last executing test programs: 32m20.529073291s ago: executing program 1 (id=1478): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r4, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)={0xef000000, 0x1000, 0x2}}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_vgic_v3_setup(r4, 0x4, 0x160) syz_kvm_setup_cpu$arm64(r4, r5, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000140)=[{0x0, &(0x7f00000005c0)=[@smc={0x1e, 0x40, {0xef000000, [0x0, 0x400000001, 0x2, 0x3, 0x4]}}], 0x40}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r4, 0x4010ae74, 0x0) r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r7 = syz_kvm_add_vcpu$arm64(0x0, 0x0, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000e88000/0x14000)=nil, r6, 0x2000002, 0x40010, r7, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f00000000c0)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}], 0x1, 0x0, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000100)={0x1000020, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 32m7.779105286s ago: executing program 1 (id=1479): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x6c180, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000b80)={0x0, &(0x7f0000000080)=[@mrs={0xbe, 0x18, {0x6030000000138032}}], 0x18}, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 32m1.966914784s ago: executing program 1 (id=1480): r0 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000000)={0x5}) r3 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000080)={0xfffffffffffffffa, 0x2, 0x4, 0xffffffffffffffff, 0x8a4fa382f1515d0b}) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xc, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x20000000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 31m50.79945197s ago: executing program 1 (id=1481): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xfdffffffffffffff) eventfd2(0xeffffffd, 0x801) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x58) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0x0) 31m45.245038881s ago: executing program 1 (id=1482): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x90881, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000200)="f30138ddf77f2b380b7bb71c04010003e600020000000003f4ff00061000bb000010090000000000000015051d000000000000000000003f00", 0x0, 0x48) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x3}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x9b, 0xf, 0x0, 0x5, 0x8, 0x82, 0x46, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x100001, 0xffc0000, 0x0, 0x3, 0xa, 0x8, '\x00', 0x1, 0x93}) write$eventfd(r6, &(0x7f00000001c0)=0x3, 0xfdef) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xe000, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000240)={0x1fe, 0x3, 0xffff6000, 0x1000, &(0x7f0000b24000/0x1000)=nil}) mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0xb, 0x28031, 0xffffffffffffffff, 0x0) r8 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) ioctl$KVM_SET_GUEST_DEBUG_arm64(r10, 0x4208ae9b, &(0x7f0000000240)={0x659aa93486115af1, 0x0, {[0x1, 0x5, 0xffff, 0x8, 0x2, 0x7, 0xff, 0x641, 0x1, 0x53, 0x59, 0x3ff, 0x100000001, 0xcf3b, 0x8, 0x6], [0x8, 0x7, 0x4, 0x6, 0x7, 0x0, 0x4000000042, 0x2, 0x3, 0x1, 0xa, 0x8000000000000001, 0x8, 0x9, 0x8, 0x6], [0x31, 0x53, 0xe, 0x56b0, 0x5, 0x2, 0x4, 0x8, 0x1, 0x1, 0x9, 0xffffffffffffffff, 0x3, 0x9, 0x78], [0xd6ef, 0x9, 0x4, 0x5, 0x3ff, 0x0, 0x0, 0xd, 0x7, 0x80, 0xd, 0xabb, 0xffffffffffffffff, 0x623, 0x1, 0x2]}}) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000000)={0x6}) ioctl$KVM_GET_DEVICE_ATTR_vm(r9, 0x4018aee2, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000040)={0x7, 0x79a, 0x2}}) 31m31.574803534s ago: executing program 1 (id=1483): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x460002, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x460002, 0x0) r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) (async) r2 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r3 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x2, 0x1ffe, 0x0, r3, 0x6}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) (async) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000ffa000/0x4000)=nil, r1, 0x4, 0x13, r4, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000540)={0x0, &(0x7f00000000c0)=[@smc={0x1e, 0x40, {0x8400000d, [0x10, 0x8, 0x7, 0x2, 0xfffffffffffffff7]}}, @irq_setup={0x46, 0x18, {0x3, 0x9d}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80e0000, 0x80, 0x8000, 0x1}}, @smc={0x1e, 0x40, {0x40000000, [0x0, 0x7, 0x3, 0x5, 0x5]}}, @irq_setup={0x46, 0x18, {0x1, 0x2bc}}, @its_setup={0x82, 0x28, {0x4, 0x2, 0x102}}, @eret={0xe6, 0x18, 0x253}, @hvc={0x32, 0x40, {0x80000001, [0xf7, 0x3, 0x3, 0xa, 0xb019]}}, @uexit={0x0, 0x18, 0x1}, @svc={0x122, 0x40, {0xffff, [0x8, 0xd1b3, 0x8, 0x2, 0x1]}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xffd0, 0x0, 0x9}}, @smc={0x1e, 0x40, {0xc400000d, [0xffffffff, 0x8, 0xe2f, 0xc, 0x7]}}, @code={0xa, 0x84, {"0000000b0000bf0d007008d5407992d20020b8f2810080d2a20180d2630180d2440180d2020000d40060006fa0d594d20000b0f2e10080d2420180d2630180d2640080d2020000d4007008d50000406960b299d200e0b0f2a10180d2e20080d2e30180d2440080d2020000d4008008d5"}}, @msr={0x14, 0x20, {0x603000000013def5, 0x5}}, @svc={0x122, 0x40, {0xc400000c, [0x0, 0xffffffffffffff92, 0x6, 0x7f, 0x80000000]}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x30, 0x100000000, 0x1}}, @uexit={0x0, 0x18, 0x63}, @its_send_cmd={0xaa, 0x28, {0xc, 0x1, 0x0, 0x3, 0x1, 0x8001, 0x3}}, @smc={0x1e, 0x40, {0x20, [0x1, 0x401, 0x7fffffffffffffff, 0x18, 0x8000000000000001]}}, @uexit={0x0, 0x18, 0xaa}, @eret={0xe6, 0x18, 0x8}, @mrs={0xbe, 0x18, {0x603000000013df7c}}, @eret={0xe6, 0x18}, @its_send_cmd={0xaa, 0x28, {0x4, 0x1, 0x0, 0x6, 0x3, 0x8, 0x3}}, @msr={0x14, 0x20, {0x603000000013e000, 0x85}}], 0x464}, &(0x7f0000000580)=[@featur2={0x1, 0x45}], 0x1) (async) syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000540)={0x0, &(0x7f00000000c0)=[@smc={0x1e, 0x40, {0x8400000d, [0x10, 0x8, 0x7, 0x2, 0xfffffffffffffff7]}}, @irq_setup={0x46, 0x18, {0x3, 0x9d}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80e0000, 0x80, 0x8000, 0x1}}, @smc={0x1e, 0x40, {0x40000000, [0x0, 0x7, 0x3, 0x5, 0x5]}}, @irq_setup={0x46, 0x18, {0x1, 0x2bc}}, @its_setup={0x82, 0x28, {0x4, 0x2, 0x102}}, @eret={0xe6, 0x18, 0x253}, @hvc={0x32, 0x40, {0x80000001, [0xf7, 0x3, 0x3, 0xa, 0xb019]}}, @uexit={0x0, 0x18, 0x1}, @svc={0x122, 0x40, {0xffff, [0x8, 0xd1b3, 0x8, 0x2, 0x1]}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xffd0, 0x0, 0x9}}, @smc={0x1e, 0x40, {0xc400000d, [0xffffffff, 0x8, 0xe2f, 0xc, 0x7]}}, @code={0xa, 0x84, {"0000000b0000bf0d007008d5407992d20020b8f2810080d2a20180d2630180d2440180d2020000d40060006fa0d594d20000b0f2e10080d2420180d2630180d2640080d2020000d4007008d50000406960b299d200e0b0f2a10180d2e20080d2e30180d2440080d2020000d4008008d5"}}, @msr={0x14, 0x20, {0x603000000013def5, 0x5}}, @svc={0x122, 0x40, {0xc400000c, [0x0, 0xffffffffffffff92, 0x6, 0x7f, 0x80000000]}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x30, 0x100000000, 0x1}}, @uexit={0x0, 0x18, 0x63}, @its_send_cmd={0xaa, 0x28, {0xc, 0x1, 0x0, 0x3, 0x1, 0x8001, 0x3}}, @smc={0x1e, 0x40, {0x20, [0x1, 0x401, 0x7fffffffffffffff, 0x18, 0x8000000000000001]}}, @uexit={0x0, 0x18, 0xaa}, @eret={0xe6, 0x18, 0x8}, @mrs={0xbe, 0x18, {0x603000000013df7c}}, @eret={0xe6, 0x18}, @its_send_cmd={0xaa, 0x28, {0x4, 0x1, 0x0, 0x6, 0x3, 0x8, 0x3}}, @msr={0x14, 0x20, {0x603000000013e000, 0x85}}], 0x464}, &(0x7f0000000580)=[@featur2={0x1, 0x45}], 0x1) ioctl$KVM_PPC_ALLOCATE_HTAB(r3, 0xc004aea7, &(0x7f00000005c0)=0x7) mmap$KVM_VCPU(&(0x7f0000df0000/0x4000)=nil, r1, 0x1, 0x4010, r4, 0x0) ioctl$KVM_RESET_DIRTY_RINGS(r3, 0xaec7) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x33) (async) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x33) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1f) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x3a) (async) r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x3a) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000600)={0x101ff, 0x7, 0x41000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000600)={0x101ff, 0x7, 0x41000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000640), 0x8000, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r9, 0xae04) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1f) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000680)={r2, 0x6a, 0x1, r2}) (async) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000680)={r2, 0x6a, 0x1, r2}) r10 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r7, r10, &(0x7f0000bfd000/0x400000)=nil, &(0x7f0000000800)=[{0x0, &(0x7f00000006c0)=[@mrs={0xbe, 0x18, {0x603000000013804e}}, @hvc={0x32, 0x40, {0xc4000010, [0x8, 0x6, 0xfecc, 0x100000000, 0x3]}}, @code={0xa, 0x6c, {"bf3003d5008008d5000008d5007008d5606086d20060b0f2210080d2820180d2e30080d2040180d2020000d4007008d5403a96d200a0b8f2c10180d2e20080d2830080d2840180d2020000d4000c00bc0044205e00fc4093"}}, @code={0xa, 0x6c, {"007008d5007008d5000028d5a0f69cd200a0b8f2e10180d2c20180d2e30180d2a40180d2020000d4007008d5000028d500b8217e0000c02d007008d5409c81d200e0b8f2810080d2e20180d2c30080d2e40080d2020000d4"}}], 0x130}], 0x1, 0x0, &(0x7f0000000840)=[@featur1={0x1, 0x14}], 0x1) ioctl$KVM_SET_ONE_REG(r10, 0x4010aeac, &(0x7f00000008c0)=@arm64_extra={0x0, &(0x7f0000000880)=0x10}) ioctl$KVM_GET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000940)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000900)={0x1ff, 0x2}}) (async) ioctl$KVM_GET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000940)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000900)={0x1ff, 0x2}}) 30m41.997932122s ago: executing program 32 (id=1483): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x460002, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x460002, 0x0) r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) (async) r2 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r3 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x2, 0x1ffe, 0x0, r3, 0x6}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) (async) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000ffa000/0x4000)=nil, r1, 0x4, 0x13, r4, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000540)={0x0, &(0x7f00000000c0)=[@smc={0x1e, 0x40, {0x8400000d, [0x10, 0x8, 0x7, 0x2, 0xfffffffffffffff7]}}, @irq_setup={0x46, 0x18, {0x3, 0x9d}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80e0000, 0x80, 0x8000, 0x1}}, @smc={0x1e, 0x40, {0x40000000, [0x0, 0x7, 0x3, 0x5, 0x5]}}, @irq_setup={0x46, 0x18, {0x1, 0x2bc}}, @its_setup={0x82, 0x28, {0x4, 0x2, 0x102}}, @eret={0xe6, 0x18, 0x253}, @hvc={0x32, 0x40, {0x80000001, [0xf7, 0x3, 0x3, 0xa, 0xb019]}}, @uexit={0x0, 0x18, 0x1}, @svc={0x122, 0x40, {0xffff, [0x8, 0xd1b3, 0x8, 0x2, 0x1]}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xffd0, 0x0, 0x9}}, @smc={0x1e, 0x40, {0xc400000d, [0xffffffff, 0x8, 0xe2f, 0xc, 0x7]}}, @code={0xa, 0x84, {"0000000b0000bf0d007008d5407992d20020b8f2810080d2a20180d2630180d2440180d2020000d40060006fa0d594d20000b0f2e10080d2420180d2630180d2640080d2020000d4007008d50000406960b299d200e0b0f2a10180d2e20080d2e30180d2440080d2020000d4008008d5"}}, @msr={0x14, 0x20, {0x603000000013def5, 0x5}}, @svc={0x122, 0x40, {0xc400000c, [0x0, 0xffffffffffffff92, 0x6, 0x7f, 0x80000000]}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x30, 0x100000000, 0x1}}, @uexit={0x0, 0x18, 0x63}, @its_send_cmd={0xaa, 0x28, {0xc, 0x1, 0x0, 0x3, 0x1, 0x8001, 0x3}}, @smc={0x1e, 0x40, {0x20, [0x1, 0x401, 0x7fffffffffffffff, 0x18, 0x8000000000000001]}}, @uexit={0x0, 0x18, 0xaa}, @eret={0xe6, 0x18, 0x8}, @mrs={0xbe, 0x18, {0x603000000013df7c}}, @eret={0xe6, 0x18}, @its_send_cmd={0xaa, 0x28, {0x4, 0x1, 0x0, 0x6, 0x3, 0x8, 0x3}}, @msr={0x14, 0x20, {0x603000000013e000, 0x85}}], 0x464}, &(0x7f0000000580)=[@featur2={0x1, 0x45}], 0x1) (async) syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000540)={0x0, &(0x7f00000000c0)=[@smc={0x1e, 0x40, {0x8400000d, [0x10, 0x8, 0x7, 0x2, 0xfffffffffffffff7]}}, @irq_setup={0x46, 0x18, {0x3, 0x9d}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80e0000, 0x80, 0x8000, 0x1}}, @smc={0x1e, 0x40, {0x40000000, [0x0, 0x7, 0x3, 0x5, 0x5]}}, @irq_setup={0x46, 0x18, {0x1, 0x2bc}}, @its_setup={0x82, 0x28, {0x4, 0x2, 0x102}}, @eret={0xe6, 0x18, 0x253}, @hvc={0x32, 0x40, {0x80000001, [0xf7, 0x3, 0x3, 0xa, 0xb019]}}, @uexit={0x0, 0x18, 0x1}, @svc={0x122, 0x40, {0xffff, [0x8, 0xd1b3, 0x8, 0x2, 0x1]}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xffd0, 0x0, 0x9}}, @smc={0x1e, 0x40, {0xc400000d, [0xffffffff, 0x8, 0xe2f, 0xc, 0x7]}}, @code={0xa, 0x84, {"0000000b0000bf0d007008d5407992d20020b8f2810080d2a20180d2630180d2440180d2020000d40060006fa0d594d20000b0f2e10080d2420180d2630180d2640080d2020000d4007008d50000406960b299d200e0b0f2a10180d2e20080d2e30180d2440080d2020000d4008008d5"}}, @msr={0x14, 0x20, {0x603000000013def5, 0x5}}, @svc={0x122, 0x40, {0xc400000c, [0x0, 0xffffffffffffff92, 0x6, 0x7f, 0x80000000]}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x30, 0x100000000, 0x1}}, @uexit={0x0, 0x18, 0x63}, @its_send_cmd={0xaa, 0x28, {0xc, 0x1, 0x0, 0x3, 0x1, 0x8001, 0x3}}, @smc={0x1e, 0x40, {0x20, [0x1, 0x401, 0x7fffffffffffffff, 0x18, 0x8000000000000001]}}, @uexit={0x0, 0x18, 0xaa}, @eret={0xe6, 0x18, 0x8}, @mrs={0xbe, 0x18, {0x603000000013df7c}}, @eret={0xe6, 0x18}, @its_send_cmd={0xaa, 0x28, {0x4, 0x1, 0x0, 0x6, 0x3, 0x8, 0x3}}, @msr={0x14, 0x20, {0x603000000013e000, 0x85}}], 0x464}, &(0x7f0000000580)=[@featur2={0x1, 0x45}], 0x1) ioctl$KVM_PPC_ALLOCATE_HTAB(r3, 0xc004aea7, &(0x7f00000005c0)=0x7) mmap$KVM_VCPU(&(0x7f0000df0000/0x4000)=nil, r1, 0x1, 0x4010, r4, 0x0) ioctl$KVM_RESET_DIRTY_RINGS(r3, 0xaec7) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x33) (async) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x33) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1f) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x3a) (async) r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x3a) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000600)={0x101ff, 0x7, 0x41000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000600)={0x101ff, 0x7, 0x41000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000640), 0x8000, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r9, 0xae04) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1f) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000680)={r2, 0x6a, 0x1, r2}) (async) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000680)={r2, 0x6a, 0x1, r2}) r10 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r7, r10, &(0x7f0000bfd000/0x400000)=nil, &(0x7f0000000800)=[{0x0, &(0x7f00000006c0)=[@mrs={0xbe, 0x18, {0x603000000013804e}}, @hvc={0x32, 0x40, {0xc4000010, [0x8, 0x6, 0xfecc, 0x100000000, 0x3]}}, @code={0xa, 0x6c, {"bf3003d5008008d5000008d5007008d5606086d20060b0f2210080d2820180d2e30080d2040180d2020000d4007008d5403a96d200a0b8f2c10180d2e20080d2830080d2840180d2020000d4000c00bc0044205e00fc4093"}}, @code={0xa, 0x6c, {"007008d5007008d5000028d5a0f69cd200a0b8f2e10180d2c20180d2e30180d2a40180d2020000d4007008d5000028d500b8217e0000c02d007008d5409c81d200e0b8f2810080d2e20180d2c30080d2e40080d2020000d4"}}], 0x130}], 0x1, 0x0, &(0x7f0000000840)=[@featur1={0x1, 0x14}], 0x1) ioctl$KVM_SET_ONE_REG(r10, 0x4010aeac, &(0x7f00000008c0)=@arm64_extra={0x0, &(0x7f0000000880)=0x10}) ioctl$KVM_GET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000940)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000900)={0x1ff, 0x2}}) (async) ioctl$KVM_GET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000940)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000900)={0x1ff, 