last executing test programs: 1m0.343743037s ago: executing program 0 (id=144): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000909000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r5, 0x4018aee3, &(0x7f00000000c0)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0x3}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x7, 0xffffffffffffffff}) ioctl$KVM_GET_DEVICE_ATTR(r6, 0x4018aee2, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x1, 0x0}) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000bde000/0x400000)=nil) r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f00000000c0)={0x0, &(0x7f0000000200)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x1}}], 0x28}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r7, 0x1, 0x220) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000180)={0x8}) openat$kvm(0x0, &(0x7f0000000040), 0x20000, 0x0) r10 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x100000000000000) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) r12 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r11, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r12, 0x20, &(0x7f0000000080)="fb0149c1793be3ac2c00008f1f449a7a83567331bc30d22627e700140396000000000000000000000400000000000000000000000000800000000004f56176574600", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000c9b000/0x4000)=nil, 0x0, 0x1000001, 0x11, r11, 0x0) ioctl$KVM_GET_ONE_REG(r5, 0x4010aeab, &(0x7f00000001c0)=@arm64_fp_extra={0x60200000001000d4, &(0x7f0000000140)=0x200}) r13 = eventfd2(0x0, 0x0) close(r13) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) r14 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, r11, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r14, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32) write$eventfd(r13, &(0x7f0000000180)=0x5, 0xfffffde3) ioctl$KVM_RUN(r9, 0xae80, 0x0) 46.350260289s ago: executing program 0 (id=146): munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) munmap(&(0x7f0000eed000/0x4000)=nil, 0x4000) munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000280)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000140)=@arm64_core={0x603000000010004c, &(0x7f0000000100)=0x401}) munmap(&(0x7f0000e51000/0x4000)=nil, 0x4000) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f00006b4000/0x3000)=nil, r5, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x2000007, 0x30d2a4fbfbea96b8, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0x402f812, 0xffffffffffffffff, 0x0) munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xc, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x20000000) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) r7 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r6, 0xae04) mmap$KVM_VCPU(&(0x7f000064b000/0x4000)=nil, r7, 0x100000d, 0x9032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, r7, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) 45.475554775s ago: executing program 1 (id=147): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x220c00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$kvm(0xffffff9c, 0x0, 0x1a17f2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1c) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r5 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x280000a, 0x11, r4, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r4, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x12a545ec934a75a6, 0x0) 38.739904715s ago: executing program 1 (id=148): munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000b80)={0x0, &(0x7f0000000640)=[@smc={0x1e, 0x40, {0xc4000012, [0x0, 0x4, 0x0, 0x4, 0x8001]}}], 0x40}, &(0x7f0000000bc0)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x0, 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) r7 = ioctl$KVM_CREATE_VM(r6, 0x894c, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0x8004b708, 0x0) r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x20001, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x27) ioctl$KVM_CHECK_EXTENSION_VM(r10, 