last executing test programs: 1h36m50.948441681s ago: executing program 1 (id=2): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 1h36m41.019208811s ago: executing program 1 (id=3): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 15m42.487070343s ago: executing program 0 (id=1286): r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x72bf02, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2e) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000bfe000/0x400000)=nil) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000000)={0x5, 0x18}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(r2, 0x4010aeab, &(0x7f0000000100)) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) ioctl$KVM_ARM_VCPU_FINALIZE(r2, 0x4004aec2, &(0x7f0000000180)=0x4) r3 = openat$kvm(0x0, &(0x7f0000000280), 0x103080, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x8) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r5 = syz_kvm_vgic_v3_setup(r4, 0x1, 0x40) ioctl$KVM_GET_DEVICE_ATTR(r5, 0x4018aee2, &(0x7f0000000100)=@attr_riscv64=@attr_imsic={0x0, 0x1, 0x80, &(0x7f0000000080)=0x7fffffff}) eventfd2(0x8001, 0x80800) ioctl$KVM_ARM_VCPU_FINALIZE(r2, 0x4004aec2, &(0x7f0000000040)=0x4) 15m36.880256659s ago: executing program 0 (id=1288): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee1, &(0x7f00000000c0)=@attr_irq_timer={0x0, 0x1, 0x1, 0x0}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0xdddd1000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r1, 0xc018aec0, &(0x7f00000000c0)={0x1}) r3 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x2}}, @msr={0x14, 0x20, {0x603000000013dce5, 0x8000}}], 0x40}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) r7 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil) r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000180)={0x0, &(0x7f0000000380)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x7ffc}}, @msr={0x14, 0x20, {0x603000000013dce0, 0x10001}}], 0x40}, &(0x7f0000000000)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r10, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r6, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) ioctl$KVM_RUN(r6, 0xae80, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x10642, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = ioctl$KVM_CREATE_GUEST_MEMFD(r13, 0xc040aed4, &(0x7f0000000040)={0x1000200001fe0000, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION2(r13, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0x2000, &(0x7f0000ffc000/0x2000)=nil, 0x100000000000000, r14}) close(r13) close(r14) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15m31.901569179s ago: executing program 2 (id=1289): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@its_setup={0x82, 0x28, {0x4, 0x4, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x0, 0x10002, 0x9, 0x0, 0x104, 0x3}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r6, 0x1, 0x140) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r8, 0xae80, 0x0) r10 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r4, 0x1, 0x180) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r11, 0x4018aee1, &(0x7f0000000040)=@attr_irq_timer={0x0, 0x1, 0x0, &(0x7f0000000100)=0x80019}) r12 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x2}}, @its_send_cmd={0xaa, 0x28, {0xe, 0x1, 0x80000, 0x10000, 0x0, 0x8, 0x2}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000240)=0x8080000}) ioctl$KVM_RUN(r12, 0xae80, 0x0) 15m26.283089895s ago: executing program 0 (id=1290): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000000c0)={0x7, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x0, 0x3}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000080)=@attr_other={0x0, 0x3922, 0x8, &(0x7f0000000200)=0x9ca1}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_ARM_VCPU_INIT(r3, 0x4020aeae, &(0x7f0000000000)={0x5, 0x4}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x8a141, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000180)={0x1, 0x104000, 0x1}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000380)={0x3000, 0x34000}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x8002, 0x0) ioctl$KVM_SIGNAL_MSI(r5, 0x4020aea5, &(0x7f00000001c0)={0x4000, 0xffffffff, 0x7d80, 0x1, 0x9}) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x2c) ioctl$KVM_SET_USER_MEMORY_REGION2(r7, 0x40a0ae49, &(0x7f0000000040)={0x1fd, 0x4, 0x10000, 0x2000, &(0x7f0000ffe000/0x2000)=nil, 0xfffffffffffff000}) ioctl$KVM_CREATE_GUEST_MEMFD(r7, 0xc040aed4, &(0x7f0000000000)={0x40005, 0x86}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r5, 0x4010ae68, &(0x7f0000000140)={0xd000, 0x99000, 0x1}) 15m16.608661261s ago: executing program 2 (id=1291): r0 = openat$kvm(0x3f000000, &(0x7f0000000080), 0x2000, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) close(r2) 15m16.608335141s ago: executing program 0 (id=1292): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 17) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x1, 0x180) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000000040)=@attr_irq_timer={0x0, 0x1, 0x0, &(0x7f0000000100)=0x80019}) 15m11.590700145s ago: executing program 0 (id=1293): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000000)={0x1, 0x0, 0x0, 0xffffffffffffffff, 0xe}) write$eventfd(0xffffffffffffffff, &(0x7f0000000280)=0x1, 0x8) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000aba000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000300)={0x0, &(0x7f0000000140)=[@its_setup={0x82, 0x28, {0x1, 0x3, 0x121}}], 0x28}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0xff7ffffffffffffd, 0x360) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_SET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000240)=@attr_other={0x0, 0x767d15da, 0x4e9, 0x0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15m8.431641925s ago: executing program 2 (id=1294): mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x40000000) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000040)=@arm64_core={0x6030000000100050, &(0x7f0000000000)=0x85c7}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r2, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000300), 0x42000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r6, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) r7 = syz_kvm_vgic_v3_setup(r5, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000180)={0x8}) ioctl$KVM_GET_DEVICE_ATTR(r7, 0x4018aee2, &(0x7f0000000080)=@attr_riscv64=@attr_imsic={0x0, 0x1, 0x4, 0xfffffffffffffffe}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x21) ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f0000000700)={0x7, 0xffffffffffffffff}) ioctl$KVM_GET_DEVICE_ATTR(r12, 0x4018aee2, &(0x7f0000000180)=@attr_arm64={0x0, 0x0, 0x5, &(0x7f00000002c0)=0x8}) ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x66, 0x1, 0x2e, 0x0, 0x0, 0x7, 0x1, 0xf, 0xa3, 0x0, 0x9, 0xaa, 0x0, 0x7f, 0x7, 0x8, 0x9d, 0x4, 0x9, '\x00', 0x1, 0x1}) write$eventfd(r13, &(0x7f0000000200)=0x9, 0x8) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) r14 = eventfd2(0x0, 0x0) close(r14) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) write$eventfd(0xffffffffffffffff, &(0x7f0000000100)=0x5, 0x4c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0) 14m59.893139833s ago: executing program 0 (id=1295): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x8001, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04) r7 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r6, 0x280000b, 0x11, r4, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f0000000100)="5af600f6b34e08c180f948c13e2727ba279cacc033d6bd28118e0e1e50390ff2f8a1aa8366bb4c33115d61c97d9387dac1b147ed1b515c14bcb89051301caef704371680ab057973", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, r6, 0x2000003, 0x12, r4, 0x0) r8 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) ioctl$KVM_GET_VCPU_MMAP_SIZE(r8, 0xae04) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x30) r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000a21000/0x400000)=nil) r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@irq_setup={0x46, 0x18, {0x1, 0x210}}], 0x18}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r9, 0x1, 0x3a0) syz_memcpy_off$KVM_EXIT_MMIO(r3, 0x20, &(0x7f0000000240)="a87863d18acc9a1e0bbb9291ff1321d8fc4a8faf67e5054d", 0x0, 0x18) ioctl$KVM_REGISTER_COALESCED_MMIO(r9, 0x4010ae67, &(0x7f0000000140)={0x8000000, 0x101000}) ioctl$KVM_IOEVENTFD(r9, 0x4040ae79, &(0x7f0000000000)={0x6, 0x8000000}) ioctl$KVM_IOEVENTFD(r9, 0x4040ae79, &(0x7f0000000080)={0x7, 0x80a0000, 0x8, 0xffffffffffffffff, 0x1}) r12 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2f) ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, &(0x7f0000000180)={0x6, 0xffffffffffffffff, 0x1}) ioctl$KVM_RUN(r11, 0xae80, 0x0) r13 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) r15 = syz_kvm_setup_syzos_vm$arm64(r14, &(0x7f0000c00000/0x400000)=nil) r16 = syz_kvm_add_vcpu$arm64(r15, &(0x7f0000000180)={0x0, &(0x7f0000000280)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x2}}, @its_send_cmd={0xaa, 0x0, {0x1, 0x1, 0x3, 0xf, 0x1c, 0x8000, 0x4}}, @msr={0x14, 0x20, {0x603000000013dce9, 0x8000}}], 0x60}, &(0x7f0000000300)=[@featur2={0x1, 0x49}], 0x28) ioctl$KVM_GET_ONE_REG(r16, 0x4010aeab, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r16, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) 14m58.366514497s ago: executing program 2 (id=1296): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x3}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x9c, 0xf, 0x0, 0x7ff, 0x8, 0x82, 0x46, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x20100001, 0xffc0001, 0x0, 0x3, 0xa, 0x8, '\x00', 0x1, 0x8000093}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4000ae84, 0x0) munmap$KVM_VCPU(0x0, 0x1000000000) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f00002c2000/0x4000)=nil, 0x0, 0x4000003, 0x4000010, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000c79000/0x4000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xc00000)=nil, 0x930, 0xf, 0x32, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) write$eventfd(r3, &(0x7f00000001c0)=0x3, 0xfdef) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r4, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)={0xef000000, 0x1000, 0x2}}) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r6 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x26) r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) r10 = syz_kvm_vgic_v3_setup(r7, 0x1, 0x100) ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f00000007c0)=@attr_other={0x0, 0x7, 0x40, &(0x7f0000000100)=0x7fffffff}) syz_kvm_add_vcpu$arm64(r5, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@smc={0x1e, 0x0, {0x84000053, [0x1000009, 0x8000000000000001, 0xffffffffffffffff, 0x400, 0xfffffffffffff801]}}], 0xc7}, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) munmap$KVM_VCPU(0x0, 0x1000000000) 14m51.285108789s ago: executing program 2 (id=1297): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 18) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x1, 0x180) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000000040)=@attr_irq_timer={0x0, 0x1, 0x0, &(0x7f0000000100)=0x80019}) 14m45.95773983s ago: executing program 2 (id=1298): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2e) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r2, r3, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000100)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000140)=@arm64_core={0x60300000001000d7, 0x0}) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000100)=[@featur1={0x1, 0x8}], 0x1) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r12, 0x4018aee3, &(0x7f0000000040)=@attr_other={0x0, 0x0, 0xa99, 0x0}) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r9, 0x4018aee1, &(0x7f0000000140)=@attr_pmu_init) syz_kvm_vgic_v3_setup(r7, 0x4, 0x60) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x59) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x33) r14 = eventfd2(0xfffffffa, 0x80001) ioctl$KVM_IOEVENTFD(r13, 0x4040ae79, &(0x7f0000000140)={0x80, 0x4, 0x0, r14}) syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_REGISTER_COALESCED_MMIO(r13, 0x4010ae67, &(0x7f0000000000)={0x1, 0x37d03030d7a92616}) ioctl$KVM_REGISTER_COALESCED_MMIO(r13, 0x4010ae67, &(0x7f00000000c0)={0x5000}) 14m11.12691238s ago: executing program 32 (id=1295): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x8001, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04) r7 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r6, 0x280000b, 0x11, r4, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f0000000100)="5af600f6b34e08c180f948c13e2727ba279cacc033d6bd28118e0e1e50390ff2f8a1aa8366bb4c33115d61c97d9387dac1b147ed1b515c14bcb89051301caef704371680ab057973", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, r6, 0x2000003, 0x12, r4, 0x0) r8 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) ioctl$KVM_GET_VCPU_MMAP_SIZE(r8, 0xae04) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x30) r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000a21000/0x400000)=nil) r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@irq_setup={0x46, 0x18, {0x1, 0x210}}], 0x18}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r9, 0x1, 0x3a0) syz_memcpy_off$KVM_EXIT_MMIO(r3, 0x20, &(0x7f0000000240)="a87863d18acc9a1e0bbb9291ff1321d8fc4a8faf67e5054d", 0x0, 0x18) ioctl$KVM_REGISTER_COALESCED_MMIO(r9, 0x4010ae67, &(0x7f0000000140)={0x8000000, 0x101000}) ioctl$KVM_IOEVENTFD(r9, 0x4040ae79, &(0x7f0000000000)={0x6, 0x8000000}) ioctl$KVM_IOEVENTFD(r9, 0x4040ae79, &(0x7f0000000080)={0x7, 0x80a0000, 0x8, 0xffffffffffffffff, 0x1}) r12 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2f) ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, &(0x7f0000000180)={0x6, 0xffffffffffffffff, 0x1}) ioctl$KVM_RUN(r11, 0xae80, 0x0) r13 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) r15 = syz_kvm_setup_syzos_vm$arm64(r14, &(0x7f0000c00000/0x400000)=nil) r16 = syz_kvm_add_vcpu$arm64(r15, &(0x7f0000000180)={0x0, &(0x7f0000000280)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x2}}, @its_send_cmd={0xaa, 0x0, {0x1, 0x1, 0x3, 0xf, 0x1c, 0x8000, 0x4}}, @msr={0x14, 0x20, {0x603000000013dce9, 0x8000}}], 0x60}, &(0x7f0000000300)=[@featur2={0x1, 0x49}], 0x28) ioctl$KVM_GET_ONE_REG(r16, 0x4010aeab, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r16, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) 13m58.227809811s ago: executing program 33 (id=1298): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2e) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r2, r3, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000100)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000140)=@arm64_core={0x60300000001000d7, 0x0}) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000100)=[@featur1={0x1, 0x8}], 0x1) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r12, 0x4018aee3, &(0x7f0000000040)=@attr_other={0x0, 0x0, 0xa99, 0x0}) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r9, 0x4018aee1, &(0x7f0000000140)=@attr_pmu_init) syz_kvm_vgic_v3_setup(r7, 0x4, 0x60) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x59) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x33) r14 = eventfd2(0xfffffffa, 0x80001) ioctl$KVM_IOEVENTFD(r13, 0x4040ae79, &(0x7f0000000140)={0x80, 0x4, 0x0, r14}) syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_REGISTER_COALESCED_MMIO(r13, 0x4010ae67, &(0x7f0000000000)={0x1, 0x37d03030d7a92616}) ioctl$KVM_REGISTER_COALESCED_MMIO(r13, 0x4010ae67, &(0x7f00000000c0)={0x5000}) 8m11.640915907s ago: executing program 4 (id=1314): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x0, 0x0}) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) r4 = ioctl$KVM_CREATE_VM(r3, 0x894c, 0x0) r5 = openat$kvm(0x0, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_ARM_VCPU_INIT(r7, 0x4020aeae, &(0x7f0000000080)={0x5, 0x1}) (async) ioctl$KVM_SET_ONE_REG(r7, 0x4010aeac, &(0x7f00000001c0)=@arm64_sys={0x6030000000138064, &(0x7f00000000c0)=0x8000}) ioctl$KVM_CREATE_VCPU(r4, 0xb702, 0x0) (async) openat$kvm(0x0, &(0x7f0000000080), 0x141001, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000100)) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil) r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@irq_setup={0x5, 0x18, {0x1, 0x20}}], 0x18}, 0x0, 0x0) (async) r11 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000100)={0x0, &(0x7f00000001c0)=[@irq_setup={0x5, 0x18}], 0x18}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r8, 0x2, 0x100) (async) ioctl$KVM_RUN(r11, 0xae80, 0x0) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) 8m7.28073122s ago: executing program 3 (id=1315): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x400280, 0x0) r1 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10200, 0xf026077d7ffa6550, 0x1000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1) ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f0000000580)={0x2, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f00000001c0)={0x2, 0x0, [{0x0, 0x2, 0x0, 0x0, @sint={0x6, 0x5}}, {0xfff, 0x2, 0x0, 0x0, @adapter={0xe, 0x7, 0x7, 0x3, 0x3ff}}]}) 7m58.126779587s ago: executing program 4 (id=1316): r0 = eventfd2(0x0, 0x0) (async) r1 = eventfd2(0x0, 0x0) close(r1) (async) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ef6000/0x1000)=nil, 0x930, 0x0, 0x4d832, r1, 0x0) (async) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) openat$kvm(0x0, 0x0, 0x400400, 0x0) (async) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1d40, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r5, 0x400454de, 0x110e22fffb) r6 = syz_kvm_vgic_v3_setup(0xffffffffffffffff, 0x3, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f00000000c0)=@attr_riscv64=@attr_imsic={0x0, 0x1, 0x4, &(0x7f0000000080)=0x6}) (async) r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_vgic_v3_setup(r7, 0x1, 0x40) (async) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r7, r8, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000000)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_GET_VCPU_EVENTS(r0, 0x8040ae9f, &(0x7f0000000100)=@arm64) (async) ioctl$KVM_SET_ONE_REG(r8, 0x4010aeac, 0x0) (async) r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) (async) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x40) openat$kvm(0x0, 0x0, 0x0, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r12, 0x5452, 0x110c230300) (async) ioctl$KVM_SET_GSI_ROUTING(r7, 0x4008ae6a, &(0x7f0000000180)) 7m58.016745122s ago: executing program 3 (id=1317): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0xd, 0x9, 0xb, 0x0, 0x5, 0x6, 0x6, 0x6, 0x48, 0x88, 0x64, 0x9, 0x0, 0x9, 0x40006, 0xe, 0x3, 0x7, 0x0, '\x00', 0x10, 0x6}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r3, &(0x7f00000001c0)=0xffffff7f, 0xff25) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x20200, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r7 = syz_kvm_vgic_v3_setup(r6, 0x3, 0x40) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f0000000100)={0x1, 0x0, [{0x3, 0x4, 0x1, 0x0, @adapter={0x1, 0x5, 0x32f, 0x6, 0x8}}]}) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000000)=@attr_other={0x0, 0x6, 0x382be664, &(0x7f00000000c0)=0x3ffe}) ioctl$KVM_CREATE_VM(r4, 0x400454e2, 0x110c230000) 7m46.069796968s ago: executing program 4 (id=1318): openat$kvm(0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000280), 0x103080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = syz_kvm_vgic_v3_setup(r1, 0x1, 0x40) ioctl$KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, &(0x7f0000000100)=@attr_arm64={0x0, 0x7, 0x3, 0x0}) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0x80111500, 0x20000004) write$eventfd(r4, &(0x7f0000000000)=0xe2, 0x8) 7m43.487802941s ago: executing program 3 (id=1319): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000000000/0x400000)=nil) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000240)="37e68986ad644f5dc57bbc1ff382863b67f3eee57a32ec911d95f88f3dd8ea716e4a29cefbd440b2ecf83f57baf33b0c97182970a47ef45c954e42f2055384921830f6e273d2eb30", 0x0, 0x2a2019ac5ed2a1ef) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) mmap$KVM_VCPU(&(0x7f0000000000/0xc00000)=nil, 0x930, 0xf, 0x32, 0xffffffffffffffff, 0x0) close(r1) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x88201, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x25) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f00000000c0)={0x0, &(0x7f0000000380)=[@mrs={0xbe, 0x18, {0x603000000013c520}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x0, 0x0, 0x7, 0x5, 0x0, 0x4}}, @irq_setup={0x46, 0x18, {0x3, 0x28}}, @uexit={0x0, 0x18, 0x5}], 0x70}, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r9, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r9, 0x4018aee1, &(0x7f0000000000)=@attr_set_pmu={0x0, 0x0, 0x3, 0xfffffffffffffffe}) r10 = openat$kvm(0x0, &(0x7f00000001c0), 0x20600, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000ae9000/0x400000)=nil) r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r13, 0x4010aeac, &(0x7f0000000140)=@arm64_fw={0x6030000000140000, &(0x7f0000000200)=0x10001}) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b6565d2f1, 0xffffffffffffffff, 0x0) r14 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0) 7m35.043457756s ago: executing program 4 (id=1320): r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x15) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@mrs={0xbe, 0x18, {0x603000000013c643}}], 0x18}, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000040)=@arm64_core={0x6030000000100050, &(0x7f0000000000)=0x85c7}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r7, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29) mmap$KVM_VCPU(&(0x7f0000ce9000/0x1000)=nil, 0x930, 0xc, 0x4148031, r7, 0x0) r9 = eventfd2(0x0, 0x0) close(r9) r10 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) write$eventfd(r9, &(0x7f0000000180)=0x5, 0xfffffde3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x3c) ioctl$KVM_IRQFD(r11, 0x4020ae76, &(0x7f0000000100)={r9, 0x7ff, 0x1, r9}) r12 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000c00000/0x400000)=nil) r15 = syz_kvm_add_vcpu$arm64(r14, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) syz_kvm_vgic_v3_setup(r13, 0x3, 0x60) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r15, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_irq={0x0, 0x0, 0x0, &(0x7f00000000c0)=0x11}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) 7m23.572230683s ago: executing program 3 (id=1321): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x1}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r7 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffc000/0x3000)=nil, r7, 0x1, 0x11, r6, 0x0) r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, r8, 0x8, 0x13, r6, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x2000)=nil, r8, 0x1000001, 0x12, r6, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0xd, 0x8, 0xb, 0x0, 0x2, 0x6, 0x6, 0x6, 0x48, 0x88, 0xf5, 0x9, 0x0, 0x9, 0x6, 0xa, 0x3, 0x8, 0x0, '\x00', 0x10, 0x6}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1c9801, 0x0) write$eventfd(r2, &(0x7f00000001c0)=0xff0, 0xe) 7m16.788644735s ago: executing program 4 (id=1322): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x8, 0xffffffffffffffff, 0x1}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3}) munmap$KVM_VCPU(0x0, 0x1000000000) r5 = openat$kvm(0x0, &(0x7f0000000280), 0x40000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) r10 = eventfd2(0x1, 0x0) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000100)={0x2, 0x8080000, 0x8, r10}) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SIGNAL_MSI(r6, 0x4020aea5, &(0x7f0000000140)={0xffffffff, 0xffffffff, 0x4, 0x1}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x2000003, 0x12, r4, 0x200001fe0000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x41, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0x40086602, 0x2b) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8cc00, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x1000000000002b) r12 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) r14 = syz_kvm_vgic_v3_setup(r13, 0x3, 0x40) ioctl$KVM_SET_DEVICE_ATTR(r14, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x6, 0x382bc663, &(0x7f0000000200)=0xffffffff}) 7m14.475100866s ago: executing program 3 (id=1323): r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x29) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000bfe000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r3, &(0x7f00000001c0)={0x0, 0x0, 0xfffffffffffffef3}, 0x0, 0x5) syz_kvm_vgic_v3_setup(r2, 0x4, 0x80) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f0000000040)={0x2000010, 0xbb28}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f00000000c0)={0x0, &(0x7f00000018c0)=[@memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xffe8, 0x3, 0x2}}, @mrs={0xbe, 0x18, {0x603000000013c801}}], 0x48}, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_MP_STATE(r8, 0x4004ae99, &(0x7f0000000100)=0x4) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x21) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) r13 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r12, 0x0) r14 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0) r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r15, 0x4020ae46, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r15, 0x4020ae46, 0xfffffffffffffffe) syz_memcpy_off$KVM_EXIT_HYPERCALL(r13, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r12, 0x0) r16 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r16) 7m4.836313242s ago: executing program 4 (id=1324): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x34) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x34) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@its_setup={0x82, 0x28, {0x0, 0x1, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x0, 0x5, 0x10, 0x0, 0x20000080, 0x4}}], 0x50}, 0x0, 0x0) r8 = syz_kvm_vgic_v3_setup(r5, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$arm64(r2, r3, &(0x7f0000bfe000/0x400000)=nil, &(0x7f0000000640)=[{0x0, &(0x7f0000000100)=[@uexit={0x0, 0x18, 0x2}, @smc={0x1e, 0x40, {0x84000052, [0x4, 0x5, 0x400, 0x5, 0xc4]}}, @eret={0xe6, 0x18, 0xfffffffffffff000}, @mrs={0xbe, 0x18, {0x603000000013e080}}, @msr={0x14, 0x20, {0x603000000013f600, 0x5}}, @irq_setup={0x46, 0x18, {0x4, 0xc6}}, @irq_setup={0x46, 0x18, {0x1, 0x30d}}, @msr={0x14, 0x20, {0x603000000013ae75, 0xffffffffffffffff}}, @msr={0x14, 0x20, {0x603000000013e6c9, 0x56}}, @memwrite={0x6e, 0x30, @generic={0xdddd0000, 0xb47, 0xef87, 0x9}}, @memwrite={0x6e, 0x30, @generic={0xfec00000, 0x4a6, 0x1, 0x6}}, @code={0xa, 0x3c, {"0004801a0040241e007008d5004cc09a0028c01a000028d5000008d5000040fd007008d50014c0da"}}, @smc={0x1e, 0x40, {0x400, [0x8, 0x2, 0xffffffffffffffff, 0x6, 0x5]}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x0, 0x4, 0xc, 0x1ff, 0x5, 0x3}}, @uexit={0x0, 0x18, 0x2}, @irq_setup={0x46, 0x18, {0x3, 0xd2}}, @svc={0x122, 0xffffffffffffffb3, {0x84000052, [0x5, 0x7389df82, 0x9, 0x3, 0x4]}}, @mrs={0xbe, 0x18, {0x603000000013e669}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x4, 0x7, 0x4}}, @memwrite={0x6e, 0x30, @generic={0xeeee8000, 0x59c, 0x1, 0x8}}, @smc={0x1e, 0x40, {0x84000052, [0x4000000000000, 0x3, 0x0, 0x0, 0x100000001]}}, @hvc={0x32, 0x40, {0x80000000, [0xfff, 0x8, 0x778, 0xc, 0x81]}}, @smc={0x1e, 0x40, {0x2000, [0x0, 0xfffffffffffffffd, 0x7, 0x9, 0x55]}}, @smc={0x1e, 0x40, {0xc5000021, [0x3, 0x0, 0x15b, 0x0, 0x5]}}, @its_setup={0x82, 0x28, {0x0, 0x2, 0x8b}}, @msr={0x14, 0x20, {0x603000000013cd51, 0x3e2}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80a0000, 0xc00, 0xfffffffffffffff7, 0x4}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x0, 0x2, 0x7, 0xa, 0x0, 0x4}}, @smc={0x1e, 0x40, {0x8000, [0x9, 0x5, 0x4, 0x3, 0x7fffffffffffffff]}}, @msr={0x14, 0x20, {0x603000000013c00a, 0x1052}}], 0x504}], 0x1, 0x0, &(0x7f0000000680)=[@featur2={0x1, 0x84}], 0x1) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd2(0x3, 0x0) (async) eventfd2(0x3, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) (async) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) r12 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r11, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r12, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r11, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) (async) r13 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) ioctl$KVM_CHECK_EXTENSION(r13, 0x40086602, 0x110ca32020) (async) ioctl$KVM_CHECK_EXTENSION(r13, 0x40086602, 0x110ca32020) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0) syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil) (async) syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil) 6m51.988587152s ago: executing program 3 (id=1325): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) munmap(&(0x7f0000481000/0x1000)=nil, 0x1000) munmap(&(0x7f0000136000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x9000000) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) munmap(&(0x7f0000f5c000/0x3000)=nil, 0x3000) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) munmap(&(0x7f0000482000/0x2000)=nil, 0x2000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x103180, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc9}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000140)={0xb, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x40305839, &(0x7f0000000040)=@attr_other={0x0, 0x0, 0x3, &(0x7f0000000000)=0x2f7}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x26) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x12, r2, 0x0) 6m18.187499896s ago: executing program 34 (id=1324): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x34) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x34) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@its_setup={0x82, 0x28, {0x0, 0x1, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x0, 0x5, 0x10, 0x0, 0x20000080, 0x4}}], 0x50}, 0x0, 0x0) r8 = syz_kvm_vgic_v3_setup(r5, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$arm64(r2, r3, &(0x7f0000bfe000/0x400000)=nil, &(0x7f0000000640)=[{0x0, &(0x7f0000000100)=[@uexit={0x0, 0x18, 0x2}, @smc={0x1e, 0x40, {0x84000052, [0x4, 0x5, 0x400, 0x5, 0xc4]}}, @eret={0xe6, 0x18, 0xfffffffffffff000}, @mrs={0xbe, 0x18, {0x603000000013e080}}, @msr={0x14, 0x20, {0x603000000013f600, 0x5}}, @irq_setup={0x46, 0x18, {0x4, 0xc6}}, @irq_setup={0x46, 0x18, {0x1, 0x30d}}, @msr={0x14, 0x20, {0x603000000013ae75, 0xffffffffffffffff}}, @msr={0x14, 0x20, {0x603000000013e6c9, 0x56}}, @memwrite={0x6e, 0x30, @generic={0xdddd0000, 0xb47, 0xef87, 0x9}}, @memwrite={0x6e, 0x30, @generic={0xfec00000, 0x4a6, 0x1, 0x6}}, @code={0xa, 0x3c, {"0004801a0040241e007008d5004cc09a0028c01a000028d5000008d5000040fd007008d50014c0da"}}, @smc={0x1e, 0x40, {0x400, [0x8, 0x2, 0xffffffffffffffff, 0x6, 0x5]}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x0, 0x4, 0xc, 0x1ff, 0x5, 0x3}}, @uexit={0x0, 0x18, 0x2}, @irq_setup={0x46, 0x18, {0x3, 0xd2}}, @svc={0x122, 0xffffffffffffffb3, {0x84000052, [0x5, 0x7389df82, 0x9, 0x3, 0x4]}}, @mrs={0xbe, 0x18, {0x603000000013e669}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x4, 0x7, 0x4}}, @memwrite={0x6e, 0x30, @generic={0xeeee8000, 0x59c, 0x1, 0x8}}, @smc={0x1e, 0x40, {0x84000052, [0x4000000000000, 0x3, 0x0, 0x0, 0x100000001]}}, @hvc={0x32, 0x40, {0x80000000, [0xfff, 0x8, 0x778, 0xc, 0x81]}}, @smc={0x1e, 0x40, {0x2000, [0x0, 0xfffffffffffffffd, 0x7, 0x9, 0x55]}}, @smc={0x1e, 0x40, {0xc5000021, [0x3, 0x0, 0x15b, 0x0, 0x5]}}, @its_setup={0x82, 0x28, {0x0, 0x2, 0x8b}}, @msr={0x14, 0x20, {0x603000000013cd51, 0x3e2}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80a0000, 0xc00, 0xfffffffffffffff7, 0x4}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x0, 0x2, 0x7, 0xa, 0x0, 0x4}}, @smc={0x1e, 0x40, {0x8000, [0x9, 0x5, 0x4, 0x3, 0x7fffffffffffffff]}}, @msr={0x14, 0x20, {0x603000000013c00a, 0x1052}}], 0x504}], 0x1, 0x0, &(0x7f0000000680)=[@featur2={0x1, 0x84}], 0x1) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd2(0x3, 0x0) (async) eventfd2(0x3, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) (async) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) r12 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r11, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r12, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r11, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) (async) r13 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) ioctl$KVM_CHECK_EXTENSION(r13, 0x40086602, 0x110ca32020) (async) ioctl$KVM_CHECK_EXTENSION(r13, 0x40086602, 0x110ca32020) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0) syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil) (async) syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil) 6m6.076185281s ago: executing program 35 (id=1325): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) munmap(&(0x7f0000481000/0x1000)=nil, 0x1000) munmap(&(0x7f0000136000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x9000000) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) munmap(&(0x7f0000f5c000/0x3000)=nil, 0x3000) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) munmap(&(0x7f0000482000/0x2000)=nil, 0x2000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x103180, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc9}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000140)={0xb, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x40305839, &(0x7f0000000040)=@attr_other={0x0, 0x0, 0x3, &(0x7f0000000000)=0x2f7}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x26) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x12, r2, 0x0) 1m6.070700249s ago: executing program 