last executing test programs: 59.531969052s ago: executing program 0 (id=1554): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000c47000/0x2000)=nil, 0x930, 0x7, 0x30, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) syz_kvm_vgic_v3_setup(r3, 0x2, 0x2c0) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=ANY=[], 0x20}, 0x0, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_ARM_VCPU_INIT(r8, 0x4020aeae, &(0x7f00000000c0)={0x5, 0x10}) ioctl$KVM_SET_ONE_REG(r8, 0x4010aeac, &(0x7f0000000240)=@arm64_sve_vls={0x606000000015ffff, 0x0}) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_ARM_VCPU_INIT(0xffffffffffffffff, 0x801c581f, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vm(r1, 0x4018aee3, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, 0x0}) 47.538637766s ago: executing program 1 (id=1556): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2041, 0x0) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) mmap$KVM_VCPU(&(0x7f000000e000/0x3000)=nil, r4, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0) munmap(&(0x7f0000ce0000/0x3000)=nil, 0x3000) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) munmap(&(0x7f0000c8f000/0x4000)=nil, 0x4000) munmap(&(0x7f0000647000/0x1000)=nil, 0x1000) munmap(&(0x7f000000f000/0x2000)=nil, 0x2000) ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000080)={0x5, 0x1}) r5 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r7, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f0000000240)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521c180c7f93448c9114707cd24b7eebb20700", 0x0, 0x48) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r9 = openat$kvm(0x0, &(0x7f0000000040), 0x2c00, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000140)={0x7, 0xffffffffffffffff, 0x1}) r12 = ioctl$KVM_CREATE_VM(r11, 0x894c, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xb701, 0x0) ioctl$KVM_CREATE_VCPU(r13, 0xb702, 0xfffffffffffffffe) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r7, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000040), 0xa00f2, 0x0) 47.290804314s ago: executing program 0 (id=1557): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="076fde5a55"], 0x40}, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x8, 0xffffffffffffffff}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000100)=@attr_other={0x0, 0x4, 0x3, 0x0}) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(0xffffffffffffffff, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)={0xeeffbffd, 0xffd, 0x1}}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x1fe, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000bfd000/0x400000)=nil) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000b80)={0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e00000000000000400000000000000008000084"], 0x40}, &(0x7f0000000bc0)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r10, 0xae80, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_ARM_VCPU_INIT(r11, 0x4020aeae, &(0x7f0000000000)={0x5, 0x2}) ioctl$KVM_RUN(r11, 0xae80, 0x0) 34.928325594s ago: executing program 1 (id=1558): r0 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) (async) r1 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000300)={0x0, &(0x7f0000000000)=[@its_send_cmd={0xaa, 0x28, {0x1, 0x0, 0x2, 0x3, 0x9, 0x74bf, 0x4}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x58, 0x1}}, @mrs={0xbe, 0x18, {0x603000000013e08c}}, @its_send_cmd={0xaa, 0x28, {0xe, 0x0, 0x3, 0x2, 0x7, 0x3, 0x1}}, @code={0xa, 0xcc, {"0004201e00149ad200a0b8f2010180d2220080d2430080d2a40080d2020000d420e082d20060b0f2810080d2a20080d2c30080d2240180d2020000d4007008d5010000d4000008d5805381d200a0b8f2610180d2420080d2230080d2840080d2020000d4809298d20040b8f2410180d2620180d2830180d2640080d2020000d4206491d200a0b8f2e10180d2420080d2a30080d2e40180d2020000d4c0dd94d20040b8f2810180d2c20080d2a30180d2e40180d2020000d4"}}, @its_setup={0x82, 0x28, {0x2, 0x3, 0x21d}}, @msr={0x14, 0x20, {0x603000000013c602, 0x3}}, @eret={0xe6, 0x18, 0x6}, @its_setup={0x82, 0x28, {0x0, 0x3, 0x311}}, @msr={0x14, 0x20, {0x603000000013c4c9, 0x9}}, @msr={0x14, 0x20, {0x603000000013e6d0, 0x5}}, @its_setup={0x82, 0x28, {0x3, 0x4, 0x35d}}, @its_setup={0x82, 0x28, {0x7, 0x4, 0x107}}, @its_setup={0x82, 0x28, {0x1, 0x1, 0x1b}}, @its_setup={0x82, 0x28, {0x3, 0x3, 0x9c}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x0, 0x4, 0x3, 0x7, 0xffffff7f}}], 0x2f4}, &(0x7f0000000340)=[@featur1={0x1, 0xa}], 0x1) r2 = mmap$KVM_VCPU(&(0x7f0000ffd000/0x1000)=nil, r0, 0x2, 0x11, r1, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) (async) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x230842, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000580)={0x0, &(0x7f00000003c0)=[@msr={0x14, 0x20, {0x603000000013e703, 0x9}}, @smc={0x1e, 0x40, {0x84000052, [0x2, 0xfffffffffffff6ba, 0xfffffffffffffffd, 0xfffffffffffff531, 0x6]}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x0, 0x4, 0x5, 0x7f, 0x6, 0x2}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x8100000, 0xd00, 0x2000, 0x6}}, @code={0xa, 0x6c, {"008008d50080800c007008d50084007f000008d50040601e0000002d0020c00ca01c8bd200c0b0f2410080d2820080d2030080d2a40180d2020000d4c0399cd20080b0f2410080d2620180d2a30080d2e40180d2020000d4"}}, @hvc={0x32, 0x40, {0x80000002, [0x101, 0x5, 0x9, 0x7, 0x8]}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80a0000, 0xd00, 0x1, 0xa}}], 0x194}, &(0x7f00000005c0)=[@featur2={0x1, 0x2}], 0x1) (async) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000600)={0x1, 