last executing test programs:

2m16.401451738s ago: executing program 1 (id=416):
r0 = mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0)
r1 = mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000240)="fb4149dd033be3ac2cc4a22332fdaa8de0418df24200000000a6ab8031d1dfd92f0000000001ffffffff9610fbff77521ce10d8f6b69d22627e700", 0x0, 0xffffffffffffffca)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000240)="fb4149dd033be3ac2cc4a22332fdaa8de0418df24200000000a6ab8031d1dfd92f0000000001ffffffff9610fbff77521ce10d8f6b69d22627e700", 0x0, 0xffffffffffffffca)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000140)={0x4, <r4=>0xffffffffffffffff, 0x1})
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x100000c, 0x16831, 0xffffffffffffffff, 0x0)
write$eventfd(r4, &(0x7f00000001c0)=0x10000000000001, 0xa51)

1m52.778348107s ago: executing program 1 (id=419):
r0 = mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0)
r1 = mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0)
syz_kvm_setup_cpu$arm64(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000c9d000/0x18000)=nil, &(0x7f00000000c0)=[{0x0, &(0x7f0000000300)=[@msr={0x2, 0x20, {0x603000000013dee1, 0x1ff}}, @uexit={0x0, 0x18, 0x9}, @msr={0x2, 0x20, {0x603000000013deee, 0xa7}}, @code={0x1, 0x9c, {"007008d5003691d20080b8f2610080d2620180d2430080d2640180d2020000d4c03c93d20040b8f2e10180d2020180d2830080d2240180d2020000d40080601fc0b38fd20060b8f2e10180d2620080d2030080d2240180d2020000d400a0006f007008d50000299e606586d200c0b0f2210180d2020180d2a30180d2640080d2020000d40070005f"}}], 0xf4}], 0x1, 0x0, 0x0, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000240)="fb4149dd033be3ac2cc4a22332fdaa8de0418df24200000000a6ab8031d1dfd92f0000000001ffffffff9610fbff77521ce10d8f6b69d22627e700", 0x0, 0xffffffffffffffca)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000240)="fb4149dd033be3ac2cc4a22332fdaa8de0418df24200000000a6ab8031d1dfd92f0000000001ffffffff9610fbff77521ce10d8f6b69d22627e700", 0x0, 0xffffffffffffffca)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000140)={0x4, <r4=>0xffffffffffffffff, 0x1})
write$eventfd(r4, &(0x7f00000001c0)=0x10000000000001, 0xfdef)

1m46.230896986s ago: executing program 0 (id=420):
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xe3)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x4f831, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f00000000c0)=[@irq_setup={0x5, 0x18, {0x1, 0x20}}], 0x18}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x1, 0x100)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1m31.550868209s ago: executing program 0 (id=421):
r0 = mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0)
r1 = mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000240)="fb4149dd033be3ac2cc4a22332fdaa8de0418df24200000000a6ab8031d1dfd92f0000000001ffffffff9610fbff77521ce10d8f6b69d22627e700", 0x0, 0xffffffffffffffca)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000240)="fb4149dd033be3ac2cc4a22332fdaa8de0418df24200000000a6ab8031d1dfd92f0000000001ffffffff9610fbff77521ce10d8f6b69d22627e700", 0x0, 0xffffffffffffffca)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000140)={0x4, <r4=>0xffffffffffffffff, 0x1})
write$eventfd(r4, &(0x7f00000001c0)=0x100, 0x1bed)