5 (id=1326): r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0xc2881, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000140), 0x101282, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000080)={0x0, &(0x7f0000000200)=[@svc={0x122, 0x40, {0x800, [0xffffffeffffffff8, 0x8, 0x8000000005, 0x5, 0x400]}}], 0x40}, 0x0, 0x0) (async) r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04) (async) munmap(&(0x7f0000e2e000/0x1000)=nil, 0x1000) mmap$KVM_VCPU(&(0x7f0000c0b000/0x1000)=nil, r8, 0x3, 0x40b2811, r7, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_add_vcpu$arm64(r0, &(0x7f00000000c0)={0x0, &(0x7f0000000100), 0x10}, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 50.013714183s ago: executing program 6 (id=1327): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x22) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000be6000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000100)={0x0, 0x0}, 0x0, 0x0) r4 = syz_kvm_vgic_v3_setup(r1, 0x0, 0x100) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) close(r4) close(0x4) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000007, 0x4f833, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000140)={0x0, &(0x7f0000000000)=[@its_setup={0x82, 0x28, {0x4, 0x4, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x0, 0x10002, 0xb, 0x0, 0x104, 0x3}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r6, 0x1, 0x140) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r8, 0xae80, 0x0) close(0x5) 19.509007184s ago: executing program 36 (id=1326): r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0xc2881, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000140), 0x101282, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000080)={0x0, &(0x7f0000000200)=[@svc={0x122, 0x40, {0x800, [0xffffffeffffffff8, 0x8, 0x8000000005, 0x5, 0x400]}}], 0x40}, 0x0, 0x0) (async) r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04) (async) munmap(&(0x7f0000e2e000/0x1000)=nil, 0x1000) mmap$KVM_VCPU(&(0x7f0000c0b000/0x1000)=nil, r8, 0x3, 0x40b2811, r7, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_add_vcpu$arm64(r0, &(0x7f00000000c0)={0x0, &(0x7f0000000100), 0x10}, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 0s ago: executing program 37 (id=1327): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x22) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000be6000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000100)={0x0, 0x0}, 0x0, 0x0) r4 = syz_kvm_vgic_v3_setup(r1, 0x0, 0x100) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) close(r4) close(0x4) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000007, 0x4f833, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000140)={0x0, &(0x7f0000000000)=[@its_setup={0x82, 0x28, {0x4, 0x4, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x0, 0x10002, 0xb, 0x0, 0x104, 0x3}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r6, 0x1, 0x140) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r8, 0xae80, 0x0) close(0x5) kernel console output (not intermixed with test programs): [ 362.477645][ T24] audit: type=1400 audit(361.750:76): avc: denied { write } for pid=3270 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 364.815627][ T3211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.227579][ T24] audit: type=1400 audit(370.510:77): avc: denied { write } for pid=3278 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 375.478598][ T24] audit: type=1400 audit(374.740:78): avc: denied { write } for pid=3281 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 391.531513][ T24] audit: type=1400 audit(390.820:79): avc: denied { write } for pid=3288 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 395.869240][ T24] audit: type=1400 audit(395.130:80): avc: denied { write } for pid=3291 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 405.579034][ T24] audit: type=1400 audit(404.860:81): avc: denied { write } for pid=3296 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 409.278736][ T24] audit: type=1400 audit(408.560:82): avc: denied { write } for pid=3299 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 417.868798][ T24] audit: type=1400 audit(417.150:83): avc: denied { write } for pid=3303 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 421.567687][ T24] audit: type=1400 audit(420.840:84): avc: denied { write } for pid=3306 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 423.919919][ T3211] eql: remember to turn off Van-Jacobson compression on your slave devices [ 429.961966][ T24] audit: type=1400 audit(429.250:85): avc: denied { write } for pid=3310 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 433.628991][ T24] audit: type=1400 audit(432.910:86): avc: denied { write } for pid=3313 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 440.728982][ T24] audit: type=1400 audit(440.000:87): avc: denied { write } for pid=3317 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 444.376000][ T24] audit: type=1400 audit(443.660:88): avc: denied { write } for pid=3320 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 455.708753][ T24] audit: type=1400 audit(454.940:89): avc: denied { write } for pid=3324 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 459.578969][ T24] audit: type=1400 audit(458.860:90): avc: denied { write } for pid=3327 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 468.553648][ T24] audit: type=1400 audit(467.840:91): avc: denied { write } for pid=3331 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 472.067631][ T24] audit: type=1400 audit(471.350:92): avc: denied { write } for pid=3334 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 488.059539][ T24] audit: type=1400 audit(487.320:93): avc: denied { write } for pid=3342 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 491.547604][ T24] audit: type=1400 audit(490.830:94): avc: denied { write } for pid=3345 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 512.237594][ T24] audit: type=1400 audit(511.470:95): avc: denied { write } for pid=3353 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 516.969445][ T24] audit: type=1400 audit(516.240:96): avc: denied { write } for pid=3357 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 522.630435][ T24] audit: type=1400 audit(521.890:97): avc: denied { write } for pid=3360 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 526.089074][ T24] audit: type=1400 audit(525.360:98): avc: denied { write } for pid=3363 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:58298' (ED25519) to the list of known hosts. [ 559.302622][ T24] audit: type=1400 audit(558.590:99): avc: denied { name_bind } for pid=3368 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 560.079685][ T24] audit: type=1400 audit(559.360:100): avc: denied { execute } for pid=3369 comm="sh" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 560.102950][ T24] audit: type=1400 audit(559.390:101): avc: denied { execute_no_trans } for pid=3369 comm="sh" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 585.387801][ T24] audit: type=1400 audit(584.660:102): avc: denied { mounton } for pid=3369 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 585.412981][ T24] audit: type=1400 audit(584.690:103): avc: denied { mount } for pid=3369 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 585.489516][ T3369] cgroup: Unknown subsys name 'net' [ 585.543433][ T24] audit: type=1400 audit(584.830:104): avc: denied { unmount } for pid=3369 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 585.901500][ T3369] cgroup: Unknown subsys name 'cpuset' [ 585.995454][ T3369] cgroup: Unknown subsys name 'rlimit' [ 587.063574][ T24] audit: type=1400 audit(586.350:105): avc: denied { setattr } for pid=3369 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 587.083477][ T24] audit: type=1400 audit(586.370:106): avc: denied { create } for pid=3369 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 587.109409][ T24] audit: type=1400 audit(586.390:107): avc: denied { write } for pid=3369 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 587.130162][ T24] audit: type=1400 audit(586.420:108): avc: denied { module_request } for pid=3369 comm="syz-executor" kmod="net-pf-16-proto-16-family-nl802154" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 587.548119][ T24] audit: type=1400 audit(586.820:109): avc: denied { read } for pid=3369 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 587.584864][ T24] audit: type=1400 audit(586.870:110): avc: denied { mounton } for pid=3369 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 587.607717][ T24] audit: type=1400 audit(586.890:111): avc: denied { mount } for pid=3369 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 588.520966][ T3373] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 588.741726][ T3369] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 643.103939][ T24] kauditd_printk_skb: 4 callbacks suppressed [ 643.119806][ T24] audit: type=1400 audit(642.390:116): avc: denied { execmem } for pid=3374 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 643.664167][ T24] audit: type=1400 audit(642.950:117): avc: denied { read } for pid=3376 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 643.692378][ T24] audit: type=1400 audit(642.980:118): avc: denied { open } for pid=3376 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 643.779171][ T24] audit: type=1400 audit(643.050:119): avc: denied { mounton } for pid=3376 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 645.824117][ T24] audit: type=1400 audit(645.110:120): avc: denied { mount } for pid=3376 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 645.900749][ T24] audit: type=1400 audit(645.190:121): avc: denied { mounton } for pid=3376 comm="syz-executor" path="/syzkaller.8sdeJ2/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 645.974346][ T24] audit: type=1400 audit(645.260:122): avc: denied { mount } for pid=3376 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 646.111814][ T24] audit: type=1400 audit(645.400:123): avc: denied { mounton } for pid=3376 comm="syz-executor" path="/syzkaller.8sdeJ2/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 646.168997][ T24] audit: type=1400 audit(645.450:124): avc: denied { mounton } for pid=3376 comm="syz-executor" path="/syzkaller.8sdeJ2/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=2834 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 646.376134][ T24] audit: type=1400 audit(645.660:125): avc: denied { unmount } for pid=3376 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 647.158947][ T3376] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 653.431662][ T24] kauditd_printk_skb: 8 callbacks suppressed [ 653.438819][ T24] audit: type=1400 audit(652.720:134): avc: denied { execute } for pid=3382 comm="syz-executor" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 653.480235][ T24] audit: type=1400 audit(652.740:135): avc: denied { execute_no_trans } for pid=3382 comm="syz-executor" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 655.758683][ T24] audit: type=1400 audit(655.040:136): avc: denied { create } for pid=3384 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 663.073622][ T24] audit: type=1401 