0x2}}) 17m51.277584915s ago: executing program 0 (id=1562): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r1 = mmap$KVM_VCPU(&(0x7f0000dd4000/0x3000)=nil, 0x930, 0x1000002, 0x100010, r0, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) mmap$KVM_VCPU(&(0x7f0000e93000/0x3000)=nil, 0x50000, 0x3, 0x4002031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) 17m51.121539083s ago: executing program 2 (id=1563): r0 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r6, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) (async) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r6, 0x4018aee1, &(0x7f0000000100)=@attr_pmu_filter={0x0, 0x0, 0x2, 0x0}) ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000000)={0x5}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_ARM_VCPU_FINALIZE(r2, 0x4004aec2, 0x0) 17m39.96722747s ago: executing program 0 (id=1564): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x25) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000001c0)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x7, 0x4, &(0x7f0000000280)=0xffffffffffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x5, 0x1, 0x1000000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000002c0)=@attr_other={0x0, 0x8, 0x108, &(0x7f0000000000)=0xbfffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x4, 0x1, 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x181b03, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1b) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x29) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x1, 0xe000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000080)={0x3000, 0x1000, 0x1}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r6, 0x4010ae68, &(0x7f0000000040)={0x0, 0x10c000, 0x1}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0x400454d9, 0x110c23000a) r7 = mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04) syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f0000000300)="746abf250f7959c813e4adfb369b808022e69fe8b54ac9749537b3d016bb7f745a6e22d2f9ff443f19467748a3fe02c239457600", 0x0, 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x4d68c2, 0x0) r8 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) r10 = syz_kvm_vgic_v3_setup(r9, 0x1, 0x100) ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x5, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_HAS_DEVICE_ATTR(r10, 0x4018aee3, &(0x7f0000000200)=@attr_other={0x0, 0x7, 0xffffffffffffffff, &(0x7f00000001c0)=0x8}) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x408302, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f0000000400)=@attr_other={0x0, 0x4, 0x1, &(0x7f0000000380)=0x80}) 17m38.334729523s ago: executing program 2 (id=1565): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2e) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000100)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000300)=@arm64_core={0x6030000000100013, 0x0}) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) (async) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000080)={0x0, &(0x7f0000000240)=[@irq_setup={0x5, 0x18}], 0x18}, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000000)=@arm64={0x0, 0x1, 0xf, '\x00', 0xfffffffffffff105}) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x3, 0x27, 0x6, 0x0, 0x4, 0x9, 0xff, 0x7, 0xc7, 0x43, 0x5, 0x7, 0x0, 0x5, 0x2e, 0xd7, 0x10, 0xaa, 0x7, '\x00', 0x2, 0x100000000000000}) write$eventfd(r9, &(0x7f00000001c0)=0x9, 0x1d) 17m25.714181221s ago: executing program 0 (id=1566): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f0000000140)=@attr_arm64={0x0, 0x1, 0x1, 0x0}) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000040)=@attr_riscv64=@attr_addr={0x0, 0x1, @imsic=0x1, &(0x7f0000000000)=0x7}) 17m19.259169494s ago: executing program 2 (id=1567): munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x4fc402, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x1}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x0, 0x8, 0x13, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x8, 0xf, 0x0, 0x5, 0x6, 0x6, 0x6, 0x74, 0x86, 0xdd, 0x68, 0x0, 0x209, 0x0, 0x0, 0x3, 0x5, 0x5, '\x00', 0x1, 0x400000000002}) write$eventfd(r5, &(0x7f00000001c0)=0x3, 0x50) ioctl$KVM_ARM_VCPU_FINALIZE(r2, 0x4004aec2, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x20200, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r11 = syz_kvm_vgic_v3_setup(r9, 0x3, 0x40) ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f00000000c0)=@attr_other={0x0, 0x6, 0x1382bc664, &(0x7f0000000100)=0x5}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) r13 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r12, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r13, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48) r14 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x12, r10, 0x0) r15 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x242942, 0x0) ioctl$KVM_CREATE_VM(r15, 0x40049409, 0x9) 17m16.877669197s ago: executing program 0 (id=1568): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r1, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x2}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x1, 0x9, 0x2, 0x0, 0xa, 0x1}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r2, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x25) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f00000001c0)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000380)}) syz_kvm_setup_cpu$arm64(r6, 0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000900)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f00000002c0)=@attr_other={0x0, 0x8, 0x108, &(0x7f0000000000)=0xc000000000000000}) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x4, 0x1, 0x0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17m7.427680848s ago: executing program 2 (id=1569): r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x1, 0x8, 0xb, 0x0, 0x2, 0x6, 0x6, 0x9, 0x8, 0x8, 0x6, 0x2, 0x0, 0x6, 0x6, 0xe2, 0x1, 0x29, 0x0, '\x00', 0x10, 0x6}) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r4, &(0x7f00000001c0), 0xf001) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r5 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48) 17m6.604099208s ago: executing program 0 (id=1570): mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x9000000) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000) munmap(&(0x7f0000482000/0x2000)=nil, 0x2000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x52) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000080)={0xffffffffffffffff, 0xc9, 0x2}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) r4 = ioctl$KVM_CREATE_VM(r3, 0x894c, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xb701, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x600800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0x6}) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_DEVICE_ATTR(r7, 0xb704, 0x0) munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000) munmap(&(0x7f0000e76000/0x12000)=nil, 0x12000) mmap$KVM_VCPU(&(0x7f00005e7000/0x2000)=nil, 0x930, 0x3000000, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000f1a000/0x4000)=nil, 0x930, 0x0, 0x9032, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) 16m57.517574045s ago: executing program 2 (id=1571): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_ARM_SYSTEM_SUSPEND(r1, 0x4068aea3, &(0x7f00000000c0)) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000000)={0x0, &(0x7f0000000040)=[@memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xffd0, 0x1ab, 0x5}}], 0x30}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1) syz_kvm_vgic_v3_setup(r1, 0x3, 0xc0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 16m54.470760044s ago: executing program 0 (id=1572): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x25) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000180)=@attr_riscv64=@attr_imsic={0x0, 0x1, 0x0, &(0x7f0000000280)=0x3}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async, rerun: 64) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x34) (rerun: 64) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f00000000c0)={0x7, 0xffffffffffffffff}) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000a, 0x11, r7, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f0000000380)="f30149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a3ff7fbc51869be2e2e0000000000000f000000000000000001000000000000000000000000000e00", 0x0, 0x34) (async, rerun: 32) syz_memcpy_off$KVM_EXIT_MMIO(r8, 0x20, &(0x7f0000000080)="b7a6efbdc7f09742f769da91d5d2b67c6ecad7938629342f", 0x0, 0x18) (async, rerun: 32) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x0, 0x3, &(0x7f0000000000)=0x400000000}) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x0, 0x5, &(0x7f0000000100)=0x8010000000000001}) r9 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1) r12 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) (async) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r13, 0xae03, 0xa2) syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) syz_kvm_vgic_v3_setup(r10, 0x1, 0x0) (async) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r11, 0x4018aee2, &(0x7f0000000240)=@attr_pmu_init) (async) ioctl$KVM_RUN(r11, 0xae80, 0x0) munmap$KVM_VCPU(0x0, 0x1000000000) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000d93000/0x3000)=nil, 0x0, 0x200000f, 0x1010, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2a) 16m48.45675409s ago: executing program 2 (id=1573): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x7, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000002c0)=@attr_arm64={0x0, 0x4, 0x0, 0x0}) r3 = eventfd2(0x8801, 0x800) r4 = eventfd2(0x3ff, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r4, 0x5, 0x2, r4}) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000100)={0x7, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f00000002c0)=@attr_arm64={0x0, 0x4, 0x0, 0x0}) r11 = eventfd2(0x8801, 0x800) r12 = eventfd2(0x3ff, 0x0) ioctl$KVM_IRQFD(r9, 0x4020ae76, &(0x7f0000000000)={r12, 0x5, 0x2, r12}) r13 = eventfd2(0x8, 0x801) ioctl$KVM_IRQFD(r9, 0x4020ae76, &(0x7f0000000180)={r13, 0x100, 0x2, r12}) ioctl$KVM_IRQFD(r9, 0x4020ae76, &(0x7f0000000140)={r12, 0x5, 0x2, r11}) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r14 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) r15 = syz_kvm_add_vcpu$arm64(r14, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r15, 0x4018aee1, &(0x7f0000000000)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0x20e4586c}) ioctl$KVM_RUN(r15, 0xae80, 0x0) ioctl$KVM_RUN(r15, 0xae80, 0x0) r16 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, r16, 0x1, 0x16831, 0xffffffffffffffff, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={r4, 0x5, 0x2, r3}) 16m9.80771406s ago: executing program 33 (id=1572): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x25) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000180)=@attr_riscv64=@attr_imsic={0x0, 0x1, 0x0, &(0x7f0000000280)=0x3}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async, rerun: 64) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x34) (rerun: 64) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f00000000c0)={0x7, 0xffffffffffffffff}) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000a, 0x11, r7, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f0000000380)="f30149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a3ff7fbc51869be2e2e0000000000000f000000000000000001000000000000000000000000000e00", 0x0, 0x34) (async, rerun: 32) syz_memcpy_off$KVM_EXIT_MMIO(r8, 0x20, &(0x7f0000000080)="b7a6efbdc7f09742f769da91d5d2b67c6ecad7938629342f", 0x0, 0x18) (async, rerun: 32) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x0, 0x3, &(0x7f0000000000)=0x400000000}) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x0, 0x5, &(0x7f0000000100)=0x8010000000000001}) r9 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1) r12 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) (async) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r13, 0xae03, 0xa2) syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) syz_kvm_vgic_v3_setup(r10, 0x1, 0x0) (async) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r11, 0x4018aee2, &(0x7f0000000240)=@attr_pmu_init) (async) ioctl$KVM_RUN(r11, 0xae80, 0x0) munmap$KVM_VCPU(0x0, 0x1000000000) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000d93000/0x3000)=nil, 0x0, 0x200000f, 0x1010, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2a) 15m59.872769983s ago: executing program 34 (id=1573): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x7, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000002c0)=@attr_arm64={0x0, 0x4, 0x0, 0x0}) r3 = eventfd2(0x8801, 0x800) r4 = eventfd2(0x3ff, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r4, 0x5, 0x2, r4}) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000100)={0x7, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f00000002c0)=@attr_arm64={0x0, 0x4, 0x0, 0x0}) r11 = eventfd2(0x8801, 0x800) r12 = eventfd2(0x3ff, 0x0) ioctl$KVM_IRQFD(r9, 0x4020ae76, &(0x7f0000000000)={r12, 0x5, 0x2, r12}) r13 = eventfd2(0x8, 0x801) ioctl$KVM_IRQFD(r9, 0x4020ae76, &(0x7f0000000180)={r13, 0x100, 0x2, r12}) ioctl$KVM_IRQFD(r9, 0x4020ae76, &(0x7f0000000140)={r12, 0x5, 0x2, r11}) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r14 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) r15 = syz_kvm_add_vcpu$arm64(r14, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r15, 0x4018aee1, &(0x7f0000000000)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0x20e4586c}) ioctl$KVM_RUN(r15, 0xae80, 0x0) ioctl$KVM_RUN(r15, 0xae80, 0x0) r16 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, r16, 0x1, 0x16831, 0xffffffffffffffff, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={r4, 0x5, 0x2, r3}) 11m10.977611467s ago: executing program 3 (id=1574): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x11) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x11) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) (async) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) mmap$KVM_VCPU(&(0x7f000064b000/0x4000)=nil, r4, 0x100000d, 0x4000010, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, r4, 0x2800002, 0x12, r2, 0x0) mmap$KVM_VCPU(&(0x7f0000002000/0x4000)=nil, 0x0, 0x1000002, 0x4a930, r2, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000002000/0x4000)=nil, 0x0, 0x1000002, 0x4a930, r2, 0x0) mmap$KVM_VCPU(&(0x7f0000004000/0x4000)=nil, 0x0, 0x1000000, 0x4000010, r2, 0x0) (async) r5 = mmap$KVM_VCPU(&(0x7f0000004000/0x4000)=nil, 0x0, 0x1000000, 0x4000010, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000000080)="fb4149dd033be3acaa231ec13b7f2dd6b09e8681367bb10c94a6ab8031d157a91aff000000010000005a9610fbff67521ce16f8fd22627e79b8300", 0x0, 0x48) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x23) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000bfd000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000080)={0x0, &(0x7f0000000380)=[@svc={0x122, 0x40, {0x84000050, [0x0, 0xfffffffffffffffb, 0x8, 0x100, 0x2]}}, @mrs={0xbe, 0x18, {0x603000000013e6d8}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x0, 0x1, 0xd, 0x9, 0x3, 0x1}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x1, 0x4, 0x3, 0x31, 0x1ff, 0x4}}, @its_setup={0x82, 0x28, {0x2, 0x0, 0x38e}}, @hvc={0x32, 0x40, {0xc4000010, [0x4, 0xfffffffffffffffa, 0x8, 0xffffffffffffffff, 0x9e1]}}, @mrs={0xbe, 0x18, {0x603000000013e6df}}, @svc={0x122, 0x40, {0x6000000, [0x4, 0x9, 