last executing test programs: 7m5.967933932s ago: executing program 1 (id=458): r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r3, 0x4020aeae, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r5, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_SET_ONE_REG(r10, 0x4010aeac, &(0x7f0000000240)=@arm64_fw={0x6030000000140000, &(0x7f00000002c0)=0x10001}) r11 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000380)={0x0, &(0x7f00000003c0)=[@smc={0x1e, 0x40, {0x8400000a, [0x3, 0x6e, 0x7f, 0x9, 0x9]}}], 0x40}, &(0x7f0000000400)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r11, 0xae80, 0x0) r12 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r13, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000e36000/0x2000)=nil}) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1, 0x16831, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r13, 0x4020ae46, &(0x7f00000000c0)={0x10002, 0x6, 0x1, 0x2000, &(0x7f0000000000/0x2000)=nil}) r14 = syz_kvm_add_vcpu$arm64(r0, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r14, 0x4018aee1, &(0x7f0000000040)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000280)={0x14, 0xff}}) 6m53.708241886s ago: executing program 1 (id=459): mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ce5000/0x1000)=nil, 0x930, 0x6, 0x4102932, 0xffffffffffffffff, 0x0) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) munmap(&(0x7f0000cc9000/0x2000)=nil, 0x2000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x2, 0x3, 0x100000, 0x2000, &(0x7f000000f000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xcccc0000, 0x1000, &(0x7f0000f15000/0x1000)=nil}) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000bfe000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0xb000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x2710, 0x3, 0x200000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil) 6m53.296419937s ago: executing program 0 (id=460): r0 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000040)={0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r3 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x3d) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x101000, 0x0) r5 = eventfd2(0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0x40086602, 0x20000000) r6 = eventfd2(0x1, 0x1) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000080)={r6, 0xb, 0x2, r6}) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f00000000c0)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000140)}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000001c0)={0x5, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000200)={0x8, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f0000000240)=@attr_other={0x0, 0x8, 0x100, &(0x7f00000002c0)=0xc000000000000000}) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000300)=@attr_other={0x0, 0x8, 0x108, &(0x7f0000000340)=0xc000000000000000}) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000380)=@attr_arm64={0x0, 0x4, 0x2, 0x0}) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x100000c, 0x6832, 0xffffffffffffffff, 0x0) 6m49.160800528s ago: executing program 1 (id=461): r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000180)={0x1ffc, 0x0, 0x3}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000000080)={0x100000000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x2000, &(0x7f0000e37000/0x2000)=nil, 0x10000, r3}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r5, 0x4068aea3, &(0x7f00000001c0)={0xdf, 0x0, 0x20000}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x50000, 0x3000008, 0x12, r6, 0x0) syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) eventfd2(0x2, 0x80000) r7 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_GET_DIRTY_LOG(r8, 0x4010ae42, &(0x7f0000000280)={0x5, 0x0, &(0x7f0000d99000/0x4000)=nil}) r9 = syz_kvm_add_vcpu$arm64(r0, &(0x7f0000000040)={0x0, 0x0}, 0x0, 0xfffffffffffffdbd) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, r10, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) 6m47.249051524s ago: executing program 0 (id=462): munmap(&(0x7f0000481000/0x1000)=nil, 0x1000) (async, rerun: 64) munmap(&(0x7f0000136000/0x2000)=nil, 0x2000) (async, rerun: 64) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) (async) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_SREGS(r2, 0x4000ae84, 0xffffffffffffffff) (async) r3 = mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) (async) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) (async) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) (async) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000e51000/0x2000)=nil, 0x2000) (async) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x1000007, 0x28031, 0xffffffffffffffff, 0x9000000) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) (async, rerun: 64) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x77) (async) munmap(&(0x7f0000f2c000/0x4000)=nil, 0x4000) syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000080)=[@msr={0x14, 0x20, {0x6030000000139820, 0xfffffffffffffff6}}, @code={0xa, 0x84, {"a07894d200e0b0f2e10080d2a20080d2230180d2640080d2020000d4000008d5a00e9fd200c0b0f2210180d2c20080d2630180d2c40180d2020000d4007008d5000028d50000029e008008d5000008d5001c9bd200a0b0f2810080d2220180d2430080d2240180d2020000d4008080c8"}}, @msr={0x14, 0x20, {0x603000000013e66a, 0x8}}, @svc={0x122, 0x40, {0x84000000, [0x2, 0xc, 0xfffffffffffffffe, 0x626, 0x1]}}, @msr={0x14, 0x20, {0x603000000013c65d, 0x1a0d}}], 0x124}, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x3) ioctl$KVM_GET_VCPU_EVENTS(r7, 0x4018aee2, &(0x7f0000000200)) (async) munmap$KVM_VCPU(r3, 0x4) 6m40.937775903s ago: executing program 1 (id=463): r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0xffffffffffffffa7) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) r4 = eventfd2(0xd, 0x1) close(r4) openat$kvm(0xffffff9c, &(0x7f0000000040), 0xa00f2, 0x0) write$eventfd(r4, 0x0, 0x500) r5 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_ARM_VCPU_INIT(0xffffffffffffffff, 0x4020aeae, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000240), 0x2000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000000000/0x400000)=nil) syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f0000000340)="37e68986ad644f5dc57bbc1ff382863b67f3eee57a32ec911d95f88f3dd8ea716e4a29cefbd440b2ecf83f57baf33b0c97182970a47ef45c954e42f2055384921830f6e273d2eb30", 0x0, 0x2a2019ac5ed2a1ef) mmap$KVM_VCPU(&(0x7f0000000000/0xc00000)=nil, 0x930, 0xf, 0x32, 0xffffffffffffffff, 0x0) close(r7) r9 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r10 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0x80111500, 0x20000000) close(r11) r12 = openat$kvm(0x0, &(0x7f0000000140), 0x101000, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION(r12, 0xae03, 0x7) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) ioctl$KVM_ARM_VCPU_INIT(r14, 0x4020aeae, &(0x7f0000000180)={0x5, 0x18}) ioctl$KVM_GET_ONE_REG(r14, 0x4010aeab, &(0x7f00000001c0)=@arm64_sys={0x603000000013c008, &(0x7f0000000200)=0x8}) ioctl$KVM_GET_STATS_FD_vm(r9, 0xaece) 6m38.808076886s ago: executing program 0 (id=464): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0xeeef0000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x2515, 0x0, 0x0, 0x1000, &(0x7f0000fec000/0x1000)=nil}) close(r1) 6m33.83312342s ago: executing program 0 (id=465): r0 = openat$kvm(0x0, &(0x7f00000001c0), 0x300, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000100), 0x1, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r3, 0x0) mmap$KVM_VCPU(&(0x7f0000005000/0x1000)=nil, 0x930, 0x9, 0x11, r3, 0x0) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffd000/0x2000)=nil, r4, 0x1000001, 