0xae03, 0xc6) ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) r11 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil) r14 = syz_kvm_add_vcpu$arm64(r13, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r14, 0x4010aeac, &(0x7f0000000100)=@arm64_sys={0x603000000013df19, &(0x7f0000000280)=0x8}) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_RUN(r14, 0xae80, 0x0) r15 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r16 = ioctl$KVM_CREATE_VM(r15, 0xae01, 0x0) ioctl$KVM_SIGNAL_MSI(r16, 0x4020aea5, 0xfffffffffffffffe) mmap$KVM_VCPU(&(0x7f0000ffa000/0x4000)=nil, r8, 0x0, 0x1010, 0xffffffffffffffff, 0x1000000) r17 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r17, 0xae03, 0x62) 35.466438477s ago: executing program 0 (id=149): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x40480, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f0000000000)={0x1, 0xe59b8351}) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0x80111500, 0x20000000) close(r4) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0x40049409, 0x0) syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000bfd000/0x400000)=nil) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000000)={0x0, &(0x7f0000000400)=[@hvc={0x32, 0x40, {0x84000053, [0x8, 0x8, 0x1, 0x8, 0x100]}}], 0x40}, 0x0, 0x0) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000180)={0x0, &(0x7f00000003c0)=[@hvc={0x32, 0x40, {0x86000001, [0xc, 0x5, 0x2, 0xfffffffffffffffc, 0x52]}}], 0xffffffb5}, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 23.951953287s ago: executing program 0 (id=150): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3c) syz_kvm_setup_syzos_vm$arm64(r0, &(0x7f0000c00000/0x400000)=nil) r1 = eventfd2(0x0, 0x80001) write$eventfd(r1, &(0x7f0000000000)=0x625, 0x8) r2 = eventfd2(0x4, 0x80000) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000040)={0x100, 0x6000, 0x0, r2, 0xa}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xd15dfe167e52a3f3, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x36) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x80) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x4) ioctl$KVM_CAP_ARM_MTE(r6, 0x4068aea3, &(0x7f0000000100)) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x12) ioctl$KVM_SET_DEVICE_ATTR_vm(r4, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000180)={0x6bba, 0x7}}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r8, 0xae04) ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r7, 0x4068aea3, &(0x7f0000000240)={0xe4, 0x0, 0x40}) r9 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x28) ioctl$KVM_HAS_DEVICE_ATTR_vm(r9, 0x4018aee3, &(0x7f0000000300)=@attr_other={0x0, 0x3, 0x0, &(0x7f00000002c0)=0x1}) r10 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_ONE_REG(r10, 0x4010aeac, &(0x7f0000000380)=@arm64_bitmap={0x6030000000160000, &(0x7f0000000340)=0x8}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000003c0)={0x2, 0x6, 0x4, 0x1000, &(0x7f0000c06000/0x1000)=nil}) r11 = eventfd2(0x6a3, 0x80000) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000400)={r1, 0x2, 0x2, r11}) r12 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x26) ioctl$KVM_CAP_ARM_INJECT_SERROR_ESR(r12, 0x4068aea3, &(0x7f0000000440)) ioctl$KVM_GET_DEVICE_ATTR_vm(r0, 0x4018aee2, &(0x7f0000000500)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f00000004c0)={0xa24, 0x3ff, 0x1}}) ioctl$KVM_IRQ_LINE_STATUS(r4, 0xc008ae67, &(0x7f0000000540)={0x3, 0x8001}) ioctl$KVM_IOEVENTFD(r9, 0x4040ae79, &(0x7f0000000580)={0x8000000000000000, 0x3000, 0x1, r11, 0x4}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000005c0)={0xd000, 0x105000, 0x1}) 23.136809607s ago: executing program 1 (id=151): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f0000000100)=ANY=[], 0x30}], 0x1, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000bfd000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000b80)={0x0, &(0x7f00000009c0)=[@hvc={0x32, 0x40, {0xc4000004, [0x4, 0x1, 0x8000000000000000, 0x427f, 0x400003]}}], 