last executing test programs: 1m7.470733453s ago: executing program 1 (id=1366): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0) (async) r1 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x6030000000138084, 0x8000}}, @msr={0x14, 0x20, {0x6030000000139828, 0x8000}}, @msr={0x14, 0x20, {0x6030000000139828, 0x8000}}], 0x60}, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0x5421, 0x4) 1m1.967969878s ago: executing program 0 (id=1367): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xc0045878, 0x20000000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dcea, 0x8000}}], 0x20}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = eventfd2(0xeffffffd, 0x801) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, 0x0) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000001340)={0x3, 0x0, 0x2, r8, 0x3}) ioctl$KVM_SET_GUEST_DEBUG_arm64(r5, 0x4208ae9b, &(0x7f0000000380)={0x2, 0x0, {[0x4, 0x56a, 0x2, 0x2, 0x8000000000000001, 0x8, 0x6, 0x4, 0x3, 0xffffffffffff8001, 0x0, 0x1ff, 0x5, 0x4, 0x122f, 0x7], [0x2, 0x6, 0xffffffffffffffff, 0x7, 0x8000000000000000, 0x6635, 0x9, 0x9, 0x7, 0xffffffffffff8001, 0x8, 0xe42, 0x2ba7, 0x4, 0x53c, 0x81], [0xe36, 0x65, 0x5, 0x81, 0x4d83, 0xffff, 0xff0, 0x11, 0xbb9, 0x9, 0xf8, 0x0, 0x9, 0x6, 0x5, 0x5], [0x2002, 0x7ff, 0xe7, 0x5, 0x0, 0xfbf1, 0x7984, 0x5, 0x1, 0x3, 0x2, 0xf0, 0x8b, 0x2789, 0x8, 0x1]}}) r9 = openat$kvm(0x0, &(0x7f0000000140), 0x40200, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000ab8000/0x400000)=nil) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) syz_kvm_add_vcpu$arm64(r11, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r10, 0xc008ae67, &(0x7f0000000040)={0x10001, 0x10001}) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000240)={0x3, 0x0, 0x4, r8, 0x7}) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r5, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x24) r13 = syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_HAS_DEVICE_ATTR_vm(r3, 0x4018aee3, &(0x7f0000000100)=@attr_other={0x0, 0xc5fb, 0x8, &(0x7f00000000c0)=0x4524defa}) r14 = syz_kvm_add_vcpu$arm64(r13, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r14, 0x4010aeac, &(0x7f0000000000)=@arm64_core={0x603000000010001c, &(0x7f0000000140)=0x8}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r15 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r15, &(0x7f0000ae9000/0x400000)=nil) 59.647079423s ago: executing program 1 (id=1368): r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$arm64(r4, 0xffffffffffffffff, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000140)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r4, 0x4068aea3, &(0x7f0000000000)={0xe4, 0x0, 0x7}) r5 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[@msr={0x14, 0x20, {0x603000000013df7f, 0x8000}}], 0x20}, &(0x7f0000000280)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r5, 0x4018aee1, &(0x7f00000002c0)=@attr_pmu_init) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x0, 0x3, 0x11, r5, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x4) ioctl$KVM_SET_GSI_ROUTING(r8, 0x4008ae6a, &(0x7f00000001c0)={0x2, 0x0, [{0x6, 0x2, 0x1, 0x0, @sint={0x5, 0x3}}, {0x6, 0x2, 0x0, 0x0, @msi={0x100, 0x8000, 0x5a}}]}) r9 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x2000007, 0x30d2a4fbfbea96b8, 0xffffffffffffffff, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r10, 0xae03, 0x20) mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x0, 0x40032, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r9, 0x8040aeb6, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x9, 0x7fffffff, 0x2}}) close(r9) r11 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) ioctl$KVM_ARM_VCPU_FINALIZE(r11, 0x4004aec2, &(0x7f0000000100)=0x1) r12 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000140)={0x0, &(0x7f0000000200)=[@svc={0x122, 0x40, {0x100, [0x2, 0xbeb5, 0x5, 0xffffffff, 0x2]}}, @smc={0x1e, 0x40, {0x84000052, [0xf8d, 0x32be, 0x7, 0x7, 0xfffffffffffffff8]}}, @svc={0x122, 0x40, {0x20, [0x3, 0xffff, 0x9, 0x4, 0x6]}}, @uexit={0x0, 0x18, 0x11910f8}, @mrs={0xbe, 0x18, {0x3ec9}}, @mrs={0xbe, 0x18, {0x603000000013c685}}, @msr={0x14, 0x20, {0x603000000013defa, 0x4}}, @smc={0x1e, 0x40, {0x4000, [0x5, 0x8, 0x9, 0x7, 0x100000001]}}, @hvc={0x32, 0x40, {0xc4000003, [0x7, 0x8, 0x5, 0x0, 0x22]}}, @mrs={0xbe, 0x18, {0x603000000013f687}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x18, 0x64}}, @uexit={0x0, 0x18}, @smc={0x1e, 0x40, {0x80000001, [0xd, 0x5, 0xffff, 0x1, 0x9]}}, @smc={0x1e, 