1m24.753016469s ago: executing program 1 (id=422):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0xb, 0x4f831, 0xffffffffffffffff, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="04000000000000004000000000000000210000c5"], 0x40}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x1, 0x100)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1m2.720606597s ago: executing program 0 (id=423):
r0 = mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0)
r1 = mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000240)="fb4149dd033be3ac2cc4a22332fdaa8de0418df24200000000a6ab8031d1dfd92f0000000001ffffffff9610fbff77521ce10d8f6b69d22627e700", 0x0, 0xffffffffffffffca)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000240)="fb4149dd033be3ac2cc4a22332fdaa8de0418df24200000000a6ab8031d1dfd92f0000000001ffffffff9610fbff77521ce10d8f6b69d22627e700", 0x0, 0xffffffffffffffca)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000140)={0x4, <r4=>0xffffffffffffffff, 0x1})
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x400454d0, 0x0)

59.011351814s ago: executing program 1 (id=424):
r0 = openat$kvm(0x0, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000100), 0x80, 0x0)
write$eventfd(0xffffffffffffffff, &(0x7f00000000c0)=0x4, 0x8)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
close(0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r1, r3, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x40}], 0x1, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_ARM_VCPU_INIT(r4, 0x4020aeae, &(0x7f0000000080)={0x5})

42.498520914s ago: executing program 1 (id=425):
r0 = mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0)
r1 = mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000240)="fb4149dd033be3ac2cc4a22332fdaa8de0418df24200000000a6ab8031d1dfd92f0000000001ffffffff9610fbff77521ce10d8f6b69d22627e700", 0x0, 0xffffffffffffffca)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000240)="fb4149dd033be3ac2cc4a22332fdaa8de0418df24200000000a6ab8031d1dfd92f0000000001ffffffff9610fbff77521ce10d8f6b69d22627e700", 0x0, 0xffffffffffffffca)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000140)={0x4, <r4=>0xffffffffffffffff, 0x1})
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x401054d5, 0x0)

35.083473666s ago: executing program 0 (id=426):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
r2 = mmap$KVM_VCPU(&(0x7f0000f82000/0x1000)=nil, r1, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000240)="fb4149dd033be3ac2cc4a22332fdaa8de0418df24200000000a6ab8031d1dfd92f0000000001ffffffff9610fbff77521ce10d8f6b69d22627e700", 0x0, 0xffffffffffffffca)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f00000000c0)="fb4149dd033be3ac2cc4a22332fdaa8de0418df24200000000a6ab8031d1dfd92000fbffff000d8f6b27e70000000000000000000000000000000000000000000000000000001100", 0x0, 0xfffffcce)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
openat$kvm(0x0, 0x0, 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
mmap$KVM_VCPU(&(0x7f0000eb2000/0x3000)=nil, 0x930, 0x6, 0x40a8012, r5, 0x2000)

18.118496123s ago: executing program 0 (id=427):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x4f832, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000080)={0x5})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)

15.122924874s ago: executing program 1 (id=428):
r0 = mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000240)="fb4149dd033be3ac2cc4a22332fdaa8de0418df24200000000a6ab8031d1dfd92f0000000001ffffffff9610fbff77521ce10d8f6b69d22627e700", 0x0, 0xffffffffffffffca)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(0x5)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x4f832, 0xffffffffffffffff, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
ioctl$KVM_SET_FPU(r4, 0x4000ae8d, 0xfffffffffffffffe)

0s ago: executing program 0 (id=429):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@its_setup={0x7, 0x28, {0x2, 0x2, 0x1}}], 0x28}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x3, 0xa0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x8, <r4=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000000)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000180)=0x8080000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000300)=@attr_arm64={0x0, 0x4, 0x1, 0x0}) (async, rerun: 64)
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x4, 0x2, 0x0})