0xcbe2, 0x7, 0x3400000000000]}}], 0x168}, 0x0, 0x0) (async) r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000080)={0x0, &(0x7f0000000380)=[@svc={0x122, 0x40, {0x84000050, [0x0, 0xfffffffffffffffb, 0x8, 0x100, 0x2]}}, @mrs={0xbe, 0x18, {0x603000000013e6d8}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x0, 0x1, 0xd, 0x9, 0x3, 0x1}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x1, 0x4, 0x3, 0x31, 0x1ff, 0x4}}, @its_setup={0x82, 0x28, {0x2, 0x0, 0x38e}}, @hvc={0x32, 0x40, {0xc4000010, [0x4, 0xfffffffffffffffa, 0x8, 0xffffffffffffffff, 0x9e1]}}, @mrs={0xbe, 0x18, {0x603000000013e6df}}, @svc={0x122, 0x40, {0x6000000, [0x4, 0x9, 0xcbe2, 0x7, 0x3400000000000]}}], 0x168}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r9, 0x2, 0x100) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_IRQ_LINE(r7, 0x4008ae61, &(0x7f0000000080)={0x0, 0xffffff6f}) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1000009, 0x16831, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1000009, 0x16831, 0xffffffffffffffff, 0x0) ioctl$KVM_IRQ_LINE(r7, 0x4008ae61, &(0x7f00000001c0)={0x0, 0xffffffff}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r2, 0x0) r12 = openat$kvm(0x0, &(0x7f0000000040), 0x721301, 0x0) ioctl$KVM_CREATE_VM(r12, 0x801c581f, 0xfffffffffffffffc) (async) ioctl$KVM_CREATE_VM(r12, 0x801c581f, 0xfffffffffffffffc) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$KVM_CREATE_VM(r13, 0xae01, 0x28) (async) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x28) r15 = ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x1) r16 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r15, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r16, 0x20, &(0x7f00000000c0)="9c0c0963be44dc11ad792d2c717f994c8d328baa6122ceb26a5b5a622ccac73d4efc396fda43d4fe95862b6032f61d2a21803e63a341ec3c70e3c2f7871777a061d9f60ef47f7027", 0x0, 0x48) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(r16, 0x20, &(0x7f00000000c0)="9c0c0963be44dc11ad792d2c717f994c8d328baa6122ceb26a5b5a622ccac73d4efc396fda43d4fe95862b6032f61d2a21803e63a341ec3c70e3c2f7871777a061d9f60ef47f7027", 0x0, 0x48) 10m38.15760287s ago: executing program 4 (id=1575): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x2}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x1, 0x80000, 0x10000, 0x7, 0x200, 0x2}}], 0x50}, 0x0, 0x0) r4 = syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f00000000c0)=@riscv64_config={0x8030000000100002, &(0x7f0000000040)=0x80000000}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0xc, 0x4, &(0x7f0000000200)=0x8080001}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000b7b000/0x400000)=nil) 10m23.028275308s ago: executing program 35 (id=1574): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x11) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x11) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) (async) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) mmap$KVM_VCPU(&(0x7f000064b000/0x4000)=nil, r4, 0x100000d, 0x4000010, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, r4, 0x2800002, 0x12, r2, 0x0) mmap$KVM_VCPU(&(0x7f0000002000/0x4000)=nil, 0x0, 0x1000002, 0x4a930, r2, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000002000/0x4000)=nil, 0x0, 0x1000002, 0x4a930, r2, 0x0) mmap$KVM_VCPU(&(0x7f0000004000/0x4000)=nil, 0x0, 0x1000000, 0x4000010, r2, 0x0) (async) r5 = mmap$KVM_VCPU(&(0x7f0000004000/0x4000)=nil, 0x0, 0x1000000, 0x4000010, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000000080)="fb4149dd033be3acaa231ec13b7f2dd6b09e8681367bb10c94a6ab8031d157a91aff000000010000005a9610fbff67521ce16f8fd22627e79b8300", 0x0, 0x48) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x23) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000bfd000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000080)={0x0, &(0x7f0000000380)=[@svc={0x122, 0x40, {0x84000050, [0x0, 0xfffffffffffffffb, 0x8, 0x100, 0x2]}}, @mrs={0xbe, 0x18, {0x603000000013e6d8}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x0, 0x1, 0xd, 0x9, 0x3, 0x1}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x1, 0x4, 0x3, 0x31, 0x1ff, 0x4}}, @its_setup={0x82, 0x28, {0x2, 0x0, 0x38e}}, @hvc={0x32, 0x40, {0xc4000010, [0x4, 0xfffffffffffffffa, 0x8, 0xffffffffffffffff, 0x9e1]}}, @mrs={0xbe, 0x18, {0x603000000013e6df}}, @svc={0x122, 0x40, {0x6000000, [0x4, 0x9, 0xcbe2, 0x7, 0x3400000000000]}}], 0x168}, 0x0, 0x0) (async) r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000080)={0x0, &(0x7f0000000380)=[@svc={0x122, 0x40, {0x84000050, [0x0, 0xfffffffffffffffb, 0x8, 0x100, 0x2]}}, @mrs={0xbe, 0x18, {0x603000000013e6d8}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x0, 0x1, 0xd, 0x9, 0x3, 0x1}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x1, 0x4, 0x3, 0x31, 0x1ff, 0x4}}, @its_setup={0x82, 0x28, {0x2, 0x0, 0x38e}}, @hvc={0x32, 0x40, {0xc4000010, [0x4, 0xfffffffffffffffa, 0x8, 0xffffffffffffffff, 0x9e1]}}, @mrs={0xbe, 0x18, {0x603000000013e6df}}, @svc={0x122, 0x40, {0x6000000, [0x4, 0x9, 0xcbe2, 0x7, 0x3400000000000]}}], 0x168}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r9, 0x2, 0x100) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_IRQ_LINE(r7, 0x4008ae61, &(0x7f0000000080)={0x0, 0xffffff6f}) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1000009, 0x16831, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1000009, 0x16831, 0xffffffffffffffff, 0x0) ioctl$KVM_IRQ_LINE(r7, 0x4008ae61, &(0x7f00000001c0)={0x0, 0xffffffff}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r2, 0x0) r12 = openat$kvm(0x0, &(0x7f0000000040), 0x721301, 0x0) ioctl$KVM_CREATE_VM(r12, 0x801c581f, 0xfffffffffffffffc) (async) ioctl$KVM_CREATE_VM(r12, 0x801c581f, 0xfffffffffffffffc) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$KVM_CREATE_VM(r13, 0xae01, 0x28) (async) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x28) r15 = ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x1) r16 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r15, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r16, 0x20, &(0x7f00000000c0)="9c0c0963be44dc11ad792d2c717f994c8d328baa6122ceb26a5b5a622ccac73d4efc396fda43d4fe95862b6032f61d2a21803e63a341ec3c70e3c2f7871777a061d9f60ef47f7027", 0x0, 0x48) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(r16, 0x20, &(0x7f00000000c0)="9c0c0963be44dc11ad792d2c717f994c8d328baa6122ceb26a5b5a622ccac73d4efc396fda43d4fe95862b6032f61d2a21803e63a341ec3c70e3c2f7871777a061d9f60ef47f7027", 0x0, 0x48) 9m50.148904865s ago: executing program 36 (id=1575): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x2}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x1, 0x80000, 0x10000, 0x7, 0x200, 0x2}}], 0x50}, 0x0, 0x0) r4 = syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f00000000c0)=@riscv64_config={0x8030000000100002, &(0x7f0000000040)=0x80000000}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0xc, 0x4, &(0x7f0000000200)=0x8080001}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000b7b000/0x400000)=nil) 1m27.235093967s ago: executing program 5 (id=1576): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f00000004c0)=[@code={0xa, 0x84, {"007008d500000013000008d5000028d5c0e591d200e0b8f2e10180d2a20080d2e30080d2e40180d2020000d4007008d5007008d580c784d20040b0f2a10180d2a20180d2030180d2e40080d2020000d4007008d5c0f397d20080b8f2c10180d2020080d2030080d2440080d2020000d4"}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x87e0, 0x9, 0x4}}, @its_send_cmd={0xaa, 0x28, {0xe, 0x0, 0x4, 0x6, 0xba33, 0x200, 0x2}}, @mrs={0xbe, 0x18, {0x603000000013e536}}, @mrs={0xbe, 0x18}, @svc={0x122, 0x40, {0x200, [0x7, 0x200, 0x1ff, 0xfffffffffffffffe, 0x80ab]}}, @irq_setup={0x46, 0x18, {0x1, 0x37a}}, @mrs={0xbe, 0x18, {0x6030000000138055}}, @uexit={0x0, 0x18, 0x8001}, @smc={0x1e, 0x40, {0x10, [0x9, 0x0, 0x1ff, 0xed3, 0xfffffffffffffffd]}}, @svc={0x122, 0x40, {0x80000000, [0x4, 0x0, 0xce, 0xf, 0xe]}}, @mrs={0xbe, 0x18, {0x603000000013e6d3}}, @its_setup={0x82, 0x28, {0x1, 0x0, 0x2d5}}], 0x254}, 0x0, 0x0) (async) syz_kvm_vgic_v3_setup(r1, 0xffffffffffbffffc, 0x120) (async, rerun: 64) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x1, 0xffffffffffffffff}) (rerun: 64) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, r5, 0x0, 0x4f832, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000240)=@attr_arm64={0x0, 0x4, 0x2, 0x0}) (async) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) 48.210155228s ago: executing program 6 (id=1577): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3}) (async) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, r3, 0x2000003, 0x2013, r2, 0xff010000) syz_kvm_setup_cpu$arm64(r1, 0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil, &(0x7f0000000940)=[{0x0, &(0x7f0000000700)=[@svc={0x122, 0x40, {0xc4000001, [0x8001, 0x9, 0x1, 0x96, 0x8]}}], 0x40}], 0x1, 0x0, 0x0, 0x0) (async) r4 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x29) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x800, 0x0) (async) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, 0x0) (async) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r8 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r7, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0xffffffffffffffa7) (async) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r7, 0x0) (async, rerun: 32) r9 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) (rerun: 32) ioctl$KVM_CREATE_VM(r9, 0x541b, 0x2004001c) (async) r10 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil) r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r13, 0x4018aee3, &(0x7f0000000000)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0xb}) (async) close(r2) (async) r14 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r6, 0xae01, 0xfffffffffffffffe) (async) r15 = eventfd2(0x0, 0x0) (async) r16 = eventfd2(0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000004000/0x4000)=nil, 0x930, 0x0, 0x11, r16, 0x0) (async) close(r15) (async) r17 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r14, 0xae04) mmap$KVM_VCPU(&(0x7f0000008000/0x3000)=nil, r17, 0x2000004, 0x2011, r15, 0x0) 38.056834656s ago: executing program 37 (id=1576): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f00000004c0)=[@code={0xa, 0x84, {"007008d500000013000008d5000028d5c0e591d200e0b8f2e10180d2a20080d2e30080d2e40180d2020000d4007008d5007008d580c784d20040b0f2a10180d2a20180d2030180d2e40080d2020000d4007008d5c0f397d20080b8f2c10180d2020080d2030080d2440080d2020000d4"}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x87e0, 0x9, 0x4}}, @its_send_cmd={0xaa, 0x28, {0xe, 0x0, 0x4, 0x6, 0xba33, 0x200, 0x2}}, @mrs={0xbe, 0x18, {0x603000000013e536}}, @mrs={0xbe, 0x18}, @svc={0x122, 0x40, {0x200, [0x7, 0x200, 0x1ff, 0xfffffffffffffffe, 0x80ab]}}, @irq_setup={0x46, 0x18, {0x1, 0x37a}}, @mrs={0xbe, 0x18, {0x6030000000138055}}, @uexit={0x0, 0x18, 0x8001}, @smc={0x1e, 0x40, {0x10, [0x9, 0x0, 0x1ff, 0xed3, 0xfffffffffffffffd]}}, @svc={0x122, 0x40, {0x80000000, [0x4, 0x0, 0xce, 0xf, 0xe]}}, @mrs={0xbe, 0x18, {0x603000000013e6d3}}, @its_setup={0x82, 0x28, {0x1, 0x0, 0x2d5}}], 0x254}, 0x0, 0x0) (async) syz_kvm_vgic_v3_setup(r1, 0xffffffffffbffffc, 0x120) (async, rerun: 64) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x1, 0xffffffffffffffff}) (rerun: 64) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, r5, 0x0, 0x4f832, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000240)=@attr_arm64={0x0, 0x4, 0x2, 0x0}) (async) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) 0s ago: executing program 38 (id=1577): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3}) (async) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, r3, 0x2000003, 0x2013, r2, 0xff010000) syz_kvm_setup_cpu$arm64(r1, 0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil, &(0x7f0000000940)=[{0x0, &(0x7f0000000700)=[@svc={0x122, 0x40, {0xc4000001, [0x8001, 0x9, 0x1, 0x96, 0x8]}}], 0x40}], 0x1, 0x0, 0x0, 0x0) (async) r4 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x29) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x800, 0x0) (async) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, 0x0) (async) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r8 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r7, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0xffffffffffffffa7) (async) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r7, 0x0) (async, rerun: 32) r9 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) (rerun: 32) ioctl$KVM_CREATE_VM(r9, 0x541b, 0x2004001c) (async) r10 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil) r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r13, 0x4018aee3, &(0x7f0000000000)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0xb}) (async) close(r2) (async) r14 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r6, 0xae01, 0xfffffffffffffffe) (async) r15 = eventfd2(0x0, 0x0) (async) r16 = eventfd2(0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000004000/0x4000)=nil, 0x930, 0x0, 0x11, r16, 0x0) (async) close(r15) (async) r17 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r14, 0xae04) mmap$KVM_VCPU(&(0x7f0000008000/0x3000)=nil, r17, 0x2000004, 0x2011, r15, 0x0) kernel console output (not intermixed with test programs): [ 376.817451][ T24] audit: type=1400 audit(376.180:74): avc: denied { read write } for pid=3276 comm="scp" name="null" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 376.836209][ T24] audit: type=1400 audit(376.210:75): avc: denied { open } for pid=3276 comm="scp" path="/dev/null" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 390.863129][ T24] audit: type=1400 audit(390.240:76): avc: denied { read } for pid=3225 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 400.015543][ T24] audit: type=1400 audit(399.390:77): avc: denied { write } for pid=3281 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 404.146116][ T24] audit: type=1400 audit(403.520:78): avc: denied { write } for pid=3284 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 406.787916][ T3225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.858558][ T24] audit: type=1400 audit(413.220:79): avc: denied { write } for pid=3288 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 417.656215][ T24] audit: type=1400 audit(417.030:80): avc: denied { write } for pid=3291 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 432.306260][ T24] audit: type=1400 audit(431.670:81): avc: denied { write } for pid=3298 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 436.240703][ T24] audit: type=1400 audit(435.620:82): avc: denied { write } for pid=3301 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 446.307496][ T24] audit: type=1400 audit(445.690:83): avc: denied { write } for pid=3306 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 450.423421][ T24] audit: type=1400 audit(449.800:84): avc: denied { write } for pid=3309 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 453.897116][ T3225] eql: remember to turn off Van-Jacobson compression on your slave devices [ 463.475040][ T24] audit: type=1400 audit(462.850:85): avc: denied { write } for pid=3313 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 467.439076][ T24] audit: type=1400 audit(466.820:86): avc: denied { write } for pid=3316 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 473.036565][ T24] audit: type=1400 audit(472.390:87): avc: denied { write } for pid=3318 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 476.996282][ T24] audit: type=1400 audit(476.340:88): avc: denied { write } for pid=3321 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 484.358789][ T24] audit: type=1400 