0x40}, &(0x7f0000000bc0)=[@featur1={0x1, 0x4}], 0x1) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = eventfd2(0x0, 0x80000) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000001340)={0x0, 0x0, 0x2, r9, 0x3}) r10 = eventfd2(0x8, 0x80800) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f00000000c0)={0x8000000000000000, 0xeeef0000, 0x0, r10}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000000)={0x203, 0x0, 0x2, r9, 0xf}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) close(r1) close(r2) 15.503791397s ago: executing program 0 (id=152): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000bde000/0x400000)=nil) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r8, 0x4018aee1, &(0x7f0000000000)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0x20e4586c}) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r9, 0x4010aeab, &(0x7f0000000140)=@arm64_core={0x6030000000100024, &(0x7f0000000100)=0x2}) 11.553558945s ago: executing program 1 (id=153): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x379401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x18, {"7f2003d5"}}], 0x18}, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000100)={0x0, 0x81}) 5.939449497s ago: executing program 1 (id=154): r0 = eventfd2(0x0, 0x80000) r1 = eventfd2(0xbd, 0x80000) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={r0, 0x1000, 0x0, r1}) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x40) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f0000000040)={0x100, 0x8001}) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x2000)=nil, r3, 0x1000008, 0x10010, r4, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r2, 0x4068aea3, &(0x7f0000000080)={0xdf, 0x0, 0x4000}) ioctl$KVM_CAP_ARM_SYSTEM_SUSPEND(r2, 0x4068aea3, &(0x7f0000000100)) r5 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000180)={0xffffffffffffff13, 0x7ff}) ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f00000001c0)={0x10004, 0x5, 0x6000, 0x1000, &(0x7f0000ffd000/0x1000)=nil, 0x4, r5}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000280)={0x7, 0xf0a}) write$eventfd(r0, &(0x7f00000002c0)=0x8, 0x8) mmap$KVM_VCPU(&(0x7f0000ffd000/0x1000)=nil, r3, 0x2, 0x12, r4, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r4, 0x4018aee2, &(0x7f0000000340)=@attr_other={0x0, 0x9, 0x7b28, &(0x7f0000000300)=0x1}) ioctl$KVM_CLEAR_DIRTY_LOG(r2, 0xc018aec0, &(0x7f0000000780)={0x0, 0x3c0, 0x180, &(0x7f0000000380)=[0x10001, 0x7, 0x22a6, 0xff, 0xff, 0xfffffffffffffffc, 0x80000000, 0x2, 0x5, 0x964e, 0xe4, 0x3, 0x0, 0x8, 0x5, 0x3ff, 0x8, 0x81, 0x401, 0xfffffffffffffe00, 0x9, 0xfffffffffffffff7, 0xe, 0x1, 0x1, 0x5, 0x8000000000000001, 0x5, 0xfffffffffffffff7, 0x7, 0x2, 0x5, 0x10, 0x9, 0x7, 0x7f, 0xfff, 0x4ffd, 0x4, 0x8000000000000001, 0x1, 0x100000001, 0x5, 0xfff, 0x7, 0x0, 0x5, 0x6a, 0x4, 0x9, 0x7, 0x14000, 0x5, 0x2b318894, 0x0, 0xfffffffffffffffe, 0x8, 0x8, 0x10, 0x5, 0x38b, 0x0, 0xff, 0x1000000000000000, 0xffffffff, 0x1000, 0x3c9, 0x2, 0x4, 0xa5, 0xfffffffffffffb0c, 0x5, 0xd, 0x5, 0x100000000, 0x0, 0x400, 0x4, 0xa, 0x9000000000000, 0x800, 0x5, 0xf5434bf, 0xffffffffffff8000, 0x8, 0x7, 0xa, 0xffffffffffffff10, 0x8001, 0xffffffff, 0x758, 0x3, 0x6, 0x9, 0x100, 0x800, 0x0, 0x9, 0x67, 0x96, 0x1, 0x9da, 0x9, 0x7fffffffffffffff, 0xfffffffffffffffd, 0x6, 0x1, 0x8, 0x1, 0x0, 0x400, 0x31000000000, 0x1, 0x2, 0xffffffffffffffff, 0x6, 0x9, 0x2d, 0x4, 0x0, 0x4, 0xa58a, 0x40, 0x80000000, 0x4, 0x15c3d7bd, 0xd24b, 0x2af]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f0000000800)=@arm64_fp={0x60400000001000a9, &(0x7f00000007c0)=0x2}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4000ae84, &(0x7f0000000840)={{0x5000, 0xdddd1000, 0xd, 0x1, 0x7, 0x7, 0xfa, 0x9, 0x4, 0x53, 0x7, 0x95}, {0x5000, 0x1000, 0x9, 0x7, 0x8, 0xb, 0x8, 0xf, 0x8, 0x7, 0x2, 0x4}, {0x0, 0x8080000, 0xd, 0x91, 0xff, 0x7, 0xf7, 0x3, 0xff, 0x1, 0x6, 0x3}, {0x1, 0x10000, 0x13, 0x6, 0x80, 0x8a, 0x7, 0x8, 0x2, 0x0, 0x6}, {0x8080000, 0x5000, 0x3, 0x6, 0x9, 0xff, 0x7, 0x9, 0x9, 0x72, 0x2, 0x81}, {0x2000, 0xf000, 0x8, 