audit(662.360:137): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 716.145118][ T24] audit: type=1400 audit(715.420:138): avc: denied { sys_module } for pid=3401 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 736.640044][ T3401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 736.743785][ T3401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 737.785529][ T3403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 737.960445][ T3403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 747.234918][ T3401] hsr_slave_0: entered promiscuous mode [ 747.274648][ T3401] hsr_slave_1: entered promiscuous mode [ 748.888671][ T3403] hsr_slave_0: entered promiscuous mode [ 748.910378][ T3403] hsr_slave_1: entered promiscuous mode [ 748.928896][ T3403] debugfs: 'hsr0' already exists in 'hsr' [ 748.932815][ T3403] Cannot create hsr debugfs directory [ 755.909260][ T3401] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 756.290822][ T3401] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 756.449433][ T3401] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 756.751756][ T3401] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 756.785533][ T3401] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 756.954782][ T3401] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 757.055630][ T3401] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 757.262332][ T3401] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 759.965312][ T3403] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 760.203757][ T3403] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 760.288243][ T3403] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 760.469155][ T3403] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 760.495281][ T3403] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 760.651233][ T3403] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 760.690904][ T3403] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 760.865497][ T3403] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 770.925251][ T3401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 773.495661][ T3403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 816.751283][ T3401] veth0_vlan: entered promiscuous mode [ 817.359777][ T3401] veth1_vlan: entered promiscuous mode [ 819.549002][ T3401] veth0_macvtap: entered promiscuous mode [ 820.060626][ T3401] veth1_macvtap: entered promiscuous mode [ 821.116106][ T3403] veth0_vlan: entered promiscuous mode [ 822.239628][ T3403] veth1_vlan: entered promiscuous mode [ 823.300705][ T21] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.413191][ T21] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.428089][ T21] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.438335][ T21] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.329307][ T3403] veth0_macvtap: entered promiscuous mode [ 826.811243][ T3403] veth1_macvtap: entered promiscuous mode [ 828.781900][ T3481] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.804223][ T3465] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.970834][ T3465] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.975114][ T3465] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.718819][ T24] audit: type=1400 audit(841.000:139): avc: denied { read } for pid=3561 comm="syz.2.14" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 841.812152][ T24] audit: type=1400 audit(841.080:140): avc: denied { open } for pid=3561 comm="syz.2.14" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 842.247936][ T24] audit: type=1400 audit(841.530:141): avc: denied { ioctl } for pid=3561 comm="syz.2.14" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 853.602400][ T24] audit: type=1400 audit(852.860:142): avc: denied { execute } for pid=3571 comm="syz.0.19" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=4110 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 868.403339][ T24] audit: type=1400 audit(867.680:143): avc: denied { mmap_zero } for pid=3585 comm="syz.2.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 872.954639][ T24] audit: type=1400 audit(872.230:144): avc: denied { setattr } for pid=3588 comm="syz.0.27" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 876.269540][ T24] audit: type=1400 audit(875.520:145): avc: denied { write } for pid=3587 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 879.788029][ T24] audit: type=1400 audit(879.060:146): avc: denied { map } for pid=3594 comm="syz.0.29" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 879.838469][ T24] audit: type=1400 audit(879.120:147): avc: denied { execute } for pid=3594 comm="syz.0.29" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 885.018969][ T24] audit: type=1400 audit(884.280:148): avc: denied { write } for pid=3598 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 916.872356][ T24] audit: type=1400 audit(916.120:149): avc: denied { append } for pid=3626 comm="syz.2.44" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 939.248894][ T24] audit: type=1400 audit(938.530:150): avc: denied { write } for pid=3644 comm="syz.0.53" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1345.810895][ T24] audit: type=1400 audit(1345.090:151): avc: denied { create } for pid=3929 comm="syz.2.190" anonclass=[kvm-gmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1345.912637][ T24] audit: type=1400 audit(1345.180:152): avc: denied { map } for pid=3929 comm="syz.2.190" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=7132 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1345.945175][ T24] audit: type=1400 audit(1345.190:153): avc: denied { read } for pid=3929 comm="syz.2.190" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=7132 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1373.618007][ T24] audit: type=1400 audit(1372.870:154): avc: denied { write } for pid=3946 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1381.570237][ T24] audit: type=1400 audit(1380.780:155): avc: denied { write } for pid=3953 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1560.757870][ T24] audit: type=1400 audit(1560.040:156): avc: denied { map } for pid=4067 comm="syz.0.251" path="pipe:[3013]" dev="pipefs" ino=3013 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1581.679736][ T24] audit: type=1400 audit(1580.960:157): avc: denied { write } for pid=4079 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1588.799478][ T24] audit: type=1400 audit(1588.040:158): avc: denied { write } for pid=4089 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1806.529379][ T24] audit: type=1400 audit(1805.800:159): avc: denied { write } for pid=4224 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1813.551746][ T24] audit: type=1400 audit(1812.840:160): avc: denied { write } for pid=4235 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1940.974325][ T24] audit: type=1400 audit(1940.260:161): avc: denied { ioctl } for pid=4315 comm="syz.0.358" path="net:[4026531833]" dev="nsfs" ino=4026531833 ioctlcmd=0x5839 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2113.207906][ T24] audit: type=1400 audit(2112.480:162): avc: denied { write } for pid=4419 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2121.228146][ T24] audit: type=1400 audit(2120.510:163): avc: denied { write } for pid=4426 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2207.583127][ T4481] kvm [4481]: Failed to find VMA for hva 0x21016000 [ 2378.383369][ T24] audit: type=1400 audit(2377.670:164): avc: denied { execute } for pid=4584 comm="syz.0.484" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=15445 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2387.532885][ T4591] kvm [4590]: Unsupported guest access at: eeef0000 [ 2387.532885][ T4591] { Op0( 2), Op1( 3), CRn(15), CRm( 5), Op2( 5), func_write }, [ 2677.351064][ T4772] kvm [4772]: Failed to find VMA for hva 0x20dd1000 [ 2704.159332][ T24] audit: type=1400 audit(2703.440:165): avc: denied { write } for pid=4789 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2713.302357][ T24] audit: type=1400 audit(2712.570:166): avc: denied { write } for pid=4799 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3050.728767][ T4995] KVM: debugfs: duplicate directory 4995-6 [ 3051.494841][ T4995] KVM: debugfs: duplicate directory 4995-6 [ 3140.662505][ T5039] kvm [5039]: Failed to find VMA for hva 0x20c01000 [ 3162.912879][ T24] audit: type=1400 audit(3162.190:167): avc: denied { write } for pid=5052 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3170.413294][ T24] audit: type=1400 audit(3169.700:168): avc: denied { write } for pid=5058 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3209.111955][ T5081] kvm [5081]: Failed to find VMA for hva 0x2053c000 [ 3224.049910][ T24] audit: type=1400 audit(3223.330:169): avc: denied { ioctl } for pid=5089 comm="syz.0.702" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=21947 ioctlcmd=0xae49 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 3306.771061][ T5136] kvm [5136]: Failed to find VMA for hva 0x203b0000 [ 3351.700545][ T5169] kvm [5169]: Failed to find VMA for hva 0x203b0000 [ 3395.009978][ T5193] kvm [5193]: Failed to find VMA for hva 0x203b0000 [ 3497.518185][ T24] audit: type=1400 audit(3496.730:170): avc: denied { execute } for pid=5254 comm="syz.2.766" path=2F3337352FFF67521CD66F8F1F447D3570707CD24B7EEBB207 dev="tmpfs" ino=1904 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 3510.773964][ T5266] kvm [5266]: Failed to find VMA for hva 0x20d8d000 [ 3534.281976][ T5282] kvm [5282]: Failed to find VMA for hva 0x20c01000 [ 3568.546216][ T5304] kvm [5303]: Unsupported guest access at: eeef0000 [ 3568.546216][ T5304] { Op0( 2), Op1( 0), CRn( 0), CRm( 6), Op2( 2), func_read }, [ 3683.700826][ T24] audit: type=1400 audit(3682.980:171): avc: denied { write } for pid=5366 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3690.534657][ T24] audit: type=1400 audit(3689.810:172): avc: denied { write } for pid=5376 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3772.809323][ T5441] kvm [5441]: Failed to find VMA for hva 0x20c79000 [ 3911.539752][ T24] audit: type=1400 audit(3910.810:173): avc: denied { write } for pid=5532 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3920.832541][ T24] audit: type=1400 audit(3920.110:174): avc: denied { write } for pid=5544 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4464.667719][ T24] audit: type=1400 audit(4463.940:175): avc: denied { write } for pid=5900 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4472.843496][ T24] audit: type=1400 audit(4472.110:176): avc: denied { write } for pid=5907 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4961.003702][ T6220] kvm [6220]: Failed to find VMA for hva 0x20c01000 [ 4982.730038][ T6237] FAULT_INJECTION: forcing a failure. [ 4982.730038][ T6237] name failslab, interval 1, probability 0, space 0, times 1 [ 4982.755713][ T6237] CPU: 0 UID: 0 PID: 6237 Comm: syz.0.1154 Not tainted syzkaller #0 PREEMPT [ 4982.756424][ T6237] Hardware name: linux,dummy-virt (DT) [ 4982.756886][ T6237] Call trace: [ 4982.757276][ T6237] show_stack+0x2c/0x3c (C) [ 4982.759268][ T6237] __dump_stack+0x30/0x40 [ 4982.759670][ T6237] dump_stack_lvl+0xd8/0x12c [ 4982.759987][ T6237] dump_stack+0x1c/0x28 [ 