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2914.331269][ T4772] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2917.225133][ T24] audit: type=1400 audit(2916.410:174): avc: denied { write } for pid=4875 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2921.145926][ T3211] 8021q: adding VLAN 0 to HW filter on device eth2 [ 2928.248842][ T4765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2932.901467][ T24] audit: type=1400 audit(2932.110:175): avc: denied { write } for pid=4889 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2934.020241][ T4772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2940.466773][ T24] audit: type=1400 audit(2939.680:176): avc: denied { write } for pid=4896 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2945.118340][ T3211] 8021q: adding VLAN 0 to HW filter on device eth3 [ 2960.156615][ T24] audit: type=1400 audit(2959.340:177): avc: denied { write } for pid=4910 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2965.846503][ T24] audit: type=1400 audit(2965.070:178): avc: denied { write } for pid=4919 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2969.800462][ T3211] 8021q: adding VLAN 0 to HW filter on device eth4 [ 2980.376731][ T24] audit: type=1400 audit(2979.570:179): avc: denied { write } for pid=4935 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2986.053421][ T24] audit: type=1400 audit(2985.270:180): avc: denied { write } for pid=4944 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2989.849157][ T3211] 8021q: adding VLAN 0 to HW filter on device eth5 [ 3003.856894][ T24] audit: type=1400 audit(3003.070:181): avc: denied { write } for pid=4958 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3009.759833][ T4765] veth0_vlan: entered promiscuous mode [ 3010.656794][ T4765] veth1_vlan: entered promiscuous mode [ 3012.022116][ T24] audit: type=1400 audit(3011.250:182): avc: denied { write } for pid=4968 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3013.599852][ T4765] veth0_macvtap: entered promiscuous mode [ 3014.209382][ T4765] veth1_macvtap: entered promiscuous mode [ 3017.519818][ T3211] 8021q: adding VLAN 0 to HW filter on device eth6 [ 3017.539563][ T4772] veth0_vlan: entered promiscuous mode [ 3018.039201][ T3430] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3018.056198][ T3430] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3018.093815][ T3430] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3018.316018][ T3430] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3018.969768][ T4772] veth1_vlan: entered promiscuous mode [ 3023.225802][ T4772] veth0_macvtap: entered promiscuous mode [ 3024.100465][ T4772] veth1_macvtap: entered promiscuous mode [ 3026.824134][ T4645] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3026.839968][ T3430] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3026.902228][ T3430] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3027.095872][ T3430] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3032.737728][ T24] audit: type=1400 audit(3031.950:183): avc: denied { write } for pid=4975 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3041.776202][ T24] audit: type=1400 audit(3040.990:184): avc: denied { write } for pid=4984 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3048.415611][ T3211] 8021q: adding VLAN 0 to HW filter on device eth7 [ 3069.348342][ T24] audit: type=1400 audit(3068.570:185): avc: denied { write } for pid=5003 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3080.233693][ T24] audit: type=1400 audit(3079.440:186): avc: denied { write } for pid=5014 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3087.001297][ T3211] 8021q: adding VLAN 0 to HW filter on device eth8 [ 3110.804643][ T24] audit: type=1400 audit(3110.030:187): avc: denied { write } for pid=5031 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3115.943641][ T24] audit: type=1400 audit(3115.170:188): avc: denied { write } for pid=5034 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3148.418582][ T24] audit: type=1400 audit(3147.640:189): avc: denied { write } for pid=5055 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3157.604057][ T24] audit: type=1400 audit(3156.750:190): avc: denied { write } for pid=5064 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3173.211087][ T24] audit: type=1400 audit(3172.410:191): avc: denied { write } for pid=5074 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3179.619124][ T24] audit: type=1400 audit(3178.850:192): avc: denied { write } for pid=5077 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3207.651570][ T24] audit: type=1400 audit(3206.880:193): avc: denied { write } for pid=5095 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3216.343904][ T24] audit: type=1400 audit(3215.550:194): avc: denied { write } for pid=5100 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3240.185322][ T24] audit: type=1400 audit(3239.410:195): avc: denied { write } for pid=5113 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3250.785877][ T24] audit: type=1400 audit(3250.010:196): avc: denied { write } for pid=5122 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3267.603678][ T24] audit: type=1400 audit(3266.780:197): avc: denied { write } for pid=5127 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3276.834125][ T24] audit: type=1400 audit(3276.030:198): avc: denied { write } for pid=5136 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3306.136408][ T24] audit: type=1400 audit(3305.350:199): avc: denied { write } for pid=5155 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3313.705603][ T24] audit: type=1400 audit(3312.850:200): avc: denied { write } for pid=5158 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3332.554119][ T24] audit: type=1400 audit(3331.730:201): avc: denied { write } for pid=5174 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3341.475598][ T24] audit: type=1400 audit(3340.690:202): avc: denied { write } for pid=5185 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3362.504812][ T24] audit: type=1400 audit(3361.700:203): avc: denied { write } for pid=5201 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3373.208327][ T24] audit: type=1400 audit(3372.380:204): avc: denied { write } for pid=5206 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3447.143386][ T24] audit: type=1400 audit(3446.360:205): avc: denied { write } for pid=5253 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3456.773972][ T24] audit: type=1400 audit(3455.970:206): avc: denied { write } for pid=5260 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3485.977016][ T5283] kvm [5283]: Failed to find VMA for hva 0x20c79000 [ 3511.621258][ T5296] kvm [5296]: Failed to find VMA for hva 0x20bff000 [ 3690.178982][ T5348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3690.460517][ T5348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3698.714885][ T5353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3699.065540][ T5353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3717.056779][ T5348] hsr_slave_0: entered promiscuous mode [ 3717.177294][ T5348] hsr_slave_1: entered promiscuous mode [ 3731.580138][ T5353] hsr_slave_0: entered promiscuous mode [ 3731.664731][ T5353] hsr_slave_1: entered promiscuous mode [ 3731.714347][ T5353] debugfs: 'hsr0' already exists in 'hsr' [ 3731.725278][ T5353] Cannot create hsr debugfs directory [ 3740.044437][ T5348] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 3740.435741][ T5348] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 3741.107561][ T5348] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 3741.291102][ T5348] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3741.709842][ T5348] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 3741.874447][ T5348] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 3742.437099][ T5348] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 3742.637905][ T5348] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 3751.688219][ T5353] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 3752.036006][ T5353] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 3752.137520][ T5353] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 3752.532067][ T5353] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3752.726475][ T5353] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 3753.088991][ T5353] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 3753.219764][ T5353] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 3753.560173][ T5353] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 3774.609386][ T5348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3785.768155][ T5353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3790.091016][ T4340] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3792.310300][ T4340] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3794.220509][ T4340] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3796.000109][ T4340] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3814.300449][ T4340] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3814.408272][ T4340] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3814.498444][ T4340] bond0 (unregistering): Released all slaves [ 3815.926505][ T4340] hsr_slave_0: left promiscuous mode [ 3816.044989][ T4340] hsr_slave_1: left promiscuous mode [ 3816.466052][ T4340] veth1_macvtap: left promiscuous mode [ 3816.469429][ T4340] veth0_macvtap: left promiscuous mode [ 3816.479416][ T4340] veth1_vlan: left promiscuous mode [ 3816.494469][ T4340] veth0_vlan: left promiscuous mode [ 3843.850670][ T4813] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3845.959288][ T4813] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3847.948152][ T4813] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3850.110223][ T4813] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3853.995450][ T24] audit: type=1400 audit(3853.120:207): avc: denied { write } for pid=5463 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3864.896912][ T24] audit: type=1400 audit(3864.120:208): avc: denied { write } for pid=5472 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3870.555399][ T4813] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3870.632026][ T4813] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3870.775094][ T4813] bond0 (unregistering): Released all slaves [ 3871.515572][ T3211] 8021q: adding VLAN 0 to HW filter on device eth9 [ 3873.034952][ T4813] hsr_slave_0: left promiscuous mode [ 3873.396342][ T4813] hsr_slave_1: left promiscuous mode [ 3873.999218][ T4813] veth1_macvtap: left promiscuous mode [ 3874.067675][ T4813] veth0_macvtap: left promiscuous mode [ 3874.111779][ T4813] veth1_vlan: left promiscuous mode [ 3874.114522][ T4813] veth0_vlan: left promiscuous mode [ 3898.633848][ T24] audit: type=1400 audit(3897.760:209): avc: denied { write } for pid=5480 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3906.531232][ T24] audit: type=1400 audit(3905.720:210): avc: denied { write } for pid=5491 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3926.046781][ T24] audit: type=1400 audit(3925.260:211): avc: denied { write } for pid=5505 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3932.734744][ T24] audit: type=1400 audit(3931.950:212): avc: denied { write } for pid=5516 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3936.969251][ T3211] 8021q: adding VLAN 0 to HW filter on device eth10 [ 3950.745020][ T24] audit: type=1400 audit(3949.970:213): avc: denied { write } for pid=5530 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3957.761580][ T24] audit: type=1400 audit(3956.990:214): avc: denied { write } for pid=5541 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3963.625964][ T3211] 8021q: adding VLAN 0 to HW filter on device eth11 [ 3966.119544][ T5348] veth0_vlan: entered promiscuous mode [ 3967.629628][ T5353] veth0_vlan: entered promiscuous mode [ 3968.085414][ T5348] veth1_vlan: entered promiscuous mode [ 3969.678715][ T5353] veth1_vlan: entered promiscuous mode [ 3973.387665][ T5348] veth0_macvtap: entered promiscuous mode [ 3974.605690][ T5348] veth1_macvtap: entered promiscuous mode [ 3975.686361][ T5353] veth0_macvtap: entered promiscuous mode [ 3976.625143][ T5353] veth1_macvtap: entered promiscuous mode [ 3980.716026][ T5415] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3980.755861][ T5415] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3980.954897][ T5415] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3981.195601][ T3430] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3981.473590][ T24] audit: type=1400 audit(3980.670:215): avc: denied { write } for pid=5549 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3982.635850][ T5415] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3982.640082][ T5415] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3982.676076][ T5415] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3982.705673][ T5415] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3988.524324][ T24] audit: type=1400 audit(3987.710:216): avc: denied { write } for pid=5553 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3994.630462][ T3211] 8021q: adding VLAN 0 to HW filter on device eth12 [ 4014.063521][ T24] audit: type=1400 audit(4013.270:217): avc: denied { write } for pid=5567 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4025.903960][ T24] audit: type=1400 audit(4025.060:218): avc: denied { write } for pid=5575 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4033.456947][ T3211] 8021q: adding VLAN 0 to HW filter on device eth13 [ 4046.586117][ T24] audit: type=1400 audit(4045.820:219): avc: denied { write } for pid=5583 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4057.664542][ T24] audit: type=1400 audit(4056.880:220): avc: denied { write } for pid=5596 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4087.213606][ T24] audit: type=1400 audit(4086.440:221): avc: denied { write } for pid=5614 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4099.434130][ T24] audit: type=1400 audit(4098.540:222): avc: denied { write } for pid=5626 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4107.769655][ T3211] 8021q: adding VLAN 0 to HW filter on device eth14 [ 4130.626246][ T24] audit: type=1400 audit(4129.780:223): avc: denied { write } for pid=5644 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4141.113890][ T24] audit: type=1400 audit(4140.300:224): avc: denied { write } for pid=5648 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4149.158464][ T3211] 8021q: adding VLAN 0 to HW filter on device eth15 [ 4171.729259][ T24] audit: type=1400 audit(4170.960:225): avc: denied { write } for pid=5661 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4182.650108][ T24] audit: type=1400 audit(4181.800:226): avc: denied { write } for pid=5669 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4189.351704][ T3211] 8021q: adding VLAN 0 to HW filter on device eth16 [ 4250.580520][ T24] audit: type=1400 audit(4249.810:227): avc: denied { write } for pid=5705 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4255.534121][ T24] audit: type=1400 audit(4254.700:228): avc: denied { write } for pid=5708 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4286.213860][ T24] audit: type=1400 audit(4285.420:229): avc: denied { write } for pid=5717 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4292.311266][ T5367] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4294.430967][ T5367] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4295.886100][ T24] audit: type=1400 audit(4295.100:230): avc: denied { write } for pid=5721 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4297.351430][ T5367] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4299.119104][ T5367] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4317.376865][ T5367] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 4317.637811][ T5367] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 4317.788405][ T5367] bond0 (unregistering): Released all slaves [ 4320.437661][ T5367] hsr_slave_0: left promiscuous mode [ 4320.848205][ T5367] hsr_slave_1: left promiscuous mode [ 4321.914889][ T5367] veth1_macvtap: left promiscuous mode [ 4321.960440][ T5367] veth0_macvtap: left promiscuous mode [ 4322.016004][ T5367] veth1_vlan: left promiscuous mode [ 4322.024541][ T5367] veth0_vlan: left promiscuous mode [ 4349.550045][ T4817] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4351.276663][ T4817] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4352.790784][ T4817] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4352.944455][ T24] audit: type=1400 audit(4352.170:231): avc: denied { write } for pid=5747 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4354.137472][ T4817] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4362.126601][ T24] audit: type=1400 audit(4361.360:232): avc: denied { write } for pid=5757 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4369.998370][ T4817] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 4370.186437][ T4817] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 4370.318064][ T4817] bond0 (unregistering): Released all slaves [ 4371.492054][ T4817] hsr_slave_0: left promiscuous mode [ 4371.540650][ T4817] hsr_slave_1: left promiscuous mode [ 4371.793986][ T4817] veth1_macvtap: left promiscuous mode [ 4371.797394][ T4817] veth0_macvtap: left promiscuous mode [ 4371.846103][ T4817] veth1_vlan: left promiscuous mode [ 4371.858047][ T4817] veth0_vlan: left promiscuous mode [ 4396.546505][ T24] audit: type=1400 audit(4395.770:233): avc: denied { write } for pid=5764 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4400.841392][ T24] audit: type=1400 audit(4400.070:234): avc: denied { write } for pid=5767 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4416.772119][ T24] audit: type=1400 audit(4416.000:235): avc: denied { write } for pid=5785 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4422.051981][ T24] audit: type=1400 audit(4421.280:236): avc: denied { write } for pid=5796 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4426.346870][ T3211] 8021q: adding VLAN 0 to HW filter on device eth17 [ 4430.146537][ T5727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4430.347849][ T5723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4430.548267][ T5727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4431.296990][ T5723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4438.277820][ T24] audit: type=1400 audit(4437.480:237): avc: denied { write } for pid=5807 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4445.941046][ T24] audit: type=1400 audit(4445.160:238): avc: denied { write } for pid=5817 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4451.231058][ T3211] 8021q: adding VLAN 0 to HW filter on device eth18 [ 4458.874703][ T24] audit: type=1400 audit(4458.060:239): avc: denied { write } for pid=5823 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4462.347947][ T5727] hsr_slave_0: entered promiscuous mode [ 4462.418295][ T5727] hsr_slave_1: entered promiscuous mode [ 4464.486597][ T24] audit: type=1400 audit(4463.710:240): avc: denied { write } for pid=5830 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4465.660056][ T5723] hsr_slave_0: entered promiscuous mode [ 4465.739416][ T5723] hsr_slave_1: entered promiscuous mode [ 4465.817094][ T5723] debugfs: 'hsr0' already exists in 'hsr' [ 4465.823649][ T5723] Cannot create hsr debugfs directory [ 4475.458036][ T24] audit: type=1400 audit(4474.640:241): avc: denied { write } for pid=5836 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4480.635002][ T24] audit: type=1400 audit(4479.840:242): avc: denied { write } for pid=5840 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4482.389067][ T5727] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 4483.059433][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 4483.278514][ T5727] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 4483.748766][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 4483.960748][ T5727] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 4484.429630][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 4485.453686][ T5727] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 4485.810596][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 4489.755952][ T5723] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 4490.225912][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 4490.338849][ T5723] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 4490.766132][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 4490.927329][ T5723] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 4491.495578][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 4491.734945][ T5723] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 4492.068039][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 4496.626364][ T24] audit: type=1400 audit(4495.770:243): avc: denied { write } for pid=5851 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4506.065264][ T24] audit: type=1400 audit(4505.280:244): avc: denied { write } for pid=5868 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4521.786124][ T5727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4527.368770][ T5723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4532.836788][ T24] audit: type=1400 audit(4531.990:245): avc: denied { write } for pid=5878 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4540.714665][ T24] audit: type=1400 audit(4539.870:246): avc: denied { write } for pid=5887 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4546.698580][ T3211] 8021q: adding VLAN 0 to HW filter on device eth19 [ 4575.801123][ T24] audit: type=1400 audit(4575.000:247): avc: denied { write } for pid=5905 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4585.445034][ T24] audit: type=1400 audit(4584.670:248): avc: denied { write } for pid=5916 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4591.789801][ T3211] 8021q: adding VLAN 0 to HW filter on device eth20 [ 4612.135416][ T24] audit: type=1400 audit(4611.300:249): avc: denied { write } for pid=5934 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4620.285047][ T24] audit: type=1400 audit(4619.510:250): avc: denied { write } for pid=5944 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4627.060531][ T3211] 8021q: adding VLAN 0 to HW filter on device eth21 [ 4657.703609][ T24] audit: type=1400 audit(4656.890:251): avc: denied { write } for pid=5967 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4660.046050][ T5727] veth0_vlan: entered promiscuous mode [ 4661.078409][ T5727] veth1_vlan: entered promiscuous mode [ 4665.881637][ T5727] veth0_macvtap: entered promiscuous mode [ 4666.285787][ T5723] veth0_vlan: entered promiscuous mode [ 4667.438938][ T5727] veth1_macvtap: entered promiscuous mode [ 4667.511213][ T24] audit: type=1400 audit(4666.720:252): avc: denied { write } for pid=5975 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4668.321149][ T5723] veth1_vlan: entered promiscuous mode [ 4672.816288][ T4817] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 4672.857912][ T5367] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 4672.896607][ T4645] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 4673.238542][ T4645] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 4673.660803][ T3211] 8021q: adding VLAN 0 to HW filter on device eth22 [ 4674.246556][ T5723] veth0_macvtap: entered promiscuous mode [ 4675.583273][ T5723] veth1_macvtap: entered promiscuous mode [ 4682.317440][ T5445] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 4682.334191][ T5445] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 4682.335290][ T5445] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 4682.529979][ T5730] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 4707.595104][ T24] audit: type=1400 audit(4706.650:253): avc: denied { write } for pid=5983 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4721.784421][ T24] audit: type=1400 audit(4720.990:254): avc: denied { write } for pid=5993 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4731.014250][ T3211] 8021q: adding VLAN 0 to HW filter on device eth23 [ 4744.117141][ T24] audit: type=1400 audit(4743.340:255): avc: denied { write } for pid=6001 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4759.372086][ T24] audit: type=1400 audit(4758.600:256): avc: denied { write } for pid=6013 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4792.955746][ T24] audit: type=1400 audit(4792.080:257): avc: denied { write } for pid=6026 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4807.458096][ T24] audit: type=1400 audit(4806.540:258): avc: denied { write } for pid=6038 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4847.531400][ T24] audit: type=1400 audit(4846.750:259): avc: denied { write } for pid=6056 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4860.321154][ T24] audit: type=1400 audit(4859.530:260): avc: denied { write } for pid=6067 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4869.065131][ T3211] 8021q: adding VLAN 0 to HW filter on device eth24 [ 4886.735412][ T24] audit: type=1400 audit(4885.900:261): avc: denied { write } for pid=6080 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4901.264771][ T24] audit: type=1400 audit(4900.440:262): avc: denied { write } for pid=6089 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4979.474028][ T24] audit: type=1400 audit(4978.650:263): avc: denied { write } for pid=6127 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4994.291799][ T24] audit: type=1400 audit(4993.510:264): avc: denied { write } for pid=6139 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5026.593494][ T24] audit: type=1400 audit(5025.810:265): avc: denied { write } for pid=6154 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5039.227604][ T24] audit: type=1400 audit(5038.420:266): avc: denied { write } for pid=6167 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5075.305606][ T24] audit: type=1400 audit(5074.530:267): avc: denied { write } for pid=6178 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5088.591083][ T24] audit: type=1400 audit(5087.820:268): avc: denied { write } for pid=6188 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5154.485396][ T24] audit: type=1400 audit(5153.640:269): avc: denied { write } for pid=6219 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5169.756990][ T24] audit: type=1400 audit(5168.960:270): avc: denied { write } for pid=6231 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5213.465516][ T24] audit: type=1400 audit(5212.670:271): avc: denied { write } for pid=6251 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5226.955551][ T24] audit: type=1400 audit(5226.170:272): avc: denied { write } for pid=6260 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5256.993901][ T24] audit: type=1400 audit(5256.090:273): avc: denied { write } for pid=6274 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5270.267694][ T24] audit: type=1400 audit(5269.500:274): avc: denied { write } for pid=6281 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5313.325489][ T24] audit: type=1400 audit(5312.530:275): avc: denied { write } for pid=6300 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5328.159336][ T24] audit: type=1400 audit(5327.320:276): avc: denied { write } for pid=6312 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5355.991171][ T24] audit: type=1400 audit(5355.220:277): avc: denied { write } for pid=6329 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5371.046353][ T24] audit: type=1400 audit(5370.270:278): avc: denied { write } for pid=6340 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5402.524028][ T24] audit: type=1400 audit(5401.750:279): avc: denied { write } for pid=6350 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5417.043663][ T24] audit: type=1400 audit(5416.260:280): avc: denied { write } for pid=6362 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5788.164638][ T24] audit: type=1400 audit(5787.350:281): avc: denied { write } for pid=6507 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5802.406511][ T24] audit: type=1400 audit(5801.640:282): avc: denied { write } for pid=6520 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6208.771568][ T24] audit: type=1400 audit(6207.920:283): avc: denied { write } for pid=6695 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6223.906595][ T24] audit: type=1400 audit(6223.140:284): avc: denied { write } for pid=6705 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6466.458526][ T6754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 6466.837301][ T6754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 6479.893734][ T6758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 6480.556756][ T6758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 6497.628406][ T5415] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6499.571810][ T5415] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6501.616628][ T5415] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6503.777243][ T5415] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6526.139869][ T5415] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 6526.311583][ T5415] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 