0x6, 0x9, 0x1, 0x2, 0x6, 0x4, 0x5, 0x7, 0x3}, {0xdddd0000, 0x80a0000, 0x3, 0x9, 0x1, 0xa, 0x10, 0x3, 0x3, 0x2, 0x23, 0x45}, {0xdddd1000, 0x80a0000, 0xf, 0x5d, 0x2, 0x1, 0x5, 0x7, 0x1, 0xbe, 0x38, 0x9}, {0x0, 0x80}, {0xdddd1000, 0x90d}, 0x0, 0x0, 0x10000, 0x200040, 0x3, 0x500, 0xeeee8000, [0x0, 0x9f3, 0x6e, 0x9]}) r6 = ioctl$KVM_GET_STATS_FD_vm(r4, 0xaece) ioctl$KVM_CLEAR_DIRTY_LOG(r6, 0xc018aec0, &(0x7f0000000d80)={0x4, 0x400, 0x140, &(0x7f0000000980)=[0x1, 0xf4ce, 0xfffffffffffeffff, 0xdaf, 0x4, 0x100000001, 0x5, 0x3, 0x8000, 0x9, 0x1, 0x3, 0x2, 0x0, 0x5, 0x6a7741c6, 0x1, 0x6, 0x8e, 0x0, 0x4, 0xf, 0x4, 0x0, 0x0, 0x662, 0x8001, 0x1, 0x0, 0x6, 0x4, 0x40, 0x9b3, 0x9, 0x5, 0x6a33e00f, 0x5, 0x12a, 0x1, 0x7fff, 0x4, 0xf, 0xc000000000000000, 0xffffffffffffffff, 0xffffffff, 0x6, 0x8, 0x8ec, 0x2, 0x1, 0x7, 0xffffffffb7e3ab22, 0x2, 0xfffffffffffffff1, 0x9f5c, 0x7, 0x2, 0x5, 0xfffffffffffffff7, 0x2, 0x8, 0x33, 0xf2, 0x457, 0xfff, 0xfffffffffffffffa, 0xfffffffffffffffc, 0x4, 0x80, 0xdbbe, 0x100000001, 0x6, 0x1, 0xd, 0x0, 0x1, 0x2, 0x5, 0xf7, 0x5, 0x101, 0x8, 0x0, 0x7fffffffffffffff, 0x4, 0xffffffffffffffff, 0x9, 0x3, 0x4, 0x1, 0x9, 0x5, 0x0, 0x5, 0x2, 0x7fffffffffffffff, 0x8, 0x200, 0x9, 0x5, 0x2, 0x7fff, 0xfffffffffffffffb, 0x3, 0x9b000000, 0xfff, 0x54, 0x4, 0x0, 0x3d, 0x3, 0x6, 0x5, 0x5, 0x7, 0x90, 0x1, 0x9, 0x7, 0x3, 0x7, 0x8, 0x8, 0x7d3, 0x3f1, 0xc8a8, 0x1, 0xf]}) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f0000000dc0)={0x0, 0x9}) ioctl$KVM_IRQ_LINE(r6, 0x4008ae61, &(0x7f0000000e00)={0x8, 0xffffffc0}) ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f0000000e80)=@arm64_sys={0x603000000013df65, &(0x7f0000000e40)=0x1f79}) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0xd) syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000bfd000/0x400000)=nil) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x37) 2.95597335s ago: executing program 0 (id=155): mmap$KVM_VCPU(&(0x7f0000001000/0x2000)=nil, 0x930, 0x2000003, 0x4120932, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x77) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x28) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x31) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000040)={0x1, 0x2, 0xeeef0000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x8080000, 0x2000, &(0x7f0000c5d000/0x2000)=nil}) syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) munmap(&(0x7f0000d70000/0x3000)=nil, 0x3000) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1000009, 0x16831, 0xffffffffffffffff, 0x0) r7 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000540)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x101fd, 0x2, 0xdddd1000, 0x1000, &(0x7f0000ecd000/0x1000)=nil}) 0s ago: executing program 1 (id=156): r0 = eventfd2(0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x21) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r2, 0x4068aea3, &(0x7f0000000080)={0xdf, 0x0, 0x800}) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) (async) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$arm64(r5, 0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil, &(0x7f0000000900)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) close(r5) (async, rerun: 32) ioctl$KVM_CAP_PTP_KVM(r2, 0x4068aea3, &(0x7f0000000100)) (async, rerun: 32) r6 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000000000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000180)={0x0, &(0x7f0000000240)=[@mrs={0xbe, 0x18, {0x603000000013e648}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x0, 0x3, 0x8, 0x4, 0x7f1, 0x1}}, @uexit={0x0, 0x18, 0x7}, @its_setup={0x82, 0x28, {0x3, 0x2, 0x32b}}, @irq_setup={0x46, 0x18, {0x2, 0x1d1}}, @uexit={0x0, 0x6e, 0xa}, @smc={0x1e, 0x40, {0x3000000, [0x6, 0x2c6d, 0x3, 0x2, 0x7]}}, @uexit={0x0, 0x18, 0x1}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xffd0, 0x10, 0x1}}, @irq_setup={0x46, 0x18, {0x1, 0x333}}, @mrs={0xbe, 0x18, {0x603000000013e281}}, @svc={0x122, 0x40, {0xc400000d, [0x5, 0x5, 0x2, 0x5, 0x6]}}], 0xfeb4}, &(0x7f00000001c0)=[@featur2={0x1, 