last executing test programs: 2m0.190664534s ago: executing program 1 (id=1225): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) r3 = eventfd2(0x0, 0x0) close(r3) write$eventfd(r3, &(0x7f0000000180)=0x5, 0xfffffde3) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0xf0b, 0x5000, 0x0, r3, 0x5}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000080)={0x0, 0x0, 0x28}, 0x0, 0x0) r7 = syz_kvm_vgic_v3_setup(r5, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000100)={0x8}) ioctl$KVM_GET_DEVICE_ATTR(r7, 0x4018aee2, &(0x7f0000000240)=@attr_arm64={0x0, 0x7, 0x4, &(0x7f0000000200)=0x8000}) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x1fe, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x1fe, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) 1m50.100047653s ago: executing program 1 (id=1226): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000005c0), 0x20000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) munmap(&(0x7f0000611000/0x2000)=nil, 0x2000) write$eventfd(r3, 0x0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000080)=@attr_arm64={0x0, 0x5, 0x5, &(0x7f0000000000)=0x6}) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r7, 0x4018aee2, &(0x7f0000000140)=@attr_irq_timer={0x0, 0x1, 0x1, &(0x7f00000000c0)=0x10f}) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x2000005, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x4f832, 0xffffffffffffffff, 0x1000000) r8 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil) r10 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r11, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)={0xef000000, 0x1000, 0x2}}) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r11, r12, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000140)=[{0x0, &(0x7f0000000180)=[@smc={0x1e, 0x40, {0xef000000, [0x0, 0x1, 0x2, 0x3, 0x4]}}, @mrs={0xbe, 0x18, {0x603000000013c807}}], 0x58}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) syz_kvm_add_vcpu$arm64(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="92000000000000002800000000000000010000000000000001000000000000000100000000000000aa0000000000000028000000000000000c04000000000e0000000e00080002000000000000000000"], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r9, 0x1, 0x100) ioctl$KVM_CAP_HALT_POLL(r6, 0x4068aea3, &(0x7f0000000240)={0xb6, 0x0, 0x2}) ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) 1m38.410390062s ago: executing program 1 (id=1227): mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xc, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x380000f, 0x11, r3, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, r4, 0x8, 0x80010, 0xffffffffffffffff, 0x0) r5 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000000)=[@uexit={0x0, 0x18, 0x9}], 0x18}, &(0x7f0000000080)=[@featur1={0x1, 0x2}], 0x1) ioctl$KVM_INTERRUPT(r5, 0x4004ae86, &(0x7f00000000c0)=0xf) 1m32.6724779s ago: executing program 1 (id=1228): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000180)=[@memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x2000, 0x0, 0x2}}, @eret={0xe6, 0x18, 0x6a}, @msr={0x14, 0x20, {0x603000000013de92, 0x100}}, @its_setup={0x82, 0x28, {0x1, 0x3, 0x259}}, @eret={0xe6, 0x18, 0x5}, @irq_setup={0x46, 0x18, {0x3, 0x1c1}}, @hvc={0x32, 0x40, {0x80000000, [0x873, 0x0, 0x7, 0x9, 0x6]}}, @irq_setup={0x46, 0x18, {0x4, 0x6c}}, @irq_setup={0x46, 0x18, {0x3, 0x311}}, @irq_setup={0x46, 0x18, {0x3, 0x6f}}, @irq_setup={0x46, 0x18, {0x1, 0x3af}}, @its_setup={0x82, 0x28, {0x0, 0x0, 0xe1}}, @eret={0xe6, 0x18, 0x2}, @hvc={0x32, 0x40, {0x84000013, [0x6, 0x324, 0x2, 0x2, 0x80000000000]}}, @mrs={0xbe, 0x18, {0x603000000013df46}}, @smc={0x1e, 0x40, {0x8000, [0x0, 0x0, 0x9, 0x101, 0x2]}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x20020, 0x5, 0xe}}, @its_setup={0x82, 0x28, {0x2, 0x4, 0x26e}}, @its_setup={0x82, 0x28, {0x2, 0x1, 0x1e4}}, @code={0xa, 0x9c, {"e0a79ad20000b0f2a10180d2e20180d2030180d2040180d2020000d440ad85d200a0b0f2410180d2a20180d2630180d2040180d2020000d40000c03c007008d5007008d5007008d500ee9bd20000b8f2810180d2e20080d2230080d2c40180d2020000d40020bf0de04f85d20020b8f2c10180d2e20080d2c30080d2040080d2020000d40000a00d"}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80c0000, 0x300, 0x7, 0xc}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0xc00, 0x6, 0xa}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x2000, 0x7aaf, 0x3}}, @msr={0x14, 0x20, {0x603000000013deac, 0x3}}, @irq_setup={0x46, 0x18, {0x4, 0x223}}, @hvc={0x32, 0x40, {0x84000010, [0x7, 0x8, 0xe, 0x5, 0x3]}}, @smc={0x1e, 0x40, {0x84000001, [0x5, 0x5, 0xf5, 0xfffffffffffffff8, 0x5]}}, @smc={0x1e, 0x40, {0xc4000005, [0xfffffffffffffffe, 0xffff, 0x4, 0x6d63, 0x8000]}}, @irq_setup={0x46, 0x18, {0x0, 0x10c}}], 0x4f4}, &(0x7f0000000680)=[@featur2={0x1, 0x11}], 0x1) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000700)=@arm64_sve={0x6080000000150000, &(0x7f00000006c0)=0xf}) ioctl$KVM_SET_DEVICE_ATTR_vm(r1, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)={0x3, 0x1000, 0x2}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$arm64(r1, r3, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000140)=[{0x0, &(0x7f0000000000)=ANY=[@ANYRES64=r4, @ANYRESDEC=r1, @ANYRES32=r0, @ANYRES64=r4], 0x40}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m21.518993874s ago: executing program 1 (id=1229): r0 = openat$kvm(0x0, &(0x7f0000000180), 0x0, 0x0) (async, rerun: 64) r1 = openat$kvm(0x0, &(0x7f00000000c0), 0x909483, 0x0) (rerun: 64) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x8) ioctl$KVM_ARM_VCPU_INIT(r3, 0x4020aeae, &(0x7f0000000080)={0x0, 0xb}) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000140)=@arm64_sve_vls={0x606000000015ffff, 0x0}) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x5) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000000)={0xd000, 0x11c000, 0x1}) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) eventfd2(0x7, 0x80000) r6 = openat$kvm(0x0, &(0x7f0000000080), 0x20200, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000027000/0x13000)=nil, 0x930, 0x3, 0x4102932, 