0xffffffffffffffff, 0x1}) (async) munmap(&(0x7f0000cff000/0x2000)=nil, 0x2000) (async) r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) (async) r10 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_HALT_POLL(r10, 0x4068aea3, &(0x7f0000000640)={0xb6, 0x0, 0x3}) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f00000006c0)="c18b059fd07f273eff6928dd21e7ac4b269531c5683627afde4fab80fe71d5b146e5a9f0b9569f813097ad297ea886b9e99ceadc6d67c0768cb9be99d6e2415f1e5c57e1da729b39", 0x0, 0x48) (async) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f0000000780)=@attr_arm64={0x0, 0xc, 0x3, &(0x7f0000000740)=0x9}) (async) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x7fff) (async) ioctl$KVM_SET_GSI_ROUTING(r10, 0x4008ae6a, &(0x7f00000007c0)={0x2, 0x0, [{0x2, 0x3, 0x0, 0x0, @adapter={0x2, 0x0, 0x81, 0x4, 0x8}}, {0x5, 0x2, 0x731151e8d405ef9b, 0x0, @irqchip={0x100, 0x2}}]}) r11 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) (async) r12 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000e00)={0x0, &(0x7f0000000840)=[@svc={0x122, 0x40, {0x40000000, [0x9, 0x0, 0x80000000, 0x400000000000000, 0x200]}}, @uexit={0x0, 0x18, 0x8d31}, @mrs={0xbe, 0x18, {0xdc83}}, @uexit={0x0, 0x18, 0x9}, @hvc={0x32, 0x40, {0x82003fbc, [0x6, 0x4b0, 0x400, 0x6, 0xb]}}, @code={0xa, 0x6c, {"c03584d20000b0f2810080d2a20180d2430180d2e40180d2020000d4007008d5008008d5007008d5000008d5000028d5005c200e000c40fc0084002f40b588d200a0b0f2810180d2020180d2a30180d2e40080d2020000d4"}}, @memwrite={0x6e, 0x30, @generic={0x8000000, 0x57f, 0x6ea}}, @mrs={0xbe, 0x18, {0x603000000013e6c7}}, @eret={0xe6, 0x18, 0x3ce}, @its_setup={0x82, 0x28, {0x0, 0x4, 0x183}}, @irq_setup={0x46, 0x18, {0x4, 0x2d3}}, @eret={0xe6, 0x18, 0x4}, @irq_setup={0x46, 0x18, {0x2, 0x39a}}, @smc={0x1e, 0x40, {0x5000000, [0x8, 0x9, 0x6, 0x1, 0x4c1c]}}, @code={0xa, 0x9c, {"207982d20040b0f2610080d2a20180d2e30180d2440080d2020000d4008c202e009c9ed20060b8f2610180d2620180d2c30180d2640080d2020000d480a98ad20020b8f2810180d2020180d2a30180d2440080d2020000d4000028d5007008d50084400d000008d5c0148cd200a0b8f2210080d2820080d2830080d2c40180d2020000d400b0200e"}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x1, 0x3, 0xa, 0x6, 0x2, 0x4}}, @hvc={0x32, 0x40, {0x3000000, [0x6, 0x8000000000000000, 0x68b, 0x101, 0x1]}}, @irq_setup={0x46, 0x18, {0x0, 0x70}}, @irq_setup={0x46, 0x18, {0x0, 0x191}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x1, 0x1, 0x6, 0x13, 0x100, 0x1}}, @msr={0x14, 0x20, {0x245c, 0x2}}, @irq_setup={0x46, 0x18, {0x4, 0x19a}}, @hvc={0x32, 0x40, {0x86000000, [0x7, 0x4, 0xb, 0x0, 0x81]}}, @hvc={0x32, 0x40, {0xc4000010, [0x6, 0x2, 0x2, 0x3, 0x1]}}, @mrs={0xbe, 0x18, {0x3914}}, @smc={0x1e, 0x40, {0x8600ff01, [0x2, 0xdc, 0x0, 0x10, 0x20000000000000]}}, @svc={0x122, 0x40, {0x8400000b, [0x3, 0x6, 0x8c29, 0x9, 0x5262070e]}}, @smc={0x1e, 0x40, {0x80003fff, [0x0, 0x3, 0x5, 0x3, 0x80000000]}}, @svc={0x122, 0x40, {0x8600ff01, [0x8, 0x6, 0x6, 0x1, 0x5]}}, @uexit={0x0, 0x18, 0x1ff}], 0x588}, &(0x7f0000000e40)=[@featur1={0x1, 0x81}], 0x1) mmap$KVM_VCPU(&(0x7f0000cf2000/0x4000)=nil, r11, 0x0, 0x20010, r12, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000e80)={0xeeee8000, 0x100000, 0x1}) (async) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f0000000f00)=@arm64_ccsidr={0x6020000000110007, &(0x7f0000000ec0)=0x6}) (async) ioctl$KVM_ARM_VCPU_FINALIZE(r1, 0x4004aec2, &(0x7f0000000f40)=0x2) r13 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x1000)=nil, r11, 0x2000000, 0x20010, r9, 0x0) (async) munmap(&(0x7f0000e01000/0x4000)=nil, 0x4000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000f80), 0x80000, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000fc0)={0xb, 0xffffffffffffffff, 0x1}) (async) ioctl$KVM_GET_ONE_REG(r7, 0x4010aeab, &(0x7f0000001040)=@arm64_sve={0x6080000000150059, &(0x7f0000001000)=0x8000000000000000}) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(r13, 0x20, &(0x7f0000001080)="a6f3382b7d4e9ede31c7d33eb6c0bd71ac33594320d98816f158ac268f84371a7909298ab60b91357abb578710456bfc032a926f631b1a7071449bf47613e25b89b39b3bf2cd8f3c", 0x0, 0x48) 33.797973566s ago: executing program 0 (id=1559): munmap(&(0x7f0000647000/0x1000)=nil, 0x1000) munmap(&(0x7f0000fde000/0x4000)=nil, 0x4000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0x80111500, 0xfffffffffffff000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="820000000000000000000000000000000100000000000000010000000000000001"], 0x28}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r3, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000100)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000180)=0x8080000}) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil) r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000080)={0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="257f11ef40194c31c1e60d526652b6312817482c672662dc537d6c5d67203534f8796102fe258161100cfe588978ae87243fc4dc25cedb63ff798b926eb29c0ad933d45da0e4f810616f6202738e97f23c41a294cec22564006000bb81a9e9452b3a3947cf7a4ad40b70a6f4fd623a8bb702d3203c761f83a66c067049dd08c1c1da963d2eb0d92185f42baf388f1406e132605d01894283d0fcf5fb51078ee378249aea5919b42e08da360c9871387e41d27d1f9f6cf5"], 0x208}, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000647000/0x4000)=nil, 0x930, 0x2, 0x4102932, 0xffffffffffffffff, 0x0) r11 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil) r13 = syz_kvm_vgic_v3_setup(r0, 0x0, 0x360) ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f0000000200)=@attr_other={0x0, 0xff, 