audit(483.740:89): avc: denied { write } for pid=3324 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 488.081452][ T24] audit: type=1400 audit(487.450:90): avc: denied { write } for pid=3327 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 498.420686][ T24] audit: type=1400 audit(497.800:91): avc: denied { write } for pid=3332 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 502.314811][ T24] audit: type=1400 audit(501.680:92): avc: denied { write } for pid=3335 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 509.612220][ T24] audit: type=1400 audit(508.990:93): avc: denied { write } for pid=3338 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 514.245058][ T24] audit: type=1400 audit(513.600:94): avc: denied { write } for pid=3341 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 530.313055][ T24] audit: type=1400 audit(529.690:95): avc: denied { write } for pid=3347 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 534.314946][ T24] audit: type=1400 audit(533.650:96): avc: denied { write } for pid=3350 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 545.921328][ T24] audit: type=1400 audit(545.300:97): avc: denied { write } for pid=3355 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 549.756205][ T24] audit: type=1400 audit(549.110:98): avc: denied { write } for pid=3358 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 576.460548][ T24] audit: type=1400 audit(575.840:99): avc: denied { write } for pid=3368 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 582.758533][ T24] audit: type=1400 audit(582.140:100): avc: denied { write } for pid=3371 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:31104' (ED25519) to the list of known hosts. [ 590.600778][ T24] audit: type=1400 audit(589.980:101): avc: denied { write } for pid=3375 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 593.459002][ T24] audit: type=1400 audit(592.840:102): avc: denied { name_bind } for pid=3379 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 594.494978][ T24] audit: type=1400 audit(593.870:103): avc: denied { write } for pid=3380 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 596.310247][ T24] audit: type=1400 audit(595.670:104): avc: denied { execute } for pid=3381 comm="sh" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 596.322456][ T24] audit: type=1400 audit(595.700:105): avc: denied { execute_no_trans } for pid=3381 comm="sh" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 630.459043][ T24] audit: type=1400 audit(629.830:106): avc: denied { mounton } for pid=3381 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 630.496586][ T24] audit: type=1400 audit(629.870:107): avc: denied { mount } for pid=3381 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 630.573404][ T3381] cgroup: Unknown subsys name 'net' [ 630.626886][ T24] audit: type=1400 audit(630.000:108): avc: denied { unmount } for pid=3381 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 631.032691][ T3381] cgroup: Unknown subsys name 'cpuset' [ 631.151055][ T3381] cgroup: Unknown subsys name 'rlimit' [ 632.286469][ T24] audit: type=1400 audit(631.660:109): avc: denied { setattr } for pid=3381 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 632.312066][ T24] audit: type=1400 audit(631.690:110): avc: denied { create } for pid=3381 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 632.336173][ T24] audit: type=1400 audit(631.710:111): avc: denied { write } for pid=3381 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 632.359465][ T24] audit: type=1400 audit(631.720:112): avc: denied { module_request } for pid=3381 comm="syz-executor" kmod="net-pf-16-proto-16-family-nl802154" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 632.805741][ T24] audit: type=1400 audit(632.180:113): avc: denied { read } for pid=3381 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 632.851290][ T24] audit: type=1400 audit(632.220:114): avc: denied { mounton } for pid=3381 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 632.880428][ T24] audit: type=1400 audit(632.250:115): avc: denied { mount } for pid=3381 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 634.422609][ T3388] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 634.838833][ T3381] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 689.029612][ T24] kauditd_printk_skb: 4 callbacks suppressed [ 689.029935][ T24] audit: type=1400 audit(688.410:120): avc: denied { execmem } for pid=3389 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 697.789817][ T24] audit: type=1400 audit(697.170:121): avc: denied { read } for pid=3391 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 697.825860][ T24] audit: type=1400 audit(697.200:122): avc: denied { open } for pid=3391 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 697.905717][ T24] audit: type=1400 audit(697.280:123): avc: denied { mounton } for pid=3391 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 699.010611][ T24] audit: type=1400 audit(698.390:124): avc: denied { mount } for pid=3391 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 699.056255][ T24] audit: type=1400 audit(698.430:125): avc: denied { mounton } for pid=3391 comm="syz-executor" path="/syzkaller.dRqR4R/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 699.099758][ T24] audit: type=1400 audit(698.480:126): avc: denied { mount } for pid=3391 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 699.167568][ T24] audit: type=1400 audit(698.550:127): avc: denied { mounton } for pid=3391 comm="syz-executor" path="/syzkaller.dRqR4R/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 699.207777][ T24] audit: type=1400 audit(698.580:128): avc: denied { mounton } for pid=3391 comm="syz-executor" path="/syzkaller.dRqR4R/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=2773 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 699.259308][ T24] audit: type=1400 audit(698.640:129): avc: denied { unmount } for pid=3391 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 699.317722][ T24] audit: type=1400 audit(698.690:130): avc: denied { mounton } for pid=3391 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1543 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 742.156077][ T24] kauditd_printk_skb: 7 callbacks suppressed [ 742.156372][ T24] audit: type=1400 audit(741.530:138): avc: denied { sys_module } for pid=3401 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 768.174980][ T3401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 768.571248][ T3401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 768.632405][ T3403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 768.876684][ T3403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 780.020620][ T3401] hsr_slave_0: entered promiscuous mode [ 780.048258][ T3401] hsr_slave_1: entered promiscuous mode [ 780.837167][ T3403] hsr_slave_0: entered promiscuous mode [ 780.870496][ T3403] hsr_slave_1: entered promiscuous mode [ 780.906734][ T3403] debugfs: 'hsr0' already exists in 'hsr' [ 780.907974][ T3403] Cannot create hsr debugfs directory [ 786.709049][ T3401] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 787.051510][ T3401] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 787.156951][ T3401] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 787.351503][ T3401] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 787.431050][ T3401] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 787.570034][ T3401] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 787.747292][ T3401] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 787.822251][ T3401] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 789.232540][ T3403] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 789.399566][ T3403] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 789.481428][ T3403] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 789.646572][ T3403] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 789.710020][ T3403] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 789.929317][ T3403] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 790.047314][ T3403] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 790.221152][ T3403] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 801.507036][ T3401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 804.436774][ T3403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 856.153284][ T3401] veth0_vlan: entered promiscuous mode [ 856.840380][ T3401] veth1_vlan: entered promiscuous mode [ 858.761301][ T3401] veth0_macvtap: entered promiscuous mode [ 859.113079][ T3401] veth1_macvtap: entered promiscuous mode [ 859.889850][ T3403] veth0_vlan: entered promiscuous mode [ 860.779532][ T3403] veth1_vlan: entered promiscuous mode [ 861.367462][ T42] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.369194][ T42] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.369883][ T42] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.370508][ T42] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.047146][ T3403] veth0_macvtap: entered promiscuous mode [ 864.366913][ T3403] veth1_macvtap: entered promiscuous mode [ 866.199519][ T3401] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 866.336496][ T42] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.337202][ T42] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.337721][ T42] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.338259][ T42] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.956111][ T24] audit: type=1400 audit(877.320:139): avc: denied { mmap_zero } for pid=3553 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 899.275200][ T24] audit: type=1400 audit(898.610:140): avc: denied { write } for pid=3568 comm="syz.0.11" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 899.308947][ T24] audit: type=1400 audit(898.690:141): avc: denied { open } for pid=3568 comm="syz.0.11" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 905.158523][ T24] audit: type=1400 audit(904.520:142): avc: denied { read } for pid=3571 comm="syz.1.13" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 905.581256][ T24] audit: type=1400 audit(904.960:143): avc: denied { ioctl } for pid=3571 comm="syz.1.13" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0x9436 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 918.685133][ T24] audit: type=1400 audit(918.000:144): avc: denied { append } for pid=3581 comm="syz.0.18" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 939.587866][ T24] audit: type=1400 audit(938.890:145): avc: denied { setattr } for pid=3596 comm="syz.1.25" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 969.620998][ T24] audit: type=1400 audit(969.000:146): avc: denied { execute } for pid=3617 comm="syz.1.34" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=4022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1016.834885][ T24] audit: type=1400 audit(1016.210:147): avc: denied { map } for pid=3645 comm="syz.1.48" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1016.939773][ T24] audit: type=1400 audit(1016.300:148): avc: denied { execute } for pid=3645 comm="syz.1.48" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1028.780013][ T24] audit: type=1400 audit(1028.160:149): avc: denied { write } for pid=3651 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1037.038240][ T24] audit: type=1400 audit(1036.400:150): avc: denied { write } for pid=3660 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1628.861668][ T24] audit: type=1400 audit(1628.120:151): avc: denied { write } for pid=4019 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1637.019653][ T24] audit: type=1400 audit(1636.340:152): avc: denied { write } for pid=4029 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2020.738433][ T24] audit: type=1400 audit(2020.100:153): avc: denied { create } for pid=4257 comm="syz.1.302" anonclass=[kvm-gmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2021.036368][ T24] audit: type=1400 audit(2020.410:154): avc: denied { map } for pid=4257 comm="syz.1.302" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=10007 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2021.037178][ T24] audit: type=1400 audit(2020.410:155): avc: denied { read } for pid=4257 comm="syz.1.302" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=10007 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2090.735896][ T24] audit: type=1400 audit(2090.070:156): avc: denied { write } for pid=4298 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2100.035830][ T24] audit: type=1400 audit(2099.340:157): avc: denied { write } for pid=4307 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2262.389358][ T4406] kvm [4405]: Unsupported guest access at: eeef0000 [ 2262.389358][ T4406] { Op0( 2), Op1( 3), CRn(15), CRm( 5), Op2( 5), func_write }, [ 2291.939335][ T24] audit: type=1400 audit(2291.320:158): avc: denied { ioctl } for pid=4421 comm="syz.0.364" path="net:[4026532711]" dev="nsfs" ino=4026532711 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2455.447615][ T24] audit: type=1400 audit(2454.820:159): avc: denied { write } for pid=4512 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2465.555563][ T24] audit: type=1400 audit(2464.910:160): avc: denied { write } for pid=4522 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2633.475333][ T24] audit: type=1400 audit(2632.850:161): avc: denied { ioctl } for pid=4626 comm="syz.1.444" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=14026 ioctlcmd=0xae46 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2753.139385][ T24] audit: type=1400 audit(2752.520:162): avc: denied { write } for pid=4694 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2762.807917][ T24] audit: type=1400 audit(2762.160:163): avc: denied { write } for pid=4700 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2975.388169][ T24] audit: type=1400 audit(2974.750:164): avc: denied { write } for pid=4823 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2983.274742][ T24] audit: type=1400 audit(2982.600:165): avc: denied { write } for pid=4832 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3335.171583][ T5035] kvm [5035]: Failed to find VMA for hva 0x203b0000 [ 3348.798953][ T5042] kvm [5042]: Failed to find VMA for hva 0x20c01000 [ 3388.542311][ T24] audit: type=1400 audit(3387.920:166): avc: denied { execute } for pid=5068 comm="syz.1.605" path=2F3330302F10FBFF67525673312B0104 dev="tmpfs" ino=1524 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 3458.192255][ T24] audit: type=1400 audit(3457.570:167): avc: denied { execute } for pid=5111 comm="syz.1.620" path="/sys/kernel/debug/kcov" dev="debugfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=file permissive=1 [ 3482.394932][ T24] audit: type=1400 audit(3481.670:168): avc: denied { write } for pid=5125 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3491.793076][ T24] audit: type=1400 audit(3491.170:169): avc: denied { write } for pid=5132 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3702.000958][ T5260] kvm [5258]: Unsupported guest access at: eeef0000 [ 3702.000958][ T5260] { Op0( 2), Op1( 0), CRn( 0), CRm( 6), Op2( 2), func_read }, [ 4061.887351][ T24] audit: type=1400 audit(4061.260:170): avc: denied { write } for pid=5470 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4071.007405][ T24] audit: type=1400 audit(4070.320:171): avc: denied { write } for pid=5479 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4224.000039][ T5567] kvm [5567]: Failed to find VMA for hva 0x20d8d000 [ 4603.372763][ T24] audit: type=1400 audit(4602.750:172): avc: denied { write } for pid=5795 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4611.708082][ T24] audit: type=1400 audit(4611.080:173): avc: denied { write } for pid=5804 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4635.795163][ T5821] KVM: debugfs: duplicate directory 5821-5 [ 4857.945018][ T24] audit: type=1400 audit(4857.300:174): avc: denied { write } for pid=5949 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4868.433242][ T24] audit: type=1400 audit(4867.810:175): avc: denied { write } for pid=5955 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5205.092432][ T24] audit: type=1400 audit(5204.470:176): avc: denied { write } for pid=6168 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5214.086141][ T24] audit: type=1400 audit(5213.440:177): avc: denied { write } for pid=6177 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5324.987030][ T6242] kvm [6242]: Failed to find VMA for hva 0x20d8d000 [ 5413.690871][ T6293] kvm [6293]: Failed to find VMA for hva 0x20d8d000 [ 5508.341289][ T6347] kvm [6347]: Failed to find VMA for hva 0x20d8d000 [ 5542.837136][ T6366] kvm [6366]: Failed to find VMA for hva 0x20d8d000 [ 5569.589496][ T6383] kvm [6383]: Failed to find VMA for hva 0x20d8d000 [ 5777.596043][ T24] audit: type=1400 audit(5776.930:178): avc: denied { write } for pid=6492 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5785.891723][ T24] audit: type=1400 audit(5785.270:179): avc: denied { write } for pid=6501 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6000.299147][ T6631] FAULT_INJECTION: forcing a failure. [ 6000.299147][ T6631] name failslab, interval 1, probability 0, space 0, times 1 [ 6000.300532][ T6631] CPU: 0 UID: 0 PID: 6631 Comm: syz.0.1130 Not tainted syzkaller #0 PREEMPT [ 6000.301140][ T6631] Hardware name: linux,dummy-virt (DT) [ 6000.301595][ T6631] Call trace: [ 6000.301987][ T6631] show_stack+0x2c/0x3c (C) [ 6000.304048][ T6631] __dump_stack+0x30/0x40 [ 6000.304491][ T6631] dump_stack_lvl+0xd8/0x12c [ 6000.304898][ T6631] dump_stack+0x1c/0x28 [ 6000.305250][ T6631] should_fail_ex+0x56c/0x6d8 [ 6000.305477][ T6631] should_failslab+0xb8/0xec [ 6000.305800][ T6631] __kmalloc_noprof+0xf0/0x5f4 [ 6000.306082][ T6631] tomoyo_realpath_from_path+0xdc/0x640 [ 6000.306371][ T6631] tomoyo_path_number_perm+0x158/0x358 [ 6000.306712][ T6631] tomoyo_file_ioctl+0x2c/0x3c [ 6000.306977][ T6631] security_file_ioctl+0xe0/0x2cc [ 6000.307243][ T6631] __arm64_sys_ioctl+0xd4/0x248 [ 6000.307478][ T6631] invoke_syscall+0x94/0x1ec [ 6000.307832][ T6631] el0_svc_common+0x120/0x2f4 [ 6000.308156][ T6631] do_el0_svc+0x58/0x74 [ 6000.308469][ T6631] el0_svc+0x64/0x240 [ 6000.308734][ T6631] el0t_64_sync_handler+0x68/0xdc [ 6000.309013][ T6631] el0t_64_sync+0x198/0x19c [ 6000.629166][ T6631] ERROR: Out of memory at tomoyo_realpath_from_path. [ 6013.571574][ T6640] FAULT_INJECTION: forcing a failure. [ 6013.571574][ T6640] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 6013.572025][ T6640] CPU: 0 UID: 0 PID: 6640 Comm: syz.1.1133 Not tainted syzkaller #0 PREEMPT [ 6013.572268][ T6640] Hardware name: linux,dummy-virt (DT) [ 6013.572369][ T6640] Call trace: [ 6013.572444][ T6640] show_stack+0x2c/0x3c (C) [ 6013.572839][ T6640] __dump_stack+0x30/0x40 [ 6013.573150][ T6640] dump_stack_lvl+0xd8/0x12c [ 6013.573460][ T6640] dump_stack+0x1c/0x28 [ 6013.573797][ T6640] should_fail_ex+0x56c/0x6d8 [ 6013.574025][ T6640] should_fail+0x14/0x24 [ 6013.574265][ T6640] should_fail_usercopy+0x20/0x30 [ 6013.574500][ T6640] _inline_copy_from_user+0x44/0x18c [ 6013.574798][ T6640] kstrtouint_from_user+0x70/0xf4 [ 6013.575053][ T6640] proc_fail_nth_write+0x54/0x208 [ 6013.575354][ T6640] vfs_write+0x2c0/0xb7c [ 6013.575582][ T6640] ksys_write+0x108/0x1fc [ 6013.575872][ T6640] __arm64_sys_write+0x9c/0xd0 [ 6013.576125][ T6640] invoke_syscall+0x94/0x1ec [ 6013.576414][ T6640] el0_svc_common+0x120/0x2f4 [ 6013.576711][ T6640] do_el0_svc+0x58/0x74 [ 6013.577000][ T6640] el0_svc+0x64/0x240 [ 6013.577244][ T6640] el0t_64_sync_handler+0x68/0xdc [ 6013.577484][ T6640] el0t_64_sync+0x198/0x19c [ 6055.805543][ T6669] FAULT_INJECTION: forcing a failure. [ 6055.805543][ T6669] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 6055.806003][ T6669] CPU: 0 UID: 0 PID: 6669 Comm: syz.0.1142 Not tainted syzkaller #0 PREEMPT [ 6055.806298][ T6669] Hardware name: linux,dummy-virt (DT) [ 6055.806408][ T6669] Call trace: [ 6055.806489][ T6669] show_stack+0x2c/0x3c (C) [ 6055.806880][ T6669] __dump_stack+0x30/0x40 [ 6055.807199][ T6669] dump_stack_lvl+0xd8/0x12c [ 6055.807501][ T6669] dump_stack+0x1c/0x28 [ 6055.807813][ T6669] should_fail_ex+0x56c/0x6d8 [ 6055.808056][ T6669] should_fail+0x14/0x24 [ 6055.808266][ T6669] should_fail_usercopy+0x20/0x30 [ 6055.808489][ T6669] _inline_copy_from_user+0x44/0x18c [ 6055.808768][ T6669] kstrtouint_from_user+0x70/0xf4 [ 6055.809056][ T6669] proc_fail_nth_write+0x54/0x208 [ 6055.809367][ T6669] vfs_write+0x2c0/0xb7c [ 6055.809594][ T6669] ksys_write+0x108/0x1fc [ 6055.809842][ T6669] __arm64_sys_write+0x9c/0xd0 [ 6055.810091][ T6669] invoke_syscall+0x94/0x1ec [ 6055.810426][ T6669] el0_svc_common+0x120/0x2f4 [ 6055.810734][ T6669] do_el0_svc+0x58/0x74 [ 6055.811030][ T6669] el0_svc+0x64/0x240 [ 6055.811270][ T6669] el0t_64_sync_handler+0x68/0xdc [ 6055.811508][ T6669] el0t_64_sync+0x198/0x19c [ 6201.170159][ T24] audit: type=1400 audit(6200.550:180): avc: denied { write } for pid=6747 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6209.183257][ T24] audit: type=1400 audit(6208.500:181): avc: denied { write } for pid=6755 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6346.281162][ T6829] kvm [6829]: Failed to find VMA for hva 0x20c01000 [ 6442.739196][ T6879] FAULT_INJECTION: forcing a failure. [ 6442.739196][ T6879] name failslab, interval 1, probability 0, space 0, times 0 [ 6442.739605][ T6879] CPU: 0 UID: 0 PID: 6879 Comm: syz.0.1212 Not tainted syzkaller #0 PREEMPT [ 6442.739886][ T6879] Hardware name: linux,dummy-virt (DT) [ 6442.740000][ T6879] Call trace: [ 6442.740079][ T6879] show_stack+0x2c/0x3c (C) [ 6442.740427][ T6879] __dump_stack+0x30/0x40 [ 6442.740739][ T6879] dump_stack_lvl+0xd8/0x12c [ 6442.741098][ T6879] dump_stack+0x1c/0x28 [ 6442.741390][ T6879] should_fail_ex+0x56c/0x6d8 [ 6442.741599][ T6879] should_failslab+0xb8/0xec [ 6442.741892][ T6879] __kmalloc_noprof+0xf0/0x5f4 [ 6442.742142][ T6879] tomoyo_realpath_from_path+0xdc/0x640 [ 6442.742411][ T6879] tomoyo_path_number_perm+0x158/0x358 [ 6442.742736][ T6879] tomoyo_file_ioctl+0x2c/0x3c [ 6442.742991][ T6879] security_file_ioctl+0xe0/0x2cc [ 6442.743243][ T6879] __arm64_sys_ioctl+0xd4/0x248 [ 6442.743482][ T6879] invoke_syscall+0x94/0x1ec [ 6442.743830][ T6879] el0_svc_common+0x120/0x2f4 [ 6442.744135][ T6879] do_el0_svc+0x58/0x74 [ 6442.744428][ T6879] el0_svc+0x64/0x240 [ 6442.744679][ T6879] el0t_64_sync_handler+0x68/0xdc [ 6442.744952][ T6879] el0t_64_sync+0x198/0x19c [ 6442.925772][ T6879] ERROR: Out of memory at tomoyo_realpath_from_path. [ 6523.486485][ T24] audit: type=1400 audit(6522.850:182): avc: denied { write } for pid=6919 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6531.216316][ T24] audit: type=1400 audit(6530.590:183): avc: denied { write } for pid=6927 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6656.033210][ T6987] FAULT_INJECTION: forcing a failure. [ 6656.033210][ T6987] name failslab, interval 1, probability 0, space 0, times 0 [ 6656.112330][ T6987] CPU: 0 UID: 0 PID: 6987 Comm: syz.1.1251 Not tainted syzkaller #0 PREEMPT [ 6656.112691][ T6987] Hardware name: linux,dummy-virt (DT) [ 6656.112834][ T6987] Call trace: [ 6656.112920][ T6987] show_stack+0x2c/0x3c (C) [ 6656.113279][ T6987] __dump_stack+0x30/0x40 [ 6656.113643][ T6987] dump_stack_lvl+0xd8/0x12c [ 6656.113997][ T6987] dump_stack+0x1c/0x28 [ 6656.114338][ T6987] should_fail_ex+0x56c/0x6d8 [ 6656.114566][ T6987] should_failslab+0xb8/0xec [ 6656.114887][ T6987] kmem_cache_alloc_lru_noprof+0x98/0x524 [ 6656.115149][ T6987] debugfs_alloc_inode+0x2c/0x3c [ 6656.115376][ T6987] alloc_inode+0x80/0x23c [ 6656.115654][ T6987] new_inode+0x34/0x1c4 [ 6656.115969][ T6987] debugfs_create_dir+0x74/0x44c [ 6656.116188][ T6987] kvm_create_vm_debugfs+0x150/0x7ac [ 6656.116449][ T6987] kvm_dev_ioctl+0x960/0x13c0 [ 6656.116695][ T6987] __arm64_sys_ioctl+0x190/0x248 [ 6656.116953][ T6987] invoke_syscall+0x94/0x1ec [ 6656.117248][ T6987] el0_svc_common+0x120/0x2f4 [ 6656.117526][ T6987] do_el0_svc+0x58/0x74 [ 6656.117824][ T6987] el0_svc+0x64/0x240 [ 6656.118069][ T6987] el0t_64_sync_handler+0x68/0xdc [ 6656.118346][ T6987] el0t_64_sync+0x198/0x19c [ 6656.244842][ T6987] debugfs: out of free dentries, can not create directory '6987-5' [ 6684.491049][ T6996] kvm [6996]: Failed to find VMA for hva 0x20d8d000 [ 6824.890043][ T7081] FAULT_INJECTION: forcing a failure. [ 6824.890043][ T7081] name failslab, interval 1, probability 0, space 0, times 0 [ 6824.890503][ T7081] CPU: 0 UID: 0 PID: 7081 Comm: syz.0.1280 Not tainted syzkaller #0 PREEMPT [ 6824.890766][ T7081] Hardware name: linux,dummy-virt (DT) [ 6824.890888][ T7081] Call trace: [ 6824.890967][ T7081] show_stack+0x2c/0x3c (C) [ 6824.891311][ T7081] __dump_stack+0x30/0x40 [ 6824.891608][ T7081] dump_stack_lvl+0xd8/0x12c [ 6824.891926][ T7081] dump_stack+0x1c/0x28 [ 6824.892215][ T7081] should_fail_ex+0x56c/0x6d8 [ 6824.892429][ T7081] should_failslab+0xb8/0xec [ 6824.892702][ T7081] __kmalloc_cache_noprof+0x94/0x540 [ 6824.892999][ T7081] kvm_create_vm_debugfs+0x258/0x7ac [ 6824.893274][ T7081] kvm_dev_ioctl+0x960/0x13c0 [ 6824.893552][ T7081] __arm64_sys_ioctl+0x190/0x248 [ 6824.893819][ T7081] invoke_syscall+0x94/0x1ec [ 6824.894122][ T7081] el0_svc_common+0x120/0x2f4 [ 6824.894446][ T7081] do_el0_svc+0x58/0x74 [ 6824.894752][ T7081] el0_svc+0x64/0x240 [ 6824.895024][ T7081] el0t_64_sync_handler+0x68/0xdc [ 6824.895273][ T7081] el0t_64_sync+0x198/0x19c [ 6952.440298][ T7147] FAULT_INJECTION: forcing a failure. [ 6952.440298][ T7147] name failslab, interval 1, probability 0, space 0, times 0 [ 6952.440747][ T7147] CPU: 0 UID: 0 PID: 7147 Comm: syz.0.1304 Not tainted syzkaller #0 PREEMPT [ 6952.441019][ T7147] Hardware name: linux,dummy-virt (DT) [ 6952.441130][ T7147] Call trace: [ 6952.441207][ T7147] show_stack+0x2c/0x3c (C) [ 6952.441553][ T7147] __dump_stack+0x30/0x40 [ 6952.441863][ T7147] dump_stack_lvl+0xd8/0x12c [ 6952.442179][ T7147] dump_stack+0x1c/0x28 [ 6952.442502][ T7147] should_fail_ex+0x56c/0x6d8 [ 6952.442734][ T7147] should_failslab+0xb8/0xec [ 6952.443030][ T7147] __kmalloc_cache_noprof+0x94/0x540 [ 6952.443291][ T7147] kvm_create_vm_debugfs+0x258/0x7ac [ 6952.443570][ T7147] kvm_dev_ioctl+0x960/0x13c0 [ 6952.443833][ T7147] __arm64_sys_ioctl+0x190/0x248 [ 6952.444091][ T7147] invoke_syscall+0x94/0x1ec [ 6952.444401][ T7147] el0_svc_common+0x120/0x2f4 [ 6952.444696][ T7147] do_el0_svc+0x58/0x74 [ 6952.445004][ T7147] el0_svc+0x64/0x240 [ 6952.445265][ T7147] el0t_64_sync_handler+0x68/0xdc [ 6952.445513][ T7147] el0t_64_sync+0x198/0x19c [ 6983.546239][ T7165] FAULT_INJECTION: forcing a failure. [ 6983.546239][ T7165] name failslab, interval 1, probability 0, space 0, times 0 [ 6983.546708][ T7165] CPU: 0 UID: 0 PID: 7165 Comm: syz.1.1310 Not tainted syzkaller #0 PREEMPT [ 6983.546976][ T7165] Hardware name: linux,dummy-virt (DT) [ 6983.547077][ T7165] Call trace: [ 6983.547151][ T7165] show_stack+0x2c/0x3c (C) [ 6983.547510][ T7165] __dump_stack+0x30/0x40 [ 6983.547826][ T7165] dump_stack_lvl+0xd8/0x12c [ 6983.548119][ T7165] dump_stack+0x1c/0x28 [ 6983.548404][ T7165] should_fail_ex+0x56c/0x6d8 [ 6983.548637][ T7165] should_failslab+0xb8/0xec [ 6983.548927][ T7165] kmem_cache_alloc_lru_noprof+0x98/0x524 [ 6983.549179][ T7165] __d_alloc+0x54/0x854 [ 6983.549425][ T7165] d_alloc+0x60/0x24c [ 6983.549683][ T7165] lookup_one_qstr_excl+0xf0/0x38c [ 6983.549913][ T7165] start_dirop+0x70/0xb4 [ 6983.550176][ T7165] simple_start_creating+0x80/0xac [ 6983.550527][ T7165] debugfs_start_creating+0xe4/0x1d4 [ 6983.550773][ T7165] __debugfs_create_file+0x84/0x4e0 [ 6983.550989][ T7165] debugfs_create_file_full+0x58/0x70 [ 6983.551203][ T7165] kvm_create_vm_debugfs+0x388/0x7ac [ 6983.551471][ T7165] kvm_dev_ioctl+0x960/0x13c0 [ 6983.551795][ T7165] __arm64_sys_ioctl+0x190/0x248 [ 6983.552040][ T7165] invoke_syscall+0x94/0x1ec [ 6983.552345][ T7165] el0_svc_common+0x120/0x2f4 [ 6983.552644][ T7165] do_el0_svc+0x58/0x74 [ 6983.552944][ T7165] el0_svc+0x64/0x240 [ 6983.553202][ T7165] el0t_64_sync_handler+0x68/0xdc [ 6983.553459][ T7165] el0t_64_sync+0x198/0x19c [ 7093.427420][ T7228] FAULT_INJECTION: forcing a failure. [ 7093.427420][ T7228] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 7093.427862][ T7228] CPU: 0 UID: 0 PID: 7228 Comm: syz.1.1332 Not tainted syzkaller #0 PREEMPT [ 7093.428121][ T7228] Hardware name: linux,dummy-virt (DT) [ 7093.428225][ T7228] Call trace: [ 7093.428302][ T7228] show_stack+0x2c/0x3c (C) [ 7093.428644][ T7228] __dump_stack+0x30/0x40 [ 7093.428999][ T7228] dump_stack_lvl+0xd8/0x12c [ 7093.429299][ T7228] dump_stack+0x1c/0x28 [ 7093.429589][ T7228] should_fail_ex+0x56c/0x6d8 [ 7093.429843][ T7228] should_fail+0x14/0x24 [ 7093.430054][ T7228] should_fail_usercopy+0x20/0x30 [ 7093.430307][ T7228] simple_read_from_buffer+0xd0/0x294 [ 7093.430602][ T7228] proc_fail_nth_read+0x184/0x214 [ 7093.430929][ T7228] vfs_read+0x220/0x9d8 [ 7093.431161][ T7228] ksys_read+0x108/0x1fc [ 7093.431386][ T7228] __arm64_sys_read+0x9c/0xd0 [ 7093.431612][ T7228] invoke_syscall+0x94/0x1ec [ 7093.431926][ T7228] el0_svc_common+0x120/0x2f4 [ 7093.432208][ T7228] do_el0_svc+0x58/0x74 [ 7093.432479][ T7228] el0_svc+0x64/0x240 [ 7093.432714][ T7228] el0t_64_sync_handler+0x68/0xdc [ 7093.432984][ T7228] el0t_64_sync+0x198/0x19c [ 7098.759906][ T24] audit: type=1400 audit(7098.140:184): avc: denied { write } for pid=7229 comm="syz.0.1333" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=43697 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 7114.159549][ T24] audit: type=1400 audit(7113.500:185): avc: denied { write } for pid=7239 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7122.620522][ T24] audit: type=1400 audit(7121.960:186): avc: denied { write } for pid=7249 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7289.554860][ T7338] FAULT_INJECTION: forcing a failure. [ 7289.554860][ T7338] name failslab, interval 1, probability 0, space 0, times 0 [ 7289.555296][ T7338] CPU: 0 UID: 0 PID: 7338 Comm: syz.0.1366 Not tainted syzkaller #0 PREEMPT [ 7289.555539][ T7338] Hardware name: linux,dummy-virt (DT) [ 7289.555644][ T7338] Call trace: [ 7289.555736][ T7338] show_stack+0x2c/0x3c (C) [ 7289.556107][ T7338] __dump_stack+0x30/0x40 [ 7289.556405][ T7338] dump_stack_lvl+0xd8/0x12c [ 7289.556706][ T7338] dump_stack+0x1c/0x28 [ 7289.557034][ T7338] should_fail_ex+0x56c/0x6d8 [ 7289.557250][ T7338] should_failslab+0xb8/0xec [ 7289.557528][ T7338] __kmalloc_noprof+0xf0/0x5f4 [ 7289.557807][ T7338] tomoyo_realpath_from_path+0xdc/0x640 [ 7289.558050][ T7338] tomoyo_path_number_perm+0x158/0x358 [ 7289.558400][ T7338] tomoyo_file_ioctl+0x2c/0x3c [ 7289.558635][ T7338] security_file_ioctl+0xe0/0x2cc [ 7289.558937][ T7338] __arm64_sys_ioctl+0xd4/0x248 [ 7289.559168][ T7338] invoke_syscall+0x94/0x1ec [ 7289.559452][ T7338] el0_svc_common+0x120/0x2f4 [ 7289.559750][ T7338] do_el0_svc+0x58/0x74 [ 7289.560049][ T7338] el0_svc+0x64/0x240 [ 7289.560292][ T7338] el0t_64_sync_handler+0x68/0xdc [ 7289.560534][ T7338] el0t_64_sync+0x198/0x19c [ 7289.666093][ T7338] ERROR: Out of memory at tomoyo_realpath_from_path. [ 7323.609593][ T7354] FAULT_INJECTION: forcing a failure. [ 7323.609593][ T7354] name failslab, interval 1, probability 0, space 0, times 0 [ 7323.610036][ T7354] CPU: 0 UID: 0 PID: 7354 Comm: syz.0.1372 Not tainted syzkaller #0 PREEMPT [ 7323.610319][ T7354] Hardware name: linux,dummy-virt (DT) [ 7323.610430][ T7354] Call trace: [ 7323.610506][ T7354] show_stack+0x2c/0x3c (C) [ 7323.610882][ T7354] __dump_stack+0x30/0x40 [ 7323.611198][ T7354] dump_stack_lvl+0xd8/0x12c [ 7323.611495][ T7354] dump_stack+0x1c/0x28 [ 7323.611806][ T7354] should_fail_ex+0x56c/0x6d8 [ 7323.612051][ T7354] should_failslab+0xb8/0xec [ 7323.612339][ T7354] __kmalloc_noprof+0xf0/0x5f4 [ 7323.612601][ T7354] tomoyo_encode+0x27c/0x4ec [ 7323.612859][ T7354] tomoyo_realpath_from_path+0x5d4/0x640 [ 7323.613103][ T7354] tomoyo_path_number_perm+0x158/0x358 [ 7323.613423][ T7354] tomoyo_file_ioctl+0x2c/0x3c [ 7323.613665][ T7354] security_file_ioctl+0xe0/0x2cc [ 7323.613963][ T7354] __arm64_sys_ioctl+0xd4/0x248 [ 7323.614226][ T7354] invoke_syscall+0x94/0x1ec [ 7323.614535][ T7354] el0_svc_common+0x120/0x2f4 [ 7323.614858][ T7354] do_el0_svc+0x58/0x74 [ 7323.615146][ T7354] el0_svc+0x64/0x240 [ 7323.615404][ T7354] el0t_64_sync_handler+0x68/0xdc [ 7323.615667][ T7354] el0t_64_sync+0x198/0x19c [ 7323.803233][ T7354] ERROR: Out of memory at tomoyo_realpath_from_path. [ 7345.350808][ T24] audit: type=1400 audit(7344.730:187): avc: denied { write } for pid=7365 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7353.279858][ T24] audit: type=1400 audit(7352.660:188): avc: denied { write } for pid=7374 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7358.370791][ T7377] FAULT_INJECTION: forcing a failure. [ 7358.370791][ T7377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 7358.371213][ T7377] CPU: 0 UID: 0 PID: 7377 Comm: syz.1.1378 Not tainted syzkaller #0 PREEMPT [ 7358.371448][ T7377] Hardware name: linux,dummy-virt (DT) [ 7358.371549][ T7377] Call trace: [ 7358.371624][ T7377] show_stack+0x2c/0x3c (C) [ 7358.372010][ T7377] __dump_stack+0x30/0x40 [ 7358.372316][ T7377] dump_stack_lvl+0xd8/0x12c [ 7358.372616][ T7377] dump_stack+0x1c/0x28 [ 7358.372942][ T7377] should_fail_ex+0x56c/0x6d8 [ 7358.373164][ T7377] should_fail+0x14/0x24 [ 7358.373368][ T7377] should_fail_usercopy+0x20/0x30 [ 7358.373607][ T7377] simple_read_from_buffer+0xd0/0x294 [ 7358.373926][ T7377] proc_fail_nth_read+0x184/0x214 [ 7358.374266][ T7377] vfs_read+0x220/0x9d8 [ 7358.374515][ T7377] ksys_read+0x108/0x1fc [ 7358.374758][ T7377] __arm64_sys_read+0x9c/0xd0 [ 7358.375010][ T7377] invoke_syscall+0x94/0x1ec [ 7358.375307][ T7377] el0_svc_common+0x120/0x2f4 [ 7358.375587][ T7377] do_el0_svc+0x58/0x74 [ 7358.375888][ T7377] el0_svc+0x64/0x240 [ 7358.376147][ T7377] el0t_64_sync_handler+0x68/0xdc [ 7358.376390][ T7377] el0t_64_sync+0x198/0x19c [ 7509.907873][ T7476] FAULT_INJECTION: forcing a failure. [ 7509.907873][ T7476] name failslab, interval 1, probability 0, space 0, times 0 [ 7509.908315][ T7476] CPU: 0 UID: 0 PID: 7476 Comm: syz.0.1409 Not tainted syzkaller #0 PREEMPT [ 7509.908591][ T7476] Hardware name: linux,dummy-virt (DT) [ 7509.908699][ T7476] Call trace: [ 7509.908795][ T7476] show_stack+0x2c/0x3c (C) [ 7509.909204][ T7476] __dump_stack+0x30/0x40 [ 7509.909571][ T7476] dump_stack_lvl+0xd8/0x12c [ 7509.909944][ T7476] dump_stack+0x1c/0x28 [ 7509.910312][ T7476] should_fail_ex+0x56c/0x6d8 [ 7509.910578][ T7476] should_failslab+0xb8/0xec [ 7509.910890][ T7476] kmem_cache_alloc_lru_noprof+0x98/0x524 [ 7509.911169][ T7476] __d_alloc+0x54/0x854 [ 7509.911446][ T7476] d_alloc+0x60/0x24c [ 7509.911704][ T7476] lookup_one_qstr_excl+0xf0/0x38c [ 7509.911938][ T7476] start_dirop+0x70/0xb4 [ 7509.912206][ T7476] simple_start_creating+0x80/0xac [ 7509.912532][ T7476] debugfs_start_creating+0xe4/0x1d4 [ 7509.912782][ T7476] __debugfs_create_file+0x84/0x4e0 [ 7509.913005][ T7476] debugfs_create_file_full+0x58/0x70 [ 7509.913228][ T7476] kvm_create_vm_debugfs+0x59c/0x7ac [ 7509.913536][ T7476] kvm_dev_ioctl+0x960/0x13c0 [ 7509.913836][ T7476] __arm64_sys_ioctl+0x190/0x248 [ 7509.914081][ T7476] invoke_syscall+0x94/0x1ec [ 7509.914478][ T7476] el0_svc_common+0x120/0x2f4 [ 7509.914828][ T7476] do_el0_svc+0x58/0x74 [ 7509.915142][ T7476] el0_svc+0x64/0x240 [ 7509.915413][ T7476] el0t_64_sync_handler+0x68/0xdc [ 7509.915670][ T7476] el0t_64_sync+0x198/0x19c [ 7708.252292][ T7192] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 7709.931959][ T7192] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 7711.587826][ T7192] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 7712.847996][ T7192] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 7728.878629][ T7192] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 7729.291418][ T7192] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 7729.488243][ T7192] bond0 (unregistering): Released all slaves [ 7731.586255][ T7192] hsr_slave_0: left promiscuous mode [ 7731.751047][ T7192] hsr_slave_1: left promiscuous mode [ 7732.316624][ T7192] veth1_macvtap: left promiscuous mode [ 7732.317913][ T7192] veth0_macvtap: left promiscuous mode [ 7732.340389][ T7192] veth1_vlan: left promiscuous mode [ 7732.342334][ T7192] veth0_vlan: left promiscuous mode [ 7772.701250][ T24] audit: type=1400 audit(7772.080:189): avc: denied { write } for pid=7631 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7778.844862][ T24] audit: type=1400 audit(7778.210:190): avc: denied { write } for pid=7640 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7782.938243][ T3225] 8021q: adding VLAN 0 to HW filter on device eth1 [ 7794.917976][ T24] audit: type=1400 audit(7794.220:191): avc: denied { write } for pid=7653 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7802.030782][ T24] audit: type=1400 audit(7801.360:192): avc: denied { write } for pid=7662 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7806.199000][ T7593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 7806.579888][ T7593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 7824.647358][ T24] audit: type=1400 audit(7823.980:193): avc: denied { write } for pid=7675 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7831.525236][ T24] audit: type=1400 audit(7830.890:194): avc: denied { write } for pid=7689 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7835.771840][ T3225] 8021q: adding VLAN 0 to HW filter on device eth2 [ 7838.659120][ T7593] hsr_slave_0: entered promiscuous mode [ 7838.735678][ T7593] hsr_slave_1: entered promiscuous mode [ 7852.909170][ T24] audit: type=1400 audit(7852.290:195): avc: denied { write } for pid=7702 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7860.867916][ T24] audit: type=1400 audit(7860.230:196): avc: denied { write } for pid=7710 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7861.393062][ T7593] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 7861.799559][ T7593] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 7861.862445][ T7593] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 7862.260930][ T7593] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 7862.406248][ T7593] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 7862.769030][ T7593] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 7862.982424][ T7593] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 7863.438214][ T7593] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 7877.219210][ T24] audit: type=1400 audit(7876.560:197): avc: denied { write } for pid=7722 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7886.085203][ T24] audit: type=1400 audit(7885.440:198): avc: denied { write } for pid=7731 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7892.026932][ T7593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 7897.988902][ T24] audit: type=1400 audit(7897.370:199): avc: denied { write } for pid=7741 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7904.790614][ T24] audit: type=1400 audit(7904.170:200): avc: denied { write } for pid=7748 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7916.475396][ T24] audit: type=1400 audit(7915.750:201): avc: denied { write } for pid=7758 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7924.901229][ T24] audit: type=1400 audit(7924.220:202): avc: denied { write } for pid=7768 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7937.807443][ T24] audit: type=1400 audit(7937.190:203): avc: denied { write } for pid=7773 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7946.586685][ T24] audit: type=1400 audit(7945.930:204): avc: denied { write } for pid=7782 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 7978.193266][ T7593] veth0_vlan: entered promiscuous mode [ 7978.816506][ T7593] veth1_vlan: entered promiscuous mode [ 7981.188162][ T7593] veth0_macvtap: entered promiscuous mode [ 7981.641810][ T7593] veth1_macvtap: entered promiscuous mode [ 7984.997033][ T3540] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 7984.997815][ T3540] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 7984.998451][ T3540] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 7984.999069][ T3540] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 8018.660625][ T3540] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 8019.968352][ T3540] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 8021.827115][ T3540] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 8023.449567][ T3540] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 8038.872258][ T3540] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 8039.308622][ T3540] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 8039.502870][ T3540] bond0 (unregistering): Released all slaves [ 8041.498774][ T3540] hsr_slave_0: left promiscuous mode [ 8041.625066][ T3540] hsr_slave_1: left promiscuous mode [ 8042.146588][ T3540] veth1_macvtap: left promiscuous mode [ 8042.147388][ T3540] veth0_macvtap: left promiscuous mode [ 8042.149213][ T3540] veth1_vlan: left promiscuous mode [ 8042.150484][ T3540] veth0_vlan: left promiscuous mode [ 8084.142084][ T24] audit: type=1400 audit(8083.480:205): avc: denied { write } for pid=7866 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 8090.167854][ T24] audit: type=1400 audit(8089.510:206): avc: denied { write } for pid=7871 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 8094.700886][ T3225] 8021q: adding VLAN 0 to HW filter on device eth1 [ 8117.358945][ T24] audit: type=1400 audit(8116.730:207): avc: denied { write } for pid=7895 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 8124.171566][ T7827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 8124.501845][ T7827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 8126.035577][ T24] audit: type=1400 audit(8125.390:208): avc: denied { write } for pid=7905 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 8130.112619][ T3225] 8021q: adding VLAN 0 to HW filter on device eth2 [ 8142.159709][ T24] audit: type=1400 audit(8141.540:209): avc: denied { write } for pid=7919 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 8147.206662][ T24] audit: type=1400 audit(8146.580:210): avc: denied { write } for pid=7925 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 8148.707321][ T7827] hsr_slave_0: entered promiscuous mode [ 8148.759872][ T7827] hsr_slave_1: entered promiscuous mode [ 8148.836384][ T7827] debugfs: 'hsr0' already exists in 'hsr' [ 8148.836813][ T7827] Cannot create hsr debugfs directory [ 8150.710758][ T3225] 8021q: adding VLAN 0 to HW filter on device eth3 [ 8163.827817][ T24] audit: type=1400 audit(8163.180:211): avc: denied { write } for pid=7931 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 8171.670710][ T24] audit: type=1400 audit(8171.020:212): avc: denied { write } for pid=7937 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 8171.748945][ T7827] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 8172.667005][ T7827] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 8172.763061][ T7827] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 8173.529747][ T7827] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 8173.729444][ T7827] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 8174.316980][ T7827] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 8174.393070][ T7827] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 8175.089158][ T7827] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 8184.072725][ T24] audit: type=1400 audit(8183.450:213): avc: denied { write } for pid=7947 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 8191.508094][ T24] audit: type=1400 audit(8190.870:214): avc: denied { write } for pid=7956 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 8202.139935][ T7827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 8202.870104][ T24] audit: type=1400 audit(8202.230:215): avc: denied { write } for pid=7963 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 8210.255583][ T24] audit: type=1400 audit(8209.620:216): avc: denied { write } for pid=7972 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 8220.004841][ T24] audit: type=1400 audit(8219.380:217): avc: denied { write } for pid=7978 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 8229.340618][ T24] audit: type=1400 audit(8228.720:218): avc: denied { write } for pid=7985 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 8242.866517][ T24] audit: type=1400 audit(8242.230:219): avc: denied { write } for pid=7992 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 8250.446187][ T24] audit: type=1400 audit(8249.780:220): avc: denied { write } for pid=8002 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 8260.495625][ T24] audit: type=1400 audit(8259.870:221): avc: denied { write } for pid=8010 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 8261.311635][ T7953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 8261.717752][ T7953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 8267.516251][ T24] audit: type=1400 audit(8266.890:222): avc: denied { write } for pid=8018 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 8289.202283][ T7953] hsr_slave_0: entered promiscuous mode [ 8289.313433][ T7953] hsr_slave_1: entered promiscuous mode [ 8289.376033][ T7953] debugfs: 'hsr0' already exists in 'hsr' [ 8289.376420][ T7953] Cannot create hsr debugfs directory [ 8303.172570][ T7827] veth0_vlan: entered promiscuous mode [ 8304.528443][ T7827] veth1_vlan: entered promiscuous mode [ 8307.555357][ T7953] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 8307.797750][ T7953] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 8308.098345][ T7953] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 8308.407870][ T7953] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 8308.546515][ T7953] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 8308.806923][ T7953] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 8309.149319][ T7953] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 8309.290370][ T7953] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 8309.966590][ T7827] veth0_macvtap: entered promiscuous mode [ 8311.366699][ T7827] veth1_macvtap: entered promiscuous mode [ 8315.199852][ T5371] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 8315.219943][ T7669] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 8315.228153][ T7968] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 8315.228820][ T7968] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 8319.126113][ T24] audit: type=1400 audit(8318.490:223): avc: denied { write } for pid=8048 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 8329.012794][ T24] audit: type=1400 audit(8328.350:224): avc: denied { write } for pid=8057 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 8340.157611][ T7953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 8370.830660][ T6678] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 8372.292783][ T6678] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 8373.842468][ T6678] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 8375.081461][ T6678] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 8392.692203][ T6678] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 8393.158113][ T6678] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 8393.478866][ T6678] bond0 (unregistering): Released all slaves [ 8395.626523][ T6678] hsr_slave_0: left promiscuous mode [ 8395.759817][ T6678] hsr_slave_1: left promiscuous mode [ 8396.328559][ T6678] veth1_macvtap: left promiscuous mode [ 8396.329378][ T6678] veth0_macvtap: left promiscuous mode [ 8396.331526][ T6678] veth1_vlan: left promiscuous mode [ 8396.332818][ T6678] veth0_vlan: left promiscuous mode [ 8444.124924][ T24] audit: type=1400 audit(8443.490:225): avc: denied { write } for pid=8109 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 8452.098336][ T24] audit: type=1400 audit(8451.430:226): avc: denied { write } for pid=8121 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 8456.639170][ T3225] 8021q: adding VLAN 0 to HW filter on device eth1 [ 8478.402487][ T24] audit: type=1400 audit(8477.770:227): avc: denied { write } for pid=8140 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 8484.872401][ T7953] veth0_vlan: entered promiscuous mode [ 8486.160097][ T7953] veth1_vlan: entered promiscuous mode [ 8488.515968][ T24] audit: type=1400 audit(8487.880:228): avc: denied { write } for pid=8149 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 8489.856420][ T7953] veth0_macvtap: entered promiscuous mode [ 8490.628592][ T7953] veth1_macvtap: entered promiscuous mode [ 8494.355931][ T7968] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 8494.369134][ T7192] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 8494.496239][ T6678] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 8494.498552][ T6678] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 8496.009344][ T3225] 8021q: adding VLAN 0 to HW filter on device eth2 [ 8514.481001][ T24] audit: type=1400 audit(8513.830:229): avc: denied { write } for pid=8163 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 8523.821150][ T24] audit: type=1400 audit(8523.200:230): avc: denied { write } for pid=8172 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 8530.762567][ T3225] 8021q: adding VLAN 0 to HW filter on device eth3 [ 8554.158182][ T24] audit: type=1400 audit(8553.510:231): avc: denied { write } for pid=8188 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 8562.928305][ T24] audit: type=1400 audit(8562.260:232): avc: denied { write } for pid=8197 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 8569.451328][ T3225] 8021q: adding VLAN 0 to HW filter on device eth4 [ 8591.961845][ T24] audit: type=1400 audit(8591.340:233): avc: denied { write } for pid=8210 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 8602.758811][ T24] audit: type=1400 audit(8602.030:234): avc: denied { write } for pid=8219 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 8609.032464][ T8225] FAULT_INJECTION: forcing a failure. [ 8609.032464][ T8225] name failslab, interval 1, probability 0, space 0, times 0 [ 8609.032950][ T8225] CPU: 0 UID: 0 PID: 8225 Comm: syz.2.1512 Not tainted syzkaller #0 PREEMPT [ 8609.033203][ T8225] Hardware name: linux,dummy-virt (DT) [ 8609.033310][ T8225] Call trace: [ 8609.033392][ T8225] show_stack+0x2c/0x3c (C) [ 8609.033786][ T8225] __dump_stack+0x30/0x40 [ 8609.034117][ T8225] dump_stack_lvl+0xd8/0x12c [ 8609.034459][ T8225] dump_stack+0x1c/0x28 [ 8609.034782][ T8225] should_fail_ex+0x56c/0x6d8 [ 8609.035030][ T8225] should_failslab+0xb8/0xec [ 8609.035304][ T8225] kmem_cache_alloc_noprof+0x94/0x520 [ 8609.035553][ T8225] security_inode_alloc+0x3c/0x330 [ 8609.035814][ T8225] inode_init_always_gfp+0xae4/0xf54 [ 8609.036149][ T8225] alloc_inode+0x98/0x23c [ 8609.036453][ T8225] new_inode+0x34/0x1c4 [ 8609.036789][ T8225] __debugfs_create_file+0xc4/0x4e0 [ 8609.037026][ T8225] debugfs_create_file_full+0x58/0x70 [ 8609.037249][ T8225] kvm_create_vm_debugfs+0x59c/0x7ac [ 8609.037515][ T8225] kvm_dev_ioctl+0x960/0x13c0 [ 8609.037783][ T8225] __arm64_sys_ioctl+0x190/0x248 [ 8609.038039][ T8225] invoke_syscall+0x94/0x1ec [ 8609.038364][ T8225] el0_svc_common+0x120/0x2f4 [ 8609.038654][ T8225] do_el0_svc+0x58/0x74 [ 8609.038988][ T8225] el0_svc+0x64/0x240 [ 8609.039254][ T8225] el0t_64_sync_handler+0x68/0xdc [ 8609.039515][ T8225] el0t_64_sync+0x198/0x19c [ 8609.529390][ T8225] debugfs: out of free dentries, can not create file 'halt_poll_fail_ns' [ 8635.948104][ T24] audit: type=1400 audit(8635.320:235): avc: denied { write } for pid=8239 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 8645.406321][ T24] audit: type=1400 audit(8644.670:236): avc: denied { write } for pid=8249 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 8666.965318][ T24] audit: type=1400 audit(8666.340:237): avc: denied { write } for pid=8261 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 8677.374959][ T24] audit: type=1400 audit(8676.720:238): avc: denied { write } for pid=8270 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 8692.831701][ T24] audit: type=1400 audit(8692.180:239): avc: denied { write } for pid=8277 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 8701.825594][ T24] audit: type=1400 audit(8701.150:240): avc: denied { write } for pid=8288 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 8751.270520][ T24] audit: type=1400 audit(8750.650:241): avc: denied { write } for pid=8313 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 8759.476612][ T24] audit: type=1400 audit(8758.850:242): avc: denied { write } for pid=8322 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 8880.222991][ T8384] kvm [8382]: Unsupported guest access at: eeef0000 [ 8880.222991][ T8384] { Op0( 2), Op1( 0), CRn( 0), CRm( 6), Op2( 2), func_read }, [ 9095.769493][ T24] audit: type=1400 audit(9095.150:243): avc: denied { write } for pid=8489 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 9102.505614][ T24] audit: type=1400 audit(9101.880:244): avc: denied { write } for pid=8498 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 9116.122124][ T8464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 9116.975890][ T8464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 9131.662526][ T8471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 9132.999958][ T8471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 9148.892634][ T8464] hsr_slave_0: entered promiscuous mode [ 9148.978737][ T8464] hsr_slave_1: entered promiscuous mode [ 9163.463229][ T8471] hsr_slave_0: entered promiscuous mode [ 9163.559514][ T8471] hsr_slave_1: entered promiscuous mode [ 9163.627446][ T8471] debugfs: 'hsr0' already exists in 'hsr' [ 9163.627864][ T8471] Cannot create hsr debugfs directory [ 9167.808875][ T8464] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 9168.091177][ T8464] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 9169.168916][ T8464] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 9169.413154][ T8464] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 9169.928661][ T8464] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 9170.096242][ T8464] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 9170.886430][ T8464] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 9171.246371][ T8464] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 9183.437803][ T8471] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 9183.750841][ T8471] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 9183.898690][ T8471] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 9184.282929][ T8471] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 9184.476624][ T8471] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 9184.997165][ T8471] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 9185.201723][ T8471] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 9185.600812][ T8471] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 9208.941082][ T8464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 9219.662911][ T8471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 9322.760898][ T8464] veth0_vlan: entered promiscuous mode [ 9324.182439][ T8464] veth1_vlan: entered promiscuous mode [ 9327.837104][ T8464] veth0_macvtap: entered promiscuous mode [ 9328.691984][ T8464] veth1_macvtap: entered promiscuous mode [ 9334.347055][ T8563] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 9334.347892][ T8563] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 9334.348511][ T8563] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 9334.349135][ T8563] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 9359.156877][ T8471] veth0_vlan: entered promiscuous mode [ 9360.251134][ T8471] veth1_vlan: entered promiscuous mode [ 9363.939354][ T8471] veth0_macvtap: entered promiscuous mode [ 9364.441312][ T8471] veth1_macvtap: entered promiscuous mode [ 9368.226822][ T6678] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 9368.248472][ T8072] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 9368.311358][ T8072] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 9368.740894][ T5371] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 9472.183029][ T7192] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 9474.908365][ T7192] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 9477.136440][ T7192] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 9480.232304][ T7192] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 9503.533198][ T7192] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 9504.439314][ T7192] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 9504.887295][ T7192] bond0 (unregistering): Released all slaves [ 9507.949357][ T7192] hsr_slave_0: left promiscuous mode [ 9508.056925][ T7192] hsr_slave_1: left promiscuous mode [ 9508.703159][ T7192] veth1_macvtap: left promiscuous mode [ 9508.752814][ T7192] veth0_macvtap: left promiscuous mode [ 9508.767963][ T7192] veth1_vlan: left promiscuous mode [ 9508.769293][ T7192] veth0_vlan: left promiscuous mode [ 9539.820620][ T8637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 9541.231877][ T8637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 9545.787133][ T7192] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 9548.258660][ T7192] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 9550.795602][ T7192] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 9552.932474][ T7192] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 9561.896126][ T24] audit: type=1400 audit(9561.230:245): avc: denied { write } for pid=8680 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 9565.218576][ T7192] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 9573.042143][ T7192] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 9573.820074][ T24] audit: type=1400 audit(9573.090:246): avc: denied { write } for pid=8691 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 9576.151381][ T7192] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 9578.370172][ T7192] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 9585.306283][ T3225] 8021q: adding VLAN 0 to HW filter on device eth5 [ 9606.337725][ T7192] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 9606.497712][ T7192] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 9606.620757][ T7192] bond0 (unregistering): Released all slaves [ 9612.944887][ T7192] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 9613.215544][ T7192] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 9613.407018][ T7192] bond0 (unregistering): Released all slaves [ 9615.219663][ T8637] hsr_slave_0: entered promiscuous mode [ 9615.309153][ T8637] hsr_slave_1: entered promiscuous mode [ 9615.405369][ T8637] debugfs: 'hsr0' already exists in 'hsr' [ 9615.405779][ T8637] Cannot create hsr debugfs directory [ 9615.865276][ T7192] hsr_slave_0: left promiscuous mode [ 9615.938241][ T7192] hsr_slave_1: left promiscuous mode [ 9616.316516][ T7192] hsr_slave_0: left promiscuous mode [ 9616.390291][ T7192] hsr_slave_1: left promiscuous mode [ 9617.401593][ T7192] veth1_macvtap: left promiscuous mode [ 9617.402431][ T7192] veth0_macvtap: left promiscuous mode [ 9617.465596][ T7192] veth1_vlan: left promiscuous mode [ 9617.476356][ T7192] veth0_vlan: left promiscuous mode [ 9617.739082][ T7192] veth1_macvtap: left promiscuous mode [ 9617.739838][ T7192] veth0_macvtap: left promiscuous mode [ 9617.741998][ T7192] veth1_vlan: left promiscuous mode [ 9617.743254][ T7192] veth0_vlan: left promiscuous mode [ 9662.731561][ T8652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 9663.301719][ T8652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 9681.876116][ T24] audit: type=1400 audit(9681.230:247): avc: denied { write } for pid=8716 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 9686.088057][ T8637] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 9686.617724][ T8637] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 9686.775644][ T8637] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 9687.078604][ T8637] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 9687.192062][ T8637] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 9687.529441][ T8637] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 9687.592942][ T8637] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 9688.018032][ T8637] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 9692.194875][ T24] audit: type=1400 audit(9691.570:248): avc: denied { write } for pid=8724 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 9698.460213][ T3225] 8021q: adding VLAN 0 to HW filter on device eth6 [ 9705.826242][ T8652] hsr_slave_0: entered promiscuous mode [ 9705.938759][ T8652] hsr_slave_1: entered promiscuous mode [ 9706.537942][ T24] audit: type=1400 audit(9705.920:249): avc: denied { write } for pid=8738 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 9714.126394][ T24] audit: type=1400 audit(9713.460:250): avc: denied { write } for pid=8745 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 9728.035409][ T8652] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 9728.567641][ T8652] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 9728.796303][ T8652] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 9729.213014][ T8652] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 9729.512168][ T8652] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 9729.948221][ T8652] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 9730.425091][ T8652] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 9730.858853][ T8652] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 9732.845936][ T8637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 9738.995421][ T24] audit: type=1400 audit(9738.360:251): avc: denied { write } for pid=8751 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 9750.205126][ T24] audit: type=1400 audit(9749.570:252): avc: denied { write } for pid=8766 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 9757.670741][ T3225] 8021q: adding