0x40, {0x3000000, [0x25, 0x3, 0x8, 0xd8, 0x4]}}, @uexit={0x0, 0x18}, @svc={0x122, 0x40, {0x2, [0x179, 0x80d, 0x7ff, 0x1, 0x9]}}, @code={0xa, 0x9c, {"00e4002fa0f381d20000b0f2a10080d2620080d2230080d2840180d2020000d4007008d50000809a0068217e20eb8ad20000b0f2a10180d2a20080d2030080d2040180d2020000d4605c88d20000b0f2010080d2420180d2230080d2a40080d2020000d4007008d5c08393d20040b8f2010180d2620180d2e30180d2a40080d2020000d4000080b9"}}, @its_send_cmd={0xaa, 0x28, {0x5, 0x0, 0x1, 0x2, 0x6, 0x9, 0x4}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x1, 0x3, 0x5, 0x20, 0x9, 0x4}}, @code={0xa, 0x84, {"c02888d20000b8f2c10080d2e20180d2430180d2640180d2020000d400ea9fd20000b8f2e10080d2420080d2230180d2c40080d2020000d4007008d5000028d5008008d5809093d20020b0f2810080d2a20180d2630180d2240080d2020000d4003c200e0000c093bf3003d5e0030032"}}, @mrs={0xbe, 0x18, {0x603000000013803e}}, @hvc={0x32, 0x40, {0x44000007, [0x8000000000000000, 0x1, 0x0, 0x183, 0x9]}}, @eret={0xe6, 0x18, 0x7f}, @its_send_cmd={0xaa, 0x28, {0x8, 0x0, 0x0, 0x6, 0x0, 0x800, 0x3}}, @hvc={0x32, 0x40, {0x84000013, [0x5, 0x6, 0x6, 0x7, 0x3]}}, @hvc={0x32, 0x40, {0x8400000c, [0x0, 0x1, 0x800, 0x5, 0x5]}}, @uexit={0x0, 0x18, 0x7}, @smc={0x1e, 0x40, {0x84000014, [0x3ff, 0x1, 0x4, 0x9, 0x6]}}, @its_setup={0x82, 0x28, {0x4, 0x4, 0xa9}}, @uexit={0x0, 0x18}, @svc={0x122, 0x40, {0x1, [0x4, 0x10, 0x2, 0x2, 0x8dd0]}}], 0x640}, &(0x7f0000000180)=[@featur1={0x1, 0x2e}], 0x1) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r12, 0x4018aee2, &(0x7f00000000c0)=@attr_other={0x0, 0x5, 0x8, &(0x7f0000000840)=0x6}) 45.941495042s ago: executing program 1 (id=1369): mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x4}}], 0x28}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r3, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) r7 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000769000/0x400000)=nil) r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000380)={0x0, &(0x7f0000000100)=[@smc={0x1e, 0x40, {0x84000006, [0x7, 0x3, 0x2, 0x3f8b, 0xf7b0]}}], 0x40}, &(0x7f00000000c0)=[@featur2={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000280)=@attr_arm64={0x0, 0x4, 0x2, 0x0}) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) r11 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1, 0x16831, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000100)=@attr_other={0x0, 0x8, 0x40000000000000, 0x0}) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) 45.370276718s ago: executing program 0 (id=1370): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@irq_setup={0x46, 0x18, {0x4, 0x1e7}}], 0x18}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x7ffffffe, 0x100) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 36.020296344s ago: executing program 0 (id=1371): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0x8933, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@irq_setup={0x46, 0x18, {0x4, 0x1e7}}], 0x18}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 29.768391056s ago: executing program 0 (id=1372): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000bff000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000380)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000001c0)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x8, 0x108, &(0x7f0000000340)=0xfffffffffffffffc}) syz_kvm_vgic_v3_setup(r1, 0x0, 0x200) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x4, 0x1, 0x0}) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x4) 26.037967889s ago: executing program 1 (id=1373): r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$arm64(r4, 0xffffffffffffffff, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000140)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r4, 0x4068aea3, &(0x7f0000000000)={0xe4, 0x0, 0x7}) r5 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[@msr={0x14, 0x20, {0x603000000013df61, 0x8000}}, @msr={0x14, 0x20, {0x603000000013df7f, 0x8000}}], 0x40}, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r5, 0x4018aee1, &(0x7f00000002c0)=@attr_pmu_init) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x0, 0x3, 0x11, r5, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x4) ioctl$KVM_SET_GSI_ROUTING(r8, 0x4008ae6a, &(0x7f00000001c0)={0x2, 0x0, [{0x6, 0x2, 0x1, 0x0, @sint={0x5, 0x3}}, {0x6, 0x2, 0x0, 0x0, @msi={0x100, 0x8000, 0x5a}}]}) r9 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x2000007, 0x30d2a4fbfbea96b8, 0xffffffffffffffff, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r10, 0xae03, 