0xffffffffffffffff, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f0000000240)="fb4149dd033be3ac2cc4a22332fdaa8de0418df24200000000a6ab8031d1dfd92f0000000001ffffffff9610fbff77521ce10d8f6b69d22627e700", 0x0, 0xffffffffffffffca) r9 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f00000000c0)={0x4, 0xffffffffffffffff, 0x1}) (async) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) (async) r10 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x1) ioctl$KVM_ARM_VCPU_INIT(r5, 0x4020aeae, &(0x7f0000000080)={0x5, 0x20}) (async) ioctl$KVM_SET_ONE_REG(r12, 0x4010aeac, &(0x7f0000000140)=@arm64_extra={0x603000000013df19, &(0x7f0000000100)=0x3ff}) (async) syz_kvm_setup_cpu$arm64(r11, r12, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000180)=[{0x0, 0x0}], 0x1, 0x0, &(0x7f00000001c0)=[@featur1={0x1, 0x41}], 0x1) 1m10.909622366s ago: executing program 1 (id=1230): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) r4 = openat$kvm(0x0, &(0x7f00000000c0), 0x264040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f00000001c0)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x6, 0x2, &(0x7f0000000380)=0x81}) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000200)=@attr_other={0x0, 0x8, 0x80, &(0x7f0000000040)=0xc}) r7 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000140)={0x0, 0x0}, 0x0, 0xaa) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x7fffffffffffffff) r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r8, 0x3, 0x11, r3, 0x0) mmap$KVM_VCPU(&(0x7f000000a000/0x1000)=nil, r8, 0x3, 0x11, r7, 0x0) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x18b080, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x4) r10 = syz_kvm_vgic_v3_setup(0xffffffffffffffff, 0x1, 0x40) ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r11 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_ARM_VCPU_INIT(0xffffffffffffffff, 0x4020aeae, 0x0) r12 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil) r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f00000006c0)={0x0, &(0x7f0000000300)=ANY=[], 0x28}, 0x0, 0x0) syz_kvm_vgic_v3_setup(0xffffffffffffffff, 0x1, 0x100) r14 = openat$kvm(0x0, &(0x7f0000000280), 0x101601, 0x0) r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0) r16 = syz_kvm_setup_syzos_vm$arm64(r15, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r16, &(0x7f0000000080)={0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1400000000000000200000000000000081c01300"], 0x37c}, 0x0, 0x0) ioctl$KVM_RUN(r13, 0xae80, 0x0) 49.589711821s ago: executing program 0 (id=1232): r0 = openat$kvm(0x0, &(0x7f0000000240), 0xca680, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="82000000000000002800000000000000010000000000000003000000000000000200000000000000aa0000000000000028000000000000000e05000000000400001000000000020000000000000101"], 0x50}, 0x0, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000180), 0x140, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0x40049409, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_ARM_VCPU_INIT(r7, 0x4020aeae, &(0x7f00000000c0)={0x5, 0x9}) ioctl$KVM_SET_ONE_REG(r7, 0x4010aeac, &(0x7f0000000000)=@arm64_sys={0x603000000013c028, &(0x7f0000000140)=0x6}) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 38.316803196s ago: executing program 0 (id=1233): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x10201, 0x2, 0x4, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000080)={0x4, 0x5}) ioctl$KVM_HAS_DEVICE_ATTR_vm(r0, 0x4018aee3, &(0x7f0000000100)=@attr_other={0x0, 0x8, 0x9, &(0x7f00000000c0)=0x100000000}) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000180)=@attr_arm64={0x0, 0x5, 0x1, &(0x7f0000000140)=0x438}) ioctl$KVM_RUN(r2, 0xae80, 0x0) close(r2) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000001c0)={0x3, 0xffffffffffffffff}) close(r4) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x10000000000000) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f0000000200)={0xb6, 0x0, 0x6}) close(r4) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000280)={0x2, 0x0, [{0x9, 0x5, 0x0, 0x0, @adapter={0x8, 0x5, 0xfffffffffffffff9, 0x1000, 0x5}}, {0xb0f8, 0x0, 0x0, 0x0, @sint={0xc9a, 0x1}}]}) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x82100, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x80, 0x0) syz_kvm_setup_cpu$arm64(r6, r2, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000580)=[{0x0, &(0x7f0000000380)=[@code={0xa, 0x84, {"000028d5008008d500ee94d20000b0f2c10180d2c20180d2e30080d2c40080d2020000d4007008d5000020ab007008d5a01b8bd20080b0f2610180d2c20180d2030080d2440180d2020000d4008008d5000028d5e0ef9fd200c0b8f2610080d2420080d2830180d2040080d2020000d4"}}, @eret={0xe6, 0x18, 0x6435}, @its_send_cmd={0xaa, 0x28, {0xe, 0x1, 0x2, 0x3, 0x1, 0x0, 0x1}}, @memwrite={0x6e, 0x30, @generic={0xdddd0000, 0xe18, 0x4, 0x3}}, @smc={0x1e, 0x40, {0x1, [0x8, 0x7, 0x0, 0x10000, 0x8001]}}, @eret={0xe6, 0x18, 0x8}, @hvc={0x32, 0x40, {0x10, [0xf051, 0x9, 0xffffffff, 0x5]}}, @eret={0xe6, 0x18, 0x1}, @memwrite={0x6e, 0x30, @generic={0xf000, 0x327, 0x1, 0x4}}], 0x1d4}], 0x1, 0x0, &(0x7f00000005c0)=[@featur2={0x1, 0xa0}], 0x1) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000680)={0x0, &(0x7f0000000600)=[@its_send_cmd={0xaa, 0x28, {0xb, 0x0, 0x1, 0x9, 0x2b6, 0x1ff}}, @its_setup={0x82, 0x28, {0x3, 0x4, 0x54}}], 0x50}, &(0x7f00000006c0)=[@featur2], 0x1) ioctl$KVM_SET_SREGS(r9, 0x4000ae84, &(0x7f0000000700)={{0x3000, 0x1000, 0xc, 0xff, 0x0, 0x0, 0x20, 0x7, 0x5, 0x2, 0xd7, 0xf}, {0xe6e42006, 0x180000, 0x9, 0x9, 0xba, 0x8, 0x12, 0x1, 0x13, 0x4, 0x32, 0x6}, {0x4000, 0x1, 0xb, 0x3, 0xe, 0x0, 0x0, 0x40, 0x8, 0x51, 0x81, 0xa}, {0x3603c15765255690, 0xdddd0000, 0xa, 0x4, 0xca, 0x0, 0x5, 0x80, 0x1a, 0x81, 0x3f, 0x8}, {0xd000, 0x6000, 0x10, 0x20, 0x1, 0xf, 0x1, 0xf, 0x44, 0x8, 0x6, 0x2}, {0x5000, 0x4000, 0xf, 0x7, 0x2, 0xf7, 0xf8, 0x9, 0x0, 0x0, 0x6, 0x4}, {0x0, 0x6000, 0x10, 0xe3, 0x9, 0x5, 0x1, 0x14, 0x44, 0xc, 0xf9}, {0x4, 0x8080000, 0xb, 0x9, 0x6, 0x6, 0x0, 0x8, 0xd4, 0x0, 0x2, 0x9}, {0xdddd1000, 0x4}, {0x2, 0x3}, 0x80000009, 0x0, 0x1, 0x20, 0x5, 0x800, 0xffff1000, [0xa4, 