4982.760314][ T6237] should_fail_ex+0x56c/0x6d8 [ 4982.760609][ T6237] should_failslab+0xb8/0xec [ 4982.760875][ T6237] __kmalloc_cache_noprof+0x94/0x538 [ 4982.761154][ T6237] kvm_uevent_notify_change+0xc0/0x374 [ 4982.761412][ T6237] kvm_put_kvm+0xa8/0xbbc [ 4982.761713][ T6237] kvm_vm_release+0x58/0x78 [ 4982.761954][ T6237] __fput+0x4ac/0x978 [ 4982.762212][ T6237] fput_close_sync+0xd0/0x240 [ 4982.762450][ T6237] __arm64_sys_close+0x8c/0x13c [ 4982.762791][ T6237] invoke_syscall+0x94/0x1ec [ 4982.763101][ T6237] el0_svc_common+0x120/0x2f4 [ 4982.763401][ T6237] do_el0_svc+0x58/0x74 [ 4982.763679][ T6237] el0_svc+0x64/0x240 [ 4982.763993][ T6237] el0t_64_sync_handler+0x84/0x12c [ 4982.764327][ T6237] el0t_64_sync+0x198/0x19c [ 4987.321607][ T6240] FAULT_INJECTION: forcing a failure. [ 4987.321607][ T6240] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 4987.358042][ T6240] CPU: 0 UID: 0 PID: 6240 Comm: syz.2.1155 Not tainted syzkaller #0 PREEMPT [ 4987.358460][ T6240] Hardware name: linux,dummy-virt (DT) [ 4987.358568][ T6240] Call trace: [ 4987.358677][ T6240] show_stack+0x2c/0x3c (C) [ 4987.359075][ T6240] __dump_stack+0x30/0x40 [ 4987.359410][ T6240] dump_stack_lvl+0xd8/0x12c [ 4987.359711][ T6240] dump_stack+0x1c/0x28 [ 4987.360029][ T6240] should_fail_ex+0x56c/0x6d8 [ 4987.360347][ T6240] should_fail_alloc_page+0xd4/0xd8 [ 4987.360626][ T6240] prepare_alloc_pages+0x22c/0x60c [ 4987.360913][ T6240] __alloc_frozen_pages_noprof+0xd8/0x2c8 [ 4987.361200][ T6240] alloc_pages_mpol+0x20c/0x460 [ 4987.361492][ T6240] alloc_pages_noprof+0x104/0x2ec [ 4987.361767][ T6240] __pte_alloc+0x48/0x228 [ 4987.362009][ T6240] do_pte_missing+0x1844/0x38c8 [ 4987.362300][ T6240] handle_mm_fault+0x1b18/0x2be0 [ 4987.362546][ T6240] do_page_fault+0x774/0x1158 [ 4987.362863][ T6240] do_translation_fault+0xbc/0xfc [ 4987.363151][ T6240] do_mem_abort+0x58/0x114 [ 4987.363409][ T6240] el0_da+0x78/0x234 [ 4987.363715][ T6240] el0t_64_sync_handler+0x90/0x12c [ 4987.364044][ T6240] el0t_64_sync+0x198/0x19c [ 4987.459309][ T6240] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 5012.849015][ T24] audit: type=1400 audit(5012.120:177): avc: denied { write } for pid=6252 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5019.401870][ T6261] FAULT_INJECTION: forcing a failure. [ 5019.401870][ T6261] name failslab, interval 1, probability 0, space 0, times 0 [ 5019.432647][ T6261] CPU: 0 UID: 0 PID: 6261 Comm: syz.2.1161 Not tainted syzkaller #0 PREEMPT [ 5019.433043][ T6261] Hardware name: linux,dummy-virt (DT) [ 5019.433182][ T6261] Call trace: [ 5019.433271][ T6261] show_stack+0x2c/0x3c (C) [ 5019.433636][ T6261] __dump_stack+0x30/0x40 [ 5019.433946][ T6261] dump_stack_lvl+0xd8/0x12c [ 5019.434280][ T6261] dump_stack+0x1c/0x28 [ 5019.434600][ T6261] should_fail_ex+0x56c/0x6d8 [ 5019.434911][ T6261] should_failslab+0xb8/0xec [ 5019.435220][ T6261] kmem_cache_alloc_noprof+0x94/0x520 [ 5019.435474][ T6261] pagetable_pte_ctor+0x88/0x2d4 [ 5019.435728][ T6261] __pte_alloc+0x5c/0x228 [ 5019.435939][ T6261] do_pte_missing+0x1844/0x38c8 [ 5019.436239][ T6261] handle_mm_fault+0x1b18/0x2be0 [ 5019.436560][ T6261] do_page_fault+0x774/0x1158 [ 5019.436841][ T6261] do_translation_fault+0xbc/0xfc [ 5019.437124][ T6261] do_mem_abort+0x58/0x114 [ 5019.437401][ T6261] el0_da+0x78/0x234 [ 5019.437704][ T6261] el0t_64_sync_handler+0x90/0x12c [ 5019.438006][ T6261] el0t_64_sync+0x198/0x19c [ 5019.560471][ T6261] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 5022.457982][ T24] audit: type=1400 audit(5021.740:178): avc: denied { write } for pid=6263 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5182.533015][ T6370] FAULT_INJECTION: forcing a failure. [ 5182.533015][ T6370] name failslab, interval 1, probability 0, space 0, times 0 [ 5182.549920][ T6370] CPU: 0 UID: 0 PID: 6370 Comm: syz.0.1205 Not tainted syzkaller #0 PREEMPT [ 5182.550347][ T6370] Hardware name: linux,dummy-virt (DT) [ 5182.550456][ T6370] Call trace: [ 5182.550535][ T6370] show_stack+0x2c/0x3c (C) [ 5182.550936][ T6370] __dump_stack+0x30/0x40 [ 5182.551296][ T6370] dump_stack_lvl+0xd8/0x12c [ 5182.551621][ T6370] dump_stack+0x1c/0x28 [ 5182.551917][ T6370] should_fail_ex+0x56c/0x6d8 [ 5182.552232][ T6370] should_failslab+0xb8/0xec [ 5182.552507][ T6370] __kmalloc_noprof+0xf0/0x5e8 [ 5182.552758][ T6370] tomoyo_realpath_from_path+0xdc/0x640 [ 5182.553029][ T6370] tomoyo_path_number_perm+0x158/0x358 [ 5182.553307][ T6370] tomoyo_file_ioctl+0x2c/0x3c [ 5182.553581][ T6370] security_file_ioctl+0xe0/0x2cc [ 5182.553874][ T6370] __arm64_sys_ioctl+0xd0/0x244 [ 5182.554193][ T6370] invoke_syscall+0x94/0x1ec [ 5182.554482][ T6370] el0_svc_common+0x120/0x2f4 [ 5182.554801][ T6370] do_el0_svc+0x58/0x74 [ 5182.555093][ T6370] el0_svc+0x64/0x240 [ 5182.555423][ T6370] el0t_64_sync_handler+0x84/0x12c [ 5182.555733][ T6370] el0t_64_sync+0x198/0x19c [ 5182.688205][ T6370] ERROR: Out of memory at tomoyo_realpath_from_path. [ 5188.381242][ T6373] FAULT_INJECTION: forcing a failure. [ 5188.381242][ T6373] name failslab, interval 1, probability 0, space 0, times 0 [ 5188.402204][ T6373] CPU: 0 UID: 0 PID: 6373 Comm: syz.0.1206 Not tainted syzkaller #0 PREEMPT [ 5188.402630][ T6373] Hardware name: linux,dummy-virt (DT) [ 5188.402750][ T6373] Call trace: [ 5188.402830][ T6373] show_stack+0x2c/0x3c (C) [ 5188.403227][ T6373] __dump_stack+0x30/0x40 [ 5188.403545][ T6373] dump_stack_lvl+0xd8/0x12c [ 5188.403855][ T6373] dump_stack+0x1c/0x28 [ 5188.404181][ T6373] should_fail_ex+0x56c/0x6d8 [ 5188.404481][ T6373] should_failslab+0xb8/0xec [ 5188.404749][ T6373] __kmalloc_noprof+0xf0/0x5e8 [ 5188.404997][ T6373] tomoyo_realpath_from_path+0xdc/0x640 [ 5188.405341][ T6373] tomoyo_check_open_permission+0x164/0x4c8 [ 5188.405614][ T6373] tomoyo_file_open+0x1d8/0x248 [ 5188.405893][ T6373] security_file_open+0xc0/0x274 [ 5188.406217][ T6373] do_dentry_open+0x39c/0x1504 [ 5188.406527][ T6373] vfs_open+0x4c/0x380 [ 5188.406841][ T6373] path_openat+0x2d08/0x3480 [ 5188.407114][ T6373] do_file_open+0x1b4/0x3e8 [ 5188.407384][ T6373] do_sys_openat2+0xc4/0x17c [ 5188.407674][ T6373] __arm64_sys_openat+0x14c/0x1b0 [ 5188.407987][ T6373] invoke_syscall+0x94/0x1ec [ 5188.408319][ T6373] el0_svc_common+0x120/0x2f4 [ 5188.408610][ T6373] do_el0_svc+0x58/0x74 [ 5188.408898][ T6373] el0_svc+0x64/0x240 [ 5188.409224][ T6373] el0t_64_sync_handler+0x84/0x12c [ 5188.409548][ T6373] el0t_64_sync+0x198/0x19c [ 5188.540915][ T6373] ERROR: Out of memory at tomoyo_realpath_from_path. [ 5220.268900][ T6391] FAULT_INJECTION: forcing a failure. [ 5220.268900][ T6391] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 5220.281819][ T6391] CPU: 0 UID: 0 PID: 6391 Comm: syz.2.1213 Not tainted syzkaller #0 PREEMPT [ 5220.282227][ T6391] Hardware name: linux,dummy-virt (DT) [ 5220.282343][ T6391] Call trace: [ 5220.282425][ T6391] show_stack+0x2c/0x3c (C) [ 5220.282839][ T6391] __dump_stack+0x30/0x40 [ 5220.283186][ T6391] dump_stack_lvl+0xd8/0x12c [ 5220.283500][ T6391] dump_stack+0x1c/0x28 [ 5220.283795][ T6391] should_fail_ex+0x56c/0x6d8 [ 5220.284095][ T6391] should_fail_alloc_page+0xd4/0xd8 [ 5220.284391][ T6391] prepare_alloc_pages+0x22c/0x60c [ 5220.284648][ T6391] __alloc_frozen_pages_noprof+0xd8/0x2c8 [ 5220.284912][ T6391] alloc_pages_mpol+0x20c/0x460 [ 5220.285190][ T6391] alloc_pages_noprof+0x104/0x2ec [ 5220.285450][ T6391] do_pte_missing+0xfa0/0x38c8 [ 5220.285718][ T6391] handle_mm_fault+0x1b18/0x2be0 [ 5220.285965][ T6391] do_page_fault+0x534/0x1158 [ 5220.286282][ T6391] do_translation_fault+0xbc/0xfc [ 5220.286561][ T6391] do_mem_abort+0x58/0x114 [ 5220.286850][ T6391] el1_abort+0x50/0x74 [ 5220.287183][ T6391] el1h_64_sync_handler+0x50/0xfc [ 5220.287494][ T6391] el1h_64_sync+0x6c/0x70 [ 5220.287852][ T6391] __arch_copy_from_user+0x14/0x23c (P) [ 5220.288151][ T6391] __tun_chr_ioctl+0xe40/0x1c88 [ 5220.288446][ T6391] tun_chr_ioctl+0x38/0x4c [ 5220.288704][ T6391] __arm64_sys_ioctl+0x18c/0x244 [ 5220.289004][ T6391] invoke_syscall+0x94/0x1ec [ 5220.289319][ T6391] el0_svc_common+0x120/0x2f4 [ 5220.289619][ T6391] do_el0_svc+0x58/0x74 [ 5220.289913][ T6391] el0_svc+0x64/0x240 [ 5220.290240][ T6391] el0t_64_sync_handler+0x84/0x12c [ 5220.290555][ T6391] el0t_64_sync+0x198/0x19c [ 5258.487706][ T24] audit: type=1400 audit(5257.730:179): avc: denied { write } for pid=6412 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5267.012668][ T6424] FAULT_INJECTION: forcing a failure. [ 5267.012668][ T6424] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 5267.058208][ T6424] CPU: 0 UID: 0 PID: 6424 Comm: syz.2.1224 Not tainted syzkaller #0 PREEMPT [ 5267.058646][ T6424] Hardware name: linux,dummy-virt (DT) [ 5267.058771][ T6424] Call trace: [ 5267.058854][ T6424] show_stack+0x2c/0x3c (C) [ 5267.059253][ T6424] __dump_stack+0x30/0x40 [ 5267.059569][ T6424] dump_stack_lvl+0xd8/0x12c [ 5267.059873][ T6424] dump_stack+0x1c/0x28 [ 5267.060184][ T6424] should_fail_ex+0x56c/0x6d8 [ 5267.060492][ T6424] should_fail+0x14/0x24 [ 5267.060784][ T6424] should_fail_usercopy+0x20/0x30 [ 5267.061107][ T6424] copy_folio_from_iter_atomic+0x3a4/0x1df0 [ 5267.061404][ T6424] generic_perform_write+0x49c/0x7f0 [ 5267.061680][ T6424] shmem_file_write_iter+0x130/0x17c [ 5267.061952][ T6424] vfs_write+0xa7c/0xb7c [ 5267.062233][ T6424] ksys_write+0x108/0x1fc [ 5267.062448][ T6424] __arm64_sys_write+0x98/0xcc [ 5267.062700][ T6424] invoke_syscall+0x94/0x1ec [ 5267.063010][ T6424] el0_svc_common+0x120/0x2f4 [ 5267.063339][ T6424] do_el0_svc+0x58/0x74 [ 5267.063623][ T6424] el0_svc+0x64/0x240 [ 5267.063934][ T6424] el0t_64_sync_handler+0x84/0x12c [ 5267.064271][ T6424] el0t_64_sync+0x198/0x19c [ 5267.327599][ T24] audit: type=1400 audit(5266.610:180): avc: denied { write } for pid=6422 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5280.620786][ T6432] kvm [6432]: Failed to find VMA for hva 0x203b0000 [ 5303.705671][ T6448] FAULT_INJECTION: forcing a failure. [ 5303.705671][ T6448] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 5303.724610][ T6448] CPU: 0 UID: 0 PID: 6448 Comm: syz.0.1231 Not tainted syzkaller #0 PREEMPT [ 5303.725005][ T6448] Hardware name: linux,dummy-virt (DT) [ 5303.725131][ T6448] Call trace: [ 5303.725227][ T6448] show_stack+0x2c/0x3c (C) [ 5303.725600][ T6448] __dump_stack+0x30/0x40 [ 5303.725907][ T6448] dump_stack_lvl+0xd8/0x12c [ 5303.726251][ T6448] dump_stack+0x1c/0x28 [ 5303.726571][ T6448] should_fail_ex+0x56c/0x6d8 [ 5303.726904][ T6448] should_fail+0x14/0x24 [ 5303.727197][ T6448] should_fail_usercopy+0x20/0x30 [ 5303.727514][ T6448] copy_folio_from_iter_atomic+0x3a4/0x1df0 [ 5303.727781][ T6448] generic_perform_write+0x49c/0x7f0 [ 5303.728035][ T6448] shmem_file_write_iter+0x130/0x17c [ 5303.728336][ T6448] vfs_write+0xa7c/0xb7c [ 5303.728559][ T6448] ksys_write+0x108/0x1fc [ 5303.728774][ T6448] __arm64_sys_write+0x98/0xcc [ 5303.728990][ T6448] invoke_syscall+0x94/0x1ec [ 5303.729318][ T6448] el0_svc_common+0x120/0x2f4 [ 5303.729613][ T6448] do_el0_svc+0x58/0x74 [ 5303.729905][ T6448] el0_svc+0x64/0x240 [ 5303.730254][ T6448] el0t_64_sync_handler+0x84/0x12c [ 5303.730586][ T6448] el0t_64_sync+0x198/0x19c [ 5309.743582][ T6451] FAULT_INJECTION: forcing a failure. [ 5309.743582][ T6451] name failslab, interval 