0xa4}], 0x1) (async) eventfd2(0x0, 0x0) r7 = openat$kvm(0x0, &(0x7f0000000200), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000000000/0x400000)=nil) (async) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000040)={0x7, 0xffffffffffffffff}) r10 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil) r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r13, 0x4010aeab, &(0x7f0000000440)=@arm64_core={0x603000000010003c, &(0x7f0000000100)=0x1}) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x1}) mmap$KVM_VCPU(&(0x7f0000004000/0x4000)=nil, r3, 0xc0fffa, 0x10, r0, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x2, 0x23ac5f9b426ec4b1, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0xdc032, 0xffffffffffffffff, 0x0) eventfd2(0x8, 0x80800) kernel console output (not intermixed with test programs): [ 450.995716][ T3144] eql: remember to turn off Van-Jacobson compression on your slave devices Warning: Permanently added '[localhost]:53423' (ED25519) to the list of known hosts. [ 639.058893][ T25] audit: type=1400 audit(638.200:61): avc: denied { name_bind } for pid=3303 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 641.031877][ T25] audit: type=1400 audit(640.210:62): avc: denied { execute } for pid=3304 comm="sh" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 641.072665][ T25] audit: type=1400 audit(640.230:63): avc: denied { execute_no_trans } for pid=3304 comm="sh" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 666.403399][ T25] audit: type=1400 audit(665.580:64): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 666.439410][ T25] audit: type=1400 audit(665.610:65): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 666.525690][ T3304] cgroup: Unknown subsys name 'net' [ 666.580043][ T25] audit: type=1400 audit(665.750:66): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 666.975488][ T3304] cgroup: Unknown subsys name 'cpuset' [ 667.093808][ T3304] cgroup: Unknown subsys name 'rlimit' [ 668.079326][ T25] audit: type=1400 audit(667.250:67): avc: denied { setattr } for pid=3304 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 668.104790][ T25] audit: type=1400 audit(667.270:68): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 668.124208][ T25] audit: type=1400 audit(667.300:69): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 669.494032][ T3307] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 669.514340][ T25] audit: type=1400 audit(668.690:70): avc: denied { relabelto } for pid=3307 comm="mkswap" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 669.536062][ T25] audit: type=1400 audit(668.710:71): avc: denied { write } for pid=3307 comm="mkswap" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 669.723103][ T25] audit: type=1400 audit(668.900:72): avc: denied { read } for pid=3304 comm="syz-executor" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 669.745990][ T25] audit: type=1400 audit(668.910:73): avc: denied { open } for pid=3304 comm="syz-executor" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 669.792855][ T3304] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 727.896033][ T25] audit: type=1400 audit(727.070:74): avc: denied { execmem } for pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 732.889341][ T25] audit: type=1400 audit(732.060:75): avc: denied { read } for pid=3315 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 732.935161][ T25] audit: type=1400 audit(732.090:76): avc: denied { open } for pid=3315 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 732.979390][ T25] audit: type=1400 audit(732.150:77): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 733.236611][ T25] audit: type=1400 audit(732.410:78): avc: denied { module_request } for pid=3315 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 733.274925][ T25] audit: type=1400 audit(732.430:79): avc: denied { module_request } for pid=3316 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 734.443315][ T25] audit: type=1400 audit(733.610:80): avc: denied { sys_module } for pid=3316 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 759.473372][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 759.641213][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 760.656730][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 760.794896][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 778.623995][ T3316] hsr_slave_0: entered promiscuous mode [ 778.663795][ T3316] hsr_slave_1: entered promiscuous mode [ 780.090282][ T3315] hsr_slave_0: entered promiscuous mode [ 780.124217][ T3315] hsr_slave_1: entered promiscuous mode [ 780.159166][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 780.163401][ T3315] Cannot create hsr debugfs directory [ 785.668705][ T25] audit: type=1400 audit(784.840:81): avc: denied { create } for pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 785.709374][ T25] audit: type=1400 audit(784.880:82): avc: denied { write } for pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 785.755950][ T25] audit: type=1400 audit(784.930:83): avc: denied { read } for pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 785.902975][ T3316] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 786.245177][ T3316] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 786.503147][ T3316] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 787.005210][ T3316] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 788.625747][ T3315] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 788.834596][ T3315] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 788.985647][ T3315] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 789.191158][ T3315] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 802.805230][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 805.542391][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 866.585862][ T3316] veth0_vlan: entered promiscuous mode [ 867.033723][ T3316] veth1_vlan: entered promiscuous mode [ 868.941950][ T3315] veth0_vlan: entered promiscuous mode [ 869.566320][ T3316] veth0_macvtap: entered promiscuous mode [ 869.891288][ T3315] veth1_vlan: entered promiscuous mode [ 870.072422][ T3316] veth1_macvtap: entered promiscuous mode [ 872.516619][ T3454] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.564947][ T3454] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.592126][ T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.593405][ T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.641887][ T3315] veth0_macvtap: entered promiscuous mode [ 873.294300][ T3315] veth1_macvtap: entered promiscuous mode [ 875.424448][ T25] audit: type=1400 audit(874.600:84): avc: denied { mount } for pid=3316 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 875.676156][ T25] audit: type=1400 audit(874.850:85): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/syzkaller.Rl88Y9/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 875.912584][ T25] audit: type=1400 audit(875.060:86): avc: denied { mount } for pid=3316 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 876.233972][ T3259] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.254952][ T3259] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.262978][ T3259] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.305322][ T3259] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.408843][ T25] audit: type=1400 audit(875.570:87): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/syzkaller.Rl88Y9/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 876.584077][ T25] audit: type=1400 audit(875.750:88): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/syzkaller.Rl88Y9/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3782 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 877.209409][ T25] audit: type=1400 audit(876.380:89): avc: denied { unmount } for pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 877.384504][ T25] audit: type=1400 audit(876.560:90): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1544 