0x20) mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x0, 0x40032, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r9, 0x8040aeb6, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x9, 0x7fffffff, 0x2}}) close(r9) r11 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) ioctl$KVM_ARM_VCPU_FINALIZE(r11, 0x4004aec2, &(0x7f0000000100)=0x1) r12 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000140)={0x0, &(0x7f0000000200)=[@svc={0x122, 0x40, {0x100, [0x2, 0xbeb5, 0x5, 0xffffffff, 0x2]}}, @smc={0x1e, 0x40, {0x84000052, [0xf8d, 0x32be, 0x7, 0x7, 0xfffffffffffffff8]}}, @svc={0x122, 0x40, {0x20, [0x3, 0xffff, 0x9, 0x4, 0x6]}}, @uexit={0x0, 0x18, 0x11910f8}, @mrs={0xbe, 0x18, {0x3ec9}}, @mrs={0xbe, 0x18, {0x603000000013c685}}, @msr={0x14, 0x20, {0x603000000013defa, 0x4}}, @smc={0x1e, 0x40, {0x4000, [0x5, 0x8, 0x9, 0x7, 0x100000001]}}, @hvc={0x32, 0x40, {0xc4000003, [0x7, 0x8, 0x5, 0x0, 0x22]}}, @mrs={0xbe, 0x18, {0x603000000013f687}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x18, 0x64}}, @uexit={0x0, 0x18}, @smc={0x1e, 0x40, {0x80000001, [0xd, 0x5, 0xffff, 0x1, 0x9]}}, @smc={0x1e, 0x40, {0x3000000, [0x25, 0x3, 0x8, 0xd8, 0x4]}}, @uexit={0x0, 0x18}, @svc={0x122, 0x40, {0x2, [0x179, 0x80d, 0x7ff, 0x1, 0x9]}}, @code={0xa, 0x9c, {"00e4002fa0f381d20000b0f2a10080d2620080d2230080d2840180d2020000d4007008d50000809a0068217e20eb8ad20000b0f2a10180d2a20080d2030080d2040180d2020000d4605c88d20000b0f2010080d2420180d2230080d2a40080d2020000d4007008d5c08393d20040b8f2010180d2620180d2e30180d2a40080d2020000d4000080b9"}}, @its_send_cmd={0xaa, 0x28, {0x5, 0x0, 0x1, 0x2, 0x6, 0x9, 0x4}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x1, 0x3, 0x5, 0x20, 0x9, 0x4}}, @code={0xa, 0x84, {"c02888d20000b8f2c10080d2e20180d2430180d2640180d2020000d400ea9fd20000b8f2e10080d2420080d2230180d2c40080d2020000d4007008d5000028d5008008d5809093d20020b0f2810080d2a20180d2630180d2240080d2020000d4003c200e0000c093bf3003d5e0030032"}}, @mrs={0xbe, 0x18, {0x603000000013803e}}, @hvc={0x32, 0x40, {0x44000007, [0x8000000000000000, 0x1, 0x0, 0x183, 0x9]}}, @eret={0xe6, 0x18, 0x7f}, @its_send_cmd={0xaa, 0x28, {0x8, 0x0, 0x0, 0x6, 0x0, 0x800, 0x3}}, @hvc={0x32, 0x40, {0x84000013, [0x5, 0x6, 0x6, 0x7, 0x3]}}, @hvc={0x32, 0x40, {0x8400000c, [0x0, 0x1, 0x800, 0x5, 0x5]}}, @uexit={0x0, 0x18, 0x7}, @smc={0x1e, 0x40, {0x84000014, [0x3ff, 0x1, 0x4, 0x9, 0x6]}}, @its_setup={0x82, 0x28, {0x4, 0x4, 0xa9}}, @uexit={0x0, 0x18}, @svc={0x122, 0x40, {0x1, [0x4, 0x10, 0x2, 0x2, 0x8dd0]}}], 0x640}, &(0x7f0000000180)=[@featur1={0x1, 0x2e}], 0x1) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r12, 0x4018aee2, &(0x7f00000000c0)=@attr_other={0x0, 0x5, 0x8, &(0x7f0000000840)=0x6}) 19.917264633s ago: executing program 0 (id=1374): mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x4}}], 0x28}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r3, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) r7 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000769000/0x400000)=nil) r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000380)={0x0, &(0x7f0000000100)=[@smc={0x1e, 0x40, {0x84000006, [0x7, 0x3, 0x2, 0x3f8b, 0xf7b0]}}], 0x40}, &(0x7f00000000c0)=[@featur2={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000280)=@attr_arm64={0x0, 0x4, 0x2, 0x0}) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) r11 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1, 0x16831, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000100)=@attr_other={0x0, 0x8, 0x40000000000000, 0x0}) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) 10.458575545s ago: executing program 1 (id=1375): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0x80111500, 0x20000000) r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x21) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r4 = openat$kvm(0x0, &(0x7f00000000c0), 0x200102, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000080), 0x101e40, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000b75000/0x400000)=nil) r9 = syz_kvm_add_vcpu$arm64(r8, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x3}) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) mmap$KVM_VCPU(&(0x7f0000c34000/0x2000)=nil, 0x930, 0x1000000, 0x10, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000) ioctl$KVM_CREATE_VM(r10, 0x400454c9, 0x40) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000100)="1d908e33738d0f54719685483b90c2785b9baee1190ec33c5dd54d3a68874d964b2adf872bc3509fe5e0f205275cc32bc77cdb798f713b686ec427b525d9f3233f0792d08ecdc65c", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r3, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000000, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000013000/0x400000)=nil) r11 