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:52604' (ED25519) to the list of known hosts.
[  780.242538][   T24] audit: type=1400 audit(779.220:72): avc:  denied  { name_bind } for  pid=3287 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  781.593312][   T24] audit: type=1400 audit(780.580:73): avc:  denied  { execute } for  pid=3289 comm="sh" name="syz-executor" dev="vda" ino=1735 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[  781.614660][   T24] audit: type=1400 audit(780.600:74): avc:  denied  { execute_no_trans } for  pid=3289 comm="sh" path="/syz-executor" dev="vda" ino=1735 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[  812.233772][   T24] audit: type=1400 audit(811.220:75): avc:  denied  { mounton } for  pid=3289 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1737 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[  812.304154][   T24] audit: type=1400 audit(811.280:76): avc:  denied  { mount } for  pid=3289 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  812.425839][ T3289] cgroup: Unknown subsys name 'net'
[  812.494452][   T24] audit: type=1400 audit(811.480:77): avc:  denied  { unmount } for  pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  813.036051][ T3289] cgroup: Unknown subsys name 'cpuset'
[  813.174135][ T3289] cgroup: Unknown subsys name 'rlimit'
[  814.598494][   T24] audit: type=1400 audit(813.580:78): avc:  denied  { setattr } for  pid=3289 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  814.641761][   T24] audit: type=1400 audit(813.630:79): avc:  denied  { create } for  pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  814.669433][   T24] audit: type=1400 audit(813.650:80): avc:  denied  { write } for  pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  814.694612][   T24] audit: type=1400 audit(813.680:81): avc:  denied  { module_request } for  pid=3289 comm="syz-executor" kmod="net-pf-16-proto-16-family-nl802154" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  815.396173][   T24] audit: type=1400 audit(814.370:82): avc:  denied  { read } for  pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  815.483360][   T24] audit: type=1400 audit(814.470:83): avc:  denied  { mounton } for  pid=3289 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[  815.514870][   T24] audit: type=1400 audit(814.490:84): avc:  denied  { mount } for  pid=3289 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[  817.023830][ T3293] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[  817.345371][   T24] kauditd_printk_skb: 2 callbacks suppressed
[  817.345672][   T24] audit: type=1400 audit(816.330:87): avc:  denied  { read } for  pid=3289 comm="syz-executor" name="swap-file" dev="vda" ino=1740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[  817.369703][   T24] audit: type=1400 audit(816.350:88): avc:  denied  { open } for  pid=3289 comm="syz-executor" path="/swap-file" dev="vda" ino=1740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[  817.437410][ T3289] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[  878.435189][   T24] audit: type=1400 audit(877.420:89): avc:  denied  { execmem } for  pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  989.931058][   T24] audit: type=1400 audit(988.900:90): avc:  denied  { read } for  pid=3296 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  989.984391][   T24] audit: type=1400 audit(988.930:91): avc:  denied  { open } for  pid=3296 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  990.100828][   T24] audit: type=1400 audit(989.060:92): avc:  denied  { mounton } for  pid=3296 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  991.824906][   T24] audit: type=1400 audit(990.810:93): avc:  denied  { sys_module } for  pid=3296 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[ 1027.384178][ T3296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1028.072814][ T3296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1028.902117][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1029.421702][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1044.705663][ T3296] hsr_slave_0: entered promiscuous mode
[ 1044.775184][ T3296] hsr_slave_1: entered promiscuous mode
[ 1046.335508][ T3297] hsr_slave_0: entered promiscuous mode
[ 1046.412657][ T3297] hsr_slave_1: entered promiscuous mode
[ 1046.509119][ T3297] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1046.513988][ T3297] Cannot create hsr debugfs directory