1, probability 0, space 0, times 0 [ 5309.800548][ T6451] CPU: 0 UID: 0 PID: 6451 Comm: syz.2.1232 Not tainted syzkaller #0 PREEMPT [ 5309.800947][ T6451] Hardware name: linux,dummy-virt (DT) [ 5309.801054][ T6451] Call trace: [ 5309.801150][ T6451] show_stack+0x2c/0x3c (C) [ 5309.801543][ T6451] __dump_stack+0x30/0x40 [ 5309.801872][ T6451] dump_stack_lvl+0xd8/0x12c [ 5309.802206][ T6451] dump_stack+0x1c/0x28 [ 5309.802512][ T6451] should_fail_ex+0x56c/0x6d8 [ 5309.802837][ T6451] should_failslab+0xb8/0xec [ 5309.803125][ T6451] __kmalloc_cache_noprof+0x94/0x538 [ 5309.803408][ T6451] kvm_dev_ioctl+0x6f4/0x13c0 [ 5309.803667][ T6451] __arm64_sys_ioctl+0x18c/0x244 [ 5309.803965][ T6451] invoke_syscall+0x94/0x1ec [ 5309.804280][ T6451] el0_svc_common+0x120/0x2f4 [ 5309.804575][ T6451] do_el0_svc+0x58/0x74 [ 5309.804855][ T6451] el0_svc+0x64/0x240 [ 5309.805191][ T6451] el0t_64_sync_handler+0x84/0x12c [ 5309.805506][ T6451] el0t_64_sync+0x198/0x19c [ 5370.184133][ T6489] FAULT_INJECTION: forcing a failure. [ 5370.184133][ T6489] name failslab, interval 1, probability 0, space 0, times 0 [ 5370.258673][ T6489] CPU: 0 UID: 0 PID: 6489 Comm: syz.0.1250 Not tainted syzkaller #0 PREEMPT [ 5370.259067][ T6489] Hardware name: linux,dummy-virt (DT) [ 5370.259204][ T6489] Call trace: [ 5370.259284][ T6489] show_stack+0x2c/0x3c (C) [ 5370.259643][ T6489] __dump_stack+0x30/0x40 [ 5370.259943][ T6489] dump_stack_lvl+0xd8/0x12c [ 5370.260268][ T6489] dump_stack+0x1c/0x28 [ 5370.260568][ T6489] should_fail_ex+0x56c/0x6d8 [ 5370.260852][ T6489] should_failslab+0xb8/0xec [ 5370.261135][ T6489] __kmalloc_cache_noprof+0x94/0x538 [ 5370.261404][ T6489] kvm_dev_ioctl+0x7a4/0x13c0 [ 5370.261671][ T6489] __arm64_sys_ioctl+0x18c/0x244 [ 5370.261968][ T6489] invoke_syscall+0x94/0x1ec [ 5370.262282][ T6489] el0_svc_common+0x120/0x2f4 [ 5370.262568][ T6489] do_el0_svc+0x58/0x74 [ 5370.262877][ T6489] el0_svc+0x64/0x240 [ 5370.263213][ T6489] el0t_64_sync_handler+0x84/0x12c [ 5370.263527][ T6489] el0t_64_sync+0x198/0x19c [ 5543.695107][ T6594] FAULT_INJECTION: forcing a failure. [ 5543.695107][ T6594] name failslab, interval 1, probability 0, space 0, times 0 [ 5543.739274][ T6594] CPU: 0 UID: 0 PID: 6594 Comm: syz.0.1292 Not tainted syzkaller #0 PREEMPT [ 5543.739671][ T6594] Hardware name: linux,dummy-virt (DT) [ 5543.739777][ T6594] Call trace: [ 5543.739855][ T6594] show_stack+0x2c/0x3c (C) [ 5543.740251][ T6594] __dump_stack+0x30/0x40 [ 5543.740566][ T6594] dump_stack_lvl+0xd8/0x12c [ 5543.740863][ T6594] dump_stack+0x1c/0x28 [ 5543.741182][ T6594] should_fail_ex+0x56c/0x6d8 [ 5543.741477][ T6594] should_failslab+0xb8/0xec [ 5543.741769][ T6594] kmem_cache_alloc_lru_noprof+0x98/0x528 [ 5543.742041][ T6594] __d_alloc+0x54/0x854 [ 5543.742303][ T6594] d_alloc_parallel+0x9c/0x164c [ 5543.742535][ T6594] __lookup_slow+0xa0/0x328 [ 5543.742810][ T6594] lookup_slow+0x6c/0x9c [ 5543.743044][ T6594] lookup_noperm_unlocked+0xc0/0x1ec [ 5543.743330][ T6594] lookup_noperm_positive_unlocked+0x28/0x8c [ 5543.743594][ T6594] debugfs_lookup+0xcc/0x110 [ 5543.743865][ T6594] kvm_create_vm_debugfs+0xb8/0x7ac [ 5543.744161][ T6594] kvm_dev_ioctl+0x960/0x13c0 [ 5543.744426][ T6594] __arm64_sys_ioctl+0x18c/0x244 [ 5543.744738][ T6594] invoke_syscall+0x94/0x1ec [ 5543.745038][ T6594] el0_svc_common+0x120/0x2f4 [ 5543.745364][ T6594] do_el0_svc+0x58/0x74 [ 5543.745659][ T6594] el0_svc+0x64/0x240 [ 5543.745974][ T6594] el0t_64_sync_handler+0x84/0x12c [ 5543.746336][ T6594] el0t_64_sync+0x198/0x19c [ 5569.981253][ T6610] FAULT_INJECTION: forcing a failure. [ 5569.981253][ T6610] name failslab, interval 1, probability 0, space 0, times 0 [ 5570.001072][ T6610] CPU: 0 UID: 0 PID: 6610 Comm: syz.2.1297 Not tainted syzkaller #0 PREEMPT [ 5570.001489][ T6610] Hardware name: linux,dummy-virt (DT) [ 5570.001604][ T6610] Call trace: [ 5570.001685][ T6610] show_stack+0x2c/0x3c (C) [ 5570.002056][ T6610] __dump_stack+0x30/0x40 [ 5570.002408][ T6610] dump_stack_lvl+0xd8/0x12c [ 5570.002753][ T6610] dump_stack+0x1c/0x28 [ 5570.003061][ T6610] should_fail_ex+0x56c/0x6d8 [ 5570.003389][ T6610] should_failslab+0xb8/0xec [ 5570.003671][ T6610] kmem_cache_alloc_lru_noprof+0x98/0x528 [ 5570.003925][ T6610] __d_alloc+0x54/0x854 [ 5570.004177][ T6610] d_alloc+0x60/0x24c [ 5570.004412][ T6610] lookup_one_qstr_excl+0xf0/0x38c [ 5570.004710][ T6610] start_dirop+0x70/0xb4 [ 5570.004938][ T6610] simple_start_creating+0x80/0xac [ 5570.005242][ T6610] debugfs_start_creating+0x104/0x1c4 [ 5570.005521][ T6610] debugfs_create_dir+0x34/0x44c [ 5570.005777][ T6610] kvm_create_vm_debugfs+0x150/0x7ac [ 5570.006045][ T6610] kvm_dev_ioctl+0x960/0x13c0 [ 5570.006354][ T6610] __arm64_sys_ioctl+0x18c/0x244 [ 5570.006682][ T6610] invoke_syscall+0x94/0x1ec [ 5570.006986][ T6610] el0_svc_common+0x120/0x2f4 [ 5570.007312][ T6610] do_el0_svc+0x58/0x74 [ 5570.007601][ T6610] el0_svc+0x64/0x240 [ 5570.007925][ T6610] el0t_64_sync_handler+0x84/0x12c [ 5570.008281][ T6610] el0t_64_sync+0x198/0x19c [ 5643.251220][ T5856] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5644.661241][ T5856] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5645.752853][ T5856] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5647.991284][ T5856] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5658.301624][ T5856] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 5658.595641][ T5856] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 5658.722026][ T5856] bond0 (unregistering): Released all slaves [ 5660.780377][ T5856] hsr_slave_0: left promiscuous mode [ 5660.844641][ T5856] hsr_slave_1: left promiscuous mode [ 5661.053705][ T5856] veth1_macvtap: left promiscuous mode [ 5661.080531][ T5856] veth0_macvtap: left promiscuous mode [ 5661.085103][ T5856] veth1_vlan: left promiscuous mode [ 5661.118147][ T5856] veth0_vlan: left promiscuous mode [ 5679.465970][ T5856] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5680.613174][ T5856] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5681.582067][ T5856] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5683.608763][ T5856] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5684.093456][ T6614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 5684.575052][ T6614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 5685.789172][ T24] audit: type=1400 audit(5685.060:181): avc: denied { write } for pid=6661 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5691.861724][ T24] audit: type=1400 audit(5691.150:182): avc: denied { write } for pid=6670 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5695.622587][ T5856] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 5695.693261][ T5856] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 5695.735695][ T5856] bond0 (unregistering): Released all slaves [ 5696.284224][ T3211] 8021q: adding VLAN 0 to HW filter on device eth1 [ 5696.805979][ T5856] hsr_slave_0: left promiscuous mode [ 5696.870935][ T5856] hsr_slave_1: left promiscuous mode [ 5697.137578][ T5856] veth1_macvtap: left promiscuous mode [ 5697.141338][ T5856] veth0_macvtap: left promiscuous mode [ 5697.162359][ T5856] veth1_vlan: left promiscuous mode [ 5697.181425][ T5856] veth0_vlan: left promiscuous mode [ 5717.035778][ T6614] hsr_slave_0: entered promiscuous mode [ 5717.091906][ T6614] hsr_slave_1: entered promiscuous mode [ 5718.497684][ T24] audit: type=1400 audit(5717.740:183): avc: denied { write } for pid=6689 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5719.261699][ T6625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 5719.465239][ T6625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 5722.088205][ T24] audit: type=1400 audit(5721.370:184): avc: denied { write } for pid=6694 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5724.922722][ T3211] 8021q: adding VLAN 0 to HW filter on device eth2 [ 5727.953992][ T6614] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 5728.212932][ T6614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 5729.332245][ T6614] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 5729.652940][ T6614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 5729.768905][ T6614] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 5729.989268][ T6614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 5730.016060][ T6614] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 5730.292931][ T6614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 5737.011107][ T24] audit: type=1400 audit(5736.280:185): avc: denied { write } for pid=6712 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5742.765284][ T6625] hsr_slave_0: entered promiscuous mode [ 5742.855268][ T6625] hsr_slave_1: entered promiscuous mode [ 5742.934992][ T6625] debugfs: 'hsr0' already exists in 'hsr' [ 5742.939573][ T6625] Cannot create hsr debugfs directory [ 5743.047620][ T24] audit: type=1400 audit(5742.320:186): avc: denied { write } for pid=6720 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5746.851788][ T3211] 8021q: adding VLAN 0 to HW filter on device eth3 [ 5754.819881][ T6614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 5754.863328][ T6625] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 5755.073078][ T6625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 5755.277751][ T6625] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 5755.423515][ T6625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 5755.594857][ T24] audit: type=1400 audit(5754.880:187): avc: denied { write } for pid=6728 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5755.681065][ T6625] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 5755.893987][ T6625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 5756.084621][ T6625] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 5756.245963][ T6625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 5761.667684][ T24] audit: type=1400 audit(5760.950:188): avc: denied { write } for pid=6740 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5765.378266][ T3211] 8021q: adding VLAN 0 to HW filter on device eth4 [ 5776.527855][ T24] audit: type=1400 audit(5775.710:189): avc: denied { write } for pid=6754 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5777.463521][ T6625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 5782.677894][ T24] audit: type=1400 audit(5781.950:190): avc: denied { write } for pid=6761 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5786.389887][ T3211] 8021q: adding VLAN 0 to HW filter on device eth5 [ 5800.540215][ T24] audit: type=1400 audit(5799.830:191): avc: denied { write } for pid=6776 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5807.775389][ T24] audit: type=1400 audit(5807.060:192): avc: denied { write } for pid=6785 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5812.488611][ T3211] 8021q: adding VLAN 0 to HW filter on device eth6 [ 5823.688452][ T24] audit: type=1400 audit(5822.970:193): avc: denied { write } for pid=6799 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5829.639318][ T24] audit: type=1400 audit(5828.920:194): avc: denied { write } for pid=6810 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5833.722173][ T3211] 8021q: adding VLAN 0 to HW filter on device eth7 [ 5835.152460][ T6614] veth0_vlan: entered promiscuous mode [ 5835.869830][ T6614] veth1_vlan: entered promiscuous mode [ 5838.535854][ T6614] veth0_macvtap: entered promiscuous mode [ 5838.910412][ T6614] veth1_macvtap: entered promiscuous mode [ 5840.201078][ T24] audit: type=1400 audit(5839.480:195): avc: denied { write } for pid=6817 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5841.833476][ T3537] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 5841.838035][ T6635] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 5841.842999][ T6635] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 5841.845539][ T6635] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 5847.728247][ T24] audit: type=1400 audit(5847.010:196): avc: denied { write } for pid=6825 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5871.570707][ T24] audit: type=1400 audit(5870.830:197): avc: denied { write } for pid=6842 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5880.038040][ T24] audit: type=1400 audit(5879.260:198): avc: denied { write } for pid=6852 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5882.674602][ T6625] veth0_vlan: entered promiscuous mode [ 5883.399226][ T6625] veth1_vlan: entered promiscuous mode [ 5886.084428][ T3211] 8021q: adding VLAN 0 to HW filter on device eth8 [ 5886.495386][ T6625] veth0_macvtap: entered promiscuous mode [ 5887.091532][ T6625] veth1_macvtap: entered promiscuous mode [ 5890.368474][ T5856] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 5890.589738][ T4100] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 5890.599814][ T4100] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 5890.749206][ T4100] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 5942.699286][ T24] audit: type=1400 audit(5941.980:199): avc: denied { write } for pid=6892 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5951.709710][ T24] audit: type=1400 audit(5950.980:200): avc: denied { write } for pid=6902 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5978.437841][ T24] audit: type=1400 audit(5977.680:201): avc: denied { write } for pid=6920 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5988.487955][ T24] audit: type=1400 audit(5987.750:202): avc: denied { write } for pid=6928 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6009.310686][ T24] audit: type=1400 audit(6008.590:203): avc: denied { write } for pid=6944 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6018.463860][ T24] audit: type=1400 audit(6017.750:204): avc: denied { write } for pid=6952 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6044.500009][ T24] audit: type=1400 audit(6043.760:205): avc: denied { write } for pid=6965 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6054.614316][ T24] audit: type=1400 audit(6053.790:206): avc: denied { write } for pid=6975 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6066.320298][ T24] audit: type=1400 audit(6065.610:207): avc: denied { write } for pid=6980 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6070.107829][ T24] audit: type=1400 audit(6069.390:208): avc: denied { write } for pid=6983 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6076.570439][ T24] audit: type=1400 audit(6075.840:209): avc: denied { write } for pid=6986 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6080.725705][ T24] audit: type=1400 audit(6080.010:210): avc: denied { write } for pid=6989 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6092.987910][ T24] audit: type=1400 audit(6092.240:211): avc: denied { write } for pid=6994 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6102.129246][ T24] audit: type=1400 audit(6101.390:212): avc: denied { write } for pid=7002 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6123.608382][ T24] audit: type=1400 audit(6122.870:213): avc: denied { write } for pid=7016 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6130.917450][ T24] audit: type=1400 audit(6130.180:214): avc: denied { write } for pid=7023 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6150.100879][ T24] audit: type=1400 audit(6149.360:215): avc: denied { write } for pid=7035 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6159.306006][ T24] audit: type=1400 audit(6158.580:216): avc: denied { write } for pid=7047 comm="rm" name="hook-state" dev="tmpfs" ino=90 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6168.059483][ T6995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 6169.349362][ T6995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 6181.174344][ T7006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 6181.850060][ T7006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 6194.343750][ T6995] hsr_slave_0: entered promiscuous mode [ 6194.395636][ T6995] hsr_slave_1: entered promiscuous mode [ 6194.472723][ T6995] debugfs: 'hsr0' already exists in 'hsr' [ 6194.476126][ T6995] Cannot create hsr debugfs directory [ 6208.895529][ T7006] hsr_slave_0: entered promiscuous mode [ 6208.987899][ T7006] hsr_slave_1: entered promiscuous mode [ 6208.995943][ T7006] debugfs: 'hsr0' already exists in 'hsr' [ 6209.028885][ T7006] Cannot create hsr debugfs directory [ 6212.304238][ T6995] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 6212.739735][ T6995] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 6212.880498][ T6995] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 6213.184147][ T6995] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 6213.332662][ T6995] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 6213.750696][ T6995] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 6215.007890][ T6995] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 6215.230905][ T6995] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 6230.662885][ T7006] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 6231.119161][ T7006] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 6231.175978][ T7006] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 6231.798415][ T7006] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 6231.922664][ T7006] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 6232.282053][ T7006] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 6232.475226][ T7006] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 6232.989325][ T7006] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 6250.225442][ T6995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 6259.902739][ T7006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 6374.859628][ T6995] veth0_vlan: entered promiscuous mode [ 6375.854693][ T6995] veth1_vlan: entered promiscuous mode [ 6379.179145][ T6995] veth0_macvtap: entered promiscuous mode [ 6379.740519][ T6995] veth1_macvtap: entered promiscuous mode [ 6382.912254][ T7106] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 6382.995328][ T7106] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 6383.093362][ T7111] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 6383.103446][ T7111] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 6387.581418][ T7006] veth0_vlan: entered promiscuous mode [ 6389.159905][ T7006] veth1_vlan: entered promiscuous mode [ 6392.769563][ T7006] veth0_macvtap: entered promiscuous mode [ 6393.637328][ T7006] veth1_macvtap: entered promiscuous mode [ 6398.569482][ T5453] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 6398.799415][ T5453] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 6398.803678][ T5453] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 6398.829145][ T5453] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 6503.592285][ T26] INFO: task syz.3.1325:6973 blocked for more than 430 seconds. [ 6503.614097][ T26] Not tainted syzkaller #0 [ 6503.615016][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 6503.615532][ T26] task:syz.3.1325 state:D stack:0 pid:6973 tgid:6973 ppid:6614 task_flags:0x400040 flags:0x00000011 [ 6503.658514][ T26] Call trace: [ 6503.659004][ T26] __switch_to+0x5e0/0xb70 (T) [ 6503.659673][ T26] __schedule+0x1e0c/0x38cc [ 6503.660147][ T26] schedule+0x1b4/0x274 [ 6503.660612][ T26] schedule_timeout+0x68/0x1e4 [ 6503.661132][ T26] wait_for_completion+0x1b8/0x414 [ 6503.661628][ T26] __synchronize_srcu+0x1c8/0x208 [ 6503.662110][ T26] synchronize_srcu+0x668/0x8dc [ 6503.662592][ T26] mmu_notifier_unregister+0x33c/0x444 [ 6503.663114][ T26] kvm_put_kvm+0x69c/0xbbc [ 6503.663628][ T26] kvm_vm_release+0x58/0x78 [ 6503.664056][ T26] __fput+0x4ac/0x978 [ 6503.664507][ T26] ____fput+0x20/0x30 [ 6503.664915][ T26] task_work_run+0x1b8/0x250 [ 6503.665434][ T26] exit_to_user_mode_loop+0x110/0x188 [ 6503.665937][ T26] el0_svc+0x18c/0x240 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 6503.853767][ T26] el0t_64_sync_handler+0x84/0x12c [ 6503.854492][ T26] el0t_64_sync+0x198/0x19c [ 6503.866213][ T26] [ 6503.866213][ T26] Showing all locks held in the system: [ 6503.909359][ T26] 1 lock held by khungtaskd/26: [ 6503.909841][ T26] #0: ffff800087e93598 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x4c/0x188 [ 6503.912494][ T26] 2 locks held by getty/3240: [ 6503.912854][ T26] #0: ccf00000124aa0a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 6503.914568][ T26] #1: f4ff80008cbdb2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x314/0x11f8 [ 6503.916275][ T26] 4 locks held by sshd-session/3368: [ 6504.010109][ T26] #0: fff0000074ce14e0 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x364/0x38cc [ 6504.011991][ T26] #1: fff0000074ccc240 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x6c/0x6e8 [ 6504.013672][ T26] #2: ffff80008c94d690 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x8c/0x5b0 [ 6504.015384][ T26] #3: ffff800087e93598 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0xa9c/0x178c [ 6504.068818][ T26] 2 locks held by syz-executor/3369: [ 6504.069256][ T26] 3 locks held by kworker/u4:5/5856: [ 6504.069609][ T26] 3 locks held by kworker/u4:7/6749: [ 6504.069938][ T26] 2 locks held by syz.4.1324/6967: [ 6504.070316][ T26] 3 locks held by syz-executor/7189: [ 6504.070646][ T26] 2 locks held by syz-executor/7199: [ 6504.070947][ T26] #0: ffff800088174fb8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x614/0x724 [ 6504.072625][ T26] #1: ffff800088176fb8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock_killable+0x24/0x30 [ 6504.074439][ T26] [ 6504.074744][ T26] ============================================= [ 6504.074744][ T26] [ 6504.075733][ T26] Kernel panic - not syncing: hung_task: blocked tasks [ 6504.088448][ T26] CPU: 0 UID: 0 PID: 26 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT [ 6504.089823][ T26] Hardware name: linux,dummy-virt (DT) [ 6504.090778][ T26] Call trace: [ 6504.091479][ T26] show_stack+0x2c/0x3c (C) [ 6504.092621][ T26] __dump_stack+0x30/0x40 [ 6504.093622][ T26] dump_stack_lvl+0x30/0x12c [ 6504.094668][ T26] dump_stack+0x1c/0x28 [ 6504.095632][ T26] vpanic+0x4cc/0x844 [ 6504.096533][ T26] vpanic+0x0/0x844 [ 6504.097384][ T26] hung_task_panic+0x0/0x2c [ 6504.098317][ T26] kthread+0x4cc/0x514 [ 6504.099233][ T26] ret_from_fork+0x10/0x20 [ 6504.100937][ T26] Kernel Offset: disabled [ 6504.101776][ T26] CPU features: 0x00000000,00d1802f,df1847a1,057ffe1f [ 6504.103006][ T26] Memory Limit: none [ 6504.105382][ T26] Rebooting in 86400 seconds..