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r12 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) 5.185171355s ago: executing program 0 (id=1376): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x1}) r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000036000/0x2000)=nil, r1, 0x3, 0x4102932, 0xffffffffffffffff, 0x0) openat$kvm(0x0, 0x0, 0x22200, 0x0) r2 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r3 = mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, r2, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000240)="fb4149dd033be3ac2cc4a22332fdaa8de0418df24200000000a6ab8031d1dfd92f0000000001ffffffff9610fbff77521ce10d8f6b69d22627e700", 0x0, 0xffffffffffffffca) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xe2a00, 0x0) ioctl$KVM_CREATE_VM(r4, 0x5452, 0x2000fdfd) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0x5000, 0x12000, 0x81}) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r7, &(0x7f00000001c0)=0xff0, 0xe) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x2, 0x23ac5f9b426ec4b1, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=1377): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@irq_setup={0x46, 0x18, {0x4, 0x1e7}}], 0x18}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) (fail_nth: 5) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) kernel console output (not intermixed with test programs): [ 435.060663][ T3171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 470.740886][ T3171] eql: remember to turn off Van-Jacobson compression on your slave devices Warning: Permanently added '[localhost]:58577' (ED25519) to the list of known hosts. [ 651.439402][ T25] audit: type=1400 audit(650.730:61): avc: denied { name_bind } for pid=3332 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 653.269145][ T25] audit: type=1400 audit(652.560:62): avc: denied { execute } for pid=3333 comm="sh" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 653.300479][ T25] audit: type=1400 audit(652.590:63): avc: denied { execute_no_trans } for pid=3333 comm="sh" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 677.628530][ T25] audit: type=1400 audit(676.920:64): avc: denied { mounton } for pid=3333 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 677.676155][ T25] audit: type=1400 audit(676.960:65): avc: denied { mount } for pid=3333 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 677.770922][ T3333] cgroup: Unknown subsys name 'net' [ 677.850984][ T25] audit: type=1400 audit(677.140:66): avc: denied { unmount } for pid=3333 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 678.365119][ T3333] cgroup: Unknown subsys name 'cpuset' [ 678.506530][ T3333] cgroup: Unknown subsys name 'rlimit' [ 679.889960][ T25] audit: type=1400 audit(679.180:67): avc: denied { setattr } for pid=3333 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 679.921158][ T25] audit: type=1400 audit(679.200:68): avc: denied { create } for pid=3333 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 679.947420][ T25] audit: type=1400 audit(679.230:69): avc: denied { write } for pid=3333 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 679.971757][ T25] audit: type=1400 audit(679.250:70): avc: denied { module_request } for pid=3333 comm="syz-executor" kmod="net-pf-16-proto-16-family-nl802154" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 680.456181][ T25] audit: type=1400 audit(679.740:71): avc: denied { read } for pid=3333 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 680.508595][ T25] audit: type=1400 audit(679.790:72): avc: denied { mounton } for pid=3333 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 680.528505][ T25] audit: type=1400 audit(679.820:73): avc: denied { mount } for pid=3333 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 681.645087][ T3337] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 681.907278][ T3333] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 741.137212][ T25] kauditd_printk_skb: 4 callbacks suppressed [ 741.153244][ T25] audit: type=1400 audit(740.430:78): avc: denied { execmem } for pid=3338 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 799.941949][ T25] audit: type=1400 audit(799.230:79): avc: denied { read } for pid=3340 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 799.969742][ T25] audit: type=1400 audit(799.260:80): avc: denied { open } for pid=3340 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 799.987795][ T25] audit: type=1400 audit(799.270:81): avc: denied { read } for pid=3341 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 800.063952][ T25] audit: type=1400 audit(799.340:82): avc: denied { mounton } for pid=3340 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 800.297340][ T25] audit: type=1400 audit(799.590:83): avc: denied { module_request } for pid=3341 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 801.311766][ T25] audit: type=1400 audit(800.600:84): avc: denied { sys_module } for pid=3341 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 826.505296][ T3340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 827.127063][ T3340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 827.276247][ T3341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 827.848498][ T3341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 842.888231][ T3340] hsr_slave_0: entered promiscuous mode [ 842.917550][ T3340] hsr_slave_1: entered promiscuous mode [ 844.158293][ T3341] hsr_slave_0: entered promiscuous mode [ 844.197088][ T3341] hsr_slave_1: entered promiscuous mode [ 844.227003][ T3341] debugfs: 'hsr0' already exists in 'hsr' [ 844.231614][ T3341] Cannot create hsr debugfs directory [ 850.460655][ T3340] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 850.927241][ T3340] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 851.207610][ T3340] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 851.511132][ T3340] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 853.134456][ T3341] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 853.557334][ T3341] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 853.772010][ T3341] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 853.977396][ T3341] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 866.675586][ T3340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 869.607824][ T3341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 926.908874][ T3340] veth0_vlan: entered promiscuous mode [ 927.379537][ T3340] veth1_vlan: entered promiscuous mode [ 929.716944][ T3340] veth0_macvtap: entered promiscuous mode [ 930.334657][ T3340] veth1_macvtap: entered promiscuous mode [ 930.531035][ T3341] veth0_vlan: entered promiscuous mode [ 931.256113][ T3341] veth1_vlan: entered promiscuous mode [ 932.900193][ T3260] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.967302][ T3260] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.968806][ T3260] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.969668][ T3260] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.875793][ T3341] veth0_macvtap: entered promiscuous mode [ 935.736074][ T3341] veth1_macvtap: entered promiscuous mode [ 935.945787][ T25] audit: type=1400 audit(935.230:85): avc: denied { mount } for pid=3340 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 936.148249][ T25] audit: type=1400 audit(935.430:86): avc: denied { mounton } for pid=3340 comm="syz-executor" path="/syzkaller.mVaV8x/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 936.394993][ T25] audit: type=1400 audit(935.680:87): avc: denied { mount } for pid=3340 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 936.840087][ T25] audit: type=1400 audit(936.130:88): avc: denied { mounton } for pid=3340 comm="syz-executor" path="/syzkaller.mVaV8x/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 936.980269][ T25] audit: type=1400 audit(936.270:89): avc: denied { mounton } for pid=3340 comm="syz-executor" path="/syzkaller.mVaV8x/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 937.550573][ T25] audit: type=1400 audit(936.830:90): avc: denied { unmount } for pid=3340 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 937.749309][ T25] audit: type=1400 audit(937.040:91): avc: denied { mounton } for pid=3340 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1546 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 937.901934][ T25] audit: type=1400 audit(937.170:92): avc: denied { mount } for pid=3340 comm="syz-executor" name="/" dev="gadgetfs" ino=3765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 938.376801][ T25] audit: type=1400 audit(937.670:93): avc: denied { mount } for pid=3340 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 938.401230][ T3384] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.419602][ T3384] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.433519][ T3384] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.439857][ T3384] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.554263][ T25] audit: type=1400 audit(937.840:94): avc: denied { mounton } for pid=3340 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 940.320256][ T3340] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 941.537996][ T25] kauditd_printk_skb: 1 callbacks suppressed [ 941.547698][ T25] audit: type=1400 audit(940.790:96): avc: denied { read write } for pid=3340 comm="syz-executor" name="loop1" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 941.594133][ T25] audit: type=1400 audit(940.870:97): avc: denied { open } for pid=3340 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 941.625575][ T25] audit: type=1400 audit(940.910:98): avc: denied { ioctl } for pid=3340 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=639 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 959.215277][ T25] audit: type=1400 audit(958.500:99): avc: denied { read } for pid=3495 comm="syz.0.1" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 959.334424][ T25] audit: type=1400 audit(958.600:100): avc: denied { open } for pid=3495 comm="syz.0.1" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 959.913819][ T25] audit: type=1400 audit(959.190:101): avc: denied { ioctl } for pid=3495 comm="syz.0.1" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 968.023484][ T25] audit: type=1400 audit(967.210:102): avc: denied { write } for pid=3501 comm="syz.0.4" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1010.243704][ T25] audit: type=1400 audit(1009.500:103): avc: denied { append } for pid=3529 comm="syz.0.18" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1060.259296][ T25] audit: type=1400 audit(1059.540:104): avc: denied { execute } for pid=3564 comm="syz.1.33" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=4011 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1298.161429][ T25] audit: type=1400 audit(1297.410:105): avc: denied { setattr } for pid=3710 comm="syz.0.103" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1490.209293][ T25] audit: type=1400 audit(1489.490:106): avc: denied { create } for pid=3830 comm="syz.0.149" anonclass=[kvm-gmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1683.583534][ T25] audit: type=1400 audit(1682.870:107): avc: denied { map } for pid=3942 comm="syz.1.195" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=7143 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1683.684316][ T25] audit: type=1400 audit(1682.950:108): avc: denied { read } for pid=3942 comm="syz.1.195" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=7143 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2063.784330][ T25] audit: type=1400 audit(2063.070:109): avc: denied { map } for pid=4166 comm="syz.0.284" path="pipe:[2773]" dev="pipefs" ino=2773 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 2702.344017][ T25] audit: type=1400 audit(2701.550:110): avc: denied { ioctl } for pid=4549 comm="syz.0.433" path="net:[4026532634]" dev="nsfs" ino=4026532634 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2823.589541][ T4623] kvm [4623]: Failed to find VMA for hva 0x21016000 [ 3096.604397][ T4777] kvm [4777]: Failed to find VMA for hva 0x20c79000 [ 3104.218747][ T4781] kvm [4781]: Failed to find VMA for hva 0x20e51000 [ 3214.177419][ T4847] debugfs: 'vgic-its-state@8080000' already exists in '4847-4' [ 3402.401135][ T25] audit: type=1400 audit(3401.690:111): avc: denied { execute } for pid=4946 comm="syz.1.577" path=2F3238392FFF67521CD66F8F1F447D3570707CD24B7EEBB207 dev="tmpfs" ino=1470 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 3470.355767][ T4982] kvm [4982]: Failed to find VMA for hva 0x20c01000 [ 3570.937504][ T25] audit: type=1400 audit(3570.210:112): avc: denied { map } for pid=5040 comm="syz.0.607" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 3571.017574][ T25] audit: type=1400 audit(3570.270:113): avc: denied { execute } for pid=5040 comm="syz.0.607" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 3606.625978][ T25] audit: type=1400 audit(3605.880:114): avc: denied { write } for pid=5058 comm="syz.1.612" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=19331 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 4910.842680][ C0] hrtimer: interrupt took 1004920 ns [ 7837.704326][ T7135] FAULT_INJECTION: forcing a failure. [ 7837.704326][ T7135] name failslab, interval 1, probability 