[ 1053.500245][ T3296] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1054.113601][ T3296] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1054.503752][ T3296] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1055.113991][ T3296] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1057.085674][ T3297] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1057.274960][ T3297] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1057.513606][ T3297] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1057.814531][ T3297] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1080.498943][ T3296] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1082.783936][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1177.987450][ T3296] veth0_vlan: entered promiscuous mode
[ 1178.831855][ T3296] veth1_vlan: entered promiscuous mode
[ 1180.979581][ T3297] veth0_vlan: entered promiscuous mode
[ 1182.080343][ T3297] veth1_vlan: entered promiscuous mode
[ 1182.750716][ T3296] veth0_macvtap: entered promiscuous mode
[ 1183.481939][ T3296] veth1_macvtap: entered promiscuous mode
[ 1185.771804][ T3297] veth0_macvtap: entered promiscuous mode
[ 1186.242630][ T3297] veth1_macvtap: entered promiscuous mode
[ 1187.118697][ T3296] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1187.123010][ T3296] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1187.125230][ T3296] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1187.168682][ T3296] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1191.133179][ T3297] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1191.135825][ T3297] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1191.198781][ T3297] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1191.201205][ T3297] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1191.301389][   T24] audit: type=1400 audit(1190.260:94): avc:  denied  { mount } for  pid=3296 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[ 1191.591775][   T24] audit: type=1400 audit(1190.570:95): avc:  denied  { mounton } for  pid=3296 comm="syz-executor" path="/syzkaller.RUF5FT/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[ 1191.988574][   T24] audit: type=1400 audit(1190.950:96): avc:  denied  { mount } for  pid=3296 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[ 1192.414103][   T24] audit: type=1400 audit(1191.400:97): avc:  denied  { mounton } for  pid=3296 comm="syz-executor" path="/syzkaller.RUF5FT/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[ 1192.644970][   T24] audit: type=1400 audit(1191.590:98): avc:  denied  { mounton } for  pid=3296 comm="syz-executor" path="/syzkaller.RUF5FT/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3642 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[ 1193.462889][   T24] audit: type=1400 audit(1192.450:99): avc:  denied  { unmount } for  pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[ 1193.867845][   T24] audit: type=1400 audit(1192.820:100): avc:  denied  { mounton } for  pid=3296 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1512 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[ 1194.173879][   T24] audit: type=1400 audit(1193.140:101): avc:  denied  { mount } for  pid=3296 comm="syz-executor" name="/" dev="gadgetfs" ino=3652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[ 1194.988593][   T24] audit: type=1400 audit(1193.960:102): avc:  denied  { mount } for  pid=3296 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[ 1195.260248][   T24] audit: type=1400 audit(1194.210:103): avc:  denied  { mounton } for  pid=3296 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[ 1198.170210][ T3296] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 1200.969798][   T24] kauditd_printk_skb: 1 callbacks suppressed
[ 1200.970129][   T24] audit: type=1400 audit(1199.950:105): avc:  denied  { open } for  pid=3297 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1201.085652][   T24] audit: type=1400 audit(1200.030:106): avc:  denied  { read write } for  pid=3296 comm="syz-executor" name="loop0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1201.110056][   T24] audit: type=1400 audit(1200.040:107): avc:  denied  { ioctl } for  pid=3297 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=638 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1208.361874][   T24] audit: type=1400 audit(1207.330:108): avc:  denied  { read } for  pid=3443 comm="syz.0.1" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1208.482578][   T24] audit: type=1400 audit(1207.370:109): avc:  denied  { open } for  pid=3444 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1210.092495][   T24] audit: type=1400 audit(1209.010:110): avc:  denied  { ioctl } for  pid=3443 comm="syz.0.1" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0x581f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1267.319839][   T24] audit: type=1400 audit(1266.240:111): avc:  denied  { append } for  pid=3469 