0x2069, &(0x7f00000001c0)=0x3}) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f00000002c0)=@attr_other={0x0, 0x3, 0x1, &(0x7f0000000280)=0xd6}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x1, 0x0, 0x8000000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x5000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) mmap$KVM_VCPU(&(0x7f0000dfb000/0x3000)=nil, 0x0, 0x200000c, 0x13, r10, 0x0) 28.308263407s ago: executing program 1 (id=1560): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4360ae82, &(0x7f0000000280)={[0x734, 0x200, 0x0, 0x7, 0x5, 0x8, 0xffff, 0x7, 0x5, 0x7f, 0xd, 0x6, 0xfffffffffffffffb, 0x800, 0xf0fa5ad], 0x5000, 0x200}) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="82000000000000002800000000000000010000000000000001000000000000000100000000000000aa00000000000000280000000000000008"], 0x50}, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x6, 0xffffffffffffffff, 0x1}) syz_kvm_vgic_v3_setup(r1, 0x1, 0x140) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0xb, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18.880503748s ago: executing program 0 (id=1561): r0 = openat$kvm(0x0, &(0x7f0000000240), 0x580, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r4 = eventfd2(0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = mmap$KVM_VCPU(&(0x7f0000dd3000/0x4000)=nil, 0x930, 0x280000b, 0x11, r7, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f0000000100)="8b4ecb0a5826f8ec1aab5bf7b054453659001990bf1e9865dffbdb29edfdefbec438a05c35524cd2c1defd0b244b3f9a98e7c53392e54c65e2f87f6c441f5a142acc5cbb28f7f5ea", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r7, 0x0) (async) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x0) (async) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000900)={0x0, 0x0, 0x0, r4}) (async) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000080)={0x10001, 0x0, 0x1, r4}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x5, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) (async) r9 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f00008a0000/0x400000)=nil) r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f00000000c0)={0x0, &(0x7f0000000e00)=ANY=[], 0x630}, 0x0, 0x0) (async) r11 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0xa) ioctl$KVM_ARM_VCPU_INIT(r13, 0x4020aeae, &(0x7f00000000c0)={0x5, 0x1f}) (async) ioctl$KVM_GET_ONE_REG(r13, 0x4010aeab, &(0x7f0000000100)=@arm64_sys={0x603000000013c090, &(0x7f0000000000)=0x8000000000000001}) (async) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r10, 0x4018aee1, &(0x7f0000000080)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000040)={0x0, 0x5, 0x1}}) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) 18.879992268s ago: executing program 1 (id=1562): mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xc, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x83) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0) 15.117135109s ago: executing program 1 (id=1563): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2a60, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2041, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x1f9, 0x0, 0xeeee8000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r2, 0x4068aea3, &(0x7f0000000300)={0xdf, 0x0, 0x8000}) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r2, 0x4068aea3, &(0x7f0000000080)={0xe1, 0x0, 0x2000}) (async, rerun: 32) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 32) r4 = openat$kvm(0x0, &(0x7f0000000240), 0x2400, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) syz_kvm_setup_cpu$arm64(r7, 0xffffffffffffffff, &(0x7f0000a75000/0x400000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_DEVICE_ATTR(r8, 0x4018aee2, &(0x7f0000000880)=@attr_arm64={0x0, 0x2, 0x0, &(0x7f0000000840)=0x3}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x1fe, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_ARM_VCPU_INIT(r9, 0x4020aeae, &(0x7f0000000340)={0x5}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000280)={0x1fe, 0x1, 0x6000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) (async) r12 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r11, 0x4040ae79, &(0x7f0000000040)={0x3, 0xeeee0000, 0x2, r12, 0x8}) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000140)={r12, 0xc9, 0x0, r12}) (async) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000140)={0x3, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r13, 0xb701, 0x0) (async, rerun: 64) close(0x5) (rerun: 64) 10.691562907s ago: executing program 0 (id=1564): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, 0x0) r2 = syz_kvm_vgic_v3_setup(r1, 0x4, 0x100) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000003c0)=@attr_arm64={0x0, 0x3, 0x2, &(0x7f0000000340)=0x100}) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xe5) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xaece, 0x0) close(0x5) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_IRQ_LINE(r7, 0x4008ae61, &(0x7f0000000000)={0x2}) 7.393586333s ago: executing program 1 (id=1565): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2041, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$arm64(r2, 0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000580)=[{0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000000000000040000000000000000900008400000000000000008003000009000000395c95440400000000040000000000000004800000000000000600001b4768ad03814dc92febfeb9a142969d5dcbc9d72dd873e0d3d8deaef974c699db6694c81a4f1b740c684040504319106a90572e06b53ebe3606432928dc46168242cf30d15bc6b7dd70"], 