0, space 0, times 1 [ 7837.768139][ T7135] CPU: 0 UID: 0 PID: 7135 Comm: syz.0.1328 Not tainted syzkaller #0 PREEMPT [ 7837.768863][ T7135] Hardware name: linux,dummy-virt (DT) [ 7837.769323][ T7135] Call trace: [ 7837.769736][ T7135] show_stack+0x2c/0x3c (C) [ 7837.771651][ T7135] __dump_stack+0x30/0x40 [ 7837.772042][ T7135] dump_stack_lvl+0xd8/0x12c [ 7837.772366][ T7135] dump_stack+0x1c/0x28 [ 7837.772690][ T7135] should_fail_ex+0x56c/0x6d8 [ 7837.772915][ T7135] should_failslab+0xb8/0xec [ 7837.773202][ T7135] kmem_cache_alloc_noprof+0x90/0x5b4 [ 7837.773466][ T7135] vm_area_dup+0x3c/0x784 [ 7837.773674][ T7135] __split_vma+0x1c8/0xb08 [ 7837.773904][ T7135] vms_gather_munmap_vmas+0x4d0/0x1478 [ 7837.774130][ T7135] mmap_region+0x6f0/0x1bdc [ 7837.774355][ T7135] do_mmap+0xa50/0xf50 [ 7837.774655][ T7135] vm_mmap_pgoff+0x288/0x3dc [ 7837.774943][ T7135] ksys_mmap_pgoff+0xec/0x448 [ 7837.775222][ T7135] __arm64_sys_mmap+0x13c/0x198 [ 7837.775525][ T7135] invoke_syscall+0x90/0x230 [ 7837.775813][ T7135] el0_svc_common+0x120/0x2f4 [ 7837.776094][ T7135] do_el0_svc+0x58/0x74 [ 7837.776419][ T7135] el0_svc+0x5c/0x238 [ 7837.776725][ T7135] el0t_64_sync_handler+0x84/0x12c [ 7837.777018][ T7135] el0t_64_sync+0x198/0x19c [ 7890.980894][ T7162] FAULT_INJECTION: forcing a failure. [ 7890.980894][ T7162] name failslab, interval 1, probability 0, space 0, times 0 [ 7891.026666][ T7162] CPU: 0 UID: 0 PID: 7162 Comm: syz.1.1337 Not tainted syzkaller #0 PREEMPT [ 7891.027058][ T7162] Hardware name: linux,dummy-virt (DT) [ 7891.027167][ T7162] Call trace: [ 7891.027248][ T7162] show_stack+0x2c/0x3c (C) [ 7891.027645][ T7162] __dump_stack+0x30/0x40 [ 7891.027948][ T7162] dump_stack_lvl+0xd8/0x12c [ 7891.028235][ T7162] dump_stack+0x1c/0x28 [ 7891.028571][ T7162] should_fail_ex+0x56c/0x6d8 [ 7891.028804][ T7162] should_failslab+0xb8/0xec [ 7891.029079][ T7162] __kmalloc_noprof+0xe8/0x680 [ 7891.029319][ T7162] tomoyo_encode+0x274/0x4e4 [ 7891.029617][ T7162] tomoyo_realpath_from_path+0x5bc/0x628 [ 7891.029898][ T7162] tomoyo_path_number_perm+0x13c/0x33c [ 7891.030157][ T7162] tomoyo_file_ioctl+0x2c/0x3c [ 7891.030453][ T7162] security_file_ioctl+0xe0/0x2cc [ 7891.030759][ T7162] __arm64_sys_ioctl+0xd0/0x244 [ 7891.031047][ T7162] invoke_syscall+0x90/0x230 [ 7891.031325][ T7162] el0_svc_common+0x120/0x2f4 [ 7891.031632][ T7162] do_el0_svc+0x58/0x74 [ 7891.031910][ T7162] el0_svc+0x5c/0x238 [ 7891.032210][ T7162] el0t_64_sync_handler+0x84/0x12c [ 7891.032559][ T7162] el0t_64_sync+0x198/0x19c [ 7891.184072][ T7162] ERROR: Out of memory at tomoyo_realpath_from_path. [ 8141.781520][ T7281] FAULT_INJECTION: forcing a failure. [ 8141.781520][ T7281] name failslab, interval 1, probability 0, space 0, times 0 [ 8141.814050][ T7281] CPU: 0 UID: 0 PID: 7281 Comm: syz.1.1377 Not tainted syzkaller #0 PREEMPT [ 8141.814461][ T7281] Hardware name: linux,dummy-virt (DT) [ 8141.814586][ T7281] Call trace: [ 8141.814667][ T7281] show_stack+0x2c/0x3c (C) [ 8141.815022][ T7281] __dump_stack+0x30/0x40 [ 8141.815317][ T7281] dump_stack_lvl+0xd8/0x12c [ 8141.815635][ T7281] dump_stack+0x1c/0x28 [ 8141.815922][ T7281] should_fail_ex+0x56c/0x6d8 [ 8141.816144][ T7281] should_failslab+0xb8/0xec [ 8141.816468][ T7281] __kmalloc_cache_noprof+0x8c/0x5cc [ 8141.816748][ T7281] vgic_allocate_private_irqs_locked+0x10c/0x608 [ 8141.816981][ T7281] kvm_vgic_create+0x4f4/0x964 [ 8141.817193][ T7281] vgic_create+0x58/0x78 [ 8141.817499][ T7281] kvm_ioctl_create_device+0x18c/0x710 [ 8141.817772][ T7281] kvm_vm_ioctl+0x704/0x9a4 [ 8141.818020][ T7281] __arm64_sys_ioctl+0x18c/0x244 [ 8141.818312][ T7281] invoke_syscall+0x90/0x230 [ 8141.818639][ T7281] el0_svc_common+0x120/0x2f4 [ 8141.818930][ T7281] do_el0_svc+0x58/0x74 [ 8141.819214][ T7281] el0_svc+0x5c/0x238 [ 8141.819531][ T7281] el0t_64_sync_handler+0x84/0x12c [ 8141.819830][ T7281] el0t_64_sync+0x198/0x19c [ 8142.359479][ T7280] Unable to handle kernel paging request at virtual address ffef800000000000 [ 8142.424421][ T7280] KASAN: maybe wild-memory-access in range [0xff00000000000000-0xff0000000000000f] [ 8142.440338][ T7280] Mem abort info: [ 8142.448833][ T7280] ESR = 0x0000000096000004 [ 8142.467003][ T7280] EC = 0x25: DABT (current EL), IL = 32 bits [ 8142.484110][ T7280] SET = 0, FnV = 0 [ 8142.499439][ T7280] EA = 0, S1PTW = 0 [ 8142.513686][ T7280] FSC = 0x04: level 0 translation fault [ 8142.539778][ T7280] Data abort info: [ 8142.574500][ T7280] ISV = 0, ISS = 0x00000004, ISS2 = 