0x12, r3, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000005000/0x1000)=nil, r4, 0x200000a, 0x13, r5, 0x0) syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000000000/0x400000)=nil) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) 6m28.690728178s ago: executing program 0 (id=466): r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x20000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0xfffffffa, 0x80001) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000140)={0x80, 0x4, 0x0, r3}) syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x81) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)={0x1, 0x37d03030d7a92616}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0x5000}) r4 = syz_kvm_add_vcpu$arm64(r0, &(0x7f00000000c0)={0x0, &(0x7f0000000700)=[@memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x6000, 0x7, 0x2}}, @smc={0x1e, 0x40, {0x4000, [0xffff, 0x2, 0x7, 0x7ff, 0x6]}}, @eret={0xe6, 0x18, 0x3c0}, @eret={0xe6, 0x18, 0x80000000000}, @hvc={0x32, 0x40, {0x80000001, [0xa6b, 0x3, 0x1, 0x762a9eb0, 0x5]}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x8, 0x7ff, 0xb9e0de4d308e3093}}, @eret={0xe6, 0x18, 0x101}, @eret={0xe6, 0x18, 0x9}, @uexit={0x0, 0x18, 0x4}, @its_setup={0x82, 0x28, {0x1, 0x2, 0x10b}}, @uexit={0x0, 0x18, 0xe}, @svc={0x122, 0x40, {0x80008000, [0x7, 0x1, 0xe, 0x9, 0x7fffffff]}}, @svc={0x122, 0x40, {0x80003fff, [0x7c0d, 0x1e5c, 0x5, 0x8, 0x101]}}, @hvc={0x32, 0x40, {0x84000051, [0xeb5, 0x8c, 0x2, 0x2, 0x7]}}, @eret={0xe6, 0x18, 0xca}, @svc={0x122, 0x40, {0x8400000e, [0x800, 0x6, 0x100000000, 0x8, 0x3]}}, @its_setup={0x82, 0x28, {0x4, 0x1, 0x26d}}, @uexit={0x0, 0x18, 0x5}, @msr={0x14, 0x20, {0x603000000013e21b, 0x80000000}}, @irq_setup={0x46, 0x18, {0x3, 0x17}}, @its_send_cmd={0xaa, 0x28, {0xa, 0x0, 0x2, 0x1, 0x1ff, 0x401, 0x3}}, @eret={0xe6, 0x18, 0x9}, @hvc={0x32, 0x40, {0xc4000014, [0xad, 0x4, 0x8, 0x7]}}, @its_setup={0x82, 0x28, {0x0, 0x4, 0x2b1}}, @eret={0xe6, 0x18, 0x3}, @smc={0x1e, 0x40, {0x2000000, [0x6, 0x1, 0x4, 0x8, 0x492]}}, @code={0xa, 0x84, {"007008d5008008d50028216ee02192d200e0b8f2410180d2c20080d2630180d2840080d2020000d40080c088000008d5a0b98dd20040b0f2c10080d2620180d2e30080d2a40080d2020000d440138cd20020b0f2a10180d2a20180d2e30180d2440080d2020000d4bf3003d500a0400c"}}, @eret={0xe6, 0x18, 0xd}, @svc={0x122, 0x40, {0x800, [0x2, 0x4, 0x8, 0x1b0, 0xffffffffffffffff]}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x1c, 0x5, 0x3}}, @irq_setup={0x46, 0x18, {0x0, 0xff}}], 0x54c}, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0x541b, 0x59) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6m26.262942872s ago: executing program 1 (id=467): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x640100, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x38) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000080)={0x7, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x3, &(0x7f0000000100)}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) openat$kvm(0x0, 0x0, 0x0, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000001c0)={0x9000, 0x110000}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, &(0x7f0000000240)={0x0, 0x4, 0x6000, 0x2000, &(0x7f0000ffd000/0x2000)=nil, 0x100000000000000, r7}) close(r7) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x4f832, 0xffffffffffffffff, 0x1000000) mmap$KVM_VCPU(&(0x7f0000f87000/0x4000)=nil, 0x0, 0xc, 0x5c1fd1b65647af1, r6, 0x20000000) munmap$KVM_VCPU(0x0, 0x1000000000) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000340)=@attr_other={0x0, 0x4, 0x100000000, &(0x7f0000000300)=0x3}) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x22) ioctl$KVM_CAP_HALT_POLL(r8, 0x4068aea3, &(0x7f0000000380)={0xb6, 0x0, 0x9}) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 6m21.878982481s ago: executing program 0 (id=468): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34) (async, rerun: 64) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 64) r1 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async, rerun: 64) close(0x4) (rerun: 64) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x6, 0x2, &(0x7f0000000180)=0x5}) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f00000000c0)={0x1, 0x0, [{0xa, 0x4, 0x1, 0x0, @sint={0xcd6, 0xa}}]}) 6m18.470790055s ago: executing program 1 (id=469): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000300), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000769000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000340)={0x0, &(0x7f0000000380)=[@smc={0x1e, 0x40, {0x84000006, [0x7, 0x3, 0x2, 0x3f8b, 0xf7b0]}}], 0x40}, &(0x7f00000003c0)=[@featur2={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x2000000000000020) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) r9 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r8, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r9, 0x20, &(0x7f0000000140)="fb4149dd033b8986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67525673312b01040000000000002627e7000000000000000200", 0x0, 0xfffffffffffffe73) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x12, r8, 0x0) r10 = eventfd2(0x70, 0x0) close(r10) openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x1a17f2, 0x0) write$eventfd(r10, &(0x7f0000000200)=0xfffffffffffffffe, 0x8) r11 = eventfd2(0x0, 0x0) close(r11) close(0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0xc0c82, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, 0x930, 0x200000e, 0x2011, r11, 0x0) r12 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1e) ioctl$KVM_CAP_HALT_POLL(r12, 0x4068aea3, &(0x7f0000000000)={0xb6, 0x0, 0x2}) r13 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r14 = syz_kvm_add_vcpu$arm64(r13, &(0x7f00000000c0)={0x0, &(0x7f0000000280)=[@irq_setup={0x46, 0x18, {0x4, 0xf3}}, @svc={0x122, 0x40, {0x2, [0xffffffffffffffbb, 0x4, 0x1, 0x7, 0x600000000]}}], 0x58}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_RUN(r14, 0xae80, 0x0) ioctl$KVM_RUN(r14, 0xae80, 0x0) 5m35.468844382s ago: executing program 32 (id=468): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34) (async, rerun: 64) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 64) r1 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async, rerun: 64) close(0x4) (rerun: 64) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x6, 0x2, &(0x7f0000000180)=0x5}) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f00000000c0)={0x1, 0x0, [{0xa, 0x4, 0x1, 0x0, @sint={0xcd6, 0xa}}]}) 5m31.496341915s ago: executing program 33 (id=469): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000300), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000769000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000340)={0x0, &(0x7f0000000380)=[@smc={0x1e, 0x40, {0x84000006, [0x7, 0x3, 0x2, 0x3f8b, 0xf7b0]}}], 0x40}, &(0x7f00000003c0)=[@featur2={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x2000000000000020) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) r9 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r8, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r9, 0x20, &(0x7f0000000140)="fb4149dd033b8986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67525673312b01040000000000002627e7000000000000000200", 0x0, 0xfffffffffffffe73) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x12, r8, 0x0) r10 = eventfd2(0x70, 0x0) close(r10) openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x1a17f2, 0x0) write$eventfd(r10, &(0x7f0000000200)=0xfffffffffffffffe, 0x8) r11 = eventfd2(0x0, 0x0) close(r11) close(0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0xc0c82, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, 0x930, 0x200000e, 0x2011, r11, 0x0) r12 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1e) ioctl$KVM_CAP_HALT_POLL(r12, 