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 877.605598][ T25] audit: type=1400 audit(876.690:91): avc: denied { mount } for pid=3316 comm="syz-executor" name="/" dev="gadgetfs" ino=3795 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 878.032485][ T25] audit: type=1400 audit(877.200:92): avc: denied { mount } for pid=3316 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 878.149305][ T25] audit: type=1400 audit(877.300:93): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 879.283692][ T3316] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 880.866366][ T25] kauditd_printk_skb: 1 callbacks suppressed [ 880.890933][ T25] audit: type=1400 audit(880.010:95): avc: denied { read write } for pid=3316 comm="syz-executor" name="loop0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 880.919005][ T25] audit: type=1400 audit(880.090:96): avc: denied { open } for pid=3316 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 880.990830][ T25] audit: type=1400 audit(880.090:97): avc: denied { ioctl } for pid=3316 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=638 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 892.271916][ T25] audit: type=1400 audit(891.430:98): avc: denied { read } for pid=3468 comm="syz.0.1" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 892.409004][ T25] audit: type=1400 audit(891.570:99): avc: denied { open } for pid=3468 comm="syz.0.1" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 893.320323][ T25] audit: type=1400 audit(892.490:100): avc: denied { ioctl } for pid=3468 comm="syz.0.1" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 894.633008][ T25] audit: type=1400 audit(893.810:101): avc: denied { append } for pid=3468 comm="syz.0.1" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 896.809547][ T25] audit: type=1400 audit(895.980:102): avc: denied { setattr } for pid=3468 comm="syz.0.1" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 900.506455][ T25] audit: type=1400 audit(899.590:103): avc: denied { execute } for pid=3470 comm="syz.1.2" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=3944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1016.729059][ T25] audit: type=1400 audit(1015.900:104): avc: denied { write } for pid=3544 comm="syz.1.23" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1016.804823][ T25] audit: type=1400 audit(1015.980:105): avc: denied { map } for pid=3544 comm="syz.1.23" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1016.851423][ T25] audit: type=1400 audit(1016.000:106): avc: denied { execute } for pid=3544 comm="syz.1.23" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1166.634310][ T3631] kvm [3631]: Failed to find VMA for hva 0x21016000 [ 1456.513862][ T3798] KVM: debugfs: duplicate directory 3798-9 [ 1698.705566][ T3937] kvm [3937]: Failed to find VMA for hva 0x20c0b000 [ 1708.314335][ T25] audit: type=1400 audit(1707.480:107): avc: denied { execute } for pid=3944 comm="syz.0.142" path="/70/T" dev="tmpfs" ino=370 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1778.812885][ T3979] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5e6e7 [ 1778.830866][ T3979] flags: 0x1fff58000000000(node=0|zone=0|lastcpupid=0x7ff|kasantag=0xd6) [ 1778.868927][ T3979] raw: 01fff58000000000 ffffc1ffc079a448 ffffc1ffc079dc88 0000000000000000 [ 1778.884695][ T3979] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 1778.893007][ T3979] page dumped because: VM_BUG_ON_PAGE(page_ref_count(page) == 0) [ 1778.919233][ T3979] ------------[ cut here ]------------ [ 1778.919502][ T3979] kernel BUG at ./include/linux/mm.h:1036! [ 1778.921279][ T3979] Internal error: Oops - BUG: 00000000f2000800 [#1] SMP [ 1778.926077][ T3979] Modules linked in: [ 1778.928221][ T3979] CPU: 0 UID: 0 PID: 3979 Comm: syz.0.155 Not tainted syzkaller #0 PREEMPT [ 1778.929770][ T3979] Hardware name: linux,dummy-virt (DT) [ 1778.931049][ T3979] pstate: 61402009 (nZCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 1778.932368][ T3979] pc : kvm_s2_put_page+0x374/0x3a0 [ 1778.934658][ T3979] lr : kvm_s2_put_page+0x374/0x3a0 [ 1778.935693][ T3979] sp : ffff80008ede7570 [ 1778.936458][ T3979] x29: ffff80008ede7570 x28: 03f000001e772000 x27: 03f000001e772000 [ 1778.938105][ T3979] x26: 00000000000000ff x25: ffff80008734e000 x24: ffffc1ffc0000000 [ 1778.939568][ T3979] x23: ffffc1ffc079b9c8 x22: 0000000000000000 x21: ffffc1ffc079b9f4 [ 1778.940995][ T3979] x20: 0000000000000000 x19: ffffc1ffc079b9c0 x18: 000000005e0da55e [ 1778.942277][ T3979] x17: 0000000004748d64 x16: 000000005d78bd87 x15: 00000000a2cfdf85 [ 1778.943666][ T3979] x14: ffffffffffffffff x13: fff000001e4d5888 x12: 0000000000000001 [ 1778.945088][ T3979] x11: 0000000000080000 x10: 000000000004b9f3 x9 : 84f530ea99341800 [ 1778.946581][ T3979] x8 : 84f530ea99341800 x7 : ffff8000803a03c8 x6 : 0000000000000000 [ 1778.947840][ T3979] x5 : 0000000000000001 x4 : 0000000000000001 x3 : ffff80008074b7f8 [ 1778.949228][ T3979] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 000000000000003e [ 1778.950801][ T3979] Call trace: [ 1778.951697][ T3979] kvm_s2_put_page+0x374/0x3a0 (P) [ 1778.953037][ T3979] stage2_free_walker+0x1b0/0x264 [ 1778.954101][ T3979] __kvm_pgtable_walk+0x7d8/0xa68 [ 1778.955122][ T3979] kvm_pgtable_walk+0x294/0x468 [ 1778.956017][ T3979] kvm_pgtable_stage2_destroy_range+0x60/0xb4 [ 1778.957149][ T3979] kvm_free_stage2_pgd+0x198/0x28c [ 1778.958107][ T3979] kvm_uninit_stage2_mmu+0x20/0x38 [ 1778.959082][ T3979] kvm_arch_flush_shadow_all+0x1a8/0x1e0 [ 1778.960156][ T3979] kvm_mmu_notifier_release+0x48/0xa8 [ 1778.961187][ T3979] mmu_notifier_unregister+0x128/0x42c [ 1778.962193][ T3979] kvm_put_kvm+0x6a0/0xfa8 [ 1778.963007][ T3979] kvm_vcpu_release+0x70/0x9c [ 1778.963952][ T3979] __fput+0x4ac/0x980 [ 1778.964677][ T3979] ____fput+0x20/0x58 [ 1778.965467][ T3979] task_work_run+0x1bc/0x254 [ 1778.966354][ T3979] get_signal+0x13ec/0x1554 [ 1778.967317][ T3979] do_signal+0x23c/0x4dd0 [ 1778.968284][ T3979] do_notify_resume+0xb0/0x270 [ 1778.969250][ T3979] el0_svc+0xb8/0x164 [ 1778.970097][ T3979] el0t_64_sync_handler+0x84/0x12c [ 1778.971097][ T3979] el0t_64_sync+0x198/0x19c [ 1778.972524][ T3979] Code: d0037581 9126fc21 aa1303e0 97f9c9f2 (d4210000) [ 1778.974378][ T3979] ---[ end trace 0000000000000000 ]--- [ 1778.976011][ T3979] Kernel panic - not syncing: Oops - BUG: Fatal exception [ 1778.978043][ T3979] Kernel Offset: disabled [ 1778.978780][ T3979] CPU features: 0x000000,0001a300,5f7c67c1,057ffe1f [ 1778.979915][ T3979] Memory Limit: none [ 1778.981605][ T3979] Rebooting in 86400 seconds.. VM DIAGNOSIS: 21:46:14 Registers: info registers vcpu 0 CPU#0 PC=ffff800080020220 X00=0000000000000012 X01=0000000100000003 X02=0000000000000001 X03=ffff80008074b600 X04=0000000000000000 X05=0000000000000000 X06=ffff80008048b334 X07=ffff800080015834 X08=84f530ea99341800 X09=84f530ea99341800 X10=000000000004ccc0 X11=0000000000080000 X12=0000000000000004 X13=fff000001e4d5888 X14=0000000000000002 X15=ffff800087f83a20 X16=0000000000000000 X17=0000000004748d64 X18=000000005e0da55e X19=efff800000000000 X20=ffff8000801b05a0 X21=ffff80008ede7420 X22=0000000000000000 X23=0000000000008001 X24=00000000000000ff X25=ffff80008734e000 X26=00000000000000ff X27=03f000001e772000 X28=48f000001e4d5880 X29=ffff80008ede72a0 X30=ffff800080020220 SP=ffff80008ede7270 PSTATE=604023c9 -ZC- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000 P01=0000 P02=0000 P03=0000 P04=0000 P05=0000 P06=0000 P07=0000 P08=0000 P09=0000 P10=0000 P11=0000 P12=0000 P13=0000 P14=0000 P15=0000 FFR=0000 Z00=2c2c2c2c2c2c2c2c:2c2c2c2c2c2c2c2c Z01=727720726f727265:0000000000006577 Z02=0000000000000000:cccccccccccc0000 Z03=0000000000000000:0000000000000000 Z04=3333333333333333:3333333333333333 Z05=0000000000000000:00000000cccccc00 Z06=0000000000000073:0000aaab0373a3c0 Z07=0000000000000074:0000aaab03737600 Z08=0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000 Z16=0000ffffc1d66c30:0000ffffc1d66c30 Z17=ffffff80ffffffd0:0000ffffc1d66c00 Z18=0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000