6526.486678][ T5415] bond0 (unregistering): Released all slaves [ 6529.146332][ T5415] hsr_slave_0: left promiscuous mode [ 6529.445017][ T5415] hsr_slave_1: left promiscuous mode [ 6529.933918][ T5415] veth1_macvtap: left promiscuous mode [ 6529.944053][ T5415] veth0_macvtap: left promiscuous mode [ 6529.955237][ T5415] veth1_vlan: left promiscuous mode [ 6529.965226][ T5415] veth0_vlan: left promiscuous mode [ 6561.500629][ T6754] hsr_slave_0: entered promiscuous mode [ 6561.601803][ T6754] hsr_slave_1: entered promiscuous mode [ 6561.649897][ T6754] debugfs: 'hsr0' already exists in 'hsr' [ 6561.653928][ T6754] Cannot create hsr debugfs directory [ 6562.549294][ T6758] hsr_slave_0: entered promiscuous mode [ 6562.681231][ T6758] hsr_slave_1: entered promiscuous mode [ 6562.746441][ T6758] debugfs: 'hsr0' already exists in 'hsr' [ 6562.753642][ T6758] Cannot create hsr debugfs directory [ 6566.940361][ T6315] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6569.069262][ T6315] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6571.808556][ T6315] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6575.266438][ T6315] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6578.426128][ T24] audit: type=1400 audit(6577.640:285): avc: denied { write } for pid=6827 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6585.405076][ T24] audit: type=1400 audit(6584.620:286): avc: denied { write } for pid=6830 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6591.349648][ T3211] 8021q: adding VLAN 0 to HW filter on device eth25 [ 6600.997666][ T6315] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 6601.165402][ T6315] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 6601.298893][ T6315] bond0 (unregistering): Released all slaves [ 6602.858395][ T6315] hsr_slave_0: left promiscuous mode [ 6602.960293][ T6315] hsr_slave_1: left promiscuous mode [ 6603.390897][ T6315] veth1_macvtap: left promiscuous mode [ 6603.412142][ T6315] veth0_macvtap: left promiscuous mode [ 6603.429512][ T6315] veth1_vlan: left promiscuous mode [ 6603.486028][ T6315] veth0_vlan: left promiscuous mode [ 6610.803964][ T24] audit: type=1400 audit(6610.020:287): avc: denied { write } for pid=6836 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6619.273884][ T24] audit: type=1400 audit(6618.470:288): avc: denied { write } for pid=6839 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6639.266571][ T6754] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 6639.920960][ T6754] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 6640.021624][ T6754] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 6640.310364][ T6754] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 6640.532096][ T6754] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 6641.256715][ T6754] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 6641.311799][ T6754] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 6641.801516][ T6754] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 6648.511427][ T6758] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 6648.781903][ T6758] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 6648.996468][ T6758] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 6649.355369][ T6758] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 6649.470854][ T6758] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 6649.955335][ T6758] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 6650.124691][ T6758] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 6650.462023][ T6758] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 6659.213689][ T24] audit: type=1400 audit(6658.420:289): avc: denied { write } for pid=6853 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6669.364818][ T24] audit: type=1400 audit(6668.580:290): avc: denied { write } for pid=6870 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6677.796796][ T3211] 8021q: adding VLAN 0 to HW filter on device eth26 [ 6682.620984][ T6754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 6689.404424][ T6758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 6707.481826][ T24] audit: type=1400 audit(6706.710:291): avc: denied { write } for pid=6882 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6718.264116][ T24] audit: type=1400 audit(6717.460:292): avc: denied { write } for pid=6892 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6727.028817][ T3211] 8021q: adding VLAN 0 to HW filter on device eth27 [ 6752.903843][ T24] audit: type=1400 audit(6752.090:293): avc: denied { write } for pid=6905 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6764.314374][ T24] audit: type=1400 audit(6763.530:294): avc: denied { write } for pid=6916 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6770.822219][ T3211] 8021q: adding VLAN 0 to HW filter on device eth28 [ 6797.175395][ T24] audit: type=1400 audit(6796.320:295): avc: denied { write } for pid=6932 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6809.144092][ T24] audit: type=1400 audit(6808.340:296): avc: denied { write } for pid=6943 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6816.929965][ T3211] 8021q: adding VLAN 0 to HW filter on device eth29 [ 6841.106263][ T24] audit: type=1400 audit(6840.330:297): avc: denied { write } for pid=6959 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6850.427034][ T6754] veth0_vlan: entered promiscuous mode [ 6852.059184][ T6754] veth1_vlan: entered promiscuous mode [ 6853.604148][ T24] audit: type=1400 audit(6852.740:298): avc: denied { write } for pid=6969 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6856.957920][ T6758] veth0_vlan: entered promiscuous mode [ 6859.917132][ T6758] veth1_vlan: entered promiscuous mode [ 6860.338615][ T6754] veth0_macvtap: entered promiscuous mode [ 6861.648644][ T6754] veth1_macvtap: entered promiscuous mode [ 6862.400446][ T3211] 8021q: adding VLAN 0 to HW filter on device eth30 [ 6868.438089][ T6758] veth0_macvtap: entered promiscuous mode [ 6870.225651][ T5367] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 6870.279669][ T6758] veth1_macvtap: entered promiscuous mode [ 6870.651482][ T5730] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 6870.674282][ T5730] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 6871.097241][ T5730] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 6879.004192][ T5741] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 6879.039079][ T4817] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 6879.127281][ T4817] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 6879.158343][ T4817] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 6899.568831][ T24] audit: type=1400 audit(6898.800:299): avc: denied { write } for pid=6973 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6916.584565][ T24] audit: type=1400 audit(6915.750:300): avc: denied { write } for pid=6986 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6927.497869][ T3211] 8021q: adding VLAN 0 to HW filter on device eth31 [ 6969.345873][ T24] audit: type=1400 audit(6968.550:301): avc: denied { write } for pid=7003 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6986.513841][ T24] audit: type=1400 audit(6985.710:302): avc: denied { write } for pid=7013 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6997.205798][ T3211] 8021q: adding VLAN 0 to HW filter on device eth32 [ 7096.723693][ T24] audit: type=1400 audit(7095.810:303): avc: denied { write } for pid=7062 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7113.199306][ T24] audit: type=1400 audit(7112.370:304): avc: denied { write } for pid=7074 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7143.614387][ T24] audit: type=1400 audit(7142.840:305): avc: denied { write } for pid=7082 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7161.495119][ T24] audit: type=1400 audit(7160.680:306): avc: denied { write } for pid=7095 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7203.664403][ T24] audit: type=1400 audit(7202.790:307): avc: denied { write } for pid=7107 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7220.343871][ T24] audit: type=1400 audit(7219.520:308): avc: denied { write } for pid=7120 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7249.940988][ T24] audit: type=1400 audit(7249.170:309): avc: denied { write } for pid=7128 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7267.346108][ T24] audit: type=1400 audit(7266.550:310): avc: denied { write } for pid=7139 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7300.137732][ T24] audit: type=1400 audit(7299.370:311): avc: denied { write } for pid=7148 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7317.874978][ T24] audit: type=1400 audit(7317.080:312): avc: denied { write } for pid=7159 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7423.267524][ T24] audit: type=1400 audit(7422.500:313): avc: denied { write } for pid=7203 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7440.413913][ T24] audit: type=1400 audit(7439.630:314): avc: denied { write } for pid=7216 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7487.727828][ T24] audit: type=1400 audit(7486.930:315): avc: denied { write } for pid=7232 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7504.238886][ T24] audit: type=1400 audit(7503.380:316): avc: denied { write } for pid=7247 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7536.973918][ T24] audit: type=1400 audit(7536.050:317): avc: denied { write } for pid=7256 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7553.515091][ T24] audit: type=1400 audit(7552.720:318): avc: denied { write } for pid=7267 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7588.584671][ T24] audit: type=1400 audit(7587.780:319): avc: denied { write } for pid=7282 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7605.086069][ T24] audit: type=1400 audit(7604.270:320): avc: denied { write } for pid=7295 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7641.598847][ T24] audit: type=1400 audit(7640.730:321): avc: denied { write } for pid=7305 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7658.584666][ T24] audit: type=1400 audit(7657.800:322): avc: denied { write } for pid=7313 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7910.631273][ T7352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 7911.096399][ T7352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 7931.810098][ T7359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 7932.479562][ T7359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 7961.276648][ T24] audit: type=1400 audit(7960.490:323): avc: denied { write } for pid=7405 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7973.744815][ T7352] hsr_slave_0: entered promiscuous mode [ 7973.928160][ T7352] hsr_slave_1: entered promiscuous mode [ 7975.978544][ T24] audit: type=1400 audit(7975.180:324): avc: denied { write } for pid=7414 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7999.846015][ T7359] hsr_slave_0: entered promiscuous mode [ 8000.008185][ T7359] hsr_slave_1: entered promiscuous mode [ 8000.149372][ T7359] debugfs: 'hsr0' already exists in 'hsr' [ 8000.213670][ T7359] Cannot create hsr debugfs directory [ 8021.634029][ T24] audit: type=1400 audit(8020.830:325): avc: denied { write } for pid=7422 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 8036.089897][ T24] audit: type=1400 audit(8035.320:326): avc: denied { write } for pid=7429 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 8045.438121][ T7352] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 8046.275223][ T7352] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 8046.391813][ T7352] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 8046.929307][ T7352] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 