0x4068aea3, &(0x7f0000000000)={0xb6, 0x0, 0x2}) r13 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r14 = syz_kvm_add_vcpu$arm64(r13, &(0x7f00000000c0)={0x0, &(0x7f0000000280)=[@irq_setup={0x46, 0x18, {0x4, 0xf3}}, @svc={0x122, 0x40, {0x2, [0xffffffffffffffbb, 0x4, 0x1, 0x7, 0x600000000]}}], 0x58}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_RUN(r14, 0xae80, 0x0) ioctl$KVM_RUN(r14, 0xae80, 0x0) 1m2.350507982s ago: executing program 2 (id=470): r0 = mmap$KVM_VCPU(&(0x7f0000c34000/0x3000)=nil, 0x930, 0xe, 0x9130, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000040)={0x0, &(0x7f0000000080)=[@msr={0x14, 0x20, {0x6030000000138084, 0x9}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x0, 0x4, 0xf, 0x1, 0x95e, 0x2}}], 0x48}, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000240)="37e68986ad644f5dc57bbc1ff382863b67f3eee57a32ec911d95f88f3dd8ea716e4a29cefbd440b2ecf83f57baf33b0c97182970a47ef45c954e42f2055384921830f6e273d2eb30", 0x0, 0x2a2019ac5ed2a1ef) syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000000000/0x400000)=nil) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000100)="746abf250f7959c813e4adfb369b808022e69fe80cfadce4a1259e77bab54ac9749537b3d016bb7f745a6e22d2f9ff443f19467748a3fe02c239457600", 0x0, 0xfffffffffffffec5) mmap$KVM_VCPU(&(0x7f0000c34000/0x3000)=nil, 0x930, 0xe, 0x9130, 0xffffffffffffffff, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) openat$kvm(0x0, 0x0, 0x0, 0x0) (async) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) (async) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0) (async) syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) (async) syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000040)={0x0, &(0x7f0000000080)=[@msr={0x14, 0x20, {0x6030000000138084, 0x9}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x0, 0x4, 0xf, 0x1, 0x95e, 0x2}}], 0x48}, 0x0, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000240)="37e68986ad644f5dc57bbc1ff382863b67f3eee57a32ec911d95f88f3dd8ea716e4a29cefbd440b2ecf83f57baf33b0c97182970a47ef45c954e42f2055384921830f6e273d2eb30", 0x0, 0x2a2019ac5ed2a1ef) (async) syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000000000/0x400000)=nil) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000100)="746abf250f7959c813e4adfb369b808022e69fe80cfadce4a1259e77bab54ac9749537b3d016bb7f745a6e22d2f9ff443f19467748a3fe02c239457600", 0x0, 0xfffffffffffffec5) (async) 49.638848725s ago: executing program 3 (id=471): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f00003af000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000280)=[@eret={0xe6, 0x18, 0x7fffffffffffffff}], 0x18}, 0x0, 0xfffffffffffffd23) syz_kvm_vgic_v3_setup(r1, 0x1, 0x240) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000240)={0x8}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000340), 0x0, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000440)={0x0, 0x0}, 0x0, 0x0) r7 = ioctl$KVM_GET_STATS_FD_cpu(r6, 0xaece) ioctl$KVM_CAP_ARM_USER_IRQ(r7, 0x4068aea3, 0x0) r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil) r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000380)={0x0, 0x0}, 0x0, 0x0) r11 = syz_kvm_vgic_v3_setup(r8, 0x4, 0x220) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r11, 0x4018aee3, &(0x7f00000003c0)=@attr_other={0x0, 0x6, 0x0, 0x0}) r12 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xc02, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x161642, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(r14, 0x4010aeab, &(0x7f0000000300)={0x8000004, 0x8000001}) ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000040)={0x5, 0x1, 0xa000, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$arm64(r12, 0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil, &(0x7f0000000100)=[{0x0, 0x0, 0x248}], 0x1, 0x0, 0x0, 0x0) 14.647527599s ago: executing program 34 (id=470): r0 = mmap$KVM_VCPU(&(0x7f0000c34000/0x3000)=nil, 0x930, 0xe, 0x9130, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000040)={0x0, &(0x7f0000000080)=[@msr={0x14, 0x20, {0x6030000000138084, 0x9}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x0, 0x4, 0xf, 0x1, 0x95e, 0x2}}], 0x48}, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000240)="37e68986ad644f5dc57bbc1ff382863b67f3eee57a32ec911d95f88f3dd8ea716e4a29cefbd440b2ecf83f57baf33b0c97182970a47ef45c954e42f2055384921830f6e273d2eb30", 0x0, 0x2a2019ac5ed2a1ef) syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000000000/0x400000)=nil) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000100)="746abf250f7959c813e4adfb369b808022e69fe80cfadce4a1259e77bab54ac9749537b3d016bb7f745a6e22d2f9ff443f19467748a3fe02c239457600", 0x0, 0xfffffffffffffec5) mmap$KVM_VCPU(&(0x7f0000c34000/0x3000)=nil, 0x930, 0xe, 0x9130, 0xffffffffffffffff, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) openat$kvm(0x0, 0x0, 0x0, 0x0) (async) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) (async) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0) (async) syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) (async) syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000040)={0x0, &(0x7f0000000080)=[@msr={0x14, 0x20, {0x6030000000138084, 0x9}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x0, 0x4, 0xf, 0x1, 0x95e, 0x2}}], 0x48}, 0x0, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000240)="37e68986ad644f5dc57bbc1ff382863b67f3eee57a32ec911d95f88f3dd8ea716e4a29cefbd440b2ecf83f57baf33b0c97182970a47ef45c954e42f2055384921830f6e273d2eb30", 0x0, 0x2a2019ac5ed2a1ef) (async) syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000000000/0x400000)=nil) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000100)="746abf250f7959c813e4adfb369b808022e69fe80cfadce4a1259e77bab54ac9749537b3d016bb7f745a6e22d2f9ff443f19467748a3fe02c239457600", 0x0, 0xfffffffffffffec5) (async) 0s ago: executing program 35 (id=471): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f00003af000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000280)=[@eret={0xe6, 0x18, 0x7fffffffffffffff}], 0x18}, 0x0, 0xfffffffffffffd23) syz_kvm_vgic_v3_setup(r1, 0x1, 0x240) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000240)={0x8}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000340), 0x0, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000440)={0x0, 0x0}, 0x0, 0x0) r7 = ioctl$KVM_GET_STATS_FD_cpu(r6, 0xaece) ioctl$KVM_CAP_ARM_USER_IRQ(r7, 0x4068aea3, 0x0) r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil) r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000380)={0x0, 0x0}, 0x0, 0x0) r11 = syz_kvm_vgic_v3_setup(r8, 0x4, 0x220) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r11, 0x4018aee3, &(0x7f00000003c0)=@attr_other={0x0, 0x6, 0x0, 0x0}) r12 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xc02, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x161642, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(r14, 0x4010aeab, &(0x7f0000000300)={0x8000004, 0x8000001}) ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000040)={0x5, 0x1, 0xa000, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$arm64(r12, 0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil, &(0x7f0000000100)=[{0x0, 0x0, 0x248}], 0x1, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 378.785722][ T24] audit: type=1400 audit(377.960:74): avc: denied { read } for pid=3218 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 385.512100][ T24] audit: type=1400 audit(384.640:75): avc: denied { write } for pid=3275 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 389.253468][ T24] audit: type=1400 audit(388.430:76): avc: denied { write } for pid=3278 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 