VLAN 0 to HW filter on device eth8 [ 9773.969070][ T8652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 9777.851000][ T24] audit: type=1400 audit(9777.140:253): avc: denied { write } for pid=8776 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 9788.107321][ T24] audit: type=1400 audit(9787.430:254): avc: denied { write } for pid=8784 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 9796.180747][ T3225] 8021q: adding VLAN 0 to HW filter on device eth7 [ 9821.259431][ T24] audit: type=1400 audit(9820.640:255): avc: denied { write } for pid=8799 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 9831.596490][ T24] audit: type=1400 audit(9830.930:256): avc: denied { write } for pid=8809 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 9838.271274][ T3225] 8021q: adding VLAN 0 to HW filter on device eth9 [ 9859.475716][ T24] audit: type=1400 audit(9858.850:257): avc: denied { write } for pid=8825 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 9871.587037][ T24] audit: type=1400 audit(9870.900:258): avc: denied { write } for pid=8835 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 9879.820213][ T3225] 8021q: adding VLAN 0 to HW filter on device eth10 [ 9902.025554][ T24] audit: type=1400 audit(9901.310:259): avc: denied { write } for pid=8851 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 9902.279022][ T8637] veth0_vlan: entered promiscuous mode [ 9903.302246][ T8637] veth1_vlan: entered promiscuous mode [ 9908.308610][ T8637] veth0_macvtap: entered promiscuous mode [ 9910.326334][ T8637] veth1_macvtap: entered promiscuous mode [ 9914.292565][ T24] audit: type=1400 audit(9913.650:260): avc: denied { write } for pid=8857 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 9915.216078][ T6678] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 9915.399466][ T8552] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 9915.491600][ T7192] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 9915.537930][ T8486] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 9923.640107][ T3225] 8021q: adding VLAN 0 to HW filter on device eth12 [ 9946.943104][ T24] audit: type=1400 audit(9946.200:261): avc: denied { write } for pid=8871 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 9947.488710][ T8652] veth0_vlan: entered promiscuous mode [ 9949.196836][ T8652] veth1_vlan: entered promiscuous mode [ 9952.920002][ T8652] veth0_macvtap: entered promiscuous mode [ 9953.649001][ T8652] veth1_macvtap: entered promiscuous mode [ 9957.305742][ T8563] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 9957.331385][ T7669] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 9957.332146][ T7669] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 9957.332770][ T7669] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 9959.309202][ T24] audit: type=1400 audit(9958.680:262): avc: denied { write } for pid=8876 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 9991.836475][ T24] audit: type=1400 audit(9991.180:263): avc: denied { write } for pid=8887 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [10002.539171][ T24] audit: type=1400 audit(10001.920:264): avc: denied { write } for pid=8892 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [10008.680351][ T3225] 8021q: adding VLAN 0 to HW filter on device eth11 [10032.296303][ T24] audit: type=1400 audit(10031.650:265): avc: denied { write } for pid=8905 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [10044.732855][ T24] audit: type=1400 audit(10044.090:266): avc: denied { write } for pid=8911 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [10053.835439][ T3225] 8021q: adding VLAN 0 to HW filter on device eth13 [10078.635492][ T24] audit: type=1400 audit(10077.980:267): avc: denied { write } for pid=8928 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [10088.835411][ T24] audit: type=1400 audit(10088.210:268): avc: denied { write } for pid=8935 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [10098.221398][ T3225] 8021q: adding VLAN 0 to HW filter on device eth14 [10106.209068][ T8890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [10106.866977][ T8890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [10127.046777][ T24] audit: type=1400 audit(10126.420:269): avc: denied { write } for pid=8950 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [10137.797561][ T24] audit: type=1400 audit(10137.170:270): avc: denied { write } for pid=8959 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [10145.692435][ T3225] 8021q: adding VLAN 0 to HW filter on device eth15 [10157.767737][ T8907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [10158.478316][ T8907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [10167.613247][ T8890] hsr_slave_0: entered promiscuous mode [10167.859401][ T8890] hsr_slave_1: entered promiscuous mode [10168.020816][ T8890] debugfs: 'hsr0' already exists in 'hsr' [10168.021230][ T8890] Cannot create hsr debugfs directory [10174.338027][ T24] audit: type=1400 audit(10173.690:271): avc: denied { write } for pid=8972 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [10187.259096][ T24] audit: type=1400 audit(10186.640:272): avc: denied { write } for pid=8979 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [10195.281798][ T3225] 8021q: adding VLAN 0 to HW filter on device eth16 [10202.872804][ T8890] netdevsim netdevsim7 netdevsim0: renamed from eth0 [10203.470166][ T8890] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [10203.612758][ T8890] netdevsim netdevsim7 netdevsim1: renamed from eth1 [10204.377208][ T8890] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [10204.432914][ T8890] netdevsim netdevsim7 netdevsim2: renamed from eth2 [10205.239619][ T8890] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [10205.475875][ T8890] netdevsim netdevsim7 netdevsim3: renamed from eth3 [10205.989921][ T8890] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [10208.442473][ T24] audit: type=1400 audit(10207.710:273): avc: denied { write } for pid=8984 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [10217.708859][ T8907] hsr_slave_0: entered promiscuous mode [10217.889168][ T8907] hsr_slave_1: entered promiscuous mode [10218.097954][ T8907] debugfs: 'hsr0' already exists in 'hsr' [10218.098372][ T8907] Cannot create hsr debugfs directory [10223.969848][ T24] audit: type=1400 audit(10223.300:274): avc: denied { write } for pid=8998 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [10259.237376][ T8907] netdevsim netdevsim8 netdevsim0: renamed from eth0 [10259.741357][ T8907] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [10259.910323][ T8907] netdevsim netdevsim8 netdevsim1: renamed from eth1 [10260.527305][ T8907] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [10260.672362][ T8907] netdevsim netdevsim8 netdevsim2: renamed from eth2 [10261.241092][ T8907] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [10261.516852][ T8907] netdevsim netdevsim8 netdevsim3: renamed from eth3 [10262.139113][ T8907] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [10271.199024][ T8890] 8021q: adding VLAN 0 to HW filter on device bond0 [10322.890628][ T8907] 8021q: adding VLAN 0 to HW filter on device bond0 [10339.947754][ T24] audit: type=1400 audit(10339.310:275): avc: denied { write } for pid=9042 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [10356.288404][ T24] audit: type=1400 audit(10355.670:276): avc: denied { write } for pid=9052 comm="rm" name="hook-state" dev="tmpfs" ino=41 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [10378.738259][ T26] INFO: task syz.5.1576:8866 blocked for more than 430 seconds. [10378.738711][ T26] Not tainted syzkaller #0 [10378.739045][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [10378.739348][ T26] task:syz.5.1576 state:D stack:0 pid:8866 tgid:8866 ppid:8637 task_flags:0x400040 flags:0x00000011 [10378.741752][ T26] Call trace: [10378.741995][ T26] __switch_to+0x5e4/0xb74 (T) [10378.742530][ T26] __schedule+0x1e0c/0x38cc [10378.742936][ T26] schedule+0x1b4/0x274 [10378.743283][ T26] schedule_timeout+0x68/0x1e4 [10378.955528][ T26] wait_for_completion+0x1b8/0x414 [10378.956013][ T26] __synchronize_srcu+0x1c8/0x208 [10378.956382][ T26] synchronize_srcu+0x668/0x8dc [10378.956739][ T26] mmu_notifier_unregister+0x33c/0x444 [10378.957118][ T26] kvm_put_kvm+0x69c/0xbbc [10378.957457][ T26] kvm_vm_release+0x58/0x78 [10378.957757][ T26] __fput+0x4ac/0x978 [10378.958087][ T26] ____fput+0x20/0x30 [10378.958427][ T26] task_work_run+0x1b8/0x250 [10378.958744][ T26] exit_to_user_mode_loop+0x110/0x188 [10378.959076][ T26] el0_svc+0x18c/0x240 [10378.959353][ T26] el0t_64_sync_handler+0x68/0xdc [10378.959625][ T26] el0t_64_sync+0x198/0x19c [10379.150799][ T26] [10379.150799][ T26] Showing all locks held in the system: [10379.151249][ T26] locks held by khungtaskd/26: 1, last CPU#0: [10379.151508][ T26] #0: ffff800087fce618 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x4c/0x188 [10379.153177][ T26] locks held by klogd/3188: 1, last CPU#0: [10379.153411][ T26] #0: fff0000074cccea0 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x364/0x38cc [10379.229759][ T26] locks held by getty/3254: 2, on CPU#0: [10379.229988][ T26] #0: 94f00000123e60a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [10379.230876][ T26] #1: c2ff80008cd2b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x314/0x11f8 [10379.231702][ T26] locks held by sshd-session/3379: 4, last CPU#0: [10379.231906][ T26] #0: 0df0000015be72e0 (sk_lock-AF_INET){+.+.}-{0:0}, at: inet_shutdown+0x80/0x3fc [10379.232705][ T26] #1: ffff800087fce618 (rcu_read_lock){....}-{1:3}, at: __ip_queue_xmit+0x8c/0x1940 [10379.365238][ T26] #2: ffff80008801bf30 (mmu_notifier_invalidate_range_start){+.+.}-{0:0}, at: fs_reclaim_acquire+0xb0/0x100 [10379.366355][ T26] #3: fff0000074cccea0 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x364/0x38cc [10379.367299][ T26] locks held by syz-executor/3381: 2, last CPU#0: [10379.367504][ T26] #0: 24f0000015a0ec78 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0xf4/0xb64 [10379.368358][ T26] #1: ffff800087fce618 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x50/0x22c [10379.369160][ T26] locks held by kworker/u4:6/5371: 3, last CPU#0: [10379.369342][ T26] #0: 19f000000d034140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b4 [10379.370088][ T26] #1: ffff80008f0b7ce8 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b4 [10379.370914][ T26] #2: 46f000001ed99258 (&devlink->lock_key#4){+.+.}-{4:4}, at: devl_trylock+0x24/0x34 [10379.371926][ T26] locks held by kworker/u4:0/6678: 3, last CPU#0: [10379.372122][ T26] #0: 19f000000d034140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b4 [10379.372847][ T26] #1: ffff80008e8d7ce8 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b4 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [10379.657920][ T26] #2: f8f0000022f7c258 (&devlink->lock_key#10){+.+.}-{4:4}, at: devl_trylock+0x24/0x34 [10379.659081][ T26] locks held by kworker/u4:1/7192: 3, last CPU#0: [10379.659279][ T26] #0: 19f000000d034140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b4 [10379.660043][ T26] #1: ffff80008ea57ce8 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b4 [10379.660783][ T26] #2: adf0000024e3b258 (&devlink->lock_key#7){+.+.}-{4:4}, at: devl_trylock+0x24/0x34 [10379.661597][ T26] locks held by kworker/u4:2/7405: 3, last CPU#0: [10379.661798][ T26] #0: 19f000000d034140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b4 [10379.662575][ T26] #1: ffff80008e467ce8 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b4 [10379.663372][ T26] #2: cbf0000024e3ca58 (&devlink->lock_key#6){+.+.}-{4:4}, at: devl_trylock+0x24/0x34 [10379.750759][ T26] locks held by kworker/u4:9/8072: 3, last CPU#0: [10379.750998][ T26] #0: 19f000000d034140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b4 [10379.751736][ T26] #1: ffff80008ee17ce8 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b4 [10379.752469][ T26] #2: 3ef000002809d258 (&devlink->lock_key#11){+.+.}-{4:4}, at: devl_trylock+0x24/0x34 [10379.753314][ T26] locks held by syz.0.1572/8451: 2, last CPU#0: [10379.897378][ T26] #0: ffff80008801bf70 (srcu){.+.+}-{0:0}, at: __mmu_notifier_release+0x4e8/0x87c [10379.898489][ T26] #1: 10f000001ef8f530 (&kvm->srcu){.+.+}-{0:0}, at: kvm_mmu_notifier_release+0x50/0xc4 [10379.899365][ T26] locks held by kworker/u4:4/8486: 3, last CPU#0: [10379.899563][ T26] #0: 19f000000d034140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b4 [10379.900352][ T26] #1: ffff8000a1ca7ce8 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b4 [10379.901116][ T26] #2: 46f000001ed99258 (&devlink->lock_key#4){+.+.}-{4:4}, at: devl_trylock+0x24/0x34 [10379.901970][ T26] locks held by kworker/u4:10/8563: 2, on CPU#0: [10379.902164][ T26] #0: 19f000000d034140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b4 [10379.902958][ T26] #1: ffff8000a1e97ce8 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b4 [10380.068670][ T26] locks held by kworker/u4:11/8620: 3, last CPU#0: [10380.068914][ T26] #0: 19f000000d034140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b4 [10380.069681][ T26] #1: ffff8000a1ea7ce8 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b4 [10380.070507][ T26] #2: c6f000001ef08a58 (&devlink->lock_key#9){+.+.}-{4:4}, at: devl_trylock+0x24/0x34 [10380.071435][ T26] locks held by kworker/u4:3/8795: 2, on CPU#0: [10380.071624][ T26] #0: 19f000000d034140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b4 [10380.072379][ T26] #1: ffff80008e947ce8 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b4 [10380.073212][ T26] locks held by kworker/u4:14/9022: 2, last CPU#0: [10380.073431][ T26] #0: 95f000000d033d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b4 [10380.240775][ T26] #1: ffff80008f337ce8 ((gc_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b4 [10380.241586][ T26] locks held by modprobe/9061: 2, last CPU#0: [10380.241811][ T26] #0: aef0000026456c78 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0xf4/0xb64 [10380.242692][ T26] #1: ffff800087fce618 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x50/0x22c [10380.345949][ T26] locks held by dhcpcd-run-hook/9062: 2, last CPU#0: [10380.346272][ T26] #0: 2bf0000012609460 (sb_writers#4){.+.+}-{0:0}, at: filemap_read+0xec0/0x1068 [10380.347265][ T26] #1: 22f000001260a938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1cc0/0x1ed4 [10380.348132][ T26] locks held by modprobe/9063: 1, last CPU#0: [10380.348319][ T26] #0: 36f0000018680378 (&mm->mmap_lock){++++}-{4:4}, at: vm_brk_flags+0xf4/0x574 [10380.462537][ T26] [10380.462802][ T26] ============================================= [10380.462802][ T26] [10380.463658][ T26] Kernel panic - not syncing: hung_task: blocked tasks [10380.468696][ T26] CPU: 0 UID: 0 PID: 26 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT [10380.470261][ T26] Hardware name: linux,dummy-virt (DT) [10380.471258][ T26] Call trace: [10380.472045][ T26] show_stack+0x2c/0x3c (C) [10380.473160][ T26] __dump_stack+0x30/0x40 [10380.474244][ T26] dump_stack_lvl+0x30/0x12c [10380.475218][ T26] dump_stack+0x1c/0x28 [10380.476256][ T26] vpanic+0x4cc/0x844 [10380.477167][ T26] vpanic+0x0/0x844 [10380.478054][ T26] hung_task_panic+0x0/0x2c [10380.479160][ T26] kthread+0x4cc/0x514 [10380.480147][ T26] ret_from_fork+0x10/0x20 [10380.482073][ T26] Kernel Offset: disabled [10380.482964][ T26] CPU features: 0x0,00000000,00d1802f,df188f42,0afff61f [10380.484221][ T26] Memory Limit: none [10380.486560][ T26] Rebooting in 86400 seconds..