0x7ff, 0x88, 0xf]}) r10 = syz_kvm_vgic_v3_setup(r8, 0x1, 0x220) close(r10) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000880)=@arm64_fp={0x6040000000100096, &(0x7f0000000840)=0x100000001}) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 27.191701445s ago: executing program 0 (id=1234): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CAP_ARM_SYSTEM_SUSPEND(r2, 0x4068aea3, &(0x7f0000000b40)) (async) r3 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r6 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r5, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x12, r5, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x49cc81, 0x0) (async) r7 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r8 = mmap$KVM_VCPU(&(0x7f0000fed000/0x3000)=nil, r7, 0x100000e, 0x8a031, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f00000000c0)="e51b9ce9a032a1ca7079bce9b3cf3ba9c7fbc2e7ab457eacc044b677d9d49c274b8d12fb382e0520cadbc6763409ffdb41911831b85a42b40c1689a8bf14be81eda4bae2d8c28ef8", 0x0, 0x48) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) (async) r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400400, 0x0) r11 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r12 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r10, 0xae04) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, r12, 0x0, 0x4f831, 0xffffffffffffffff, 0x0) (async) r13 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_RUN(r13, 0xae80, 0x1000000) (async) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) 17.808109216s ago: executing program 0 (id=1235): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x4f831, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) close(0x5) syz_kvm_vgic_v3_setup(r1, 0x0, 0x200) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000100)={0x8, 0xffffffffffffffff}) ioctl$KVM_GET_DEVICE_ATTR(r5, 0x4018aee2, &(0x7f0000000240)=@attr_arm64={0x0, 0x0, 0x2, 0x0}) close(r2) close(0x4) 7.073322401s ago: executing program 0 (id=1236): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f00000001c0)="fb52456012ab8ba1286bf6cd81002000d300447c7a837fc869cba6cd30f0050003000000d0020000ffffff000000f86636544e44c404000000006abf47d900", 0x0, 0x48) syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, 0x0, 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) (async) r4 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async) r5 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x40000000002) ioctl$KVM_ARM_VCPU_INIT(r7, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) (async) ioctl$KVM_SET_ONE_REG(r7, 0x4010aeac, &(0x7f00000000c0)=@arm64_sys={0x603000000013dce0, &(0x7f0000000000)=0x3ff}) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r7, 0x4018aee1, &(0x7f00000000c0)=@attr_pmu_init) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="14000000000000002000000000000000f2c4130000003060008000000000000014000000000000002000000000000000e0dc1300000030d11b"], 0x60}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r9, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000180)={0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="14000000000000002000000000000000f1c4130000003060008000000000000014000000000000002000000000000000f2c4130000003060008000000000000014000000000000002000000000000000e0dc130000003060c7"], 0x140}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r10, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) ioctl$KVM_RUN(r10, 0xae80, 0x0) (async, rerun: 64) ioctl$KVM_ARM_VCPU_INIT(r3, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) (async, rerun: 64) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f00000000c0)=@arm64_sys={0x603000000013dce0, &(0x7f0000000000)=0x3ff}) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f00000000c0)=@attr_pmu_init) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) r11 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4020ae46, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000000000000080009"]) ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r12, &(0x7f00000001c0), 0xff3c) 0s ago: executing program 0 (id=1237): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_vgic_v3_setup(r1, 0x3, 0xa0) ioctl$KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, 0xfffffffffffffffe) r3 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r5, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r5, 0x0) (async, rerun: 32) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000000)=@arm64={0x9, 0x7f, 0x0, '\x00', 0x7fff}) (rerun: 32) kernel console output (not intermixed with test programs): [ 402.440022][ T3133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 447.994641][ T3133] eql: remember to turn off Van-Jacobson compression on your slave devices Warning: Permanently added '[localhost]:47219' (ED25519) to the list of known hosts. [ 606.152236][ T25] audit: type=1400 audit(605.280:60): avc: denied { name_bind } for pid=3301 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 608.081274][ T25] audit: type=1400 audit(607.210:61): avc: denied { execute } for pid=3302 comm="sh" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 608.126968][ T25] audit: type=1400 audit(607.250:62): avc: denied { execute_no_trans } for pid=3302 comm="sh" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 627.610626][ T25] audit: type=1400 audit(626.740:63): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 627.643820][ T25] audit: type=1400 audit(626.760:64): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 627.728827][ T3302] cgroup: Unknown subsys name 'net' [ 627.779046][ T25] audit: type=1400 audit(626.910:65): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 628.176117][ T3302] cgroup: Unknown subsys name 'cpuset' [ 628.278907][ T3302] cgroup: Unknown subsys name 'rlimit' [ 629.207177][ T25] audit: type=1400 audit(628.330:66): avc: denied { setattr } for pid=3302 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 629.232465][ T25] audit: type=1400 audit(628.350:67): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 629.254791][ T25] audit: type=1400 audit(628.380:68): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 630.438612][ T3305] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 630.459980][ T25] audit: type=1400 audit(629.580:69): avc: denied { relabelto } for pid=3305 comm="mkswap" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 630.483017][ T25] audit: type=1400 audit(629.610:70): avc: denied { write } for pid=3305 comm="mkswap" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 630.661738][ T25] audit: type=1400 audit(629.790:71): avc: denied { read } for pid=3302 comm="syz-executor" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 630.680608][ T25] audit: type=1400 audit(629.800:72): avc: denied { open } for pid=3302 comm="syz-executor" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 630.724272][ T3302] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 678.290975][ T25] audit: type=1400 audit(677.420:73): avc: denied { execmem } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 681.874454][ T25] audit: type=1400 audit(681.000:74): avc: denied { read } for pid=3308 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 681.891979][ T25] audit: type=1400 audit(681.020:75): avc: denied { read } for pid=3309 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 681.929597][ T25] audit: type=1400 audit(681.040:76): avc: denied { open } for pid=3308 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 681.994095][ T25] audit: type=1400 audit(681.110:77): avc: denied { mounton } for pid=3309 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 682.240865][ T25] audit: type=1400 audit(681.360:78): avc: denied { module_request } for pid=3309 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 682.254803][ T25] audit: type=1400 audit(681.380:79): avc: denied { module_request } for pid=3308 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 683.432788][ T25] audit: type=1400 audit(682.560:80): avc: denied { sys_module } for pid=3308 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 712.164307][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 712.498589][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 713.230983][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 713.907424][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 725.527889][ T3309] hsr_slave_0: entered promiscuous mode [ 725.560089][ T3309] hsr_slave_1: entered promiscuous mode [ 726.448235][ T3308] hsr_slave_0: entered promiscuous mode [ 726.472784][ T3308] hsr_slave_1: entered promiscuous mode [ 726.509644][ T3308] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 726.517361][ T3308] Cannot create hsr debugfs directory [ 732.017915][ T25] audit: type=1400 audit(731.140:81): avc: denied { create } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 732.074823][ T25] audit: type=1400 audit(731.180:82): avc: denied { write } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 732.088143][ T25] audit: type=1400 audit(731.210:83): avc: denied { read } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 732.266820][ T3309] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 732.544776][ T3309] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 732.944154][ T3309] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 733.289582][ T3309] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 734.568459][ T3308] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 734.698292][ T3308] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 734.828189][ T3308] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 735.002282][ T3308] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 748.324029][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 749.823706][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 810.718377][ T3309] veth0_vlan: entered promiscuous mode [ 811.719042][ T3309] veth1_vlan: entered promiscuous mode [ 813.050720][ T3308] veth0_vlan: entered promiscuous mode [ 813.749501][ T3308] veth1_vlan: entered promiscuous mode [ 814.637668][ T3309] veth0_macvtap: entered promiscuous mode [ 815.149024][ T3309] veth1_macvtap: entered promiscuous mode [ 816.297861][ T3308] veth0_macvtap: entered promiscuous mode [ 816.821733][ T3308] veth1_macvtap: entered promiscuous mode [ 817.427065][ T3309] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.431891][ T3309] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.441154][ T3309] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.452276][ T3309] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.642257][ T3308] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.657136][ T3308] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.668924][ T3308] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.679281][ T3308] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.360809][ T25] audit: type=1400 audit(820.490:84): avc: denied { mount } for pid=3309 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 821.740829][ T25] audit: type=1400 audit(820.870:85): avc: denied { mounton } for pid=3309 comm="syz-executor" path="/syzkaller.VmAbQW/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 822.128390][ T25] audit: type=1400 audit(821.250:86): avc: denied { mount } for pid=3309 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 822.726505][ T25] audit: type=1400 audit(821.800:87): avc: denied { mounton } for pid=3309 comm="syz-executor" path="/syzkaller.VmAbQW/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 822.957146][ T25] audit: type=1400 audit(822.080:88): avc: denied { mounton } for pid=3309 comm="syz-executor" path="/syzkaller.VmAbQW/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 824.046166][ T25] audit: type=1400 audit(823.160:89): avc: denied { unmount } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 824.287890][ T25] audit: type=1400 audit(823.400:90): avc: denied { mounton } for pid=3309 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1546 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 824.452471][ T25] audit: type=1400 audit(823.580:91): avc: denied { mount } for pid=3309 comm="syz-executor" name="/" dev="gadgetfs" ino=3286 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 824.769731][ T25] audit: type=1400 audit(823.900:92): avc: denied { mount } for pid=3309 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 824.868224][ T25] audit: type=1400 audit(823.980:93): avc: denied { mounton } for pid=3309 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 826.242967][ T3309] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 827.876394][ T25] kauditd_printk_skb: 1 callbacks suppressed [ 827.896464][ T25] audit: type=1400 audit(826.990:95): avc: denied { read write } for pid=3309 comm="syz-executor" name="loop1" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 827.957347][ T25] audit: type=1400 audit(827.070:96): avc: denied { open } for pid=3309 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 828.018668][ T25] audit: type=1400 audit(827.140:97): avc: denied { ioctl } for pid=3309 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=638 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 831.764311][ T25] audit: type=1400 audit(830.890:98): avc: denied { write } for pid=3467 comm="syz.1.2" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 831.820124][ T25] audit: type=1400 audit(830.940:99): avc: denied { read } for pid=3468 comm="syz.0.1" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 831.952234][ T25] audit: type=1400 audit(831.000:100): avc: denied { open } for pid=3467 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 832.703120][ T25] audit: type=1400 audit(831.750:101): avc: denied { ioctl } for pid=3468 comm="syz.0.1" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 840.071579][ T25] audit: type=1400 audit(839.190:102): avc: denied { append } for pid=3476 comm="syz.1.3" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 849.556048][ T25] audit: type=1400 audit(848.660:103): avc: denied { execute } for pid=3479 comm="syz.0.4" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=3603 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 963.812808][ T25] audit: type=1400 audit(962.940:104): avc: denied { ioctl } for pid=3553 comm="syz.0.28" path="net:[4026532628]" dev="nsfs" ino=4026532628 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 998.099723][ T3576] kvm [3576]: Failed to find VMA for hva 0x21016000 [ 1037.232129][ T25] audit: type=1400 audit(1036.340:105): avc: denied { setattr } for pid=3600 comm="syz.0.42" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1094.057895][ T3636] kvm [3636]: Failed to find VMA for hva 0x21016000 [ 1094.129100][ T3636] kvm [3636]: Failed to find VMA for hva 0x21016000 [ 1233.384467][ T25] audit: type=1400 audit(1232.510:106): avc: denied { map } for pid=3748 comm="syz.1.83" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1286.818788][ T25] audit: type=1400 audit(1285.940:107): avc: denied { execute } for pid=3786 comm="syz.0.93" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1404.221346][ T3876] KVM: debugfs: duplicate directory 3876-5 [ 1962.710241][ T4242] kvm [4241]: Unsupported guest CP15 access at: 00000100 [000001d3] [ 1962.710241][ T4242] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 1962.749979][ T4242] kvm [4241]: Unsupported guest CP15 access at: 00000100 [000001db] [ 1962.749979][ T4242] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 1962.798058][ T4242] kvm [4241]: Unsupported guest CP15 access at: 00000100 [000001db] [ 1962.798058][ T4242] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 1962.860369][ T4242] kvm [4241]: Unsupported guest CP15 access at: 00000100 [000001db] [ 1962.860369][ T4242] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 1962.907859][ T4242] kvm [4241]: Unsupported guest CP15 access at: 00000100 [000001db] [ 1962.907859][ T4242] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 1962.969762][ T4242] kvm [4241]: Unsupported guest CP15 access at: 00000100 [000001db] [ 1962.969762][ T4242] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 1963.013742][ T4242] kvm [4241]: Unsupported guest CP15 access at: 00000100 [000001db] [ 1963.013742][ T4242] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 1963.114096][ T4242] kvm [4241]: Unsupported guest CP15 access at: 00000100 [000001db] [ 1963.114096][ T4242] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 1963.151750][ T4242] kvm [4241]: Unsupported guest CP15 access at: 00000100 [000001db] [ 1963.151750][ T4242] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 1990.770971][ T4258] kvm [4258]: Failed to find VMA for hva 0x21016000 [ 2026.883070][ T4275] kvm [4275]: Failed to find VMA for hva 0x208a1000 [ 2213.934801][ T4409] kvm [4409]: Failed to find VMA for hva 0x21016000 [ 2360.612128][ T4513] kvm [4512]: Unsupported guest access at: eeef0000 [ 2360.612128][ T4513] { Op0( 2), Op1( 7), CRn(15), CRm(13), Op2( 1), func_write }, [ 2535.291653][ T4638] kvm [4638]: Failed to find VMA for hva 0x20c01000 [ 2675.179987][ T4737] debugfs: File 'vgic-its-state@0' in directory '4737-4' already present! [ 2734.133429][ T4771] kvm [4771]: Failed to find VMA for hva 0x20c01000 [ 2816.261404][ T4824] kvm [4824]: Failed to find VMA for hva 0x20c01000 [ 2909.169352][ T4897] kvm [4897]: Failed to find VMA for hva 0x21016000 [ 2919.092948][ T4907] kvm [4907]: Failed to find VMA for hva 0x2101a000 [ 2921.347591][ T4907] kvm [4907]: Failed to find VMA for hva 0x20d8d000 [ 3075.790252][ T5021] kvm [5021]: Failed to find VMA for hva 0x20c01000 [ 3254.577767][ T5142] kvm [5142]: Failed to find VMA for hva 0x20c01000 [ 3371.678122][ T5229] kvm [5229]: Failed to find VMA for hva 0x20c01000 [ 3419.123897][ T5258] kvm [5258]: Failed to find VMA for hva 0x20d8d000 [ 3544.029204][ T5344] kvm [5344]: Failed to find VMA for hva 0x20d8d000 [ 3613.002134][ T5392] kvm [5391]: Unsupported guest CP15 access at: 00000100 [000001d3] [ 3613.002134][ T5392] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 3613.053510][ T5392] kvm [5391]: Unsupported guest CP15 access at: 00000100 [000001db] [ 3613.053510][ T5392] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 3613.102412][ T5392] kvm [5391]: Unsupported guest CP15 access at: 00000100 [000001db] [ 3613.102412][ T5392] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 3613.169307][ T5392] kvm [5391]: Unsupported guest CP15 access at: 00000100 [000001db] [ 3613.169307][ T5392] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 3613.252566][ T5392] kvm [5391]: Unsupported guest CP15 access at: 00000100 [000001db] [ 3613.252566][ T5392] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 3613.318996][ T5392] kvm [5391]: Unsupported guest CP15 access at: 00000100 [000001db] [ 3613.318996][ T5392] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 3613.371450][ T5392] kvm [5391]: Unsupported guest CP15 access at: 00000100 [000001db] [ 3613.371450][ T5392] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 3613.408700][ T5392] kvm [5391]: Unsupported guest CP15 access at: 00000100 [000001db] [ 3613.408700][ T5392] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 3729.701644][ T5471] kvm [5471]: Failed to find VMA for hva 0x20d8d000 [ 3765.821886][ T5495] kvm [5495]: Failed to find VMA for hva 0x21016000 [ 3832.508311][ T5536] KVM: debugfs: duplicate directory 5536-4 [ 3947.731990][ T5596] kvm [5596]: Failed to find VMA for hva 0x20d8d000 [ 3982.129120][ T5622] kvm [5618]: Unsupported guest CP15 access at: 00000100 [000001db] [ 3982.129120][ T5622] { Op0( 0), Op1( 7), CRn(15), CRm(12), Op2( 7), func_read }, [ 3982.189267][ T5622] kvm [5618]: Unsupported guest CP15 access at: 00000100 [000001db] [ 3982.189267][ T5622] { Op0( 0), Op1( 7), CRn(15), CRm(12), Op2( 7), func_read }, [ 3982.370022][ T5622] kvm [5618]: Unsupported guest CP15 access at: 00000100 [000001db] [ 3982.370022][ T5622] { Op0( 0), Op1( 7), CRn(15), CRm(12), Op2( 7), func_read }, [ 3982.421287][ T5622] kvm [5618]: Unsupported guest CP15 access at: 00000100 [000001db] [ 3982.421287][ T5622] { Op0( 0), Op1( 7), CRn(15), CRm(12), Op2( 7), func_read }, [ 3982.597881][ T5622] kvm [5618]: Unsupported guest CP15 access at: 00000100 [000001db] [ 3982.597881][ T5622] { Op0( 0), Op1( 7), CRn(15), CRm(12), Op2( 7), func_read }, [ 3982.618840][ T5622] kvm [5618]: Unsupported guest CP15 access at: 00000100 [000001db] [ 3982.618840][ T5622] { Op0( 0), Op1( 7), CRn(15), CRm(12), Op2( 7), func_read }, [ 3982.693265][ T5622] kvm [5618]: Unsupported guest CP15 access at: 00000100 [000001db] [ 3982.693265][ T5622] { Op0( 0), Op1( 7), CRn(15), CRm(12), Op2( 7), func_read }, [ 3982.759831][ T5622] kvm [5618]: Unsupported guest CP15 access at: 00000100 [000001db] [ 3982.759831][ T5622] { Op0( 0), Op1( 7), CRn(15), CRm(12), Op2( 7), func_read }, [ 3982.808330][ T5622] kvm [5618]: Unsupported guest CP15 access at: 00000100 [000001db] [ 3982.808330][ T5622] { Op0( 0), Op1( 7), CRn(15), CRm(12), Op2( 7), func_read }, [ 3982.901180][ T5622] kvm [5618]: Unsupported guest CP15 access at: 00000100 [000001db] [ 3982.901180][ T5622] { Op0( 0), Op1( 7), CRn(15), CRm(12), Op2( 7), func_read }, [ 4395.572790][ T5897] kvm [5897]: Failed to find VMA for hva 0x20d8d000 [ 4487.419923][ T5965] kvm [5965]: Failed to find VMA for hva 0x21016000 [ 4580.681956][ T6021] kvm [6021]: Failed to find VMA for hva 0x20c01000 [ 5090.589646][ T6386] kvm [6386]: Failed to find VMA for hva 0x20c01000 [ 5168.009971][ T6431] kvm [6430]: Unsupported guest access at: eeef0100 [ 5168.009971][ T6431] { Op0( 2), Op1( 7), CRn(15), CRm(13), Op2( 1), func_write }, [ 5239.259446][ T6477] kvm [6477]: Failed to find VMA for hva 0x2101a000 [ 5303.910857][ T6515] print_sys_reg_msg: 272 callbacks suppressed [ 5303.946902][ T6515] kvm [6513]: Unsupported guest CP15 access at: 00000100 [000001d3] [ 5303.946902][ T6515] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 5303.984365][ T6515] kvm [6513]: Unsupported guest CP15 access at: 00000100 [000001db] [ 5303.984365][ T6515] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 5304.014276][ T6515] kvm [6513]: Unsupported guest CP15 access at: 00000100 [000001db] [ 5304.014276][ T6515] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 5304.059166][ T6515] kvm [6513]: Unsupported guest CP15 access at: 00000100 [000001db] [ 5304.059166][ T6515] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 5304.083859][ T6515] kvm [6513]: Unsupported guest CP15 access at: 00000100 [000001db] [ 5304.083859][ T6515] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 5304.131083][ T6515] kvm [6513]: Unsupported guest CP15 access at: 00000100 [000001db] [ 5304.131083][ T6515] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 5304.177578][ T6515] kvm [6513]: Unsupported guest CP15 access at: 00000100 [000001db] [ 5304.177578][ T6515] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 5304.224623][ T6515] kvm [6513]: Unsupported guest CP15 access at: 00000100 [000001db] [ 5304.224623][ T6515] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 5304.278403][ T6515] kvm [6513]: Unsupported guest CP15 access at: 00000100 [000001db] [ 5304.278403][ T6515] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 5304.290335][ T6515] kvm [6513]: Unsupported guest CP15 access at: 00000100 [000001db] [ 5304.290335][ T6515] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 5332.689664][ T6532] print_sys_reg_msg: 20 callbacks suppressed [ 5332.720023][ T6532] kvm [6531]: Unsupported guest CP15 access at: 00000100 [000001d3] [ 5332.720023][ T6532] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 5332.748207][ T6532] kvm [6531]: Unsupported guest CP15 access at: 00000100 [000001db] [ 5332.748207][ T6532] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 5332.781679][ T6532] kvm [6531]: Unsupported guest CP15 access at: 00000100 [000001db] [ 5332.781679][ T6532] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 5332.840675][ T6532] kvm [6531]: Unsupported guest CP15 access at: 00000100 [000001db] [ 5332.840675][ T6532] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 5332.882616][ T6532] kvm [6531]: Unsupported guest CP15 access at: 00000100 [000001db] [ 5332.882616][ T6532] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 5332.929865][ T6532] kvm [6531]: Unsupported guest CP15 access at: 00000100 [000001db] [ 5332.929865][ T6532] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 5333.041895][ T6532] kvm [6531]: Unsupported guest CP15 access at: 00000100 [000001db] [ 5333.041895][ T6532] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 5333.178087][ T6532] kvm [6531]: Unsupported guest CP15 access at: 00000100 [000001db] [ 5333.178087][ T6532] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 5333.259842][ T6532] kvm [6531]: Unsupported guest CP15 access at: 00000100 [000001db] [ 5333.259842][ T6532] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 5333.321424][ T6532] kvm [6531]: Unsupported guest CP15 access at: 00000100 [000001db] [ 5333.321424][ T6532] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 5478.958259][ T6634] kvm [6634]: Failed to find VMA for hva 0x21016000 [ 5745.157137][ T6831] kvm [6831]: Failed to find VMA for hva 0x20d8d000 [ 5786.738843][ T6855] kvm [6855]: Failed to find VMA for hva 0x20c01000 [ 5822.108034][ T6881] FAULT_INJECTION: forcing a failure. [ 5822.108034][ T6881] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 5822.130728][ T6881] CPU: 0 UID: 0 PID: 6881 Comm: syz.1.1009 Not tainted 6.16.0-rc3-syzkaller-g15724a984643 #0 PREEMPT [ 5822.131386][ T6881] Hardware name: linux,dummy-virt (DT) [ 5822.131887][ T6881] Call trace: [ 5822.132308][ T6881] show_stack+0x2c/0x3c (C) [ 5822.134179][ T6881] __dump_stack+0x30/0x40 [ 5822.134450][ T6881] dump_stack_lvl+0xd8/0x12c [ 5822.134677][ T6881] dump_stack+0x1c/0x28 [ 5822.134885][ T6881] should_fail_ex+0x570/0x6e0 [ 5822.135131][ T6881] should_fail+0x14/0x24 [ 5822.135379][ T6881] should_fail_usercopy+0x20/0x30 [ 5822.135656][ T6881] simple_read_from_buffer+0xd0/0x298 [ 5822.135954][ T6881] proc_fail_nth_read+0x114/0x178 [ 5822.136216][ T6881] vfs_read+0x220/0x958 [ 5822.136456][ T6881] ksys_read+0x100/0x1f4 [ 5822.136720][ T6881] __arm64_sys_read+0x98/0xcc [ 5822.136969][ T6881] invoke_syscall+0x90/0x2b4 [ 5822.137251][ T6881] el0_svc_common+0x180/0x2f4 [ 5822.137537][ T6881] do_el0_svc+0x58/0x74 [ 5822.137825][ T6881] el0_svc+0x58/0x160 [ 5822.138065][ T6881] el0t_64_sync_handler+0x78/0x108 [ 5822.138307][ T6881] el0t_64_sync+0x198/0x19c [ 6336.297366][ T7225] kvm [7225]: Failed to find VMA for hva 0x20d8d000 [ 6666.664880][ T7421] print_sys_reg_msg: 202 callbacks suppressed [ 6666.718066][ T7421] kvm [7420]: Unsupported guest CP15 access at: 00000100 [000001d3] [ 6666.718066][ T7421] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 6666.750430][ T7421] kvm [7420]: Unsupported guest CP15 access at: 00000100 [000001db] [ 6666.750430][ T7421] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 6666.842632][ T7421] kvm [7420]: Unsupported guest CP15 access at: 00000100 [000001db] [ 6666.842632][ T7421] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 6666.880953][ T7421] kvm [7420]: Unsupported guest CP15 access at: 00000100 [000001db] [ 6666.880953][ T7421] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 6666.887049][ T7421] kvm [7420]: Unsupported guest CP15 access at: 00000100 [000001db] [ 6666.887049][ T7421] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 6666.890779][ T7421] kvm [7420]: Unsupported guest CP15 access at: 00000100 [000001db] [ 6666.890779][ T7421] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 6666.892486][ T7421] kvm [7420]: Unsupported guest CP15 access at: 00000100 [000001db] [ 6666.892486][ T7421] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 6666.894102][ T7421] kvm [7420]: Unsupported guest CP15 access at: 00000100 [000001db] [ 6666.894102][ T7421] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 6666.987999][ T7421] kvm [7420]: Unsupported guest CP15 access at: 00000100 [000001db] [ 6666.987999][ T7421] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 6667.213909][ T7421] kvm [7420]: Unsupported guest CP15 access at: 00000100 [000001db] [ 6667.213909][ T7421] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 6694.770701][ T7440] KVM: debugfs: duplicate directory 7440-4 [ 6708.570821][ T7450] kvm [7450]: Failed to find VMA for hva 0x21016000 [ 6797.710748][ T6394] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6799.370183][ T6394] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6800.882175][ T6394] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6802.254825][ T6394] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6816.990021][ T7511] kvm [7511]: Failed to find VMA for hva 0x21016000 [ 6820.509947][ T6394] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 6820.768497][ T6394] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 6820.919601][ T6394] bond0 (unregistering): Released all slaves [ 6823.298929][ T6394] hsr_slave_0: left promiscuous mode [ 6823.389574][ T6394] hsr_slave_1: left promiscuous mode [ 6824.063119][ T6394] veth1_macvtap: left promiscuous mode [ 6824.079716][ T6394] veth0_macvtap: left promiscuous mode [ 6824.098591][ T6394] veth1_vlan: left promiscuous mode [ 6824.129101][ T6394] veth0_vlan: left promiscuous mode [ 6895.914184][ T7497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 6896.290327][ T7497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 6929.832564][ T7497] hsr_slave_0: entered promiscuous mode [ 6929.980953][ T7497] hsr_slave_1: entered promiscuous mode [ 6930.057441][ T7497] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 6930.062466][ T7497] Cannot create hsr debugfs directory [ 6951.962594][ T7612] kvm [7612]: Failed to find VMA for hva 0x208a1000 [ 6952.680056][ T7497] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 6953.068226][ T7497] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 6953.613828][ T7497] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 6954.074797][ T7497] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 6983.659437][ T7497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 7081.173628][ T7497] veth0_vlan: entered promiscuous mode [ 7082.280243][ T7497] veth1_vlan: entered promiscuous mode [ 7085.472205][ T7497] veth0_macvtap: entered promiscuous mode [ 7086.131034][ T7497] veth1_macvtap: entered promiscuous mode [ 7089.131976][ T7497] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 7089.171435][ T7497] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 7089.187071][ T7497] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 7089.207536][ T7497] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 7092.310902][ T25] audit: type=1400 audit(7091.420:108): avc: denied { mounton } for pid=7497 comm="syz-executor" path="/syzkaller.JLUOvQ/syz-tmp" dev="vda" ino=1879 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 7126.108882][ T6394] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 7127.351079][ T6394] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 7128.880794][ T6394] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 7129.883341][ T6394] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 7150.611934][ T6394] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 7150.906481][ T6394] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 7151.229185][ T6394] bond0 (unregistering): Released all slaves [ 7154.017981][ T6394] hsr_slave_0: left promiscuous mode [ 7154.178066][ T6394] hsr_slave_1: left promiscuous mode [ 7154.860503][ T6394] veth1_macvtap: left promiscuous mode [ 7154.864309][ T6394] veth0_macvtap: left promiscuous mode [ 7154.884712][ T6394] veth1_vlan: left promiscuous mode [ 7154.911707][ T6394] veth0_vlan: left promiscuous mode [ 7167.382142][ T7777] ------------[ cut here ]------------ [ 7167.383048][ T7777] WARNING: CPU: 0 PID: 7777 at arch/arm64/kvm/inject_fault.c:71 pend_serror_exception+0x19c/0x5ac [ 7167.385933][ T7777] Modules linked in: [ 7167.388182][ T7777] CPU: 0 UID: 0 PID: 7777 Comm: syz.0.1237 Not tainted 6.16.0-rc3-syzkaller-g15724a984643 #0 PREEMPT [ 7167.389862][ T7777] Hardware name: linux,dummy-virt (DT) [ 7167.391117][ T7777] pstate: 81402009 (Nzcv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 7167.392681][ T7777] pc : pend_serror_exception+0x19c/0x5ac [ 7167.393835][ T7777] lr : pend_serror_exception+0x19c/0x5ac [ 7167.395004][ T7777] sp : ffff80008ce07930 [ 7167.395983][ T7777] x29: ffff80008ce07930 x28: 41f000001d7e8028 x27: 0000000000000001 [ 7167.398096][ T7777] x26: 0000000000000000 x25: 0000000000000001 x24: 0000000000000041 [ 7167.399937][ T7777] x23: 41f000001d7e82a8 x22: 0000000000000041 x21: 41f000001d7e8e81 [ 7167.401785][ T7777] x20: 0000000000000007 x19: efff800000000000 x18: 0000000000000000 [ 7167.403607][ T7777] x17: 00000000000000d5 x16: ffff800080011d9c x15: 0000000020000000 [ 7167.405410][ T7777] x14: ffffffffffffffff x13: 0000000000000028 x12: 000000000000006f [ 7167.407199][ T7777] x11: 6ff000001d4a6de4 x10: 0000000000ff0100 x9 : 0000000000000000 [ 7167.409209][ T7777] x8 : 6ff000001d4a5880 x7 : ffff800080b08704 x6 : ffff80008ce07a88 [ 7167.411014][ T7777] x5 : ffff80008ce07a88 x4 : 0000000000000001 x3 : ffff8000801a2e80 [ 7167.412885][ T7777] x2 : 0000000000000000 x1 : 0000000000000002 x0 : 0000000000000000 [ 7167.414735][ T7777] Call trace: [ 7167.415721][ T7777] pend_serror_exception+0x19c/0x5ac (P) [ 7167.416944][ T7777] kvm_inject_serror_esr+0x274/0xe40 [ 7167.417948][ T7777] __kvm_arm_vcpu_set_events+0x1d4/0x238 [ 7167.419079][ T7777] kvm_arch_vcpu_ioctl+0xed8/0x16b0 [ 7167.420221][ T7777] kvm_vcpu_ioctl+0x5c4/0xc2c [ 7167.421343][ T7777] __arm64_sys_ioctl+0x18c/0x244 [ 7167.422470][ T7777] invoke_syscall+0x90/0x2b4 [ 7167.423673][ T7777] el0_svc_common+0x180/0x2f4 [ 7167.424883][ T7777] do_el0_svc+0x58/0x74 [ 7167.425947][ T7777] el0_svc+0x58/0x160 [ 7167.426898][ T7777] el0t_64_sync_handler+0x78/0x108 [ 7167.428012][ T7777] el0t_64_sync+0x198/0x19c [ 7167.429190][ T7777] irq event stamp: 3028 [ 7167.430093][ T7777] hardirqs last enabled at (3027): [] _raw_read_unlock_irqrestore+0x44/0xbc [ 7167.431654][ T7777] hardirqs last disabled at (3028): [] el1_dbg+0x24/0x80 [ 7167.434968][ T7777] softirqs last enabled at (2994): [] local_bh_enable+0x10/0x34 [ 7167.436511][ T7777] softirqs last disabled at (2992): [] local_bh_disable+0x10/0x34 [ 7167.438189][ T7777] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 7183.628632][ T6394] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 7184.608438][ T6394] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 7185.267856][ T6394] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 7186.231845][ T6394] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 VM DIAGNOSIS: 16:28:28 Registers: info registers vcpu 0 CPU#0 PC=ffff8000804516b8 X00=0000000000000000 X01=ffff8000872b1fa2 X02=ffff8000804580e0 X03=0000000000000000 X04=ffff80008ce07070 X05=0000000000000020 X06=0000000000000000 X07=ffff80008652e834 X08=00000000000003c0 X09=0000000000000000 X10=000000000000006f X11=0000000000000144 X12=0000000000000044 X13=0000000000000002 X14=00000000000000c8 X15=ffff800087f39a30 X16=ffff800080011d9c X17=00000000000000d5 X18=0000000000000000 X19=0000000000000000 X20=0000000000000000 X21=ffff80008652e834 X22=ffff8000877e66a8 X23=0000000000000000 X24=0000000000000001 X25=0000000000000000 X26=ffff800087666580 X27=00000000000003c0 X28=0000000000000000 X29=ffff80008ce07230 X30=ffff800080451698 SP=ffff80008ce071e0 PSTATE=604023c9 -ZC- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000 P01=0000 P02=0000 P03=0000 P04=0000 P05=0000 P06=0000 P07=0000 P08=0000 P09=0000 P10=0000 P11=0000 P12=0000 P13=0000 P14=0000 P15=0000 FFR=0000 Z00=0000000000000000:ffffffff00000007 Z01=0000ffffdcb4a8f0:84c856d4a0f9d500 Z02=0000ffffdcb4a8d0:ffffff80ffffffd8 Z03=0000ffffdcb4a980:0000ffffdcb4a980 Z04=0000ffffdcb4a980:0000ffffa9936d08 Z05=0000ffffdcb4a950:0000ffffdcb4a980 Z06=6edc4d3a2914b135:d8e9c869e2695c88 Z07=b20fae707afde253:388e9c6c4fa85ca0 Z08=0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000 Z16=0000ffffdcb4aba0:0000ffffdcb4aba0 Z17=ffffff80ffffffd0:0000ffffdcb4ab70 Z18=0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000