8049.836538][ T7352] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 8050.645793][ T7352] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 8050.919786][ T7352] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 8051.589429][ T7352] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 8067.453521][ T24] audit: type=1400 audit(8066.650:327): avc: denied { write } for pid=7434 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 8077.026688][ T7359] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 8077.671747][ T7359] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 8077.985772][ T7359] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 8078.658445][ T7359] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 8078.981081][ T7359] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 8079.642037][ T7359] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 8080.017233][ T7359] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 8080.668044][ T7359] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 8084.376071][ T24] audit: type=1400 audit(8083.550:328): avc: denied { write } for pid=7445 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 8108.748219][ T24] audit: type=1400 audit(8107.960:329): avc: denied { write } for pid=7459 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 8113.956494][ T7352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 8126.185118][ T24] audit: type=1400 audit(8125.370:330): avc: denied { write } for pid=7468 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 8132.140986][ T7359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 8161.701681][ T24] audit: type=1400 audit(8160.920:331): avc: denied { write } for pid=7476 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 8178.464843][ T24] audit: type=1400 audit(8177.650:332): avc: denied { write } for pid=7486 comm="rm" name="hook-state" dev="tmpfs" ino=84 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 8195.845143][ T26] INFO: task syz.9.713:7346 blocked for more than 430 seconds. [ 8195.889065][ T26] Not tainted syzkaller #0 [ 8195.913912][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 8195.914743][ T26] task:syz.9.713 state:D stack:0 pid:7346 tgid:7346 ppid:6758 task_flags:0x400040 flags:0x00000011 [ 8195.917804][ T26] Call trace: [ 8195.918331][ T26] __switch_to+0x5e0/0xb70 (T) [ 8195.920486][ T26] __schedule+0x1e0c/0x38cc [ 8195.921039][ T26] schedule+0x1b4/0x274 [ 8195.921540][ T26] schedule_timeout+0x68/0x1e4 [ 8195.922083][ T26] wait_for_completion+0x1b8/0x414 [ 8196.114468][ T26] __synchronize_srcu+0x1c8/0x208 [ 8196.135321][ T26] synchronize_srcu+0x668/0x8dc [ 8196.135974][ T26] mmu_notifier_unregister+0x33c/0x444 [ 8196.136528][ T26] kvm_put_kvm+0x69c/0xbbc [ 8196.137036][ T26] kvm_vm_release+0x58/0x78 [ 8196.137511][ T26] __fput+0x4ac/0x978 [ 8196.137977][ T26] ____fput+0x20/0x30 [ 8196.138440][ T26] task_work_run+0x1b8/0x250 [ 8196.138945][ T26] exit_to_user_mode_loop+0x110/0x188 [ 8196.139485][ T26] el0_svc+0x18c/0x240 [ 8196.139985][ T26] el0t_64_sync_handler+0x84/0x12c [ 8196.140523][ T26] el0t_64_sync+0x198/0x19c SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 8196.304452][ T26] [ 8196.304452][ T26] Showing all locks held in the system: [ 8196.334285][ T26] 1 lock held by khungtaskd/26: [ 8196.334825][ T26] #0: ffff800087e93598 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x4c/0x188 [ 8196.337360][ T26] 1 lock held by syslogd/3170: [ 8196.337770][ T26] 2 locks held by getty/3239: [ 8196.338123][ T26] #0: 9ef00000124aa0a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 8196.339872][ T26] #1: 9eff80008cbdb2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x314/0x11f8 [ 8196.341551][ T26] 1 lock held by sshd-session/3368: [ 8196.341897][ T26] 2 locks held by syz-executor/3369: [ 8196.524666][ T26] 3 locks held by kworker/u4:2/3430: [ 8196.535310][ T26] 3 locks held by kworker/u4:0/3709: [ 8196.535857][ T26] 3 locks held by kworker/u4:5/5367: [ 8196.536170][ T26] 2 locks held by kworker/u4:6/5415: [ 8196.536499][ T26] #0: a0f000000d034140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x958/0x154c [ 8196.538270][ T26] #1: ffff80008fd57ce8 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x978/0x154c [ 8196.539954][ T26] 3 locks held by kworker/u4:12/5445: [ 8196.540300][ T26] 3 locks held by kworker/u4:1/5730: [ 8196.540618][ T26] 2 locks held by kworker/u4:3/5741: [ 8196.540903][ T26] #0: a0f000000d034140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x958/0x154c [ 8196.676014][ T26] #1: ffff80008e4e7ce8 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x978/0x154c [ 8196.677982][ T26] 3 locks held by kworker/u4:7/6571: [ 8196.678413][ T26] 2 locks held by syz.8.712/7341: [ 8196.678736][ T26] 3 locks held by kworker/u4:13/7361: [ 8196.679063][ T26] 1 lock held by modprobe/7491: [ 8196.679395][ T26] 1 lock held by modprobe/7493: [ 8196.679888][ T26] [ 8196.680137][ T26] ============================================= [ 8196.680137][ T26] [ 8196.681094][ T26] Kernel panic - not syncing: hung_task: blocked tasks [ 8196.691305][ T26] CPU: 0 UID: 0 PID: 26 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT [ 8196.692796][ T26] Hardware name: linux,dummy-virt (DT) [ 8196.693800][ T26] Call trace: [ 8196.694609][ T26] show_stack+0x2c/0x3c (C) [ 8196.695708][ T26] __dump_stack+0x30/0x40 [ 8196.696722][ T26] dump_stack_lvl+0x30/0x12c [ 8196.697791][ T26] dump_stack+0x1c/0x28 [ 8196.698793][ T26] vpanic+0x4cc/0x844 [ 8196.699684][ T26] vpanic+0x0/0x844 [ 8196.700558][ T26] hung_task_panic+0x0/0x2c [ 8196.701538][ T26] kthread+0x4cc/0x514 [ 8196.702508][ T26] ret_from_fork+0x10/0x20 [ 8196.704381][ T26] Kernel Offset: disabled [ 8196.705159][ T26] CPU features: 0x00000000,00d1802f,df1847a1,057ffe1f [ 8196.706429][ T26] Memory Limit: none [ 8196.708714][ T26] Rebooting in 86400 seconds..