comm="syz.1.11" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1359.230542][   T24] audit: type=1400 audit(1358.180:112): avc:  denied  { execute } for  pid=3509 comm="syz.0.28" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=3878 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[ 1435.400953][   T24] audit: type=1400 audit(1434.360:113): avc:  denied  { setattr } for  pid=3542 comm="syz.0.41" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1671.740962][   T24] audit: type=1400 audit(1670.700:114): avc:  denied  { write } for  pid=3648 comm="syz.0.81" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1746.342101][   T24] audit: type=1400 audit(1745.220:115): avc:  denied  { map } for  pid=3680 comm="syz.0.93" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 3107.143343][   T24] audit: type=1400 audit(3106.100:116): avc:  denied  { map } for  pid=4266 comm="syz.0.271" path="pipe:[2802]" dev="pipefs" ino=2802 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[ 3304.315215][ T4361] kvm [4361]: Failed to find VMA for hva 0x21016000
[ 3976.150213][ T4654] kvm [4654]: Failed to find VMA for hva 0x21016000
[ 4022.145877][ T4675] kvm [4675]: Failed to find VMA for hva 0x21016000
[ 4166.072762][ T4733] kvm [4733]: Failed to find VMA for hva 0x21016000
[ 4431.663188][ T4853] Unable to handle kernel paging request at virtual address efff800000000001
[ 4431.779184][ T4853] KASAN: null-ptr-deref in range [0x0000000000000010-0x000000000000001f]
[ 4431.781533][ T4853] Mem abort info:
[ 4431.782958][ T4853]   ESR = 0x0000000096000005
[ 4431.834974][ T4853]   EC = 0x25: DABT (current EL), IL = 32 bits
[ 4431.899389][ T4853]   SET = 0, FnV = 0
[ 4431.901029][ T4853]   EA = 0, S1PTW = 0
[ 4431.902594][ T4853]   FSC = 0x05: level 1 translation fault
[ 4431.988462][ T4853] Data abort info:
[ 4431.989997][ T4853]   ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000
[ 4431.991789][ T4853]   CM = 0, WnR = 0, TnD = 0, TagAccess = 0
[ 4432.040693][ T4853]   GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0
[ 4432.042941][ T4853] swapper pgtable: 4k pages, 52-bit VAs, pgdp=0000000044b16000
[ 4432.044966][ T4853] [efff800000000001] pgd=1000000049a4e003, p4d=1000000049a4f003, pud=0000000000000000
[ 4432.229724][ T4853] Internal error: Oops: 0000000096000005 [#1] PREEMPT SMP
[ 4432.231922][ T4853] Modules linked in:
[ 4432.233862][ T4853] CPU: 0 UID: 0 PID: 4853 Comm: syz.0.429 Not tainted 6.13.0-rc3-syzkaller-g5d45542609cb #0
[ 4432.236131][ T4853] Hardware name: linux,dummy-virt (DT)
[ 4432.237810][ T4853] pstate: 61402009 (nZCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--)
[ 4432.239649][ T4853] pc : __hwasan_check_x0_67043362+0x4/0x30
[ 4432.242330][ T4853] lr : vgic_its_save_tables_v0+0x25c/0x7e0
[ 4432.243864][ T4853] sp : ffff80008b7a7bc0
[ 4432.244977][ T4853] x29: ffff80008b7a7c30 x28: c9f0000019788000 x27: 0000000000000000
[ 4432.247248][ T4853] x26: 0000000000000000 x25: bdf000000c3a1ac0 x24: 0000000000000000
[ 4432.249421][ T4853] x23: 20f00000198ec540 x22: 0000000000000000 x21: ecf000000c3a1f90
[ 4432.251575][ T4853] x20: ecf000000c3a1f90 x19: efff800000000000 x18: 0000000000000004
[ 4432.253718][ T4853] x17: 0000000000000000 x16: 0000000000000001 x15: 0000000000000000
[ 4432.255842][ T4853] x14: 0000000000020685 x13: ffff800083b302e8 x12: 0000000000000028
[ 4432.257961][ T4853] x11: 0000000000000000 x10: 0000000000002000 x9 : efff800000000000
[ 4432.260058][ T4853] x8 : 0000000020000000 x7 : ffff8000801158bc x6 : 0000000000000000
[ 4432.262166][ T4853] x5 : 0000000000000000 x4 : c9f0000019788b30 x3 : e4ff80008b46a3c8
[ 4432.264181][ T4853] x2 : ffff800080115938 x1 : 0000000000000001 x0 : 0000000000000010
[ 4432.266536][ T4853] Call trace:
[ 4432.267681][ T4853]  __hwasan_check_x0_67043362+0x4/0x30 (P)
[ 4432.269673][ T4853]  vgic_its_set_attr+0x394/0x508
[ 4432.271242][ T4853]  kvm_device_ioctl_attr+0x150/0x18c
[ 4432.272645][ T4853]  kvm_device_ioctl+0x154/0x1b0
[ 4432.274072][ T4853]  __arm64_sys_ioctl+0x108/0x188
[ 4432.275540][ T4853]  invoke_syscall+0x78/0x1b8
[ 4432.276744][ T4853]  el0_svc_common+0xe8/0x1b0
[ 4432.278065][ T4853]  do_el0_svc+0x40/0x50
[ 4432.279376][ T4853]  el0_svc+0x54/0x14c
[ 4432.280631][ T4853]  el0t_64_sync_handler+0x84/0x108
[ 4432.281932][ T4853]  el0t_64_sync+0x198/0x19c
[ 4432.284020][ T4853] Code: a90efbfd d2800401 143b586d 9344dc10 (38706930) 
[ 4432.286266][ T4853] ---[ end trace 0000000000000000 ]---
[ 4432.288340][ T4853] Kernel panic - not syncing: Oops: Fatal exception
[ 4432.291156][ T4853] Kernel Offset: disabled
[ 4432.292280][ T4853] CPU features: 0x000,000000d0,00bef2f8,837ffe1f
[ 4432.293739][ T4853] Memory Limit: none
[ 4432.295407][ T4853] Rebooting in 86400 seconds..