391.836955][ T3218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.332119][ T24] audit: type=1400 audit(399.500:77): avc: denied { write } for pid=3283 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 405.300934][ T24] audit: type=1400 audit(404.440:78): avc: denied { write } for pid=3286 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 414.834946][ T24] audit: type=1400 audit(414.010:79): avc: denied { write } for pid=3290 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 418.386616][ T24] audit: type=1400 audit(417.550:80): avc: denied { write } for pid=3293 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 420.837590][ T3218] eql: remember to turn off Van-Jacobson compression on your slave devices [ 432.302211][ T24] audit: type=1400 audit(431.470:81): avc: denied { write } for pid=3300 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 435.900948][ T24] audit: type=1400 audit(435.040:82): avc: denied { write } for pid=3303 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 441.898219][ T24] audit: type=1400 audit(441.070:83): avc: denied { write } for pid=3306 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 445.564880][ T24] audit: type=1400 audit(444.740:84): avc: denied { write } for pid=3309 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 454.369412][ T24] audit: type=1400 audit(453.540:85): avc: denied { write } for pid=3313 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 459.342123][ T24] audit: type=1400 audit(458.510:86): avc: denied { write } for pid=3316 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 466.160815][ T24] audit: type=1400 audit(465.310:87): avc: denied { write } for pid=3318 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 470.452277][ T24] audit: type=1400 audit(469.620:88): avc: denied { write } for pid=3321 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 479.516739][ T24] audit: type=1400 audit(478.690:89): avc: denied { write } for pid=3325 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 483.132243][ T24] audit: type=1400 audit(482.290:90): avc: denied { write } for pid=3328 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 490.272193][ T24] audit: type=1400 audit(489.440:91): avc: denied { write } for pid=3331 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 493.912842][ T24] audit: type=1400 audit(493.050:92): avc: denied { write } for pid=3334 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 507.066924][ T24] audit: type=1400 audit(506.240:93): avc: denied { write } for pid=3341 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 510.655323][ T24] audit: type=1400 audit(509.830:94): avc: denied { write } for pid=3344 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 528.806489][ T24] audit: type=1400 audit(527.980:95): avc: denied { write } for pid=3351 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 532.780859][ T24] audit: type=1400 audit(531.940:96): avc: denied { write } for pid=3354 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 554.803025][ T24] audit: type=1400 audit(553.980:97): avc: denied { write } for pid=3363 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 558.433125][ T24] audit: type=1400 audit(557.590:98): avc: denied { write } for pid=3366 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 564.195466][ T24] audit: type=1400 audit(563.370:99): avc: denied { write } for pid=3369 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 567.834963][ T24] audit: type=1400 audit(567.010:100): avc: denied { write } for pid=3372 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:2178' (ED25519) to the list of known hosts. [ 582.437613][ T24] audit: type=1400 audit(581.610:101): avc: denied { name_bind } for pid=3377 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 585.183135][ T24] audit: type=1400 audit(584.350:102): avc: denied { execute } for pid=3378 comm="sh" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 585.230718][ T24] audit: type=1400 audit(584.390:103): avc: denied { execute_no_trans } for pid=3378 comm="sh" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 613.988943][ T24] audit: type=1400 audit(613.160:104): avc: denied { mounton } for pid=3378 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 614.027036][ T24] audit: type=1400 audit(613.200:105): avc: denied { mount } for pid=3378 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 614.106822][ T3378] cgroup: Unknown subsys name 'net' [ 614.163093][ T24] audit: type=1400 audit(613.330:106): avc: denied { unmount } for pid=3378 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 614.567206][ T3378] cgroup: Unknown subsys name 'cpuset' [ 614.675823][ T3378] cgroup: Unknown subsys name 'rlimit' [ 615.471258][ T24] audit: type=1400 audit(614.640:107): avc: denied { setattr } for pid=3378 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 615.496285][ T24] audit: type=1400 audit(614.650:108): avc: denied { mounton } for pid=3378 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 615.515682][ T24] audit: type=1400 audit(614.690:109): avc: denied { mount } for pid=3378 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 616.482606][ T3381] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 616.489272][ T24] audit: type=1400 audit(615.660:110): avc: denied { relabelto } for pid=3381 comm="mkswap" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 616.523857][ T24] audit: type=1400 audit(615.680:111): avc: denied { write } for pid=3381 comm="mkswap" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 616.705529][ T24] audit: type=1400 audit(615.870:112): avc: denied { read } for pid=3378 comm="syz-executor" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 616.728270][ T24] audit: type=1400 audit(615.880:113): avc: denied { open } for pid=3378 comm="syz-executor" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 616.776643][ T3378] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 669.482461][ T24] audit: type=1400 audit(668.650:114): avc: denied { execmem } for pid=3382 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 672.909361][ T24] audit: type=1400 audit(672.080:115): avc: denied { read } for pid=3384 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 672.943081][ T24] audit: type=1400 audit(672.090:116): avc: denied { open } for pid=3385 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 673.013145][ T24] audit: type=1400 audit(672.170:117): avc: denied { mounton } for pid=3384 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 673.212060][ T24] audit: type=1400 audit(672.380:118): avc: denied { module_request } for pid=3384 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 673.217832][ T24] audit: type=1400 audit(672.390:119): avc: denied { module_request } for pid=3385 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 674.158085][ T24] audit: type=1400 audit(673.330:120): avc: denied { sys_module } for pid=3385 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 680.554476][ T24] audit: type=1400 audit(679.720:121): avc: denied { create } for pid=3385 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 680.568762][ T24] audit: type=1400 audit(679.730:122): avc: denied { create } for pid=3384 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 681.168685][ T24] audit: type=1400 audit(680.340:123): avc: denied { write } for pid=3384 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 681.272005][ T3384] rdma_rxe: Failed to create IPv4 UDP tunnel [ 681.288839][ T24] audit: type=1400 audit(680.450:124): avc: denied { read } for pid=3384 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 681.522905][ T3385] rxe_eth0 speed is unknown, defaulting to 1000 [ 681.593362][ T3385] rxe_eth0 speed is unknown, defaulting to 1000 [ 681.673022][ T3385] rxe_eth0 speed is unknown, defaulting to 1000 [ 689.932935][ T48] rxe_eth0 speed is unknown, defaulting to 1000 [ 689.962231][ T3385] infiniband rxe0: set active [ 689.962732][ T3385] infiniband rxe0: added rxe_eth0 [ 691.035706][ T3385] RDS/IB: rxe0: added [ 691.039119][ T3385] smc: adding ib device rxe0 with port count 1 [ 691.092573][ T3385] smc: ib device rxe0 port 1 has no pnetid [ 691.106334][ T48] rxe_eth0 speed is unknown, defaulting to 1000 [ 691.181097][ T3385] rxe_eth0 speed is unknown, defaulting to 1000 [ 698.434169][ T3385] rxe_eth0 speed is unknown, defaulting to 1000 [ 699.242045][ T48] rxe_eth0 speed is unknown, defaulting to 1000 [ 703.184215][ T24] audit: type=1400 audit(702.360:125): avc: denied { write } for pid=3426 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 707.586900][ T3384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 707.901150][ T24] audit: type=1400 audit(707.070:126): avc: denied { write } for pid=3433 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 708.034183][ T3384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 722.543193][ T3384] hsr_slave_0: entered promiscuous mode [ 722.593717][ T3384] hsr_slave_1: entered promiscuous mode [ 727.446232][ T3385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 727.664328][ T3385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 730.237237][ T24] audit: type=1400 audit(729.370:127): avc: denied { create } for pid=3384 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 730.238119][ T24] audit: type=1400 audit(729.400:128): avc: denied { write } for pid=3384 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 730.291978][ T24] audit: type=1400 audit(729.460:129): avc: denied { read } for pid=3384 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 730.382750][ T3384] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 730.556124][ T3384] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 730.605415][ T3384] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 730.698952][ T3384] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 730.748241][ T3384] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 730.877422][ T3384] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 730.928438][ T3384] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 731.064859][ T3384] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 740.502117][ T3385] hsr_slave_0: entered promiscuous mode [ 740.519215][ T3385] hsr_slave_1: entered promiscuous mode [ 740.541660][ T3385] debugfs: 'hsr0' already exists in 'hsr' [ 740.544895][ T3385] Cannot create hsr debugfs directory [ 742.998582][ T3384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 748.077823][ T3385] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 748.334543][ T3385] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 748.403216][ T3385] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 748.504849][ T3385] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 748.562803][ T3385] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 748.684508][ T3385] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 748.753544][ T3385] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 748.859169][ T3385] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 762.609120][ T3385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 796.565476][ T3384] veth0_vlan: entered promiscuous mode [ 797.123701][ T3384] veth1_vlan: entered promiscuous mode [ 798.892864][ T3384] veth0_macvtap: entered promiscuous mode [ 799.143724][ T3384] veth1_macvtap: entered promiscuous mode [ 801.013661][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.073952][ T3505] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.075454][ T3505] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.076081][ T3505] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.327177][ T24] audit: type=1400 audit(802.500:130): avc: denied { mount } for pid=3384 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 803.451997][ T24] audit: type=1400 audit(802.620:131): avc: denied { mounton } for pid=3384 comm="syz-executor" path="/syzkaller.oaYG0P/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 803.603382][ T24] audit: type=1400 audit(802.770:132): avc: denied { mount } for pid=3384 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 803.842347][ T24] audit: type=1400 audit(803.000:133): avc: denied { mounton } for pid=3384 comm="syz-executor" path="/syzkaller.oaYG0P/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 803.974016][ T24] audit: type=1400 audit(803.140:134): avc: denied { mounton } for pid=3384 comm="syz-executor" path="/syzkaller.oaYG0P/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 804.333466][ T24] audit: type=1400 audit(803.490:135): avc: denied { unmount } for pid=3384 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 804.473968][ T24] audit: type=1400 audit(803.630:136): avc: denied { mounton } for pid=3384 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1548 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 804.551697][ T24] audit: type=1400 audit(803.710:137): avc: denied { mount } for pid=3384 comm="syz-executor" name="/" dev="gadgetfs" ino=3769 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 808.023808][ T24] audit: type=1400 audit(807.170:138): avc: denied { mounton } for pid=3384 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 808.024573][ T24] audit: type=1400 audit(807.190:139): avc: denied { mount } for pid=3384 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 808.997313][ T3384] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 809.845938][ T24] audit: type=1400 audit(809.020:140): avc: denied { read } for pid=3384 comm="syz-executor" name="loop0" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 809.869299][ T24] audit: type=1400 audit(809.040:141): avc: denied { open } for pid=3384 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 809.956798][ T24] audit: type=1400 audit(809.130:142): avc: denied { ioctl } for pid=3384 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=636 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 816.246701][ T3385] veth0_vlan: entered promiscuous mode [ 816.788010][ T3385] veth1_vlan: entered promiscuous mode [ 817.953086][ T24] audit: type=1400 audit(817.110:143): avc: denied { read } for pid=3554 comm="syz.0.1" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 817.979004][ T24] audit: type=1400 audit(817.150:144): avc: denied { open } for pid=3554 comm="syz.0.1" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 818.086944][ T24] audit: type=1400 audit(817.250:145): avc: denied { ioctl } for pid=3554 comm="syz.0.1" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 818.704750][ T3385] veth0_macvtap: entered promiscuous mode [ 819.094132][ T3385] veth1_macvtap: entered promiscuous mode [ 822.361866][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.405799][ T3505] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.408426][ T3505] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.408979][ T3505] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.344431][ T24] audit: type=1400 audit(826.520:146): avc: denied { write } for pid=3559 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 836.281691][ T24] audit: type=1400 audit(835.410:147): avc: denied { write } for pid=3569 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 856.266118][ T24] audit: type=1400 audit(855.440:148): avc: denied { append } for pid=3582 comm="syz.0.5" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 856.877876][ T24] audit: type=1400 