0x00000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 8142.613981][ T7280] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 8142.626421][ T25] audit: type=1400 audit(8141.770:115): avc: denied { read } for pid=3130 comm="syslogd" name="log" dev="vda" ino=1857 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 8142.654572][ T7280] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [ 8142.674838][ T7280] [ffef800000000000] address between user and kernel address ranges [ 8142.683475][ T25] audit: type=1400 audit(8141.920:116): avc: denied { search } for pid=3130 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 8142.712338][ T7280] Internal error: Oops: 0000000096000004 [#1] SMP [ 8142.715598][ T7280] Modules linked in: [ 8142.716824][ T7280] CPU: 0 UID: 0 PID: 7280 Comm: syz.1.1377 Not tainted syzkaller #0 PREEMPT [ 8142.718004][ T7280] Hardware name: linux,dummy-virt (DT) [ 8142.718969][ T7280] pstate: 81402009 (Nzcv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 8142.720205][ T7280] pc : kvm_vgic_destroy+0x2d4/0x624 [ 8142.721171][ T7280] lr : kvm_vgic_destroy+0x290/0x624 [ 8142.722011][ T7280] sp : ffff80008e9a7b90 [ 8142.722740][ T7280] x29: ffff80008e9a7ba0 x28: 0000000000000005 x27: 56f000001eb272d8 [ 8142.724191][ T7280] x26: 56f000001eb26db0 x25: 0000000000000056 x24: 56f000001eb26d8c [ 8142.725447][ T7280] x23: 0000000000000056 x22: 0000000000000056 x21: 56f000001eb26ad0 [ 8142.726651][ T7280] x20: efff800000000000 x19: 56f000001eb26000 x18: 00000000d5e746d5 [ 8142.727848][ T7280] x17: 0000000000000010 x16: ffff80008001159c x15: ffff80008e9a7950 [ 8142.729130][ T7280] x14: ffffffffffffffff x13: 0000000000000028 x12: a1f0000016aedd70 [ 8142.730384][ T7280] x11: ffff800088209a68 x10: 0000000000ff0100 x9 : 0ff0000000000000 [ 8142.731706][ T7280] x8 : 0000000000000000 x7 : ffff80008672f958 x6 : 0000000000000000 [ 8142.732808][ T7280] x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000002 [ 8142.734006][ T7280] x2 : 0000000000000008 x1 : 0000000000000000 x0 : 0000000000000007 [ 8142.735370][ T7280] Call trace: [ 8142.736034][ T7280] kvm_vgic_destroy+0x2d4/0x624 (P) [ 8142.736973][ T7280] kvm_arch_destroy_vm+0x88/0x138 [ 8142.737821][ T7280] kvm_put_kvm+0x778/0xbe0 [ 8142.738591][ T7280] kvm_vm_release+0x58/0x78 [ 8142.739406][ T7280] __fput+0x4ac/0x978 [ 8142.740085][ T7280] ____fput+0x20/0x58 [ 8142.740815][ T7280] task_work_run+0x1b8/0x250 [ 8142.741576][ T7280] exit_to_user_mode_loop+0x110/0x188 [ 8142.742449][ T7280] el0_svc+0x17c/0x238 [ 8142.743312][ T7280] el0t_64_sync_handler+0x84/0x12c [ 8142.744220][ T7280] el0t_64_sync+0x198/0x19c [ 8142.745547][ T7280] Code: 54000420 b2481c28 d344fd09 d378fc28 (38696a89) [ 8142.747420][ T7280] ---[ end trace 0000000000000000 ]--- [ 8142.749083][ T7280] Kernel panic - not syncing: Oops: Fatal exception [ 8142.750937][ T7280] Kernel Offset: disabled [ 8142.751597][ T7280] CPU features: 0x0000000,001a3005,fbe327a1,057ffe1f [ 8142.752584][ T7280] Memory Limit: none [ 8142.754188][ T7280] Rebooting in 86400 seconds.. VM DIAGNOSIS: 00:08:53 Registers: info registers vcpu 0 CPU#0 PC=ffff800080012104 X00=fff07fffeb44e000 X01=ffff8000873162a3 X02=ffff80008c737d00 X03=0000000000000010 X04=0000000000000001 X05=0000000000000001 X06=0000000000000000 X07=ffff800081fa07d4 X08=00000000000000c0 X09=00000000000000d7 X10=00000000000000d7 X11=00000000000000d7 X12=0000000000000000 X13=0000000000000056 X14=0000000000000000 X15=000000000000116e X16=00000000814765f4 X17=0000000003c0437b X18=000000008147e18c X19=efff800000000000 X20=0000000000000000 X21=56f000000dec4880 X22=0000000000000002 X23=ffff800087bd7f30 X24=0000000000000000 X25=ffff800087bd7ee8 X26=00000000000000ff X27=d7f000000de11b80 X28=d7f000000de131a0 X29=ffff80008c737d00 X30=ffff800086756d18 SP=ffff80008c737d00 PSTATE=604023c9 -ZC- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000 P01=0000 P02=0000 P03=0000 P04=0000 P05=0000 P06=0000 P07=0000 P08=0000 P09=0000 P10=0000 P11=0000 P12=0000 P13=0000 P14=0000 P15=0000 FFR=0000 Z00=2c2c2c2c2c2c2c2c:2c2c2c2c2c2c2c2c Z01=727720726f727265:0000000000006577 Z02=0000000000000000:cccccccccccc0000 Z03=0000000000000000:0000000000000000 Z04=3333333333333333:3333333333333333 Z05=0000000000000000:00000000cccccc00 Z06=0000000000000073:0000aaaae0ea93c0 Z07=0000000000000074:0000aaaae0ea6600 Z08=0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000 Z16=0000ffffe49b35e0:0000ffffe49b35e0 Z17=ffffff80ffffffd0:0000ffffe49b35b0 Z18=0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000