VM DIAGNOSIS:
02:57:42  Registers:
info registers vcpu 0

CPU#0
 PC=ffff800080251668 X00=00000000000000c0 X01=ffff800084509293
X02=c9f0000019788a78 X03=c9f0000019788a78 X04=c9f0000019788b80
X05=0000000000000001 X06=0000000000000000 X07=ffff80008057861c
X08=00000000000000c0 X09=0000000000000000 X10=0000000000ff0100
X11=ffff800084b895c0 X12=00000000f059bce4 X13=0000000000000028
X14=c9f0000019788b48 X15=c9f0000019788a80 X16=00000000000000c9
X17=0000000000000000 X18=0000000000000001 X19=00000000000000c0
X20=0000000000000000 X21=ffff800084c95128 X22=c9f0000019788b70
X23=ffff800084b124c0 X24=c9f0000019788000 X25=0000000000000006
X26=fff000007301abe0 X27=ffff800084b3f200 X28=fff000007301abd8
X29=ffff800080007bf0 X30=ffff800083ad486c  SP=ffff800080007bf0
PSTATE=604020c9 -ZC- EL2h  SVCR=00000000 --  BTYPE=0     FPCR=00000000 FPSR=00000000
P00=0000 P01=0000 P02=0000 P03=0000 P04=0000 P05=0000 P06=0000 P07=0000
P08=0000 P09=0000 P10=0000 P11=0000 P12=0000 P13=0000 P14=0000 P15=0000
FFR=0000
Z00=0000000000000000:0000000000000000 Z01=0000ffffc26a82c0:f63ee56351c7b600
Z02=0000ffffc26a82a0:ffffff80ffffffd8 Z03=0000ffffc26a8350:0000ffffc26a8350
Z04=0000ffffc26a8350:0000ffff96b2ed48 Z05=0000ffffc26a8320:0000ffffc26a8350
Z06=6edc4d3a2914b135:d8e9c869e2695c88 Z07=b20fae707afde253:388e9c6c4fa85ca0
Z08=0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000
Z10=0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000
Z12=0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000
Z14=0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000
Z16=0000ffffc26a8570:0000ffffc26a8570 Z17=ffffff80ffffffd0:0000ffffc26a8540
Z18=0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000
Z20=0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000
Z22=0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000
Z24=0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000
Z26=0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000
Z28=0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000
Z30=0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000