audit(856.050:149): avc: denied { create } for pid=3582 comm="syz.0.5" anonclass=[kvm-gmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 857.145973][ T24] audit: type=1400 audit(856.310:150): avc: denied { map } for pid=3582 comm="syz.0.5" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=4237 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 857.256254][ T24] audit: type=1400 audit(856.430:151): avc: denied { read } for pid=3582 comm="syz.0.5" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=4237 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 876.021645][ T24] audit: type=1400 audit(875.100:152): avc: denied { mmap_zero } for pid=3599 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 909.608131][ T24] audit: type=1400 audit(908.780:153): avc: denied { execute } for pid=3621 comm="syz.0.16" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=4872 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 928.864451][ T3642] KVM: debugfs: duplicate directory 3642-6 [ 929.185625][ T3642] KVM: debugfs: duplicate directory 3642-6 [ 931.752784][ T24] audit: type=1400 audit(930.870:154): avc: denied { write } for pid=3644 comm="syz.0.22" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 947.802497][ T24] audit: type=1400 audit(946.970:155): avc: denied { execute } for pid=3648 comm="syz.0.24" path=2F31322F233738202864656C6574656429 dev="tmpfs" ino=78 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 948.016666][ T24] audit: type=1400 audit(947.190:156): avc: denied { ioctl } for pid=3648 comm="syz.0.24" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 951.198606][ T24] audit: type=1400 audit(950.370:157): avc: denied { read } for pid=3653 comm="syz.1.25" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 951.248151][ T24] audit: type=1400 audit(950.420:158): avc: denied { open } for pid=3653 comm="syz.1.25" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 958.246244][ T24] audit: type=1400 audit(957.410:159): avc: denied { write } for pid=3658 comm="syz.1.26" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 967.347180][ T24] audit: type=1400 audit(966.520:160): avc: denied { append } for pid=3664 comm="syz.1.28" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 996.044349][ T24] audit: type=1400 audit(995.200:161): avc: denied { ioctl } for pid=3683 comm="syz.0.34" path="net:[4026532626]" dev="nsfs" ino=4026532626 ioctlcmd=0xae46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1048.973174][ T3719] kvm [3719]: Failed to find VMA for hva 0x20c79000 [ 1051.805268][ T24] audit: type=1400 audit(1050.980:162): avc: denied { write } for pid=3721 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1057.818872][ T24] audit: type=1400 audit(1056.990:163): avc: denied { write } for pid=3725 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1168.288950][ T3810] kvm [3810]: Failed to find VMA for hva 0x21016000 [ 1168.384489][ T3810] kvm [3810]: Failed to find VMA for hva 0x21016000 [ 1168.456234][ T3810] kvm [3810]: Failed to find VMA for hva 0x21016000 [ 1168.514871][ T3810] kvm [3810]: Failed to find VMA for hva 0x21016000 [ 1168.518000][ T3810] kvm [3810]: Failed to find VMA for hva 0x21016000 [ 1168.787382][ T3810] kvm [3810]: Failed to find VMA for hva 0x21016000 [ 1168.864561][ T3810] kvm [3810]: Failed to find VMA for hva 0x21016000 [ 1168.933085][ T3810] kvm [3810]: Failed to find VMA for hva 0x21016000 [ 1169.051518][ T3810] kvm [3810]: Failed to find VMA for hva 0x21016000 [ 1169.054645][ T3810] kvm [3810]: Failed to find VMA for hva 0x21016000 [ 1169.057606][ T3810] kvm [3810]: Failed to find VMA for hva 0x21016000 [ 1249.056353][ T24] audit: type=1400 audit(1248.210:164): avc: denied { map } for pid=3864 comm="syz.1.83" path="pipe:[2783]" dev="pipefs" ino=2783 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1249.135370][ T24] audit: type=1400 audit(1248.300:165): avc: denied { execute } for pid=3864 comm="syz.1.83" path="pipe:[2783]" dev="pipefs" ino=2783 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1253.904026][ T3868] kvm [3868]: Failed to find VMA for hva 0x20c01000 [ 1253.955849][ T3868] kvm [3868]: Failed to find VMA for hva 0x20c01000 [ 1375.747663][ T3935] kvm [3935]: Failed to find VMA for hva 0x20db7000 [ 1635.421017][ T24] audit: type=1400 audit(1634.590:166): avc: denied { write } for pid=4090 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1642.293054][ T24] audit: type=1400 audit(1641.370:167): avc: denied { write } for pid=4097 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1776.908327][ T24] audit: type=1400 audit(1776.080:168): avc: denied { setattr } for pid=4216 comm="syz.1.184" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1901.737245][ T24] audit: type=1400 audit(1900.880:169): avc: denied { write } for pid=4300 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1908.163220][ T24] audit: type=1400 audit(1907.330:170): avc: denied { write } for pid=4310 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2074.641202][ T24] audit: type=1400 audit(2073.800:171): avc: denied { map } for pid=4428 comm="syz.0.246" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2074.716888][ T24] audit: type=1400 audit(2073.860:172): avc: denied { execute } for pid=4428 comm="syz.0.246" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2295.273753][ T4580] kvm [4579]: Unsupported guest access at: eeef0000 [ 2295.273753][ T4580] { Op0( 2), Op1( 0), CRn( 0), CRm( 6), Op2( 2), func_read }, [ 2351.197879][ T24] audit: type=1400 audit(2350.350:173): avc: denied { write } for pid=4619 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2360.677307][ T24] audit: type=1400 audit(2359.850:174): avc: denied { write } for pid=4629 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2595.373882][ T24] audit: type=1400 audit(2594.540:175): avc: denied { write } for pid=4794 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2603.614504][ T24] audit: type=1400 audit(2602.780:176): avc: denied { write } for pid=4806 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2830.068066][ T4954] kvm [4954]: Failed to find VMA for hva 0x20abb000 [ 2912.472963][ T24] audit: type=1400 audit(2911.630:177): avc: denied { ioctl } for pid=5019 comm="syz.0.411" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=28487 ioctlcmd=0xae46 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2935.838215][ T5038] debugfs: 'vgic-its-state@8080000' already exists in '5038-4' [ 2981.645211][ T24] audit: type=1400 audit(2980.820:178): avc: denied { write } for pid=5070 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2989.220748][ T24] audit: type=1400 audit(2988.390:179): avc: denied { write } for pid=5080 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3057.303351][ T24] audit: type=1400 audit(3056.430:180): avc: denied { write } for pid=5125 comm="syz.0.441" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=30119 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 3183.074818][ T5209] kvm [5209]: Failed to find VMA for hva 0x20e31000 [ 3200.876810][ T24] audit: type=1400 audit(3200.030:181): avc: denied { write } for pid=5220 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3207.332684][ T24] audit: type=1400 audit(3206.460:182): avc: denied { write } for pid=5223 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3255.475576][ T5227] rxe_eth0 speed is unknown, defaulting to 1000 [ 3267.353199][ T5231] rxe_eth0 speed is unknown, defaulting to 1000 [ 3300.237184][ T5227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3301.257672][ T5227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3314.604078][ T5231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3315.667880][ T5231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3329.894700][ T5227] hsr_slave_0: entered promiscuous mode [ 3329.954518][ T5227] hsr_slave_1: entered promiscuous mode [ 3329.985065][ T5227] debugfs: 'hsr0' already exists in 'hsr' [ 3329.985472][ T5227] Cannot create hsr debugfs directory [ 3343.085276][ T5231] hsr_slave_0: entered promiscuous mode [ 3343.125338][ T5231] hsr_slave_1: entered promiscuous mode [ 3343.159018][ T5231] debugfs: 'hsr0' already exists in 'hsr' [ 3343.202802][ T5231] Cannot create hsr debugfs directory [ 3346.057928][ T5227] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 3346.386267][ T5227] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 3346.543484][ T5227] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 3346.795752][ T5227] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3346.838624][ T5227] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 3347.158266][ T5227] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 3347.237870][ T5227] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 3347.436765][ T5227] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 3358.758711][ T5231] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 3359.164915][ T5231] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 3359.247937][ T5231] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 3359.547291][ T5231] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3359.629001][ T5231] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 3359.789198][ T5231] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 3359.918058][ T5231] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 3360.243508][ T5231] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 3374.262836][ T5227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3386.621996][ T5231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3457.035524][ T24] audit: type=1400 audit(3456.190:183): avc: denied { write } for pid=5363 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3466.570764][ T24] audit: type=1400 audit(3465.720:184): avc: denied { write } for pid=5372 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3476.816618][ T5227] veth0_vlan: entered promiscuous mode [ 3477.577914][ T5227] veth1_vlan: entered promiscuous mode [ 3481.146061][ T5227] veth0_macvtap: entered promiscuous mode [ 3481.567068][ T5227] veth1_macvtap: entered promiscuous mode [ 3484.826936][ T2185] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3484.827664][ T2185] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3484.828172][ T2185] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3484.828686][ T2185] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3489.292868][ T5231] veth0_vlan: entered promiscuous mode [ 3490.412294][ T5231] veth1_vlan: entered promiscuous mode [ 3493.535900][ T5231] veth0_macvtap: entered promiscuous mode [ 3494.464082][ T5231] veth1_macvtap: entered promiscuous mode [ 3498.011754][ T3432] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3498.012565][ T3432] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3498.013179][ T3432] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3498.013790][ T3432] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3538.629067][ T5238] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3539.726638][ T5238] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3540.564247][ T5238] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3541.634344][ T5238] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3561.044124][ T5238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3561.882392][ T5238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3562.228470][ T5238] bond0 (unregistering): Released all slaves [ 3586.938916][ T24] audit: type=1400 audit(3586.110:185): avc: denied { write } for pid=5413 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3587.313361][ T5238] hsr_slave_0: left promiscuous mode [ 3587.452970][ T5238] hsr_slave_1: left promiscuous mode [ 3588.261582][ T5238] veth1_macvtap: left promiscuous mode [ 3588.262910][ T5238] veth0_macvtap: left promiscuous mode [ 3588.265608][ T5238] veth1_vlan: left promiscuous mode [ 3588.267334][ T5238] veth0_vlan: left promiscuous mode [ 3595.313948][ T24] audit: type=1400 audit(3594.490:186): avc: denied { write } for pid=5421 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3614.586006][ T3218] 8021q: adding VLAN 0 to HW filter on device eth1 [ 3633.081901][ T5409] rxe_eth0 speed is unknown, defaulting to 1000 [ 3640.870693][ T24] audit: type=1400 audit(3639.980:187): avc: denied { write } for pid=5435 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3647.278304][ T24] audit: type=1400 audit(3646.420:188): avc: denied { write } for pid=5439 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3649.841316][ T5416] rxe_eth0 speed is unknown, defaulting to 1000 [ 3651.628590][ T3218] 8021q: adding VLAN 0 to HW filter on device eth2 [ 3669.383329][ T24] audit: type=1400 audit(3668.540:189): avc: denied { write } for pid=5445 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3678.081568][ T24] audit: type=1400 audit(3677.240:190): avc: denied { write } for pid=5451 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3684.956828][ T3218] 8021q: adding VLAN 0 to HW filter on device eth3 [ 3710.322044][ T24] audit: type=1400 audit(3709.480:191): avc: denied { write } for pid=5470 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3713.287261][ T5409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3713.703904][ T5409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3717.723964][ T24] audit: type=1400 audit(3716.880:192): avc: denied { write } for pid=5478 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3723.117235][ T3218] 8021q: adding VLAN 0 to HW filter on device eth4 [ 3728.786349][ T5416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3730.523035][ T5416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3747.386592][ T24] audit: type=1400 audit(3746.560:193): avc: denied { write } for pid=5495 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3752.824731][ T5409] hsr_slave_0: entered promiscuous mode [ 3752.937979][ T5409] hsr_slave_1: entered promiscuous mode [ 3753.092236][ T5409] debugfs: 'hsr0' already exists in 'hsr' [ 3753.092656][ T5409] Cannot create hsr debugfs directory [ 3756.533505][ T24] audit: type=1400 audit(3755.690:194): avc: denied { write } for pid=5502 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3774.552993][ T5416] hsr_slave_0: entered promiscuous mode [ 3774.644176][ T5416] hsr_slave_1: entered promiscuous mode [ 3774.721695][ T5416] debugfs: 'hsr0' already exists in 'hsr' [ 3774.722074][ T5416] Cannot create hsr debugfs directory [ 3780.737600][ T5409] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 3781.206012][ T5409] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 3783.358177][ T5409] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 3783.685079][ T5409] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3785.155761][ T5409] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 3785.479288][ T5409] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 3785.494099][ T24] audit: type=1400 audit(3784.660:195): avc: denied { write } for pid=5516 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3787.265737][ T5409] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 3787.588354][ T5409] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 3793.664015][ T24] audit: type=1400 audit(3792.840:196): avc: denied { write } for pid=5526 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3803.394369][ T5416] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 3803.968761][ T5416] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 3804.271159][ T5416] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 3804.865226][ T5416] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3804.969220][ T5416] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 3805.604659][ T5416] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 3805.853004][ T5416] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 3806.384250][ T5416] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 3819.961244][ T24] audit: type=1400 audit(3819.120:197): avc: denied { write } for pid=5542 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3832.803689][ T24] audit: type=1400 audit(3831.870:198): avc: denied { write } for pid=5551 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3835.034384][ T5409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3846.964794][ T5416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3851.079041][ T24] audit: type=1400 audit(3850.220:199): avc: denied { write } for pid=5558 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3862.828636][ T24] audit: type=1400 audit(3861.960:200): avc: denied { write } for pid=5567 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3889.968164][ T24] audit: type=1400 audit(3889.090:201): avc: denied { write } for pid=5576 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3901.732135][ T24] audit: type=1400 audit(3900.860:202): avc: denied { write } for pid=5585 comm="rm" name="hook-state" dev="tmpfs" ino=44 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3971.912145][ T26] INFO: task syz.2.470:5388 blocked for more than 430 seconds. [ 3971.913026][ T26] Not tainted syzkaller #0 [ 3971.913293][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3971.913633][ T26] task:syz.2.470 state:D stack:0 pid:5388 tgid:5388 ppid:5227 task_flags:0x400040 flags:0x00000011 [ 3971.916402][ T26] Call trace: [ 3971.916742][ T26] __switch_to+0x5e4/0xb74 (T) [ 3971.918087][ T26] __schedule+0x1e0c/0x38a4 [ 3971.918498][ T26] schedule+0x1b4/0x274 [ 3971.918829][ T26] schedule_timeout+0x68/0x1e4 [ 3971.919205][ T26] wait_for_completion+0x1bc/0x418 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 3972.086860][ T26] __synchronize_srcu+0x1cc/0x20c [ 3972.087353][ T26] synchronize_srcu+0x668/0x8dc [ 3972.087626][ T26] mmu_notifier_unregister+0x33c/0x444 [ 3972.087901][ T26] kvm_put_kvm+0x69c/0xbbc [ 3972.088252][ T26] kvm_vm_release+0x58/0x78 [ 3972.088560][ T26] __fput+0x4b0/0x97c [ 3972.088874][ T26] ____fput+0x20/0x30 [ 3972.089199][ T26] task_work_run+0x1b8/0x254 [ 3972.110963][ T26] exit_to_user_mode_loop+0x110/0x188 [ 3972.111465][ T26] el0_svc+0x18c/0x240 [ 3972.111791][ T26] el0t_64_sync_handler+0x68/0xdc [ 3972.112131][ T26] el0t_64_sync+0x198/0x19c [ 3972.113353][ T26] INFO: task syz.3.471:5397 blocked for more than 430 seconds. [ 3972.113613][ T26] Not tainted syzkaller #0 [ 3972.113760][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3972.113873][ T26] task:syz.3.471 state:D stack:0 pid:5397 tgid:5397 ppid:5231 task_flags:0x400040 flags:0x00000011 [ 3972.114351][ T26] Call trace: [ 3972.114474][ T26] __switch_to+0x5e4/0xb74 (T) [ 3972.114831][ T26] __schedule+0x1e0c/0x38a4 [ 3972.115160][ T26] schedule+0x1b4/0x274 [ 3972.115467][ T26] schedule_timeout+0x68/0x1e4 [ 3972.115787][ T26] wait_for_completion+0x1bc/0x418 [ 3972.116093][ T26] __synchronize_srcu+0x1cc/0x20c [ 3972.116378][ T26] synchronize_srcu+0x668/0x8dc [ 3972.116641][ T26] mmu_notifier_unregister+0x33c/0x444 [ 3972.116915][ T26] kvm_put_kvm+0x69c/0xbbc [ 3972.117282][ T26] kvm_vm_release+0x58/0x78 [ 3972.117578][ T26] __fput+0x4b0/0x97c [ 3972.117909][ T26] ____fput+0x20/0x30 [ 3972.118220][ T26] task_work_run+0x1b8/0x254 [ 3972.118533][ T26] exit_to_user_mode_loop+0x110/0x188 [ 3972.118899][ T26] el0_svc+0x18c/0x240 [ 3972.119235][ T26] el0t_64_sync_handler+0x68/0xdc [ 3972.346622][ T26] el0t_64_sync+0x198/0x19c [ 3972.353733][ T26] [ 3972.353733][ T26] Showing all locks held in the system: [ 3972.354175][ T26] locks held by khungtaskd/26: 1, last CPU#0: [ 3972.354456][ T26] #0: ffff800088a7e858 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x4c/0x188 [ 3972.356115][ T26] locks held by klogd/3181: 1, last CPU#0: [ 3972.356355][ T26] #0: ffff800088a7e858 (rcu_read_lock){....}-{1:3}, at: sock_def_readable+0xd4/0x7f0 [ 3972.357280][ T26] locks held by getty/3246: 2, on CPU#0: [ 3972.357479][ T26] #0: 7ff00000134720a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x40/0x50 [ 3972.358326][ T26] #1: d3ff80008d7db2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x314/0x11f8 [ 3972.359216][ T26] locks held by sshd-session/3377: 1, last CPU#0: [ 3972.441110][ T26] #0: fff0000074c21ea0 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x364/0x38a4 [ 3972.442172][ T26] locks held by syz-executor/3378: 2, last CPU#0: [ 3972.442389][ T26] #0: b5f000001655d778 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0xf4/0xb64 [ 3972.443191][ T26] #1: ffff800088a7e858 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x50/0x22c [ 3972.444058][ T26] locks held by syz.0.468/5211: 2, last CPU#0: [ 3972.444246][ T26] #0: ffff800088acc330 (srcu){.+.+}-{0:0}, at: __mmu_notifier_release+0x4e8/0x87c [ 3972.445218][ T26] #1: 4cf00000208ad518 (&kvm->srcu){.+.+}-{0:0}, at: kvm_mmu_notifier_release+0x50/0xc4 [ 3972.446067][ T26] locks held by kworker/u4:5/5243: 2, last CPU#0: [ 3972.446257][ T26] #0: 20f000000dc34140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b8 [ 3972.447063][ T26] #1: ffff80008f727ce8 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b8 [ 3972.447866][ T26] locks held by kworker/u4:10/5326: 2, on CPU#0: [ 3972.448069][ T26] #0: 20f000000dc34140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b8 [ 3972.448804][ T26] #1: ffff80008f9a7ce8 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b8 [ 3972.622914][ T26] locks held by kworker/u4:11/5553: 3, last CPU#0: [ 3972.623235][ T26] #0: 20f000000dc34140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xadc/0x16b8 [ 3972.624124][ T26] #1: ffff80008f757ce8 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xafc/0x16b8 [ 3972.624923][ T26] #2: 8bf000001fbdd258 (&devlink->lock_key){+.+.}-{4:4}, at: devl_trylock+0x24/0x34 [ 3972.625707][ T26] locks held by modprobe/5625: 1, last CPU#0: [ 3972.625893][ T26] #0: e4f000002a2e37f8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1b0/0xb64 [ 3972.626645][ T26] locks held by kworker/u4:5/5626: 2, last CPU#0: [ 3972.626860][ T26] #0: 1ff000002bf45a28 (&sig->cred_guard_mutex){+.+.}-{4:4}, at: bprm_execve+0x78/0x18f4 [ 3972.627666][ T26] #1: ffff800088b1f928 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_bprm_check_security+0x140/0x1cc [ 3972.711990][ T26] [ 3972.712230][ T26] ============================================= [ 3972.712230][ T26] [ 3972.713084][ T26] Kernel panic - not syncing: hung_task: blocked tasks [ 3972.718573][ T26] CPU: 0 UID: 0 PID: 26 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 3972.720443][ T26] Hardware name: linux,dummy-virt (DT) [ 3972.721573][ T26] Call trace: [ 3972.722443][ T26] show_stack+0x2c/0x3c (C) [ 3972.723612][ T26] __dump_stack+0x30/0x40 [ 3972.724687][ T26] dump_stack_lvl+0x30/0x12c [ 3972.725820][ T26] dump_stack+0x1c/0x28 [ 3972.726901][ T26] vpanic+0x4cc/0x844 [ 3972.727848][ T26] vpanic+0x0/0x844 [ 3972.728797][ T26] hung_task_panic+0x0/0x2c [ 3972.729784][ T26] kthread+0x4cc/0x514 [ 3972.730841][ T26] ret_from_fork+0x10/0x20 [ 3972.732804][ T26] Kernel Offset: disabled [ 3972.733684][ T26] CPU features: 0x0,00000000,00d1802f,df188f42,0afff61f [ 3972.735059][ T26] Memory Limit: none [ 3972.737432][ T26] Rebooting in 86400 seconds..