0x40}], 0x1, 0x0, 0x0, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r4 = openat$kvm(0x0, &(0x7f0000000000), 0x222000, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000780)={0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0a00000000000000840000000000000000fc209b000008d5e0888dd20060b8f2c10080d2620080d2a332e78953e4917112758f4d990180d2440080d2020000d40000001300086008fbc63516d74b491971ec33dc75c71fbdb0a26f00002b000008d50084202ea0a483d20000b8f2010080d2020080d2630173d2040180d2020000d4004d"], 0x84}, &(0x7f00000007c0)=[@featur2={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f000000e000/0x3000)=nil, r6, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_ARM_VCPU_INIT(r9, 0x4020aeae, &(0x7f00000001c0)={0x5, 0x2}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_ARM_SET_COUNTER_OFFSET(r8, 0x4010aeb5, &(0x7f00000000c0)={0x6}) r10 = mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r10, 0x20, &(0x7f0000000240)="fb4149dd033be3ac2cc4a22332fdaa8de0418df24200000000a6ab8031d1dfd92f0000000001ffffffff9610fbff77521ce10d8f6b69d22627e700", 0x0, 0xffffffffffffffca) r11 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r12 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r11, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, r12, 0x100000c, 0x23ac5f9b426ec4b2, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=1566): mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x0, 0x810, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000200)=@arm64={0x4, 0x0, 0x0, '\x00', 0x101}) (async) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000200)=@arm64={0x4, 0x0, 0x0, '\x00', 0x101}) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0xf, 0x32, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0xf, 0x32, 0xffffffffffffffff, 0x0) openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) (async) r3 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0x4020aeae, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000000000000000000082"]) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f00000001c0)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000380)}) (async) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000380)}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x5, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000002c0)=@attr_other={0x0, 0x8, 0x100, &(0x7f0000000000)=0xc000000000000000}) (async) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000002c0)=@attr_other={0x0, 0x8, 0x100, &(0x7f0000000000)=0xc000000000000000}) openat$kvm(0x0, &(0x7f0000000000), 0x121e82, 0x0) (async) r6 = openat$kvm(0x0, &(0x7f0000000000), 0x121e82, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_vgic_v3_setup(r7, 0x2, 0x40) mmap$KVM_VCPU(&(0x7f0000d10000/0xa000)=nil, 0x930, 0x3000006, 0x28031, r8, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000d10000/0xa000)=nil, 0x930, 0x3000006, 0x28031, r8, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x2c00, 0x0) r9 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xb701, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xb704, 0x20000002) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r10 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r10, 0x4010aeab, 0x0) r11 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) kernel console output (not intermixed with test programs): [ 439.381584][ T3132] eql: remember to turn off Van-Jacobson compression on your slave devices Warning: Permanently added '[localhost]:55029' (ED25519) to the list of known hosts. [ 607.242779][ T25] audit: type=1400 audit(606.320:60): avc: denied { name_bind } for pid=3293 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 609.199438][ T25] audit: type=1400 audit(608.280:61): avc: denied { execute } for pid=3294 comm="sh" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 609.243202][ T25] audit: type=1400 audit(608.320:62): avc: denied { execute_no_trans } for pid=3294 comm="sh" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 627.789922][ T25] audit: type=1400 audit(626.870:63): avc: denied { mounton } for pid=3294 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 627.826270][ T25] audit: type=1400 audit(626.890:64): avc: denied { mount } for pid=3294 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 627.905593][ T3294] cgroup: Unknown subsys name 'net' [ 627.957889][ T25] audit: type=1400 audit(627.040:65): avc: denied { unmount } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 628.358226][ T3294] cgroup: Unknown subsys name 'cpuset' [ 628.458983][ T3294] cgroup: Unknown subsys name 'rlimit' [ 629.387253][ T25] audit: type=1400 audit(628.470:66): avc: denied { setattr } for pid=3294 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 629.409603][ T25] audit: type=1400 audit(628.480:67): avc: denied { mounton } for pid=3294 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 629.436098][ T25] audit: type=1400 audit(628.510:68): avc: denied { mount } for pid=3294 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 630.641004][ T3296] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 630.665181][ T25] audit: type=1400 audit(629.740:69): avc: denied { relabelto } for pid=3296 comm="mkswap" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 630.690558][ T25] audit: type=1400 audit(629.770:70): avc: denied { write } for pid=3296 comm="mkswap" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 630.877298][ T25] audit: type=1400 audit(629.950:71): avc: denied { read } for pid=3294 comm="syz-executor" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 630.906184][ T25] audit: type=1400 audit(629.970:72): avc: denied { open } for pid=3294 comm="syz-executor" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 630.942671][ T3294] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 679.390699][ T25] audit: type=1400 audit(678.470:73): avc: denied { execmem } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 683.049279][ T25] audit: type=1400 audit(682.130:74): avc: denied { read } for pid=3300 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 683.072558][ T25] audit: type=1400 audit(682.140:75): avc: denied { open } for pid=3300 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 683.168189][ T25] audit: type=1400 audit(682.220:76): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 683.400511][ T25] audit: type=1400 audit(682.470:77): avc: denied { module_request } for pid=3301 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 684.549018][ T25] audit: type=1400 audit(683.620:78): avc: denied { sys_module } for pid=3300 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 713.171026][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 713.411843][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 714.212258][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 714.806530][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 726.825902][ T3300] hsr_slave_0: entered promiscuous mode [ 726.851299][ T3300] hsr_slave_1: entered promiscuous mode [ 727.962131][ T3301] hsr_slave_0: entered promiscuous mode [ 728.000544][ T3301] hsr_slave_1: entered promiscuous mode [ 728.031621][ T3301] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 728.041749][ T3301] Cannot create hsr debugfs directory [ 733.396827][ T25] audit: type=1400 audit(732.470:79): avc: denied { create } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 733.455884][ T25] audit: type=1400 audit(732.530:80): avc: denied { write } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 733.507785][ T25] audit: type=1400 audit(732.530:81): avc: denied { read } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 733.666898][ T3300] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 734.039009][ T3300] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 734.369900][ T3300] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 734.653074][ T3300] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 736.263357][ T3301] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 736.552423][ T3301] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 736.717479][ T3301] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 736.939314][ T3301] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 748.812681][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 752.159642][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 808.289148][ T3300] veth0_vlan: entered promiscuous mode [ 808.801598][ T3300] veth1_vlan: entered promiscuous mode [ 810.602697][ T3300] veth0_macvtap: entered promiscuous mode [ 810.939240][ T3300] veth1_macvtap: entered promiscuous mode [ 812.016634][ T3301] veth0_vlan: entered promiscuous mode [ 812.740638][ T3301] veth1_vlan: entered promiscuous mode [ 813.280669][ T3300] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.290393][ T3300] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.304979][ T3300] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.335163][ T3300] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.009854][ T25] audit: type=1400 audit(815.050:82): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 816.140831][ T3301] veth0_macvtap: entered promiscuous mode [ 816.230602][ T25] audit: type=1400 audit(815.310:83): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/syzkaller.hasRAw/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 816.395819][ T25] audit: type=1400 audit(815.470:84): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 816.441367][ T3301] veth1_macvtap: entered promiscuous mode [ 816.652567][ T25] audit: type=1400 audit(815.730:85): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/syzkaller.hasRAw/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 816.748895][ T25] audit: type=1400 audit(815.830:86): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/syzkaller.hasRAw/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 817.822911][ T25] audit: type=1400 audit(816.790:87): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 818.147566][ T25] audit: type=1400 audit(817.210:88): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1546 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 818.272461][ T25] audit: type=1400 audit(817.350:89): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="gadgetfs" ino=3285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 818.885885][ T25] audit: type=1400 audit(817.830:90): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 818.968622][ T3301] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.986831][ T3301] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.035231][ T25] audit: type=1400 audit(818.110:91): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 819.050676][ T3301] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.105164][ T3301] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.192705][ T3300] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 822.858479][ T25] kauditd_printk_skb: 1 callbacks suppressed [ 822.881259][ T25] audit: type=1400 audit(821.890:93): avc: denied { read write } for pid=3300 comm="syz-executor" name="loop1" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 822.906932][ T25] audit: type=1400 audit(821.980:94): avc: denied { open } for pid=3300 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 822.961806][ T25] audit: type=1400 audit(822.040:95): avc: denied { ioctl } for pid=3300 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=638 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 826.696865][ T25] audit: type=1400 audit(825.770:96): avc: denied { read } for pid=3452 comm="syz.1.2" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 826.743032][ T25] audit: type=1400 audit(825.820:97): avc: denied { open } for pid=3452 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 827.765671][ T25] audit: type=1400 audit(826.690:98): avc: denied { ioctl } for pid=3452 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 831.295257][ T25] audit: type=1400 audit(830.360:99): avc: denied { append } for pid=3454 comm="syz.0.1" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 839.526248][ T25] audit: type=1400 audit(838.580:100): avc: denied { write } for pid=3462 comm="syz.1.3" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 874.905608][ T25] audit: type=1400 audit(873.910:101): avc: denied { execute } for pid=3485 comm="syz.0.8" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=3720 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1012.318855][ T25] audit: type=1400 audit(1011.390:102): avc: denied { map } for pid=3580 comm="syz.1.34" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1012.380775][ T25] audit: type=1400 audit(1011.430:103): avc: denied { execute } for pid=3580 comm="syz.1.34" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1053.603113][ T3606] debugfs: File 'vgic-its-state@8080000' in directory '3606-13' already present! [ 1165.323154][ T25] audit: type=1400 audit(1164.380:104): avc: denied { setattr } for pid=3682 comm="syz.0.60" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1235.197623][ T3730] kvm [3730]: Failed to find VMA for hva 0x20d8d000 [ 1697.641173][ T25] audit: type=1400 audit(1696.710:105): avc: denied { ioctl } for pid=4059 comm="syz.0.166" path="net:[4026532627]" dev="nsfs" ino=4026532627 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2060.463355][ T4296] kvm [4296]: Failed to find VMA for hva 0x208a1000 [ 2127.986270][ T4338] kvm [4338]: Failed to find VMA for hva 0x20d8d000 [ 2436.616960][ T4552] kvm [4552]: Failed to find VMA for hva 0x20d8d000 [ 2592.742064][ T4652] kvm [4652]: Failed to find VMA for hva 0x21016000 [ 2700.722192][ T4720] kvm [4718]: Unsupported guest CP15 access at: 00000100 [000001d3] [ 2700.722192][ T4720] { Op0( 0), Op1( 7), CRn(15), CRm(12), Op2( 7), func_read }, [ 2700.787140][ T4720] kvm [4718]: Unsupported guest CP15 access at: 00000100 [000001db] [ 2700.787140][ T4720] { Op0( 0), Op1( 7), CRn(15), CRm(12), Op2( 7), func_read }, [ 2700.830039][ T4720] kvm [4718]: Unsupported guest CP15 access at: 00000100 [000001db] [ 2700.830039][ T4720] { Op0( 0), Op1( 7), CRn(15), CRm(12), Op2( 7), func_read }, [ 2700.869061][ T4720] kvm [4718]: Unsupported guest CP15 access at: 00000100 [000001db] [ 2700.869061][ T4720] { Op0( 0), Op1( 7), CRn(15), CRm(12), Op2( 7), func_read }, [ 2700.906539][ T4720] kvm [4718]: Unsupported guest CP15 access at: 00000100 [000001db] [ 2700.906539][ T4720] { Op0( 0), Op1( 7), CRn(15), CRm(12), Op2( 7), func_read }, [ 2700.937136][ T4720] kvm [4718]: Unsupported guest CP15 access at: 00000100 [000001db] [ 2700.937136][ T4720] { Op0( 0), Op1( 7), CRn(15), CRm(12), Op2( 7), func_read }, [ 2700.986729][ T4720] kvm [4718]: Unsupported guest CP15 access at: 00000100 [000001db] [ 2700.986729][ T4720] { Op0( 0), Op1( 7), CRn(15), CRm(12), Op2( 7), func_read }, [ 2701.010870][ T4720] kvm [4718]: Unsupported guest CP15 access at: 00000100 [000001db] [ 2701.010870][ T4720] { Op0( 0), Op1( 7), CRn(15), CRm(12), Op2( 7), func_read }, [ 2701.040505][ T4720] kvm [4718]: Unsupported guest CP15 access at: 00000100 [000001db] [ 2701.040505][ T4720] { Op0( 0), Op1( 7), CRn(15), CRm(12), Op2( 7), func_read }, [ 2701.156188][ T4720] kvm [4718]: Unsupported guest CP15 access at: 00000100 [000001db] [ 2701.156188][ T4720] { Op0( 0), Op1( 7), CRn(15), CRm(12), Op2( 7), func_read }, [ 2714.148168][ T4727] kvm [4727]: Failed to find VMA for hva 0x20c01000 [ 2896.268948][ T4855] kvm [4855]: Failed to find VMA for hva 0x20d8d000 [ 2896.296071][ T4856] kvm [4856]: Failed to find VMA for hva 0x20d8d000 [ 3024.586666][ T4940] kvm [4940]: Failed to find VMA for hva 0x20c01000 [ 3042.822667][ T4952] kvm [4952]: Failed to find VMA for hva 0x21016000 [ 3089.870106][ T4974] kvm [4974]: Failed to find VMA for hva 0x20d8d000 [ 3406.052690][ T5176] kvm [5176]: Failed to find VMA for hva 0x208a1000 [ 3641.302138][ T5274] kvm [5274]: Failed to find VMA for hva 0x2101a000 [ 3973.376186][ T5420] kvm [5420]: Failed to find VMA for hva 0x20d8d000 [ 4031.308325][ T5446] kvm [5446]: Failed to find VMA for hva 0x21016000 [ 4116.822125][ T5493] kvm [5493]: Failed to find VMA for hva 0x21016000 [ 4155.773249][ T5514] kvm [5514]: Failed to find VMA for hva 0x21016000 [ 4400.707836][ T5636] kvm [5636]: Failed to find VMA for hva 0x20c01000 [ 4477.853174][ T5679] kvm [5679]: Failed to find VMA for hva 0x20d8d000 [ 4545.087710][ T5717] kvm [5717]: Failed to find VMA for hva 0x21016000 [ 4605.225459][ T25] audit: type=1400 audit(4604.300:106): avc: denied { map } for pid=5750 comm="syz.1.724" path="pipe:[2446]" dev="pipefs" ino=2446 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 4605.289631][ T25] audit: type=1400 audit(4604.360:107): avc: denied { execute } for pid=5750 comm="syz.1.724" path="pipe:[2446]" dev="pipefs" ino=2446 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 4776.105906][ T5839] kvm [5839]: Failed to find VMA for hva 0x20c01000 [ 4867.291521][ T5873] kvm [5873]: Failed to find VMA for hva 0x20d8d000 [ 5570.872103][ T6212] kvm [6212]: Failed to find VMA for hva 0x21016000 [ 5601.319892][ T6224] KVM: debugfs: duplicate directory 6224-16 [ 5725.400615][ T6290] kvm [6290]: Failed to find VMA for hva 0x2101a000 [ 5974.059088][ T6406] kvm [6406]: Failed to find VMA for hva 0x20d8d000 [ 5974.079557][ T6405] kvm [6405]: Failed to find VMA for hva 0x20d8d000 [ 6012.008551][ T6426] kvm [6425]: Unsupported guest access at: eeef0000 [ 6012.008551][ T6426] { Op0( 2), Op1( 0), CRn( 0), CRm( 0), Op2( 2), func_write }, [ 6013.700228][ T6426] kvm [6426]: Failed to find VMA for hva 0x20d8d000 [ 6310.718702][ T5140] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6311.859586][ T5140] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6313.301984][ T5140] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6314.369722][ T5140] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6333.388842][ T5140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 6333.671329][ T5140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 6333.872053][ T5140] bond0 (unregistering): Released all slaves [ 6336.197462][ T5140] hsr_slave_0: left promiscuous mode [ 6336.310285][ T5140] hsr_slave_1: left promiscuous mode [ 6337.031166][ T5140] veth1_macvtap: left promiscuous mode [ 6337.042614][ T5140] veth0_macvtap: left promiscuous mode [ 6337.077831][ T5140] veth1_vlan: left promiscuous mode [ 6337.092643][ T5140] veth0_vlan: left promiscuous mode [ 6399.190800][ T6573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 6399.383540][ T6573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 6426.647707][ T6573] hsr_slave_0: entered promiscuous mode [ 6426.748664][ T6573] hsr_slave_1: entered promiscuous mode [ 6447.922800][ T6573] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 6448.192052][ T6573] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 6448.421446][ T6573] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 6448.717672][ T6573] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 6470.408504][ T6573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 6561.127306][ T6573] veth0_vlan: entered promiscuous mode [ 6561.838615][ T6573] veth1_vlan: entered promiscuous mode [ 6564.595753][ T6573] veth0_macvtap: entered promiscuous mode [ 6564.943445][ T6573] veth1_macvtap: entered promiscuous mode [ 6567.151733][ T6573] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 6567.171144][ T6573] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 6567.207343][ T6573] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 6567.221341][ T6573] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 6569.855368][ T25] audit: type=1400 audit(6568.910:108): avc: denied { mounton } for pid=6573 comm="syz-executor" path="/syzkaller.1dmPVj/syz-tmp" dev="vda" ino=1879 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 6669.451749][ T6801] kvm [6801]: Failed to find VMA for hva 0x21016000 [ 6985.013162][ T6951] kvm [6951]: Failed to find VMA for hva 0x21016000 [ 7043.086954][ T6979] KVM: debugfs: duplicate directory 6979-8 [ 7044.163300][ T6979] KVM: debugfs: duplicate directory 6979-8 [ 7051.592840][ T6981] kvm [6981]: Failed to find VMA for hva 0x21016000 [ 7333.222983][ T7112] KVM: debugfs: duplicate directory 7112-10 [ 7669.979525][ T25] audit: type=1400 audit(7669.060:109): avc: denied { execute } for pid=7265 comm="syz.1.1278" path=2F3132392F10FBFF67525673312B0104 dev="tmpfs" ino=668 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 7991.389186][ T7419] kvm [7419]: Failed to find VMA for hva 0x20d8d000 [ 8324.619609][ T7576] kvm [7576]: Failed to find VMA for hva 0x20d8c000 [ 8432.842392][ T7050] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 8434.457452][ T7050] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 8435.698313][ T7050] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 8437.331035][ T7050] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 8455.301878][ T7050] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 8455.683248][ T7050] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 8455.956015][ T7050] bond0 (unregistering): Released all slaves [ 8458.052939][ T7050] hsr_slave_0: left promiscuous mode [ 8458.149170][ T7050] hsr_slave_1: left promiscuous mode [ 8458.907641][ T7050] veth1_macvtap: left promiscuous mode [ 8458.913265][ T7050] veth0_macvtap: left promiscuous mode [ 8458.986532][ T7050] veth1_vlan: left promiscuous mode [ 8459.048226][ T7050] veth0_vlan: left promiscuous mode [ 8542.187102][ T7627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 8542.561834][ T7627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 8572.806947][ T7627] hsr_slave_0: entered promiscuous mode [ 8572.869932][ T7627] hsr_slave_1: entered promiscuous mode [ 8572.927618][ T7627] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 8572.955798][ T7627] Cannot create hsr debugfs directory [ 8599.440085][ T7627] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 8600.100825][ T7627] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 8600.489232][ T7627] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 8600.893212][ T7627] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 8627.713433][ T7627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 8668.797553][ T7808] kvm [7808]: Failed to find VMA for hva 0x20a28000 [ 8730.375344][ T7627] veth0_vlan: entered promiscuous mode [ 8731.007085][ T7627] veth1_vlan: entered promiscuous mode [ 8734.316406][ T7627] veth0_macvtap: entered promiscuous mode [ 8734.776567][ T7627] veth1_macvtap: entered promiscuous mode [ 8737.232630][ T7627] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 8737.289851][ T7627] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 8737.306964][ T7627] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 8737.338549][ T7627] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 9332.328179][ T8265] kvm [8265]: Failed to find VMA for hva 0x20d8d000 [ 9361.781838][ T8288] ------------[ cut here ]------------ [ 9361.782722][ T8288] WARNING: CPU: 0 PID: 8288 at arch/arm64/kvm/inject_fault.c:71 pend_serror_exception+0x19c/0x5ac [ 9361.786772][ T8288] Modules linked in: [ 9361.789650][ T8288] CPU: 0 UID: 0 PID: 8288 Comm: syz.0.1566 Not tainted 6.16.0-rc3-syzkaller-g15724a984643 #0 PREEMPT [ 9361.791551][ T8288] Hardware name: linux,dummy-virt (DT) [ 9361.793018][ T8288] pstate: 81402009 (Nzcv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 9361.794503][ T8288] pc : pend_serror_exception+0x19c/0x5ac [ 9361.795638][ T8288] lr : pend_serror_exception+0x19c/0x5ac [ 9361.796774][ T8288] sp : ffff80008eef7930 [ 9361.797749][ T8288] x29: ffff80008eef7930 x28: bef000001d84d8a8 x27: 0000000000000001 [ 9361.799844][ T8288] x26: 0000000000000000 x25: 0000000000000001 x24: 00000000000000be [ 9361.801697][ T8288] x23: bef000001d84db28 x22: 00000000000000be x21: bef000001d84e701 [ 9361.803523][ T8288] x20: 0000000000000007 x19: efff800000000000 x18: 0000000000000000 [ 9361.805340][ T8288] x17: 0000000000000076 x16: ffff800080011d9c x15: 0000000020000200 [ 9361.807136][ T8288] x14: ffffffffffffffff x13: 0000000000000028 x12: 0000000000000088 [ 9361.808956][ T8288] x11: 88f0000011e232e4 x10: 0000000000ff0100 x9 : 0000000000000000 [ 9361.810868][ T8288] x8 : 88f0000011e21d80 x7 : ffff800080b08704 x6 : ffff80008eef7a88 [ 9361.812654][ T8288] x5 : ffff80008eef7a88 x4 : 0000000000000001 x3 : ffff8000801a2e80 [ 9361.814321][ T8288] x2 : 0000000000000000 x1 : 0000000000000002 x0 : 0000000000000000 [ 9361.816347][ T8288] Call trace: [ 9361.817489][ T8288] pend_serror_exception+0x19c/0x5ac (P) [ 9361.818984][ T8288] kvm_inject_serror_esr+0x274/0xe40 [ 9361.820106][ T8288] __kvm_arm_vcpu_set_events+0x1d4/0x238 [ 9361.821310][ T8288] kvm_arch_vcpu_ioctl+0xed8/0x16b0 [ 9361.822427][ T8288] kvm_vcpu_ioctl+0x5c4/0xc2c [ 9361.823581][ T8288] __arm64_sys_ioctl+0x18c/0x244 [ 9361.824715][ T8288] invoke_syscall+0x90/0x2b4 [ 9361.825857][ T8288] el0_svc_common+0x180/0x2f4 [ 9361.826956][ T8288] do_el0_svc+0x58/0x74 [ 9361.828052][ T8288] el0_svc+0x58/0x160 [ 9361.829099][ T8288] el0t_64_sync_handler+0x78/0x108 [ 9361.830128][ T8288] el0t_64_sync+0x198/0x19c [ 9361.831457][ T8288] irq event stamp: 122 [ 9361.832385][ T8288] hardirqs last enabled at (121): [] _raw_read_unlock_irqrestore+0x44/0xbc [ 9361.834020][ T8288] hardirqs last disabled at (122): [] el1_dbg+0x24/0x80 [ 9361.835448][ T8288] softirqs last enabled at (92): [] local_bh_enable+0x10/0x34 [ 9361.836941][ T8288] softirqs last disabled at (90): [] local_bh_disable+0x10/0x34 [ 9361.838583][ T8288] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 9380.236320][ T7447] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 9381.596788][ T7447] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 9382.561494][ T7447] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 9383.286408][ T7447] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 9391.770876][ T7447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface VM DIAGNOSIS: 03:16:14 Registers: info registers vcpu 0 CPU#0 PC=ffff80008044f8c8 X00=00000000000003c0 X01=ffff8000872b1fa2 X02=0000000000000008 X03=0000000000000002 X04=0000000000000000 X05=0000000000000001 X06=0000000000000000 X07=ffff800080488668 X08=00000000000003c0 X09=0000000000000088 X10=0000000000000088 X11=ffff800087f39a30 X12=fff0000011e21d88 X13=0000000000000003 X14=0000000000000000 X15=ffff800087f39a30 X16=ffff800080011d9c X17=0000000000000076 X18=0000000000000000 X19=00000000000003c0 X20=0000000000000001 X21=ffff800087706128 X22=88f0000011e22888 X23=ffff800087666580 X24=88f0000011e21d80 X25=0000000000000003 X26=0000000000000088 X27=ffff80008eef72e4 X28=0000000000000004 X29=ffff80008eef71a0 X30=ffff80008651b408 SP=ffff80008eef71a0 PSTATE=604023c9 -ZC- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000 P01=0000 P02=0000 P03=0000 P04=0000 P05=0000 P06=0000 P07=0000 P08=0000 P09=0000 P10=0000 P11=0000 P12=0000 P13=0000 P14=0000 P15=0000 FFR=0000 Z00=0d00000000000000:0d00000000000000 Z01=0000000d00000000:0000000000000000 Z02=000000000000000d:0000000000000000 Z03=00d000a800000000:0000000000000000 Z04=0000000000000000:0000000000000002 Z05=000000000000000d:0000000000000002 Z06=6edc4d3a2914b135:d8e9c869e2695c88 Z07=b20fae707afde253:388e9c6c4fa85ca0 Z08=0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000 Z16=0000ffffcdcc4140:0000ffffcdcc4140 Z17=ffffff80ffffffd0:0000ffffcdcc4110 Z18=0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000